last executing test programs: 2.620226988s ago: executing program 2 (id=1210): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f00001f9000/0x1000)=nil, 0x1000, 0x2, 0x4c831, r0, 0xa4aa8000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r5, 0x0, 0x80000025a5, 0x0) close(0x3) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000100)) close(0x3) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000001080)=ANY=[@ANYBLOB="000086dd00001200ffff0000000060ec970000802c00fe8000000000000000000000000000aa0000000000000000000000000000000106000400"], 0xb6) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r6, &(0x7f0000000300)="89ba", 0xc4) close(0x4) 1.574126769s ago: executing program 2 (id=1216): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 1.570718947s ago: executing program 2 (id=1218): accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x180000) socket$inet(0x2, 0x80001, 0x80) 1.567506756s ago: executing program 3 (id=1220): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000008c0)={0x84, @broadcast, 0x4e26, 0x1, 'lblc\x00', 0x20, 0x10005, 0x204e}, 0x2c) (async) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000000000)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'fo\x00', 0x15, 0x821, 0x1}, 0x2c) r1 = epoll_create(0x4) (async, rerun: 32) r2 = socket(0x28, 0x801, 0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)={0x30000010}) (async) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) 1.565857437s ago: executing program 0 (id=1221): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0x4, 0x4, 0x3, 0x0, r0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xe84}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x22, 0x66, 0x0, 0xb, 0x33, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b"}}, 0x30) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f00000006c0)={@initdev, @multicast1, 0x0}, &(0x7f0000000700)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x2f, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @ldst={0x3, 0x0, 0x3, 0x6, 0xb, 0xffffffffffffffc0, 0x10}, @jmp={0x5, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, 0x4}, @ldst={0x0, 0x2, 0x4, 0x1, 0x1, 0xffffffffffffffa4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x8, '\x00', r7, 0x25, r5, 0x8, &(0x7f0000000740)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r1], &(0x7f00000007c0)=[{0x3, 0x3, 0x0, 0xa}, {0x2, 0x2, 0x4, 0xb}, {0x1, 0x5, 0x3, 0x9}, {0x2, 0x3, 0xb, 0x2}], 0x10, 0x7d}, 0x94) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r8, &(0x7f00000004c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="610bd43500000000", @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000844, &(0x7f0000000100)={0xa, 0x2, 0x4, @remote, 0xdb}, 0x1c) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/141, 0x8d}, {&(0x7f0000000140)=""/66, 0x42}, {&(0x7f00000001c0)=""/231, 0xe7}, {&(0x7f00000002c0)=""/215, 0xd7}], 0x4) write$cgroup_int(r5, &(0x7f0000000000), 0x12) getpid() getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000007b00), &(0x7f0000007b40)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r11, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="114a", 0x2}], 0x1, 0x0, 0x0, 0x400e815}}], 0x2, 0x4) 1.557968034s ago: executing program 2 (id=1223): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000380)={0x8, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.557327105s ago: executing program 3 (id=1224): syz_emit_ethernet(0x80, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60009200004000000000130000000000000000871185a0cdebac14d3fe144d2b00002421880b0000000000000057001aa174000e000086dd080088be0000000010020000000000080022eb00000000200000040200000000000000000000000800655800"/138], 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x302, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e0000000120009050000000000000000", @ANYRES32=0x0, @ANYBLOB="110000003a5d5db2542b5b5e265c5c4000000000d52791db233d0896402d1267b86ac517a485a23d0c3da32ce8f9b19fe043d3a672"], 0xe0}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) (async) writev(r1, &(0x7f0000000040), 0x2) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, 0x0, 0x93) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) (async) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000bd7011fbdbdf25024041ff", @ANYRES32=r5, @ANYBLOB="140003006970766c616e30000000000000000000"], 0x2c}}, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x34}}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840000001d00080026bd7000fddbdf2507000000", @ANYRES32=r5, @ANYBLOB="0000110608000f000100000008000b000000000008000d008600000008000df77f00000008000b000104000008000700f7ffffff24000e800500010081000000040002000500010007000000050001007f0000000400020014000100fe8000000000000000000000000000bb"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x4801) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$llc(r4, &(0x7f0000000280)={0x1a, 0x339, 0x4, 0x2, 0x9, 0x4, @local}, 0x10) (async) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000240)=0x1, 0x4) (async) sendmsg$WG_CMD_SET_DEVICE(r8, 0x0, 0x4008804) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) 1.556828545s ago: executing program 4 (id=1225): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000080)={0x82, 0x400000000000007, 0x3}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa8e83, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'geneve1\x00', 0x100}) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x1, 0x20) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)={'bridge_slave_0\x00'}) close(r1) 1.429973144s ago: executing program 2 (id=1227): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000580)=@raw=[@call={0x85, 0x0, 0x0, 0x29}, @exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @ringbuf_query, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8193}], &(0x7f0000000600)='syzkaller\x00', 0x1000, 0x6f, &(0x7f0000000640)=""/111, 0x40f00, 0x25, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000700)=[0x1], &(0x7f0000000740)=[{0x0, 0x5, 0xa, 0xc}], 0x10, 0x2}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r9, &(0x7f0000000080)=[{&(0x7f0000000340)="00214717a70700000000030600710a5e31163ceb950471200400f32a6036b8000500000000000000ffff03425d4d50e7182ce0", 0x33}], 0x1, 0x1, 0x0) listen(r7, 0x3) sendmsg$inet6(r6, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendfile(r1, r5, 0x0, 0x20000000002) 1.421792678s ago: executing program 3 (id=1228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000001c0)={0x3, 0x9, 0x127, 0x9ac8, 0x8, 0x9}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) (async, rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 64) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1.379826752s ago: executing program 4 (id=1229): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40008) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000300)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a00)={0x78, r3, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x658}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4004004) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x20, 0x1, 0xb8, 0x6, {{0x8, 0x4, 0x1, 0x12, 0x20, 0x68, 0x0, 0x2, 0x0, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp={0x44, 0x8, 0xe4, 0x0, 0x5, [0x5]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0xb444313d, 0x0}, 0x8) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x8, 0x1ff, 0xe52, 0x2, 0x400, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x6010, r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1a, 0xf, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f00000003c0)='syzkaller\x00', 0xd, 0xcb, &(0x7f0000000400)=""/203, 0x41100, 0x58, '\x00', r5, @tracing=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x6, 0x2}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000880)=[r7, r8, r9, r10], &(0x7f00000008c0)=[{0x1, 0x1, 0x0, 0x8}, {0x1, 0x1, 0xf, 0xa}], 0x10, 0x80000000}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880140001801000108004000f8005000300000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.292415208s ago: executing program 4 (id=1231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000200000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xac, &(0x7f0000001240)=""/172, 0x40f00, 0x4b}, 0x94) socket$isdn_base(0x22, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, r2, 0x25, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x0, 0x1, {{0x26, 0x4, 0x0, 0x23, 0x98, 0x67, 0x0, 0xfa, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @lsrr={0x83, 0x2b, 0x5d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @empty, @local, @dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x15}, @local, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x22}]}, @ssrr={0x89, 0x1b, 0xd, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2c}]}, @generic={0x86, 0x8, "aef11ae91ec1"}, @lsrr={0x83, 0x7, 0x70, [@private=0xa010101]}, @end, @generic={0x7, 0xf, "4c5b7dc5e518792390811ea3a0"}, @noop, @end, @timestamp_prespec={0x44, 0x1c, 0x9c, 0x3, 0x2, [{@remote, 0xf}, {@empty, 0xf}, {@private=0xa010101, 0xc}]}]}}}}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x54, 0x19, 0x0, 0x70bd25, 0x25dfdbfd, {0xa, 0x20, 0x10, 0x9, 0xfc, 0x2, 0x1, 0xb, 0x400}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x1, 0x6, r3}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_OIF={0x8, 0x4, r5}, @RTA_PRIORITY={0x8, 0x6, 0x101}]}, 0x54}}, 0x4004801) 1.227731094s ago: executing program 3 (id=1232): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') unshare(0x6a040000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x10}}], 0x10}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001ac0)={&(0x7f0000000240)="c7750391f20451416c93ddfd357cca180a7087166af21b3ad4af68d8f88bf330503159ce0618bf993e56fd62d41c930f35adeac06883a3c68de7c02cc0177c3807c183b0c3c4afc00dffe204e11148ac751dd3d7895dd1401b5e4514236305de2cb80250b267a0c558fda2d5a70892fc429dd600bca0d9e6886c6de0b0", &(0x7f0000000940)=""/4096, &(0x7f0000001940)="8dd8b8aba271db756ce0b0cf82fc6c77995e8a3868b25f06de9541ac0a76fa8cfe720f8997117f82569b0a7638edc77861842f9306b2c62ccc1c1cd7ee9843f52da667c48f65819511dbe657c5412c1e36e5345a09aa2f4d3dae937f9c3ee3d7bc7848c8fa0f4fb6371f7998ed588f966bb493c9f128ff5a5288af47cd95be7069ad1319b94184be33637abf84f4099ee40c7933e40b26b3d0d757ab37b25f2a468c58c13845ee2dca8c1079b216b777248e27076d2c5c3094b34eb53a471b6a2ab9561179f3e955b2dcc7434d4c3898672577e6e0b2d4b45e8718e1283a81780a96b1adf78d557a33", &(0x7f0000001a40)="70461a4e29cfc8f76a9820d2eff11ba4d91758ecf4cb33157f728986daae8e8042149497845c62bfa23d249b4b9d50c8c9a8c62b7381091cd4676227fd42438d280ac0053a185a5816434ef6ccdfb9800836c4000b719bae0f3e199de1bf7c2eedccbaa80d67a10c68f699d8b57ba9526e7fdee66023fe6f9162b7", 0xf6ad, r6}, 0x38) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r4, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x54) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 1.223668668s ago: executing program 0 (id=1233): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000480)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) socket$pptp(0x18, 0x1, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r3, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10142, 0x0) unshare(0x20040400) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x80, 0x6}, 0x4) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x24, &(0x7f0000000080)={@random="c55151314bd6", @random="bb6eba3900f8", @void, {@x25={0x805, {0x2, 0x0, 0xf3, "f0496c1061dec0e074838c85e136d8bfe0c98e"}}}}, &(0x7f0000000100)={0x0, 0x3, [0x648, 0xad7, 0x216, 0xf7e]}) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6212, 0x12000000, 0x0, 0x0) 1.155212552s ago: executing program 4 (id=1234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x2, 0x9, 0x201, 0x0, 0x0, {0x5}, [@NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x2, 0x9, 0x201, 0x0, 0x0, {0x5}, [@NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x3c}}, 0x0) (async) 1.108239336s ago: executing program 0 (id=1235): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x80801, 0x1) ioctl$FIOCLEX(r1, 0x5451) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x3f63}, 0x8) close(0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000280)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000cbb600000000000010000000181100001200b0df79e08d82a07be38af7d6ef0de1167767111e2adeb6bd38d404ad87d0136a3ee8e16b426e6ed40c63974168eb6334a7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0xb) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000380)=0xffffffff, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002000010027bd7000fbdbdf250a000040000000070600000008000d000500000018000e"], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x44) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r6 = accept4$rose(r2, &(0x7f0000000140)=@full={0xb, @remote, @default, 0x0, [@netrom, @netrom, @null, @default, @bcast, @rose]}, &(0x7f0000000200)=0x40, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000240)) 851.043291ms ago: executing program 1 (id=1237): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c1401030000000000000000040001"], 0x18}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000900)={{r0}, "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"}) 842.637917ms ago: executing program 4 (id=1238): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa1}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08003f0086fc"], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) 703.502544ms ago: executing program 0 (id=1239): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x80) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f00000001c0)={&(0x7f0000000080)=[{0xfffffffffffffffb, 0x2, 0x0, {0x8, 0x6, 0x7ea48c0050319352}}, {0x80000001, 0x0, 0x0, {0x5, 0x5}}, {0x800, 0x1, 0x0, {0x6, 0x2, 0x1}}, {0x8, 0x0, 0x0, {0x8, 0x6, 0x1}}, {0xb35, 0x1, 0x0, {0x8, 0x8, 0x2}}, {0xfffffffffffffffe, 0x0, 0x0, {0x5, 0x86a, 0x2}}, {0x9, 0x0, 0x0, {0xff, 0x7}}, {0xfffffffffffffff8, 0x2, 0x0, {0x5, 0x652e, 0x1}}, {0x4, 0x1, 0x0, {0x7, 0x2, 0x2}}, {0xd, 0x1, 0x0, {0xffff, 0x3d}}], 0xa, 0x20, 0xd}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000200)={0x1, 0x10001, 0x8}) r1 = accept4(r0, &(0x7f0000000240)=@nfc_llcp, &(0x7f00000002c0)=0x80, 0x80800) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @initdev, @local}, &(0x7f00000003c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'lo\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x17, 0x0, 0x8, 0xc, {{0xe, 0x4, 0x2, 0x6, 0x38, 0x64, 0x0, 0x9, 0x4, 0x0, @remote, @remote, {[@timestamp={0x44, 0x24, 0x41, 0x0, 0x4, [0x8000, 0x4, 0xfffffe00, 0x6, 0x7f, 0xb, 0x8, 0x5]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1c0, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4048844}, 0x20008040) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000840)={0x82270000, {{0x2, 0x4e24, @multicast1}}, 0x0, 0x5, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e20, @broadcast}}]}, 0x310) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r5, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000c00)={0x0, @local, @initdev}, &(0x7f0000000c40)=0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xd, 0x7, 0xffffffff, 0x1, 0x1, r8, 0x3, '\x00', r9, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000d00)={0x7}, 0x8) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000dc0)={'erspan0\x00', r5, 0x1, 0x7810, 0xa00, 0x6, {{0x8, 0x4, 0x3, 0x1, 0x20, 0x65, 0x0, 0xd5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @multicast1, {[@lsrr={0x83, 0xb, 0x1a, [@dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000e40)=0x4183, 0x4) pipe(&(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000f00)={@multicast1, @dev, 0x0}, &(0x7f0000000f40)=0xc) sendmsg$FOU_CMD_DEL(r11, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r13}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x38}, 0x1, 0x0, 0x0, 0x48}, 0x805) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r10, &(0x7f0000001040)="5e7199b94c5fb72221b415cce12f5f01cd17f7d85e9fa0a74307060ad4066b1f8efb9acdc7836539ee9a95fcd101db3f2abab6a5739a82eca1e2f16b36b87dbcd6deb3b612d88ea65fe3e5784544731ae8e6edfc9b17e6f2a35d260450c6363308c1090875a960e9a624f8f278337a870ce48d2aa50b970fd5f3e039b1b573171e666e98d05a9258fef29ff7f1cc40267c62ebd2e2a0c019f29ea662e42b98feadc7c5cadda216455f3f15282a5d5bc9367460cf31806c63851df81f1f5b482ce3dee4671ee538b4fbab926ece71e4e4a3cb0cb07610d2adef2b667512c19c1d3d652878459a4f7b9cec70ec", &(0x7f0000001140)=@udp=r12, 0x4}, 0x20) readv(r12, &(0x7f0000002400)=[{&(0x7f00000011c0)=""/254, 0xfe}, {&(0x7f00000012c0)}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/251, 0xfb}], 0x4) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r12, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x14, r14, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind(r11, &(0x7f0000002580)=@pppoe={0x18, 0x0, {0x3, @broadcast, 'lo\x00'}}, 0x80) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002600)={0x1b, 0x0, 0x0, 0x1, 0x0, r12, 0x1, '\x00', 0x0, r11, 0x2, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xf, 0x23, &(0x7f0000002680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @call={0x85, 0x0, 0x0, 0xae}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000027c0)='GPL\x00', 0x7, 0x7d, &(0x7f0000002800)=""/125, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, r12, 0x8, &(0x7f0000002880)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000028c0)={0x2, 0x8, 0x6, 0xef}, 0x10, 0x0, r12, 0x4, &(0x7f0000002bc0)=[0xffffffffffffffff, r12, 0xffffffffffffffff, r10, r12, r12, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x4, 0x3, 0xc, 0x6}, {0x3, 0x3, 0x10, 0x1}, {0x5, 0x2, 0x7, 0x6}, {0x0, 0x4, 0x1, 0x5}], 0x10, 0x10001}, 0x94) 702.546813ms ago: executing program 1 (id=1240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000075a003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001009364703a73"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 676.334723ms ago: executing program 4 (id=1241): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x8, 0x80000}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001705000008004ef02d3501000000000095003200000000006916000000000000bf67000000000000350605000fff07206706000006000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d39d25991b085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e5671c888fb126a163f16f920ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880803000000000000000884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e17417a249a2cd8ff62aa6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a122822bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c6310121ecb9029e7f835420f8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000000000bc12b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35349fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a511007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d3743a0be77b64961753faba6131c136fb14b1963960f2f7f118bc451a18b216bf26c3cec2575a059da60baede629711a5f11c347fcbca73440d27b1147b44fb15106c00669da23964fd9de079d1a9077848100f6e75d29b2d60016abc6ef1542bd3062f599676bb04e64decb6c843a407f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x39) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000001180)={0x198, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf53}]}, @NL802154_ATTR_SEC_DEVKEY={0x158, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xdd}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8000}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0xec, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x64, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x198}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x5, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r6 = openat$cgroup_int(r1, &(0x7f0000000040)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) preadv(r6, &(0x7f0000000500)=[{&(0x7f0000000200)=""/41, 0x29}], 0x1, 0xfff, 0x7) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d3fb7c27a1059ae31c6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) 633.610664ms ago: executing program 0 (id=1242): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000000)={0x28, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8000}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x44) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f00000001c0)="265ba76696cf263e7f1393b384d2d999f3ca6b7958f8f7e8ea8defd757e1a64c772dcb02c563814ea939bc64ecc237c7ac46c83281c0411ffe5cd1b16f45add2e642723fe15f7c9a0e89f90f04248fea7506029d6f6471fbf820d72d05c65823d364d419a17ec4dadabb777a96d1fa34c9310fbe824072e909a890354d67dd88c2d5dd79ea3d7703de81eaba8515c5fb452f616cf7b72da8c7353c", &(0x7f0000000280)=""/110, 0x4}, 0x20) 547.910966ms ago: executing program 1 (id=1243): r0 = socket(0x40000000015, 0x805, 0x0) accept$unix(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}, [@ldst={0x1, 0x3, 0x3, 0x4, 0x1, 0x63}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@mcast1, @loopback, [0xffffff, 0x0, 0xffffff00, 0xffffff00], [0xff, 0xff, 0xffffff00, 0xff], 'macvlan1\x00', 'veth0\x00', {}, {0xff}, 0x3c, 0x0, 0x1, 0x20}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffff00, 0x0, 0x1fffffe00], [0x0, 0xff, 0xff000000, 0xff000000], 'netpci0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x3b, 0x7f, 0x4, 0xc}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x1c, "e3d81f0bb4e0616203d9a42e26e07e28bfb9e3da243e46b9fd89a18f7529"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) 520.409991ms ago: executing program 3 (id=1244): r0 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000480)={0x0, 0x100000001, 0xa9bc, 0x1}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f0000001300)) write$cgroup_pressure(r3, &(0x7f0000000380)={'full', 0x20, 0x8001, 0x20, 0x9}, 0x2f) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000880)={0x1, 0x7, @start={r1, 0x0, "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", "e2524608d4f1e27d1f0a7fb990424efbde713227925a4cc183269f535d41468e3adfae3a740496ad33f76e4fe70cd0469831027c4c3c2292e051623bacc617f9d8e0b5761d2df9315b8a2229896042b49168ec8b0c7c327d7b92fc05702fdcd30a3c57f13d8aeb9ef008ee8c3fbfbea73f54c6bab14b41b9382878a906124c76dc51a5428f89fbf44e0fb28d8e56d11a4ab9c8d4da096a0b52cc75dbc35668bfb7229d098b3b7005a5c646a0159e489794682353d12070fea8b1e2b117ba7778d65f4a1694be6e318ef62e8c6ea40d5ad13787d9554e303c8b84db59149faf7df84e373640b529ac1dcf965eda7d1fb6ef0d7076370a41e39ef94b8e347504fd2f4be4ffa086325403aec825b42110b2b7a0a297bb148d710074fed56a6b9b854dc00d324327148e149edad5a96ec93552fabdf5bd44c6f1ce299eec16c5e21754652a5a6492255f4b8b6ff25b404f9850c6bf61fd31ecb7cefe76ef2c287eeca1dca4b0c2653943687c15f57323b664aa54e9369503e330d080e9d6de3f9b21dc256bd0d87a47284a744abe1ac2556069bb1830f9f23829c2d4ac13b9f0497a7c7fe110e2592e96c6e181377ef3da9c39e86ad99a5d280d19311aa8f9914bc5fb1c199970d2f453602e828481dfa05a42499740ca441aadc6e0d98e5c9b944dbe1729431f36924e212c99b9d2da4bf9ed5ebf3aa04608ee1c0d800a00db6435a272aeb63cb191c258acb953fecfa59ce1700abf0463a1a6278a3a03df5323f36f6fe1e8cf51c8f5fa10afa0d102a1a2978895b2deffe684fc1315a60d1042b5c5650cc3cc1a9f1e4e7e1cec00cc726462aba8fdc5d6dff69a0ba31709bb2031ea96cf9452dfae0bc24db807317b235c5ed403370a0f27bc6a07cf7337b9b2f044598f5d3b2cb016283ecfd1e3af863453dfa2b70cfa0d2779acb0f78532bc2e401f31365ef22393b3e5fd3574fba5dbe2680bed8d14d7a928c3e6f1675ac6e4d991daa86485fb191508bd5967b8388a19c1d6cbe5b18b2d7bd9d88897ce557dace78b26cac53968bd796e68e52eb6df0687ec044c8a41e41b97075c0f3a9a031c8b684a76104badb462ae95a84873f99dc5c57fd7acaf3a743a5ed10e75487cfc2b879e7d72942f9d5517a8a8edadf52bf7493736008e547ad56ac340817f99f0cfbed66807ab03549271ef232dc631c335dc43ce0efe3e17990d506104c9a2b046aa4883f72ae2a563315738196ed8d18d2e8ba9e050af7fc1222273cd00711d6b06475f1f9d3b5b45dd79e101ef05ea014e4da1011e7f40c62be697c5c6db9a7e39064a325959b3e99e0b37d4cb0cf400802f674aa9f2922ad52a5df2e846b78718ce52c7583f253eb859151ebf7039c2c770ab47b6cc9affdf9c9903d915b08592ae452cd9d5a1c697f34bed2ebf38c418841802effb3c698c27592ea9325e"}, [0x80000000, 0x7f, 0x1, 0x1000, 0x5b4, 0x99, 0x3, 0xea, 0xfffffffffffffffc, 0x5e37, 0x3, 0x7f, 0x8, 0xbf000, 0xc, 0x400000000, 0x2, 0xc, 0xff, 0xffffffffffffff00, 0x0, 0xb, 0x5, 0x5, 0x2, 0x2b45, 0x2, 0x4e, 0x8, 0x5fae3367, 0x800006, 0x33f, 0x81, 0x5, 0x1, 0x3, 0x40000, 0x6, 0x4, 0x3c3, 0xf6, 0x5, 0x6, 0x3, 0xf6, 0x5, 0x6, 0x83, 0x8, 0xffffffff, 0x3ac, 0x3, 0x3ff, 0xb, 0x8, 0x6, 0x2, 0xfffffffffffffffd, 0x2, 0x3ff, 0x7, 0x7, 0x1, 0x5]}) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaab331687b814586dd6062d308001806fffc010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000002040600f14b1055007539db2e4c75e329597b9a3a5be14e98328167fee67688f978810315ce3ed7f43732279153d04aae4f67e662b6d6087bfda67b125c0378bc9cac67cbcb"], 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1}, 0x8801) pwritev(r0, &(0x7f00000003c0), 0x0, 0x4, 0xbcee) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800) recvmsg$qrtr(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/34, 0x22}], 0x1, 0x0, 0x0, 0x40000040}, 0x38, 0x0) sendmsg$inet(r4, &(0x7f0000001600)={&(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001340)="fee3cb242e1ccc4762414658f6227f0e3cb38a40c6d930a4de280b30c46e1f6b5371524af329f59bc71db70f125985f6672e54a97f28dab78d473086524d6397dc76e0dcf9355d9856dea96bf5d926a19f999294d2da9b8aa296478a3938d0252ab74b999ce735506be755e63a4401304f2c020de60597916aee49b79c1224027d2171880404f8f3ec494cfaf1ee7f1c1c118e24384125dc56ebd73b6ead844b20142279af06f07fa7546a71c63a99c15a7ecba4abac", 0xb6}, {&(0x7f0000001400)="2d2cfe6a21abf0318ed60f347e28d8c7fa236865161fb29c27af0b506bbc9151990c4d50b25c5b5c28bc67df53f7023b047b207103e3aa4fc87de05db8ccfab8ad63b6b5666ce1", 0x47}], 0x2, &(0x7f00000014c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x86, [@rand_addr=0x64010102, @private=0xa010100, @private=0xa010100, @loopback, @rand_addr=0x16e, @multicast1, @broadcast]}, @lsrr={0x83, 0x17, 0x46, [@empty, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @timestamp_prespec={0x44, 0xc, 0x63, 0x3, 0xb, [{@remote, 0x2}]}, @rr={0x7, 0x27, 0x99, [@empty, @empty, @multicast2, @private=0xa010102, @private=0xa010100, @multicast1, @multicast2, @multicast2, @empty]}, @ssrr={0x89, 0x13, 0x3f, [@multicast1, @multicast1, @multicast2, @multicast1]}]}}}, @ip_ttl={{0x14}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0xbd, [@rand_addr=0x64010101, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x41}, @local, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x118}, 0x4) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xe, 0x5d, 0x3, 0x10, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_nat_t_type={0x1, 0x14, 0xf}, @sadb_lifetime={0x4, 0x3, 0xffffffff, 0xd, 0x2, 0xffffffffffffff80}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}, @sadb_address={0x3, 0x7, 0x33, 0xa0, 0x0, @in={0x2, 0x4e24, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x80, 0x3, 0xcb, 0x0, 0xa0000000}, @sadb_ident={0x2, 0xb, 0x6, 0x0, 0x7}]}, 0x80}}, 0x400) 452.301677ms ago: executing program 1 (id=1245): syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000000000442ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000fffc00000800000086dd88a888be0800000010080065008c666b846d2e01080022eb00000004200000000200000000000000000000000800655800000000"], 0x0) r0 = socket$inet(0x2, 0x80803, 0x2) getsockopt(r0, 0xff, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1d8, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff1b62}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x42}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x240408c0}, 0x20008014) 347.800047ms ago: executing program 0 (id=1246): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'geneve1\x00', &(0x7f0000000140)=@ethtool_rxfh={0x47, 0xb, 0x3aa, 0xff, 0x4, "976b2a", 0x8000}}) r5 = socket(0xb, 0x5, 0x22) sendmsg$alg(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="258072c4713ab3c47bd390e90e53ebbf9cff6d3d33ecbd98444d86d1ccc9c3942f75587c3faa0b9dd0442624bb084dc65a37c922d1cbca19e303cc5fd2de65c7640883ebf0fbbd331725f017dd756259f6bfd5cf0627c40a6b5516a2e1740c8e0e242002ff64a5b948e22d0b90a19cd846488860f5f2e6f3a901be61c9fbaec8735d55cd2371d8c2dfed7b98838a1dbfb2d755eab262f2a9fd860202cdda3c50a75eb44fe972d453fe39653a4ae56f7775d4d2734238b85a66b0cb406900cb0daf82ae324399683a3949282ee8720164f0a293ad", 0xd4}, {&(0x7f0000000380)="98df7fcc2c8dca1444d638844fe0450462215f9fc5ca42fd92e25c0879ee4f666e31e646b2584f6b25e688f31e8d763b4f9a9ebff3cff517e3729e5c492acd7c9ba733f40fe297f0b5e8e39d2958477f427a14d77d90fee5f266f0e4f3b7f0de464be00ddfe371d7794b98cbb01e009d56cb5f135f74980f761367be48bb724c644c52901d6a3d440afe349923663d3e1ebbe24038bfacd57dd43bc79b94d17408fb2b5e3f42b957eade2509a5f013b68b2b636b86edc1a12696a1cea46e3e99d1ba93a92678", 0xc6}, {&(0x7f0000000480)="9a09b5ca593ddb91bf56d6784026eca0bb4e2a45d77928a8c8802248f4a987439cf1edae7c40f2d60c6d3075a4643694e459d7a261f02ead4e508a4235f78468a98e278d21e98ee6fa", 0x49}], 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xf0, 0x4000000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xb, 0x2, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000240)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x68, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0xb, 0x0, @wg=@data}}}}}}, 0x42) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 347.021302ms ago: executing program 1 (id=1247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1100, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 299.159842ms ago: executing program 2 (id=1248): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe"], 0x20000600}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000004c0)}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f00000009c0)={r3, &(0x7f0000000780)='[-\x00', 0x20000, &(0x7f0000000900)={@align=0xa, {0x81, 0x7, 0xfffffe01, 0x7f}}, 0x0, &(0x7f0000000940), &(0x7f0000000980)=0x6cd6}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001e008d2a00000100000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$can_raw(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x1d, r1}, 0x10, &(0x7f0000000ac0)={&(0x7f0000000a40)=@canfd={{0x0, 0x1, 0x1}, 0xd, 0x0, 0x0, 0x0, "6478d9f64e087d33a1830ee0a50dcc8c0eee609303aa7f302de11b64fa520f6ef6a1d1fdc2cc5954a5026b232ccc4dd642ff226fb31980ac0af9a7ec5e68e13c"}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f00000005c0)='%pI4 \x00'}, 0x20) r8 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x47, 0xfffffffe, 0x5, 0x1, 0x0, 0x0, 0xf}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0xf, 0x4, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000000340)='GPL\x00', 0x3, 0x1d, &(0x7f0000000380)=""/29, 0x41000, 0x12, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x9, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r3, r4, r7], &(0x7f0000000680)=[{0x5, 0x5, 0x1, 0xc}, {0x3, 0x2, 0xf}], 0x10, 0x4}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r9) sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000226bd7000fcdbdf25100000004bb9e6e1a4bfcb28f7061df10600110014010000050010000f0000000600060011006505000005001000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="180000006a00010029bd5a00fcdbdf250a000000000800", @ANYBLOB="5d55a284a3cbc73b3d75df89abac6d5b1ed71dbbee09f96db49e6a066613c79ca695a0f8abefcb70e3de824aa56ab2db1553a6255e2171b39560df06bb20c49807d8df5e3a39e999ac8795a70838f8397f58c94482f8b10b02b872a8702d558828cdf529d8f3a75048bc214025ef915b08396e0cc62235e10b0662b2bc0d74213277299511adf57dc359360ab48cfceb7193de807f55c087b212211d", @ANYRESOCT=r11], 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x8800) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="3ed50967acd7148c5a35f6a859d34e534bb073d9b8932b3520226177cd510465239c2baee5c773217dba8f7af16dd52ab81a848444f099c38540e3d03231c849e0a555955a", @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006", @ANYRES8=r9], 0x44}}, 0x0) 164.38448ms ago: executing program 1 (id=1249): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r0, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08003f0086fc"], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000400)=0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000000)={{0x3a, @empty, 0x4e23, 0x4, 'nq\x00', 0x2, 0x3, 0x5e}, {@empty, 0x4e21, 0x2000, 0x2, 0xd26, 0xe}}, 0x44) syz_genetlink_get_family_id$smc(&(0x7f0000000440), r0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="1a04050073ff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14) 0s ago: executing program 3 (id=1250): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000000400)) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000200000000000000000000000001050003000a00000008000400", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 62.902876][ T5806] cgroup: Unknown subsys name 'net' [ 62.969873][ T5806] cgroup: Unknown subsys name 'cpuset' [ 62.978661][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.295560][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.356624][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.364545][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.377069][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.384668][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.393369][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.402113][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.409954][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.417843][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.425408][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.426697][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.433484][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.448622][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.449027][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.455902][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.463309][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.470410][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.478782][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.485645][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.492173][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.502378][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.508300][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.512397][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.526916][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.539711][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.556948][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.069847][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 69.173324][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 69.203316][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 69.298225][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 69.358145][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.365999][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.373345][ T5827] bridge_slave_0: entered allmulticast mode [ 69.380345][ T5827] bridge_slave_0: entered promiscuous mode [ 69.403145][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 69.439493][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.446737][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.453925][ T5827] bridge_slave_1: entered allmulticast mode [ 69.460877][ T5827] bridge_slave_1: entered promiscuous mode [ 69.521321][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.528605][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.535895][ T5829] bridge_slave_0: entered allmulticast mode [ 69.542924][ T5829] bridge_slave_0: entered promiscuous mode [ 69.550285][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.557462][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.564582][ T5819] bridge_slave_0: entered allmulticast mode [ 69.571653][ T5819] bridge_slave_0: entered promiscuous mode [ 69.607152][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.614250][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.621654][ T5829] bridge_slave_1: entered allmulticast mode [ 69.628768][ T5829] bridge_slave_1: entered promiscuous mode [ 69.635385][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.643872][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.651099][ T5819] bridge_slave_1: entered allmulticast mode [ 69.658199][ T5819] bridge_slave_1: entered promiscuous mode [ 69.668281][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.711969][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.792236][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.804377][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.815613][ T5827] team0: Port device team_slave_0 added [ 69.824007][ T5827] team0: Port device team_slave_1 added [ 69.830030][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.837478][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.844609][ T5830] bridge_slave_0: entered allmulticast mode [ 69.851659][ T5830] bridge_slave_0: entered promiscuous mode [ 69.858930][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.866041][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.873313][ T5820] bridge_slave_0: entered allmulticast mode [ 69.880712][ T5820] bridge_slave_0: entered promiscuous mode [ 69.890271][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.901423][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.919886][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.927083][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.934244][ T5830] bridge_slave_1: entered allmulticast mode [ 69.941457][ T5830] bridge_slave_1: entered promiscuous mode [ 69.948395][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.955501][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.962742][ T5820] bridge_slave_1: entered allmulticast mode [ 69.969746][ T5820] bridge_slave_1: entered promiscuous mode [ 70.040636][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.047637][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.073726][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.106577][ T5829] team0: Port device team_slave_0 added [ 70.115158][ T5819] team0: Port device team_slave_0 added [ 70.121449][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.128461][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.154662][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.168039][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.179775][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.194295][ T5829] team0: Port device team_slave_1 added [ 70.202342][ T5819] team0: Port device team_slave_1 added [ 70.216517][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.227841][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.295179][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.302236][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.328701][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.340460][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.347682][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.373705][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.411067][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.418098][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.444464][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.456187][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.463162][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.489358][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.501669][ T5830] team0: Port device team_slave_0 added [ 70.509573][ T5820] team0: Port device team_slave_0 added [ 70.517324][ T5830] team0: Port device team_slave_1 added [ 70.547682][ T5820] team0: Port device team_slave_1 added [ 70.568681][ T5827] hsr_slave_0: entered promiscuous mode [ 70.575160][ T5827] hsr_slave_1: entered promiscuous mode [ 70.587623][ T5836] Bluetooth: hci4: command tx timeout [ 70.593498][ T5826] Bluetooth: hci1: command tx timeout [ 70.599412][ T5823] Bluetooth: hci3: command tx timeout [ 70.650979][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.658250][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.667394][ T5826] Bluetooth: hci0: command tx timeout [ 70.690279][ T5836] Bluetooth: hci2: command tx timeout [ 70.696011][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.707653][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.714941][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.740990][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.775251][ T5829] hsr_slave_0: entered promiscuous mode [ 70.781705][ T5829] hsr_slave_1: entered promiscuous mode [ 70.788033][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 70.793812][ T5829] Cannot create hsr debugfs directory [ 70.800110][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.807629][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.833694][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.845286][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.852437][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.878578][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.909406][ T5819] hsr_slave_0: entered promiscuous mode [ 70.915597][ T5819] hsr_slave_1: entered promiscuous mode [ 70.922118][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 70.927901][ T5819] Cannot create hsr debugfs directory [ 71.136060][ T5820] hsr_slave_0: entered promiscuous mode [ 71.142482][ T5820] hsr_slave_1: entered promiscuous mode [ 71.149668][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 71.155409][ T5820] Cannot create hsr debugfs directory [ 71.166421][ T5830] hsr_slave_0: entered promiscuous mode [ 71.172832][ T5830] hsr_slave_1: entered promiscuous mode [ 71.179074][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 71.184797][ T5830] Cannot create hsr debugfs directory [ 71.315138][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.321708][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.483051][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.502621][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.520632][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.548000][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.610802][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.625176][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.636381][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.648122][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.727165][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.738110][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.748292][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.759492][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.868622][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.882023][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.906477][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.917417][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.947373][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.994884][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.035487][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.051663][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.058872][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.077363][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.089601][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.098755][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.105885][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.121900][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.131752][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.189709][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.221831][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.228961][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.239647][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.246749][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.324446][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.373394][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.390710][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.429583][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.479693][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.486943][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.497511][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.504661][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.544941][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.552136][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.591056][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.598303][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.614539][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.633307][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.668888][ T5836] Bluetooth: hci4: command tx timeout [ 72.674323][ T5836] Bluetooth: hci3: command tx timeout [ 72.680817][ T5826] Bluetooth: hci1: command tx timeout [ 72.683713][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.722420][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.729568][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.748421][ T5836] Bluetooth: hci2: command tx timeout [ 72.753893][ T5826] Bluetooth: hci0: command tx timeout [ 72.798806][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.805991][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.892310][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.914244][ T5827] veth0_vlan: entered promiscuous mode [ 72.993160][ T5827] veth1_vlan: entered promiscuous mode [ 73.103821][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.129963][ T5827] veth0_macvtap: entered promiscuous mode [ 73.179514][ T5827] veth1_macvtap: entered promiscuous mode [ 73.241500][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.278617][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.305436][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.342333][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.359055][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.379391][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.412829][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.445497][ T5819] veth0_vlan: entered promiscuous mode [ 73.474324][ T5819] veth1_vlan: entered promiscuous mode [ 73.511008][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.553908][ T5830] veth0_vlan: entered promiscuous mode [ 73.595575][ T5819] veth0_macvtap: entered promiscuous mode [ 73.603696][ T5830] veth1_vlan: entered promiscuous mode [ 73.623516][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.634924][ T5829] veth0_vlan: entered promiscuous mode [ 73.649989][ T5829] veth1_vlan: entered promiscuous mode [ 73.655786][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.659199][ T5819] veth1_macvtap: entered promiscuous mode [ 73.728455][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.745019][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.745297][ T5820] veth0_vlan: entered promiscuous mode [ 73.759351][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.781085][ T5830] veth0_macvtap: entered promiscuous mode [ 73.793247][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.820407][ T5830] veth1_macvtap: entered promiscuous mode [ 73.840303][ T5820] veth1_vlan: entered promiscuous mode [ 73.857449][ T1135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.878087][ T3540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.886905][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.902406][ T3540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.925797][ T3540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.945896][ T5829] veth0_macvtap: entered promiscuous mode [ 73.960727][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.991752][ T5829] veth1_macvtap: entered promiscuous mode [ 74.029544][ T5938] bond1: option ad_user_port_key: invalid value (65535) [ 74.037314][ T5938] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 74.048892][ T5938] bond1 (unregistering): Released all slaves [ 74.071392][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.121319][ T5938] Zero length message leads to an empty skb [ 74.144622][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.156295][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.167075][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.174409][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.185492][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.247399][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.262169][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.276737][ T5820] veth0_macvtap: entered promiscuous mode [ 74.291265][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.319281][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.320848][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.336979][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.351910][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.380155][ T5820] veth1_macvtap: entered promiscuous mode [ 74.400091][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 74.420957][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.433255][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.517873][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 74.538759][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.587515][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.643550][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.685308][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.704478][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.714415][ T5957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.723335][ T5957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.741591][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.751025][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.751698][ T5826] Bluetooth: hci1: command tx timeout [ 74.760237][ T5836] Bluetooth: hci3: command tx timeout [ 74.760273][ T5836] Bluetooth: hci4: command tx timeout [ 74.778248][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.783332][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.786075][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.807753][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.816625][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.827481][ T5826] Bluetooth: hci0: command tx timeout [ 74.832902][ T5826] Bluetooth: hci2: command tx timeout [ 74.841284][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.905703][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.915078][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.998259][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.018890][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.055226][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.066056][ T5966] netlink: 'syz.2.11': attribute type 5 has an invalid length. [ 75.087798][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.144004][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.160343][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.179813][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 75.282525][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.327382][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.445616][ T48] tipc: Subscription rejected, illegal request [ 75.928403][ T6003] bridge1: entered promiscuous mode [ 75.933663][ T6003] bridge1: entered allmulticast mode [ 75.973163][ T6003] team0: Port device bridge1 added [ 76.003161][ T6006] bridge0: port 3(team0) entered blocking state [ 76.031730][ T6006] bridge0: port 3(team0) entered disabled state [ 76.064843][ T6006] team0: entered allmulticast mode [ 76.089828][ T6006] team_slave_0: entered allmulticast mode [ 76.095718][ T6006] team_slave_1: entered allmulticast mode [ 76.119945][ T6006] team0: entered promiscuous mode [ 76.134218][ T6006] team_slave_0: entered promiscuous mode [ 76.147248][ T6006] team_slave_1: entered promiscuous mode [ 76.169482][ T6006] bridge0: port 3(team0) entered blocking state [ 76.176077][ T6006] bridge0: port 3(team0) entered forwarding state [ 76.194791][ T6026] netlink: 'syz.1.23': attribute type 21 has an invalid length. [ 76.828552][ T5823] Bluetooth: hci4: command tx timeout [ 76.834356][ T5823] Bluetooth: hci3: command tx timeout [ 76.839859][ T5826] Bluetooth: hci1: command tx timeout [ 76.908245][ T5826] Bluetooth: hci2: command tx timeout [ 76.913733][ T5823] Bluetooth: hci0: command tx timeout [ 77.313822][ T6069] pim6reg1: entered promiscuous mode [ 77.320995][ T6069] pim6reg1: entered allmulticast mode [ 77.361703][ T6071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.546418][ T30] audit: type=1107 audit(1775429781.002:2): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 77.685743][ T6084] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 77.822911][ T6084] bond1: (slave lo): Enslaving as an active interface with an up link [ 77.852504][ T6084] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 78.078056][ T6105] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 78.150917][ T6105] Bluetooth: MGMT ver 1.23 [ 78.291418][ T6114] nbd: must specify a device to reconfigure [ 78.293680][ T6118] netlink: 'syz.3.46': attribute type 6 has an invalid length. [ 78.313656][ T6118] netlink: 'syz.3.46': attribute type 5 has an invalid length. [ 78.323829][ T6114] vlan2: entered promiscuous mode [ 78.372250][ T6114] gretap0: entered promiscuous mode [ 78.397634][ T6124] x_tables: duplicate underflow at hook 1 [ 78.517401][ T6129] tipc: Started in network mode [ 78.522467][ T6129] tipc: Node identity 8a45789cf33a, cluster identity 4711 [ 78.562175][ T6129] tipc: Enabled bearer , priority 0 [ 78.580485][ T6135] syzkaller0: entered promiscuous mode [ 78.586638][ T6135] syzkaller0: entered allmulticast mode [ 78.621392][ T6129] tipc: Resetting bearer [ 78.639548][ T6128] tipc: Resetting bearer [ 78.656359][ T6128] tipc: Disabling bearer [ 78.695133][ T6138] warning: `syz.2.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.253243][ T6157] syz.4.58 uses obsolete (PF_INET,SOCK_PACKET) [ 79.541421][ T6171] __nla_validate_parse: 15 callbacks suppressed [ 79.541439][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 79.599151][ T6179] syzkaller1: entered promiscuous mode [ 79.604763][ T6179] syzkaller1: entered allmulticast mode [ 79.658044][ T980] cfg80211: failed to load regulatory.db [ 79.736715][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.65'. [ 79.850241][ T30] audit: type=1107 audit(1775429783.312:3): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 79.863935][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 80.341736][ T6225] lo: entered allmulticast mode [ 80.350788][ T6225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.279432][ T6159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.293666][ T6189] netlink: 224 bytes leftover after parsing attributes in process `syz.2.67'. [ 82.449579][ T6243] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.79'. [ 82.479737][ T6251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.80'. [ 82.568175][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 82.631627][ T6263] netlink: 'syz.1.81': attribute type 30 has an invalid length. [ 82.665509][ T6258] syz_tun: entered promiscuous mode [ 82.693806][ T6258] macvtap1: entered promiscuous mode [ 82.719621][ T6258] macvtap1: entered allmulticast mode [ 82.737218][ T6258] syz_tun: entered allmulticast mode [ 82.832739][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 82.904091][ T6279] netlink: 76 bytes leftover after parsing attributes in process `syz.0.85'. [ 82.919820][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 83.246170][ T6290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.312891][ T3540] bond0: (slave bond_slave_0): interface is now down [ 83.335942][ T3540] bond0: (slave bond_slave_1): interface is now down [ 83.527451][ T36] bond0: (slave bond_slave_0): interface is now down [ 83.537342][ T36] bond0: (slave bond_slave_1): interface is now down [ 83.697844][ T60] bond0: (slave bond_slave_0): interface is now down [ 83.704578][ T60] bond0: (slave bond_slave_1): interface is now down [ 83.869455][ T48] bond0: (slave bond_slave_0): interface is now down [ 83.894271][ T48] bond0: (slave bond_slave_1): interface is now down [ 84.050235][ T13] bond0: (slave bond_slave_0): interface is now down [ 84.070242][ T13] bond0: (slave bond_slave_1): interface is now down [ 84.100685][ T13] bond0: now running without any active interface! [ 84.157219][ T6348] C: renamed from team_slave_0 (while UP) [ 84.192527][ T6348] netlink: 'syz.3.104': attribute type 4 has an invalid length. [ 84.231378][ T6348] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 84.470951][ T6367] netlink: 'syz.3.109': attribute type 30 has an invalid length. [ 84.556712][ T6367] __nla_validate_parse: 5 callbacks suppressed [ 84.556731][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 84.658065][ T6367] netlink: 'syz.3.109': attribute type 30 has an invalid length. [ 84.687692][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.720195][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.770547][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.802745][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.050705][ T6382] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 85.068631][ T6385] syzkaller1: entered promiscuous mode [ 85.074350][ T6385] syzkaller1: entered allmulticast mode [ 85.406739][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 85.956604][ T6425] IPVS: set_ctl: invalid protocol: 92 100.1.1.1:20002 [ 86.113195][ T6430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.127'. [ 86.601845][ T6442] smc: net device wlan0 applied user defined pnetid SYZ0 [ 86.745831][ T6447] Illegal XDP return value 4294967274 on prog (id 31) dev N/A, expect packet loss! [ 87.242961][ T6473] netlink: 260 bytes leftover after parsing attributes in process `syz.4.140'. [ 87.334744][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 87.340683][ T6475] netlink: 72 bytes leftover after parsing attributes in process `syz.2.141'. [ 87.366735][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 87.385944][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 87.550192][ T6476] veth3: entered promiscuous mode [ 87.815557][ T6489] netlink: 14 bytes leftover after parsing attributes in process `syz.4.144'. [ 87.888107][ T6489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.926338][ T6489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.943096][ T6489] bond0 (unregistering): Released all slaves [ 88.191170][ T6512] netlink: 'syz.0.147': attribute type 16 has an invalid length. [ 88.202576][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 88.572725][ T6539] syzkaller0: entered promiscuous mode [ 88.613035][ T6539] syzkaller0: entered allmulticast mode [ 89.712828][ T6593] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 89.743128][ T6593] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 90.457441][ T6619] __nla_validate_parse: 5 callbacks suppressed [ 90.457461][ T6619] netlink: 2 bytes leftover after parsing attributes in process `syz.2.175'. [ 90.477716][ T6619] netlink: 2 bytes leftover after parsing attributes in process `syz.2.175'. [ 90.486536][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.175'. [ 90.605229][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 90.670277][ T6628] syzkaller1: entered allmulticast mode [ 90.844469][ T6633] netlink: 256 bytes leftover after parsing attributes in process `syz.0.182'. [ 90.877396][ T6633] netlink: 256 bytes leftover after parsing attributes in process `syz.0.182'. [ 90.966434][ T6643] syzkaller0: entered promiscuous mode [ 90.972241][ T6643] syzkaller0: entered allmulticast mode [ 90.999135][ T6641] netlink: 'syz.3.184': attribute type 39 has an invalid length. [ 91.198186][ T6651] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 91.230576][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 91.449159][ T6669] bond1: Removing last arp target with arp_interval on [ 91.566743][ T796] IPVS: starting estimator thread 0... [ 91.644617][ T6681] netlink: 548 bytes leftover after parsing attributes in process `syz.3.197'. [ 91.658872][ T6678] IPVS: using max 31 ests per chain, 74400 per kthread [ 91.703634][ T6684] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 91.712619][ T6684] netlink: 'syz.1.199': attribute type 11 has an invalid length. [ 91.720961][ T6684] netlink: 224 bytes leftover after parsing attributes in process `syz.1.199'. [ 91.744335][ T6685] netlink: 164 bytes leftover after parsing attributes in process `syz.0.198'. [ 92.120058][ T6704] xt_bpf: check failed: parse error [ 92.221869][ T6710] bridge2: entered promiscuous mode [ 92.240210][ T6710] bridge2: entered allmulticast mode [ 92.269724][ T6710] team0: Failed to send port change of device bridge2 via netlink (err -105) [ 92.295472][ T6710] team0: Failed to send options change via netlink (err -105) [ 92.306895][ T6710] team0: Port device bridge2 added [ 92.581588][ T6729] vxcan2: entered allmulticast mode [ 92.707056][ T6740] netlink: 'syz.0.219': attribute type 10 has an invalid length. [ 92.732258][ T6740] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 93.210178][ T6770] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20002 [ 93.381149][ T6781] xt_hashlimit: size too large, truncated to 1048576 [ 93.393713][ T6782] netlink: 'syz.0.232': attribute type 13 has an invalid length. [ 93.405457][ T6782] netlink: 'syz.0.232': attribute type 17 has an invalid length. [ 93.433472][ T6777] xt_hashlimit: size too large, truncated to 1048576 [ 93.568932][ T6777] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 93.725767][ T6782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.302715][ T6815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.747502][ T6845] xt_connbytes: Forcing CT accounting to be enabled [ 95.019119][ T9] IPVS: starting estimator thread 0... [ 95.051541][ T6868] batman_adv: batadv0: Adding interface: dummy0 [ 95.059137][ T6868] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.085117][ T6868] batman_adv: batadv0: Interface activated: dummy0 [ 95.136903][ T6869] IPVS: using max 30 ests per chain, 72000 per kthread [ 95.287517][ T6875] batadv0: mtu less than device minimum [ 95.303621][ T6875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.315436][ T6875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.327045][ T6875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.338508][ T6875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.350252][ T6875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.361765][ T6875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.373309][ T6875] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.625594][ T6887] __nla_validate_parse: 20 callbacks suppressed [ 95.625613][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.260'. [ 95.643204][ T6883] netlink: 17 bytes leftover after parsing attributes in process `syz.2.259'. [ 95.698058][ T6881] syzkaller0: entered allmulticast mode [ 95.731451][ T6881] syzkaller0: entered promiscuous mode [ 95.753497][ T6880] syzkaller0: left promiscuous mode [ 95.761671][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 95.799633][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 95.841554][ T6880] syzkaller0: left allmulticast mode [ 96.123090][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 96.143872][ T6907] tipc: Enabling of bearer rejected, failed to enable media [ 96.168338][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 96.245263][ T6870] syz.1.256 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 96.273277][ T6870] CPU: 1 UID: 0 PID: 6870 Comm: syz.1.256 Not tainted syzkaller #0 PREEMPT(full) [ 96.273303][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.273321][ T6870] Call Trace: [ 96.273328][ T6870] [ 96.273335][ T6870] dump_stack_lvl+0xe8/0x150 [ 96.273366][ T6870] dump_header+0xd3/0x4c0 [ 96.273390][ T6870] oom_kill_process+0x3ab/0x970 [ 96.273415][ T6870] out_of_memory+0x106c/0x1410 [ 96.273438][ T6870] ? __pfx___mutex_lock+0x10/0x10 [ 96.273469][ T6870] ? __pfx_out_of_memory+0x10/0x10 [ 96.273485][ T6870] ? do_raw_spin_unlock+0xf5/0x210 [ 96.273513][ T6870] try_charge_memcg+0xc53/0x1560 [ 96.273550][ T6870] ? __pfx_try_charge_memcg+0x10/0x10 [ 96.273581][ T6870] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 96.273606][ T6870] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 96.273629][ T6870] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 96.273653][ T6870] __swap_cache_prepare_and_add+0xe8/0x760 [ 96.273686][ T6870] ? page_rmappable_folio+0x9a/0x170 [ 96.273716][ T6870] swap_cache_alloc_folio+0xf1/0x240 [ 96.273746][ T6870] swap_cluster_readahead+0x369/0x690 [ 96.273771][ T6870] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 96.273801][ T6870] ? get_vma_policy+0x27b/0x3c0 [ 96.273827][ T6870] swapin_readahead+0x196/0xc50 [ 96.273856][ T6870] ? __pfx_swapin_readahead+0x10/0x10 [ 96.273875][ T6870] ? swap_table_get+0x1e/0x260 [ 96.273899][ T6870] ? swap_table_get+0x1e/0x260 [ 96.273920][ T6870] ? swap_table_get+0x1e/0x260 [ 96.273945][ T6870] ? swap_table_get+0x216/0x260 [ 96.273971][ T6870] ? swap_cache_get_folio+0x513/0x520 [ 96.274002][ T6870] do_swap_page+0x56f/0x5a20 [ 96.274050][ T6870] ? do_swap_page+0x127/0x5a20 [ 96.274073][ T6870] ? __pfx_do_swap_page+0x10/0x10 [ 96.274102][ T6870] ? __pte_offset_map+0x1ae/0x240 [ 96.274123][ T6870] ? pte_offset_map_rw_nolock+0xea/0x160 [ 96.274144][ T6870] handle_mm_fault+0x12d2/0x3310 [ 96.274185][ T6870] ? handle_mm_fault+0xee/0x3310 [ 96.274218][ T6870] ? __pfx_handle_mm_fault+0x10/0x10 [ 96.274239][ T6870] ? lock_vma_under_rcu+0x45a/0x500 [ 96.274286][ T6870] do_user_addr_fault+0xa73/0x1340 [ 96.274316][ T6870] ? rcu_is_watching+0x15/0xb0 [ 96.274341][ T6870] ? trace_page_fault_user+0x84/0x210 [ 96.274365][ T6870] exc_page_fault+0x6a/0xc0 [ 96.274389][ T6870] asm_exc_page_fault+0x26/0x30 [ 96.274406][ T6870] RIP: 0033:0x7f6b04e507bf [ 96.274432][ T6870] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 18 3b 00 89 f0 4c 8d 05 49 f8 3a 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 96.274445][ T6870] RSP: 002b:00007ffe91c77ff8 EFLAGS: 00010206 [ 96.274467][ T6870] RAX: 0000000084af656a RBX: ffffffff84af656a RCX: 0000000000000006 [ 96.274479][ T6870] RDX: 000000000000056a RSI: ffffffff84af656a RDI: 0000000000000005 [ 96.274489][ T6870] RBP: 0000000000000000 R08: 00007f6b05200000 R09: 00007f6b05202000 [ 96.274500][ T6870] R10: 0000000084af656e R11: 0000000000000005 R12: 00007f6b05216038 [ 96.274511][ T6870] R13: 0000000000000008 R14: ffffffff84af6c44 R15: 00007f6b05d45720 [ 96.274523][ T6870] ? _copy_from_user+0x94/0xb0 [ 96.274545][ T6870] ? refcount_dec_not_one+0xba/0x1a0 [ 96.274569][ T6870] ? refcount_dec_not_one+0xba/0x1a0 [ 96.274593][ T6870] [ 96.276356][ T6870] memory: usage 307200kB, limit 307200kB, failcnt 591 [ 96.856924][ T6870] memory+swap: usage 302696kB, limit 9007199254740988kB, failcnt 0 [ 96.893033][ T30] audit: type=1804 audit(1775429800.352:4): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.270" name="/newroot/52/cgroup.controllers" dev="tmpfs" ino=287 res=1 errno=0 [ 96.977805][ T6870] kmem: usage 292204kB, limit 9007199254740988kB, failcnt 0 [ 97.000391][ T6870] Memory cgroup stats for /syz1: [ 97.002732][ T6870] cache 4096 [ 97.023053][ T30] audit: type=1800 audit(1775429800.352:5): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.270" name="cgroup.controllers" dev="tmpfs" ino=287 res=0 errno=0 [ 97.086986][ T6870] rss 0 [ 97.094288][ T6870] rss_huge 0 [ 97.112056][ T30] audit: type=1800 audit(1775429800.412:6): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.270" name="cgroup.controllers" dev="tmpfs" ino=287 res=0 errno=0 [ 97.121004][ T6870] shmem 0 [ 97.216743][ T6870] mapped_file 0 [ 97.256961][ T6870] dirty 0 [ 97.259947][ T6870] writeback 0 [ 97.263235][ T6870] workingset_refault_anon 31 [ 97.292749][ T6870] workingset_refault_file 17 [ 97.336956][ T6870] swap 180224 [ 97.352149][ T6870] swapcached 339968 [ 97.365332][ T6870] pgpgin 7125 [ 97.373306][ T6870] pgpgout 7116 [ 97.381169][ T6870] pgfault 17223 [ 97.391705][ T6936] batadv_slave_1: entered promiscuous mode [ 97.392140][ T6870] pgmajfault 16 [ 97.404684][ T6870] inactive_anon 0 [ 97.408672][ T6870] active_anon 32768 [ 97.412616][ T6870] inactive_file 0 [ 97.416431][ T6870] active_file 4096 [ 97.420672][ T6870] unevictable 0 [ 97.424267][ T6870] hierarchical_memory_limit 314572800 [ 97.430695][ T6870] hierarchical_memsw_limit 9223372036854771712 [ 97.437312][ T6870] total_cache 4096 [ 97.441417][ T6870] total_rss 0 [ 97.444812][ T6870] total_rss_huge 0 [ 97.449114][ T6870] total_shmem 0 [ 97.452817][ T6870] total_mapped_file 0 [ 97.457353][ T6870] total_dirty 0 [ 97.461728][ T6870] total_writeback 0 [ 97.465794][ T6870] total_workingset_refault_anon 31 [ 97.472738][ T6870] total_workingset_refault_file 17 [ 97.478311][ T6870] total_swap 180224 [ 97.482214][ T6870] total_swapcached 339968 [ 97.486681][ T6870] total_pgpgin 7125 [ 97.493727][ T6870] total_pgpgout 7116 [ 97.499763][ T6870] total_pgfault 17223 [ 97.503968][ T6870] total_pgmajfault 16 [ 97.511507][ T6870] total_inactive_anon 0 [ 97.515891][ T6870] total_active_anon 32768 [ 97.520634][ T6870] total_inactive_file 0 [ 97.524916][ T6870] total_active_file 4096 [ 97.529651][ T6870] total_unevictable 0 [ 97.533727][ T6870] anon_cost 0 [ 97.537566][ T6870] file_cost 0 [ 97.541046][ T6870] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.256,pid=6870,uid=0 [ 97.560402][ T6870] Memory cgroup out of memory: Killed process 6870 (syz.1.256) total-vm:102420kB, anon-rss:1260kB, file-rss:23056kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 97.579565][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 97.597002][ T6938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.644282][ T6917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.657462][ T6938] batadv_slave_1 (unregistering): left promiscuous mode [ 97.664625][ T6938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.116341][ T6963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.279'. [ 98.149758][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 98.244612][ T6965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.295444][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 98.402431][ T6967] macsec1: entered allmulticast mode [ 98.431087][ T6967] bond2: entered allmulticast mode [ 98.458270][ T6967] bond2: left allmulticast mode [ 98.710626][ T6997] netlink: 'syz.0.288': attribute type 2 has an invalid length. [ 99.048854][ T7015] pim6reg1: entered promiscuous mode [ 99.109561][ T7015] pim6reg1: entered allmulticast mode [ 99.276551][ T7022] hsr_slave_1 (unregistering): left promiscuous mode [ 99.943117][ T7055] net_ratelimit: 12 callbacks suppressed [ 99.943135][ T7055] openvswitch: netlink: Message has 592 unknown bytes. [ 99.960188][ T7055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.650828][ T7081] __nla_validate_parse: 5 callbacks suppressed [ 100.650845][ T7081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'. [ 100.741401][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 100.755446][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 100.921956][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.319'. [ 101.199017][ T7131] netlink: 72 bytes leftover after parsing attributes in process `syz.2.325'. [ 101.471708][ T7140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.328'. [ 101.731350][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.334'. [ 101.732295][ T7162] netlink: 68 bytes leftover after parsing attributes in process `syz.2.335'. [ 101.765849][ T7162] netlink: 68 bytes leftover after parsing attributes in process `syz.2.335'. [ 102.151933][ T7197] bridge0: port 3(syz_tun) entered blocking state [ 102.165162][ T7197] bridge0: port 3(syz_tun) entered disabled state [ 102.172683][ T7197] syz_tun: entered allmulticast mode [ 102.183554][ T7197] syz_tun: entered promiscuous mode [ 102.219246][ T7197] bridge0: port 3(syz_tun) entered blocking state [ 102.226000][ T7197] bridge0: port 3(syz_tun) entered forwarding state [ 102.245075][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 102.358108][ T7208] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 102.380328][ T7208] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 103.399212][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.412694][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.413894][ T7267] "syz.4.365" (7267) uses obsolete ecb(arc4) skcipher [ 103.442086][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.476747][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.902063][ T7244] lec:lec_atm_close: lec0: Shut down! [ 104.181502][ T7315] netlink: 'syz.1.372': attribute type 3 has an invalid length. [ 104.229757][ T796] lec:lec_start_xmit: lec0:No lecd attached [ 104.411565][ T7332] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = -1612129024, id = 0 [ 105.110719][ T7382] Bluetooth: MGMT ver 1.23 [ 105.381464][ T7393] netlink: 'syz.0.392': attribute type 13 has an invalid length. [ 105.431298][ T7395] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 105.445646][ T7395] bond1 (unregistering): Released all slaves [ 105.722456][ T7411] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 105.733850][ T7411] bond3 (unregistering): Released all slaves [ 106.811109][ T7438] netlink: 'syz.4.404': attribute type 1 has an invalid length. [ 106.854471][ T7437] __nla_validate_parse: 15 callbacks suppressed [ 106.854487][ T7437] netlink: 44 bytes leftover after parsing attributes in process `syz.3.403'. [ 107.318610][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 107.353972][ T7465] netlink: 'syz.2.411': attribute type 9 has an invalid length. [ 107.397305][ T7465] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.411'. [ 107.462322][ T7470] netlink: 'syz.3.412': attribute type 12 has an invalid length. [ 108.400083][ T7537] netlink: 'syz.0.430': attribute type 33 has an invalid length. [ 108.418629][ T7542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'. [ 108.421274][ T7537] netlink: 152 bytes leftover after parsing attributes in process `syz.0.430'. [ 108.440913][ T7541] syzkaller1: entered promiscuous mode [ 108.606913][ T7556] geneve1: entered promiscuous mode [ 108.726580][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 108.735954][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.438'. [ 108.811586][ T7571] netlink: 'syz.0.439': attribute type 1 has an invalid length. [ 108.828964][ T7570] netlink: 'syz.2.440': attribute type 1 has an invalid length. [ 108.874583][ T7570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.945329][ T7571] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.967756][ T7579] bond3: (slave geneve2): making interface the new active one [ 108.980038][ T7579] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 109.026331][ T7580] bond2: (slave geneve2): making interface the new active one [ 109.066539][ T7580] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 109.369993][ T7609] netpci0: tun_chr_ioctl cmd 1074025678 [ 109.375605][ T7609] netpci0: group set to 0 [ 109.398966][ T7605] netlink: 'syz.4.448': attribute type 1 has an invalid length. [ 109.425861][ T7605] batman_adv: batadv0: Interface deactivated: dummy0 [ 109.454170][ T7605] batman_adv: batadv0: Removing interface: dummy0 [ 109.504144][ T7612] netlink: 'syz.3.451': attribute type 1 has an invalid length. [ 109.535525][ T7612] netlink: 224 bytes leftover after parsing attributes in process `syz.3.451'. [ 109.583198][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 110.073569][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'. [ 110.096633][ T7645] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 110.113576][ T7645] syzkaller1: linktype set to 825 [ 110.327000][ T7649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.346839][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6120 ms [ 110.355278][ C0] lec:lec_tx_timeout: lec0 [ 110.361422][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 110.458529][ T7670] veth0_macvtap: left promiscuous mode [ 110.821174][ T24] IPVS: starting estimator thread 0... [ 110.861620][ T7695] ip6erspan0: entered allmulticast mode [ 110.917983][ T7692] IPVS: using max 32 ests per chain, 76800 per kthread [ 111.405313][ T7726] netlink: 'syz.4.478': attribute type 29 has an invalid length. [ 111.415858][ T7726] netlink: 'syz.4.478': attribute type 29 has an invalid length. [ 111.425022][ T7726] unsupported nla_type 58 [ 111.560994][ T7733] xt_hashlimit: max too large, truncated to 1048576 [ 111.574564][ T7733] xt_hashlimit: overflow, try lower: 2/0 [ 111.591444][ T7733] xt_hashlimit: max too large, truncated to 1048576 [ 111.603786][ T7733] xt_hashlimit: overflow, try lower: 2/0 [ 111.793800][ T7754] netlink: 'syz.2.485': attribute type 2 has an invalid length. [ 111.904314][ T7760] __nla_validate_parse: 7 callbacks suppressed [ 111.904355][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 112.182792][ T7768] syzkaller1: entered promiscuous mode [ 112.230752][ T7768] syzkaller1: entered allmulticast mode [ 112.408548][ T7793] netlink: 'syz.4.494': attribute type 9 has an invalid length. [ 112.417145][ T7793] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.494'. [ 112.902375][ T7801] netlink: 200 bytes leftover after parsing attributes in process `syz.2.496'. [ 112.912373][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.959410][ T7802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.495'. [ 112.981753][ T7802] nbd: must specify a device to reconfigure [ 113.000023][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 113.242709][ T7811] netlink: 'syz.4.497': attribute type 11 has an invalid length. [ 113.345801][ T7813] netlink: 56 bytes leftover after parsing attributes in process `syz.4.497'. [ 113.428360][ T7821] netlink: 'syz.2.500': attribute type 2 has an invalid length. [ 113.494074][ T7821] : entered promiscuous mode [ 113.578382][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 113.593368][ T7825] ipvlan2: entered promiscuous mode [ 113.612028][ T7825] ipvlan2: entered allmulticast mode [ 113.630258][ T7825] gretap0: entered allmulticast mode [ 113.664258][ T7825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.673391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.891663][ T7845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.506'. [ 113.907183][ T7845] netlink: 64 bytes leftover after parsing attributes in process `syz.3.506'. [ 113.927361][ T7845] tipc: Invalid UDP bearer configuration [ 113.927413][ T7845] tipc: Enabling of bearer rejected, failed to enable media [ 113.947230][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.119838][ T7857] netlink: 1371 bytes leftover after parsing attributes in process `syz.4.509'. [ 114.189746][ T7857] xt_hashlimit: size too large, truncated to 1048576 [ 114.219261][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.407156][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.486214][ T7879] netlink: 'syz.1.515': attribute type 10 has an invalid length. [ 114.532875][ T7883] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 114.540091][ T7879] team0: Port device dummy0 added [ 114.599809][ T7879] netlink: 'syz.1.515': attribute type 10 has an invalid length. [ 114.674494][ T7879] team0: Port device dummy0 removed [ 114.715478][ T7879] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.734089][ T7891] netlink: 'syz.3.518': attribute type 1 has an invalid length. [ 114.776310][ T7892] netlink: 'syz.2.517': attribute type 10 has an invalid length. [ 114.976515][ T13] bond0: (slave dummy0): interface is now down [ 114.991088][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.127470][ T60] bond0: (slave dummy0): interface is now down [ 115.138721][ T60] bond0: now running without any active interface! [ 115.259977][ T7914] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.467311][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.593717][ T83] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 115.608461][ T83] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 115.617074][ T5953] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 115.787683][ T5953] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 115.797568][ T5953] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 115.861574][ T7953] nftables ruleset with unbound set [ 116.028794][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.106836][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 116.114890][ C0] lec:lec_tx_timeout: lec0 [ 116.120338][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 116.127521][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.471203][ T7984] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 116.693139][ T8007] netlink: 'syz.4.543': attribute type 11 has an invalid length. [ 117.042177][ T8015] __nla_validate_parse: 7 callbacks suppressed [ 117.042195][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 117.119519][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 117.176926][ T8015] netlink: 'syz.2.546': attribute type 15 has an invalid length. [ 117.612576][ T8050] syzkaller0: entered promiscuous mode [ 117.626943][ T8050] syzkaller0: entered allmulticast mode [ 117.809695][ T8014] lec:lec_atm_close: lec0: Shut down! [ 117.866561][ T8072] netlink: 'syz.0.557': attribute type 39 has an invalid length. [ 117.882615][ T8074] netlink: 'syz.4.556': attribute type 13 has an invalid length. [ 117.912580][ T8074] netlink: 'syz.4.556': attribute type 17 has an invalid length. [ 118.137192][ T24] net_ratelimit: 3 callbacks suppressed [ 118.137210][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.370922][ T8081] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR [ 118.373391][ T8080] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR [ 118.515659][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.665189][ T8104] openvswitch: netlink: IP tunnel dst address not specified [ 118.793575][ T8106] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.822884][ T8106] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.889845][ T8108] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 119.153563][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.984591][ T8065] bridge0: port 3(syz_tun) entered disabled state [ 119.998957][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.006985][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.027039][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 120.078891][ T8120] netlink: 'syz.1.564': attribute type 1 has an invalid length. [ 120.208759][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.271862][ T8065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.305838][ T8065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.692439][ T8074] bridge0: port 3(syz_tun) entered blocking state [ 120.698959][ T8074] bridge0: port 3(syz_tun) entered forwarding state [ 120.709454][ T8074] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.718199][ T8074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.744805][ T8108] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 120.849457][ T8115] netlink: 'syz.3.563': attribute type 3 has an invalid length. [ 120.955219][ T8145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.568'. [ 121.048700][ T3540] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.075716][ T3540] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.096671][ T3540] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.107139][ T3540] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.130324][ T8156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 121.149876][ T3540] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.192592][ T3540] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.230316][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.240565][ T3540] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.270339][ T3540] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.326302][ T8163] netlink: 'syz.3.574': attribute type 21 has an invalid length. [ 121.356166][ T8163] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.378401][ T8170] netlink: 'syz.3.574': attribute type 21 has an invalid length. [ 121.386579][ T8170] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.437344][ T8170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.444857][ T8170] IPv6: NLM_F_CREATE should be set when creating new route [ 121.452134][ T8170] IPv6: NLM_F_CREATE should be set when creating new route [ 121.459335][ T8170] IPv6: NLM_F_CREATE should be set when creating new route [ 121.466683][ T8163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.549795][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.034625][ T8192] x_tables: duplicate underflow at hook 1 [ 122.050888][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.089337][ T8193] bridge_slave_0 (unregistering): left allmulticast mode [ 122.108415][ T8193] bridge_slave_0 (unregistering): left promiscuous mode [ 122.117377][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.145521][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 122.197120][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.577'. [ 122.218708][ T8193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.582'. [ 122.247376][ T8207] netlink: 876 bytes leftover after parsing attributes in process `syz.2.581'. [ 122.256509][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 122.274799][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.278952][ T8200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.396563][ T8205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.768488][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 122.805312][ T8233] openvswitch: netlink: Flow actions attr not present in new flow. [ 122.826847][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 122.834893][ C0] lec:lec_tx_timeout: lec0 [ 122.839604][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 123.308935][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.383671][ T8262] netlink: 47 bytes leftover after parsing attributes in process `syz.2.593'. [ 124.074404][ T30] audit: type=1107 audit(1775429827.532:7): pid=8298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 124.351720][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.589922][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.628711][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 124.713862][ T8327] netlink: 'syz.2.610': attribute type 3 has an invalid length. [ 125.266783][ T8362] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 125.355148][ T83] nci: nci_rx_work: unknown MT 0x7 [ 125.392082][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.481584][ T8374] netlink: 'syz.2.622': attribute type 1 has an invalid length. [ 125.491544][ T8374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.622'. [ 125.777237][ T8390] netlink: 'syz.3.625': attribute type 3 has an invalid length. [ 126.013370][ T8362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.191563][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.629'. [ 126.259301][ T8402] vlan2: entered promiscuous mode [ 126.288684][ T8402] dummy0: entered promiscuous mode [ 126.324808][ T8400] xt_l2tp: wrong L2TP version: 0 [ 126.347517][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.433127][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.983386][ T8413] tc_dump_action: action bad kind [ 127.248037][ T8461] netlink: 'syz.0.641': attribute type 13 has an invalid length. [ 127.271823][ T8464] __nla_validate_parse: 3 callbacks suppressed [ 127.271840][ T8464] netlink: 7 bytes leftover after parsing attributes in process `syz.3.639'. [ 127.431830][ T8473] netlink: 'syz.4.643': attribute type 3 has an invalid length. [ 127.467160][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.627935][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.817085][ T8497] netlink: 'syz.1.649': attribute type 8 has an invalid length. [ 127.846837][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 127.854891][ C0] lec:lec_tx_timeout: lec0 [ 127.859981][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 128.063692][ T8519] netlink: 'syz.1.651': attribute type 8 has an invalid length. [ 128.082543][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.651'. [ 128.512056][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.986344][ T8558] netlink: 164 bytes leftover after parsing attributes in process `syz.0.659'. [ 129.063328][ T8562] netlink: 'syz.3.660': attribute type 3 has an invalid length. [ 129.166864][ T8562] block nbd3: NBD_DISCONNECT [ 129.223068][ T8562] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.453857][ T8562] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 129.468948][ T8568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.548971][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.577251][ T8583] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 129.916757][ T8599] netlink: 'syz.1.668': attribute type 10 has an invalid length. [ 129.947695][ T8599] netlink: 156 bytes leftover after parsing attributes in process `syz.1.668'. [ 130.102541][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 130.143548][ T8613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.669'. [ 130.376888][ T8619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.410246][ T8620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.591841][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.670572][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.722900][ T8649] nftables ruleset with unbound chain [ 130.837505][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.905291][ T8657] netlink: 'syz.0.679': attribute type 3 has an invalid length. [ 130.914734][ T8661] netlink: 1636 bytes leftover after parsing attributes in process `syz.2.678'. [ 130.937345][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 130.947414][ T8661] netlink: 1636 bytes leftover after parsing attributes in process `syz.2.678'. [ 131.291174][ T8683] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 131.501905][ T8696] netlink: 'syz.1.688': attribute type 1 has an invalid length. [ 131.627705][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.164285][ T8739] netlink: 'syz.2.696': attribute type 30 has an invalid length. [ 132.299195][ T8739] bond3: option arp_missed_max: invalid value (0) [ 132.306225][ T8739] bond3: option arp_missed_max: allowed values 1 - 255 [ 132.333120][ T8739] bond3 (unregistering): Released all slaves [ 132.440222][ T8750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.698'. [ 132.593269][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.699'. [ 132.667026][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.681767][ T8764] netlink: 56 bytes leftover after parsing attributes in process `syz.1.700'. [ 132.716311][ T8764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.700'. [ 132.752012][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.866877][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 132.874941][ C0] lec:lec_tx_timeout: lec0 [ 132.879799][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 133.287754][ T8789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.382698][ T8789] syzkaller0: entered promiscuous mode [ 133.390354][ T8789] syzkaller0: entered allmulticast mode [ 133.401810][ T8799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.710'. [ 133.423891][ T8799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.710'. [ 133.434394][ T8789] tipc: Started in network mode [ 133.439809][ T8789] tipc: Node identity da30eaa83c7d, cluster identity 4711 [ 133.457585][ T8789] tipc: Enabled bearer , priority 0 [ 133.464267][ T8799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.710'. [ 133.483899][ T8799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.710'. [ 133.494057][ T8795] tipc: Resetting bearer [ 133.523217][ T8795] tipc: Disabling bearer [ 133.671574][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'. [ 133.683289][ T8815] netlink: 48 bytes leftover after parsing attributes in process `syz.1.714'. [ 133.712495][ T5936] net_ratelimit: 2 callbacks suppressed [ 133.712511][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.726247][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.753577][ T8815] vlan0: entered allmulticast mode [ 133.767907][ T8815] geneve1: entered allmulticast mode [ 134.074329][ T8845] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 134.116348][ T8845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.185454][ T8845] bond1: (slave veth3): Enslaving as an active interface with a down link [ 134.239582][ T8856] bond0: (slave dummy0): Releasing backup interface [ 134.290508][ T8856] bond1: (slave dummy0): making interface the new active one [ 134.299739][ T8856] dummy0: entered promiscuous mode [ 134.307213][ T8856] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 134.495330][ T8878] lo speed is unknown, defaulting to 1000 [ 134.504774][ T8878] lo speed is unknown, defaulting to 1000 [ 134.512723][ T8878] lo speed is unknown, defaulting to 1000 [ 134.540227][ T8878] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 134.749770][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.775000][ T8878] lo speed is unknown, defaulting to 1000 [ 134.784886][ T8878] lo speed is unknown, defaulting to 1000 [ 134.798607][ T8878] lo speed is unknown, defaulting to 1000 [ 134.815564][ T8878] lo speed is unknown, defaulting to 1000 [ 134.832184][ T8878] lo speed is unknown, defaulting to 1000 [ 134.981119][ T8908] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 135.091042][ T8914] netlink: 'syz.3.737': attribute type 1 has an invalid length. [ 135.374262][ T8940] netlink: 'syz.2.744': attribute type 1 has an invalid length. [ 135.436769][ T8940] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 135.472799][ T8940] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 135.553251][ T8949] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 135.569778][ T8935] lo speed is unknown, defaulting to 1000 [ 135.607844][ T8940] macvlan2: entered promiscuous mode [ 135.616501][ T8940] macvlan2: entered allmulticast mode [ 135.622774][ T8940] bond3: entered promiscuous mode [ 135.630083][ T8940] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.643603][ T8940] bond3: left promiscuous mode [ 135.713824][ T8955] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 135.787389][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.900968][ T8974] rdma_rxe: rxe_newlink: failed to add gre0 [ 135.933878][ T8974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.951748][ T8975] netlink: 'syz.0.751': attribute type 30 has an invalid length. [ 136.033465][ T8975] bond4: option arp_missed_max: invalid value (0) [ 136.040417][ T8975] bond4: option arp_missed_max: allowed values 1 - 255 [ 136.058775][ T8975] bond4 (unregistering): Released all slaves [ 136.236170][ T8985] netlink: 'syz.1.758': attribute type 8 has an invalid length. [ 136.601864][ T9006] bridge0: port 3(syz_tun) entered disabled state [ 136.747313][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.823806][ T9020] syzkaller1: entered promiscuous mode [ 136.837634][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.852416][ T9020] syzkaller1: entered allmulticast mode [ 137.020495][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.077990][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.231604][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.609857][ T9071] xt_TCPMSS: Only works on TCP SYN packets [ 137.820034][ T9085] lo speed is unknown, defaulting to 1000 [ 137.886855][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 137.894938][ C0] lec:lec_tx_timeout: lec0 [ 137.899728][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 138.347638][ T9107] __nla_validate_parse: 21 callbacks suppressed [ 138.347657][ T9107] netlink: 32 bytes leftover after parsing attributes in process `syz.4.789'. [ 138.420143][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 138.459032][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.789'. [ 138.702181][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.793'. [ 138.713908][ T9130] netlink: 'syz.3.794': attribute type 1 has an invalid length. [ 138.879557][ T9131] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 138.887193][ T9131] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 138.916996][ T8132] net_ratelimit: 13 callbacks suppressed [ 138.917012][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.965286][ T9130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.027429][ T9127] bond3: (slave geneve2): making interface the new active one [ 139.054515][ T9127] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 139.095021][ T9154] netlink: 'syz.1.798': attribute type 10 has an invalid length. [ 139.124133][ T9154] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.137490][ T9154] bond0: (slave team0): Enslaving as an active interface with an up link [ 139.347296][ T3540] bond0: (slave team0): interface is now down [ 139.353966][ T3540] bond0: now running without any active interface! [ 139.387627][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.552423][ T9186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.803'. [ 139.564991][ T9184] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.806'. [ 139.667802][ T9196] netlink: 36 bytes leftover after parsing attributes in process `syz.2.803'. [ 139.787918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.856700][ T9205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.865966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.886516][ T9206] tipc: Started in network mode [ 139.891519][ T9206] tipc: Node identity cec4be373c3d, cluster identity 4711 [ 139.899041][ T9206] tipc: Enabled bearer , priority 0 [ 139.910644][ T9206] syzkaller0: entered promiscuous mode [ 139.916149][ T9206] syzkaller0: entered allmulticast mode [ 139.960433][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.981313][ T9206] tipc: Resetting bearer [ 140.011436][ T9212] netlink: 'syz.4.814': attribute type 27 has an invalid length. [ 140.040219][ T9215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.815'. [ 140.052544][ T9215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.815'. [ 140.080662][ T9212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.814'. [ 140.081400][ T9210] syzkaller0: entered promiscuous mode [ 140.095763][ T9210] syzkaller0: entered allmulticast mode [ 140.267135][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.333170][ T9240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.372410][ T9240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.410889][ T9240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.584049][ T9241] pim6reg1: entered promiscuous mode [ 140.590234][ T9241] pim6reg1: entered allmulticast mode [ 140.952156][ T8132] IPVS: starting estimator thread 0... [ 141.008081][ T9278] bond0: Error: Cannot enslave bond to itself. [ 141.018608][ T5953] tipc: Node number set to 4076453431 [ 141.039823][ T9234] syz.1.818 (9234) used greatest stack depth: 15176 bytes left [ 141.049742][ T9272] IPVS: using max 39 ests per chain, 93600 per kthread [ 141.307490][ T9291] hsr0: entered promiscuous mode [ 141.329252][ T9291] vlan2: entered promiscuous mode [ 141.399596][ T9291] bridge0: entered promiscuous mode [ 141.410616][ T9291] macsec1: entered promiscuous mode [ 141.499871][ T9308] netlink: 'syz.4.839': attribute type 11 has an invalid length. [ 141.636146][ T9320] netlink: 'syz.2.844': attribute type 4 has an invalid length. [ 142.372526][ T9370] netlink: 'syz.4.855': attribute type 21 has an invalid length. [ 142.384559][ T9369] netlink: 'syz.2.856': attribute type 3 has an invalid length. [ 142.707489][ T9384] lo speed is unknown, defaulting to 1000 [ 142.758345][ T9393] veth0_virt_wifi: entered allmulticast mode [ 142.906932][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 142.914991][ C0] lec:lec_tx_timeout: lec0 [ 142.920664][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 143.240518][ T9421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.256639][ T9417] macsec1: entered promiscuous mode [ 143.262150][ T9417] bond2: entered promiscuous mode [ 143.347047][ T9417] bond2: left promiscuous mode [ 143.441554][ T9432] __nla_validate_parse: 14 callbacks suppressed [ 143.441573][ T9432] netlink: 76 bytes leftover after parsing attributes in process `syz.0.871'. [ 143.550832][ T9433] netlink: 64 bytes leftover after parsing attributes in process `syz.2.870'. [ 143.565779][ T9433] netlink: 64 bytes leftover after parsing attributes in process `syz.2.870'. [ 143.595770][ T9428] lo speed is unknown, defaulting to 1000 [ 143.602384][ T9395] netlink: 44 bytes leftover after parsing attributes in process `syz.3.859'. [ 143.615030][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 143.801906][ T9441] netlink: 'syz.2.873': attribute type 1 has an invalid length. [ 143.854874][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 143.884106][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 144.033813][ T9456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.876'. [ 144.107819][ T9456] netlink: 7 bytes leftover after parsing attributes in process `syz.4.876'. [ 144.198539][ T8132] net_ratelimit: 187 callbacks suppressed [ 144.198560][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.215485][ T9464] netlink: 40 bytes leftover after parsing attributes in process `syz.1.878'. [ 145.227234][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.508224][ T36] dummy0: left promiscuous mode [ 145.571865][ T9553] tipc: Started in network mode [ 145.582042][ T9553] tipc: Node identity 6ed265fee9c9, cluster identity 4711 [ 145.590196][ T9553] tipc: Enabled bearer , priority 0 [ 145.614551][ T9553] syzkaller0: entered promiscuous mode [ 145.629805][ T9553] syzkaller0: entered allmulticast mode [ 145.672767][ T9553] tipc: Resetting bearer [ 145.692629][ T9552] tipc: Resetting bearer [ 145.708600][ T9552] tipc: Disabling bearer [ 145.723316][ T9565] syzkaller0: entered promiscuous mode [ 145.729125][ T9565] syzkaller0: entered allmulticast mode [ 145.901603][ T9584] netlink: 'syz.0.915': attribute type 2 has an invalid length. [ 145.903595][ T9587] netlink: 'syz.0.915': attribute type 2 has an invalid length. [ 145.921242][ T9584] netlink: 'syz.0.915': attribute type 2 has an invalid length. [ 146.105099][ T9606] netlink: 'syz.0.919': attribute type 2 has an invalid length. [ 146.122441][ T9613] netlink: 'syz.2.921': attribute type 12 has an invalid length. [ 146.155826][ T9613] netlink: 'syz.2.921': attribute type 11 has an invalid length. [ 146.267968][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.347479][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.400127][ T9631] veth0: entered promiscuous mode [ 146.410981][ T9631] bond0: entered promiscuous mode [ 146.419230][ T9631] bond_slave_0: entered promiscuous mode [ 146.425807][ T9631] bond_slave_1: entered promiscuous mode [ 146.659401][ T9650] validate_nla: 1 callbacks suppressed [ 146.659418][ T9650] netlink: 'syz.4.929': attribute type 1 has an invalid length. [ 146.690853][ T9650] netlink: 'syz.4.929': attribute type 4 has an invalid length. [ 146.707583][ T9650] netlink: 'syz.4.929': attribute type 1 has an invalid length. [ 146.719232][ T9650] netlink: 'syz.4.929': attribute type 4 has an invalid length. [ 146.737428][ T9650] netlink: 'syz.4.929': attribute type 1 has an invalid length. [ 146.749093][ T9657] netlink: 'syz.1.931': attribute type 10 has an invalid length. [ 146.757656][ T9657] team0: entered promiscuous mode [ 146.762214][ T9650] netlink: 'syz.4.929': attribute type 4 has an invalid length. [ 146.762854][ T9657] team_slave_0: entered promiscuous mode [ 146.779176][ T9657] team_slave_1: entered promiscuous mode [ 146.785179][ T9657] team0: entered allmulticast mode [ 146.790746][ T9657] team_slave_0: entered allmulticast mode [ 146.791292][ T9650] netlink: 'syz.4.929': attribute type 1 has an invalid length. [ 146.798026][ T9657] team_slave_1: entered allmulticast mode [ 146.811255][ T9650] netlink: 'syz.4.929': attribute type 4 has an invalid length. [ 146.823009][ T9650] netlink: 'syz.4.929': attribute type 1 has an invalid length. [ 146.834107][ T9657] bond0: (slave team0): Releasing backup interface [ 146.844699][ T9657] bridge0: port 3(team0) entered blocking state [ 146.851561][ T9657] bridge0: port 3(team0) entered disabled state [ 147.134756][ T9625] bond0: left promiscuous mode [ 147.140627][ T9625] bond_slave_0: left promiscuous mode [ 147.148593][ T9625] bond_slave_1: left promiscuous mode [ 147.168505][ T9625] veth0: left promiscuous mode [ 147.307179][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.467773][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.718169][ T9688] bond4: entered promiscuous mode [ 147.723664][ T9688] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.782142][ T9705] bridge0: Device is already in use. [ 147.893110][ T9714] ipvlan2: entered allmulticast mode [ 147.907390][ T9714] syz_tun: entered allmulticast mode [ 147.926841][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 147.934883][ C0] lec:lec_tx_timeout: lec0 [ 147.939942][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 148.144964][ T9741] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.353567][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.723326][ T9763] sctp: [Deprecated]: syz.3.948 (pid 9763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.723326][ T9763] Use struct sctp_sack_info instead [ 148.762514][ T9763] sctp: [Deprecated]: syz.3.948 (pid 9763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.762514][ T9763] Use struct sctp_sack_info instead [ 148.813128][ T9770] Cannot find add_set index 3 as target [ 149.370882][ T9803] trusted_key: syz.4.959 sent an empty control message without MSG_MORE. [ 149.387130][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.937882][ T9841] __nla_validate_parse: 52 callbacks suppressed [ 149.937900][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 149.987377][ T9841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.969'. [ 150.030272][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.191982][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 150.242909][ T9860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.973'. [ 150.274125][ T9863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.430454][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.460356][ T9871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.511642][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.673987][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.914977][ T9894] lo speed is unknown, defaulting to 1000 [ 151.469953][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.710990][ T9964] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 152.160176][ T9992] validate_nla: 62 callbacks suppressed [ 152.160194][ T9992] netlink: 'syz.3.1001': attribute type 6 has an invalid length. [ 152.334002][T10003] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 152.507197][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.946851][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 152.954909][ C0] lec:lec_tx_timeout: lec0 [ 152.959649][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 153.061950][T10048] bridge0: entered promiscuous mode [ 153.074936][T10048] macsec1: entered promiscuous mode [ 153.098315][T10048] syzkaller0: left promiscuous mode [ 153.113992][T10048] syzkaller0: left allmulticast mode [ 153.367570][T10061] netlink: 'syz.3.1014': attribute type 13 has an invalid length. [ 153.392006][T10061] netlink: 'syz.3.1014': attribute type 17 has an invalid length. [ 153.505081][T10075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1014'. [ 153.549262][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.578061][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.632759][T10058] bridge0: port 3(team0) entered disabled state [ 153.640451][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.836070][T10058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.073973][T10058] tipc: Resetting bearer [ 154.195014][T10061] bridge0: left promiscuous mode [ 154.233878][T10061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.259654][T10061] bridge0: port 3(team0) entered blocking state [ 154.266108][T10061] bridge0: port 3(team0) entered forwarding state [ 154.295055][T10061] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.408239][T10076] lo speed is unknown, defaulting to 1000 [ 154.444615][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1018'. [ 154.458969][ T167] bridge0: port 3(team0) entered disabled state [ 154.466305][ T8132] syz0: Port: 1 Link DOWN [ 154.483259][ T83] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.502785][ T83] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.518729][ T83] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.530489][ T83] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.546128][T10093] veth0: entered promiscuous mode [ 154.573425][ T83] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.587320][ T5928] net_ratelimit: 1 callbacks suppressed [ 154.587336][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.592909][ T83] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.630993][ T83] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.644138][ T83] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.654575][T10088] veth0: left promiscuous mode [ 154.700093][ T30] audit: type=1800 audit(1775429858.162:8): pid=10098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1019" name="memory.events" dev="tmpfs" ino=1081 res=0 errno=0 [ 154.756431][T10101] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 155.057884][T10104] nbd0: detected capacity change from 0 to 63 [ 155.133946][ T5823] block nbd0: Receive control failed (result -32) [ 155.133946][ T5826] block nbd0: Receive control failed (result -104) [ 155.448751][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1030'. [ 155.627137][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.651639][T10145] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.677439][T10146] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1033'. [ 155.700997][T10145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1033'. [ 155.848295][T10145] bond0: entered promiscuous mode [ 155.853363][T10145] bond_slave_0: entered promiscuous mode [ 155.859593][T10145] bond_slave_1: entered promiscuous mode [ 155.866548][T10145] bond0: left promiscuous mode [ 155.871972][T10145] bond_slave_0: left promiscuous mode [ 155.877801][T10145] bond_slave_1: left promiscuous mode [ 156.010346][T10155] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1035'. [ 156.046957][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 156.063726][T10161] netlink: 23 bytes leftover after parsing attributes in process `syz.4.1034'. [ 156.239986][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1040'. [ 156.253947][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1040'. [ 156.275911][T10171] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1040'. [ 156.317669][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 156.355977][T10173] lo speed is unknown, defaulting to 1000 [ 156.568314][T10186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.576861][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.592392][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.677341][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.328278][T10228] syzkaller0: entered promiscuous mode [ 157.333968][T10228] syzkaller0: entered allmulticast mode [ 157.343466][T10228] tipc: Enabled bearer , priority 0 [ 157.361622][T10227] tipc: Resetting bearer [ 157.421937][T10227] tipc: Disabling bearer [ 157.521080][T10236] netlink: 'syz.1.1058': attribute type 3 has an invalid length. [ 157.708080][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.877756][T10251] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20001 [ 157.902857][T10249] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.966881][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 157.974935][ C0] lec:lec_tx_timeout: lec0 [ 157.979559][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 158.315597][T10264] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 158.324154][T10264] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 158.718355][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.742163][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.765785][T10285] lo speed is unknown, defaulting to 1000 [ 158.797547][T10296] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 158.826782][T10298] tipc: Enabling of bearer rejected, failed to enable media [ 158.985042][T10307] xt_hashlimit: size too large, truncated to 1048576 [ 159.114517][T10314] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 159.192450][T10319] syzkaller1: entered promiscuous mode [ 159.198202][T10319] syzkaller1: entered allmulticast mode [ 159.629363][ T9] net_ratelimit: 5 callbacks suppressed [ 159.629381][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.787656][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.021111][T10360] lo speed is unknown, defaulting to 1000 [ 160.267526][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.510340][T10383] __nla_validate_parse: 15 callbacks suppressed [ 160.510357][T10383] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1098'. [ 160.534220][T10382] bridge0: port 3(syz_tun) entered blocking state [ 160.540821][T10382] bridge0: port 3(syz_tun) entered listening state [ 160.560097][T10382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.827148][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.850832][T10389] team_slave_0: entered promiscuous mode [ 160.856900][T10389] team_slave_1: entered promiscuous mode [ 160.866263][T10389] vlan4: entered promiscuous mode [ 160.889071][T10389] team0: entered promiscuous mode [ 160.986689][T10394] netlink: 'syz.4.1106': attribute type 4 has an invalid length. [ 161.868098][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.984508][T10452] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1123'. [ 162.074589][ T8132] lo speed is unknown, defaulting to 1000 [ 162.094060][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.144478][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.217640][T10454] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 162.308077][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.337643][T10463] syzkaller0: entered promiscuous mode [ 162.343216][T10463] syzkaller0: entered allmulticast mode [ 162.561268][T10472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1131'. [ 162.605464][T10470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1130'. [ 162.670550][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.728828][T10480] 8021q: VLANs not supported on wg1 [ 162.799064][T10487] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1135'. [ 162.843992][T10489] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1137'. [ 162.888130][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1139'. [ 162.913444][T10489] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 162.986898][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 162.995036][ C0] lec:lec_tx_timeout: lec0 [ 162.999819][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 163.142460][T10512] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1144'. [ 163.269325][T10521] netlink: 'syz.1.1147': attribute type 3 has an invalid length. [ 163.277405][T10521] netlink: 'syz.1.1147': attribute type 2 has an invalid length. [ 163.285195][T10521] netlink: 'syz.1.1147': attribute type 2 has an invalid length. [ 163.295877][T10523] netlink: 'syz.2.1148': attribute type 1 has an invalid length. [ 163.451712][T10533] syzkaller0: entered promiscuous mode [ 163.459848][T10533] syzkaller0: entered allmulticast mode [ 163.478236][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1152'. [ 163.576406][T10546] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1154'. [ 163.587810][T10543] veth5: entered promiscuous mode [ 163.629401][T10543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.650744][T10543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.686020][T10543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.705543][T10543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.969901][T10566] netlink: 'syz.1.1160': attribute type 4 has an invalid length. [ 163.979659][ T5936] lo speed is unknown, defaulting to 1000 [ 163.985403][ T5936] syz2: Port: 1 Link DOWN [ 163.998525][T10570] vxcan0: entered allmulticast mode [ 164.039303][ T5936] lo speed is unknown, defaulting to 1000 [ 164.051646][T10581] netlink: 'syz.4.1161': attribute type 1 has an invalid length. [ 164.067940][ T5936] syz2: Port: 1 Link ACTIVE [ 164.125848][T10585] netlink: 'syz.2.1164': attribute type 21 has an invalid length. [ 164.529643][T10612] bond5: entered promiscuous mode [ 164.535196][T10612] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.571359][T10612] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.609599][T10612] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 164.645959][T10612] bond5: (slave sit1): Error -95 calling set_mac_address [ 164.756535][T10621] net_ratelimit: 445 callbacks suppressed [ 164.756545][T10621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.817313][T10625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.987218][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.012540][T10637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.174310][T10644] openvswitch: netlink: IP tunnel dst address not specified [ 165.197312][T10638] tipc: Enabled bearer , priority 0 [ 165.214290][T10646] netlink: 'syz.4.1184': attribute type 1 has an invalid length. [ 165.223818][T10646] netlink: 'syz.4.1184': attribute type 2 has an invalid length. [ 165.344751][T10650] tipc: Resetting bearer [ 165.365240][T10638] tipc: Resetting bearer [ 165.593878][T10672] netlink: 'syz.3.1189': attribute type 2 has an invalid length. [ 165.678684][T10674] atomic_op ffff888026065998 conn xmit_atomic 0000000000000000 [ 165.697003][T10675] atomic_op ffff888026062198 conn xmit_atomic 0000000000000000 [ 165.707162][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.725350][T10677] __nla_validate_parse: 8 callbacks suppressed [ 165.725367][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1192'. [ 165.774902][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1192'. [ 165.923254][T10696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1196'. [ 165.972021][T10696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1196'. [ 166.005802][T10693] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1196'. [ 166.027054][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.059636][T10693] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1196'. [ 166.098214][T10696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1196'. [ 166.118286][T10696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1196'. [ 166.164022][T10693] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1196'. [ 166.176007][T10693] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1196'. [ 166.226497][ T980] tipc: Node number set to 3863866024 [ 166.422447][T10714] dummy0: entered promiscuous mode [ 166.440534][T10714] team0: Port device dummy0 added [ 166.511894][T10720] dummy0: left promiscuous mode [ 166.535720][T10720] team0: Port device dummy0 removed [ 166.544876][T10720] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 166.995355][T10740] lo speed is unknown, defaulting to 1000 [ 167.027016][T10733] geneve0: entered promiscuous mode [ 167.069974][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.056400][ T8132] IPVS: starting estimator thread 0... [ 168.108364][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.147042][T10797] IPVS: using max 33 ests per chain, 79200 per kthread [ 168.464506][T10810] validate_nla: 133 callbacks suppressed [ 168.464523][T10810] netlink: 'syz.1.1222': attribute type 5 has an invalid length. [ 168.628034][T10827] x_tables: duplicate underflow at hook 2 [ 168.667790][T10833] openvswitch: netlink: IP tunnel dst address not specified [ 168.719487][ T5823] block nbd1: Receive control failed (result -1) [ 168.826841][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 168.834878][ C0] lec:lec_tx_timeout: lec0 [ 168.839654][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 169.035702][T10855] vlan3: entered allmulticast mode [ 169.046222][T10855] bond0: entered allmulticast mode [ 169.052569][T10855] bond_slave_0: entered allmulticast mode [ 169.064118][T10855] bond_slave_1: entered allmulticast mode [ 169.070614][T10855] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 169.093664][T10852] lo speed is unknown, defaulting to 1000 [ 169.100787][T10857] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 169.192977][T10855] netlink: 'syz.0.1235': attribute type 14 has an invalid length. [ 169.239006][T10874] netlink: 'syz.1.1237': attribute type 1 has an invalid length. [ 169.373329][T10876] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 169.588756][T10881] lo speed is unknown, defaulting to 1000 [ 169.867517][ T9] net_ratelimit: 2 callbacks suppressed [ 169.867534][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.006152][T10883] [ 170.008509][T10883] ====================================================== [ 170.015515][T10883] WARNING: possible circular locking dependency detected [ 170.022519][T10883] syzkaller #0 Not tainted [ 170.026907][T10883] ------------------------------------------------------ [ 170.033903][T10883] syz.4.1241/10883 is trying to acquire lock: [ 170.039952][T10883] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 170.049276][T10883] [ 170.049276][T10883] but task is already holding lock: [ 170.056636][T10883] ffff88807a4c0538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 170.065866][T10883] [ 170.065866][T10883] which lock already depends on the new lock. [ 170.065866][T10883] [ 170.076267][T10883] [ 170.076267][T10883] the existing dependency chain (in reverse order) is: [ 170.085268][T10883] [ 170.085268][T10883] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 170.092807][T10883] __mutex_lock+0x19f/0x1300 [ 170.097924][T10883] __ipv6_dev_mc_inc+0x4e/0xa50 [ 170.103282][T10883] __ipv6_sock_mc_join+0x503/0x750 [ 170.108899][T10883] do_ipv6_mcast_group_source+0x3df/0x4c0 [ 170.115125][T10883] do_ipv6_setsockopt+0x16e9/0x3150 [ 170.120828][T10883] ipv6_setsockopt+0x59/0x170 [ 170.126008][T10883] do_sock_setsockopt+0x17c/0x1b0 [ 170.131538][T10883] __x64_sys_setsockopt+0x13d/0x1b0 [ 170.137243][T10883] do_syscall_64+0x14d/0xf80 [ 170.142337][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.148753][T10883] [ 170.148753][T10883] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 170.156461][T10883] lock_sock_nested+0x41/0x100 [ 170.161729][T10883] inet_shutdown+0x6a/0x390 [ 170.166735][T10883] nbd_mark_nsock_dead+0x2e9/0x560 [ 170.172374][T10883] recv_work+0x1c7f/0x1d90 [ 170.177293][T10883] process_scheduled_works+0xb6e/0x18c0 [ 170.183340][T10883] worker_thread+0xa53/0xfc0 [ 170.188438][T10883] kthread+0x388/0x470 [ 170.193022][T10883] ret_from_fork+0x51e/0xb90 [ 170.198142][T10883] ret_from_fork_asm+0x1a/0x30 [ 170.203416][T10883] [ 170.203416][T10883] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 170.211040][T10883] __mutex_lock+0x19f/0x1300 [ 170.216136][T10883] nbd_queue_rq+0x37b/0x1100 [ 170.221235][T10883] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 170.227302][T10883] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 170.234134][T10883] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 170.240621][T10883] blk_mq_run_hw_queue+0x348/0x4f0 [ 170.246244][T10883] blk_mq_dispatch_list+0xd16/0xe10 [ 170.251950][T10883] blk_mq_flush_plug_list+0x48d/0x570 [ 170.257832][T10883] __blk_flush_plug+0x3ed/0x4d0 [ 170.263190][T10883] __submit_bio+0x28d/0x580 [ 170.268198][T10883] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 170.274335][T10883] block_read_full_folio+0x599/0x830 [ 170.280125][T10883] filemap_read_folio+0x137/0x3b0 [ 170.285653][T10883] do_read_cache_folio+0x358/0x590 [ 170.291275][T10883] read_part_sector+0xb6/0x2b0 [ 170.296543][T10883] adfspart_check_ICS+0xa5/0xa40 [ 170.301985][T10883] bdev_disk_changed+0x7ba/0x1550 [ 170.307512][T10883] blkdev_get_whole+0x380/0x510 [ 170.312867][T10883] bdev_open+0x31e/0xd30 [ 170.317612][T10883] blkdev_open+0x470/0x610 [ 170.322534][T10883] do_dentry_open+0x785/0x14e0 [ 170.327807][T10883] vfs_open+0x3b/0x340 [ 170.332389][T10883] path_openat+0x2e08/0x3860 [ 170.337480][T10883] do_file_open+0x23e/0x4a0 [ 170.342487][T10883] do_sys_openat2+0x113/0x200 [ 170.347683][T10883] __x64_sys_openat+0x138/0x170 [ 170.353169][T10883] do_syscall_64+0x14d/0xf80 [ 170.358277][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.364678][T10883] [ 170.364678][T10883] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 170.371866][T10883] __mutex_lock+0x19f/0x1300 [ 170.376967][T10883] nbd_queue_rq+0xc6/0x1100 [ 170.381988][T10883] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 170.388066][T10883] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 170.394907][T10883] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 170.401396][T10883] blk_mq_run_hw_queue+0x348/0x4f0 [ 170.407020][T10883] blk_mq_dispatch_list+0xd16/0xe10 [ 170.412749][T10883] blk_mq_flush_plug_list+0x48d/0x570 [ 170.418630][T10883] __blk_flush_plug+0x3ed/0x4d0 [ 170.423998][T10883] __submit_bio+0x28d/0x580 [ 170.429019][T10883] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 170.435163][T10883] block_read_full_folio+0x599/0x830 [ 170.440959][T10883] filemap_read_folio+0x137/0x3b0 [ 170.446491][T10883] do_read_cache_folio+0x358/0x590 [ 170.452107][T10883] read_part_sector+0xb6/0x2b0 [ 170.457380][T10883] adfspart_check_ICS+0xa5/0xa40 [ 170.462844][T10883] bdev_disk_changed+0x7ba/0x1550 [ 170.468374][T10883] blkdev_get_whole+0x380/0x510 [ 170.473728][T10883] bdev_open+0x31e/0xd30 [ 170.478481][T10883] blkdev_open+0x470/0x610 [ 170.483418][T10883] do_dentry_open+0x785/0x14e0 [ 170.488691][T10883] vfs_open+0x3b/0x340 [ 170.493268][T10883] path_openat+0x2e08/0x3860 [ 170.498374][T10883] do_file_open+0x23e/0x4a0 [ 170.503397][T10883] do_sys_openat2+0x113/0x200 [ 170.508580][T10883] __x64_sys_openat+0x138/0x170 [ 170.513971][T10883] do_syscall_64+0x14d/0xf80 [ 170.519066][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.525463][T10883] [ 170.525463][T10883] -> #3 (set->srcu){.+.+}-{0:0}: [ 170.532563][T10883] __synchronize_srcu+0xca/0x300 [ 170.538005][T10883] elevator_switch+0x1e8/0x7a0 [ 170.543271][T10883] elevator_change+0x2cc/0x450 [ 170.548537][T10883] elevator_set_default+0x36c/0x430 [ 170.554236][T10883] blk_register_queue+0x366/0x430 [ 170.559778][T10883] __add_disk+0x677/0xd50 [ 170.564637][T10883] add_disk_fwnode+0xfb/0x480 [ 170.569826][T10883] nbd_dev_add+0x72c/0xb50 [ 170.574749][T10883] nbd_init+0x168/0x1f0 [ 170.579426][T10883] do_one_initcall+0x250/0x8d0 [ 170.584695][T10883] do_initcall_level+0x104/0x190 [ 170.590140][T10883] do_initcalls+0x59/0xa0 [ 170.594979][T10883] kernel_init_freeable+0x2a6/0x3e0 [ 170.600682][T10883] kernel_init+0x1d/0x1d0 [ 170.605511][T10883] ret_from_fork+0x51e/0xb90 [ 170.610603][T10883] ret_from_fork_asm+0x1a/0x30 [ 170.615878][T10883] [ 170.615878][T10883] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 170.623673][T10883] __mutex_lock+0x19f/0x1300 [ 170.628772][T10883] elevator_change+0x1b3/0x450 [ 170.634056][T10883] elevator_set_none+0xb5/0x140 [ 170.639412][T10883] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 170.645722][T10883] nbd_start_device+0x17f/0xb10 [ 170.651075][T10883] nbd_genl_connect+0x165b/0x1cf0 [ 170.656609][T10883] genl_family_rcv_msg_doit+0x22a/0x330 [ 170.662661][T10883] genl_rcv_msg+0x61c/0x7a0 [ 170.667671][T10883] netlink_rcv_skb+0x232/0x4b0 [ 170.672962][T10883] genl_rcv+0x28/0x40 [ 170.677450][T10883] netlink_unicast+0x80f/0x9b0 [ 170.682721][T10883] netlink_sendmsg+0x813/0xb40 [ 170.687989][T10883] ____sys_sendmsg+0x972/0x9f0 [ 170.693264][T10883] ___sys_sendmsg+0x2a5/0x360 [ 170.698448][T10883] __x64_sys_sendmsg+0x1bd/0x2a0 [ 170.704327][T10883] do_syscall_64+0x14d/0xf80 [ 170.709426][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.715823][T10883] [ 170.715823][T10883] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 170.724405][T10883] blk_alloc_queue+0x546/0x680 [ 170.729673][T10883] __blk_mq_alloc_disk+0x197/0x390 [ 170.735294][T10883] nbd_dev_add+0x499/0xb50 [ 170.740229][T10883] nbd_init+0x168/0x1f0 [ 170.744885][T10883] do_one_initcall+0x250/0x8d0 [ 170.750155][T10883] do_initcall_level+0x104/0x190 [ 170.755597][T10883] do_initcalls+0x59/0xa0 [ 170.760432][T10883] kernel_init_freeable+0x2a6/0x3e0 [ 170.766138][T10883] kernel_init+0x1d/0x1d0 [ 170.770967][T10883] ret_from_fork+0x51e/0xb90 [ 170.776061][T10883] ret_from_fork_asm+0x1a/0x30 [ 170.781342][T10883] [ 170.781342][T10883] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 170.788557][T10883] __lock_acquire+0x15a5/0x2cf0 [ 170.793916][T10883] lock_acquire+0xf0/0x2e0 [ 170.798840][T10883] fs_reclaim_acquire+0x71/0x100 [ 170.804299][T10883] __kmalloc_cache_noprof+0x40/0x660 [ 170.810101][T10883] __ipv6_dev_mc_inc+0x44f/0xa50 [ 170.815574][T10883] pndisc_constructor+0xe0/0x150 [ 170.821024][T10883] pneigh_create+0x246/0x4b0 [ 170.826124][T10883] neigh_add+0x6ea/0xf70 [ 170.830875][T10883] rtnetlink_rcv_msg+0x77e/0xbe0 [ 170.836316][T10883] netlink_rcv_skb+0x232/0x4b0 [ 170.841581][T10883] netlink_unicast+0x80f/0x9b0 [ 170.846866][T10883] netlink_sendmsg+0x813/0xb40 [ 170.852129][T10883] ____sys_sendmsg+0x972/0x9f0 [ 170.857397][T10883] ___sys_sendmsg+0x2a5/0x360 [ 170.862580][T10883] __x64_sys_sendmsg+0x1bd/0x2a0 [ 170.868030][T10883] do_syscall_64+0x14d/0xf80 [ 170.873133][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.879527][T10883] [ 170.879527][T10883] other info that might help us debug this: [ 170.879527][T10883] [ 170.889732][T10883] Chain exists of: [ 170.889732][T10883] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 170.889732][T10883] [ 170.902308][T10883] Possible unsafe locking scenario: [ 170.902308][T10883] [ 170.909739][T10883] CPU0 CPU1 [ 170.915090][T10883] ---- ---- [ 170.920433][T10883] lock(&idev->mc_lock); [ 170.924744][T10883] lock(sk_lock-AF_INET6); [ 170.931746][T10883] lock(&idev->mc_lock); [ 170.938574][T10883] lock(fs_reclaim); [ 170.942535][T10883] [ 170.942535][T10883] *** DEADLOCK *** [ 170.942535][T10883] [ 170.950655][T10883] 3 locks held by syz.4.1241/10883: [ 170.955829][T10883] #0: ffffffff8fbca488 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 170.965208][T10883] #1: ffffffff8fcf5540 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x4a/0x4b0 [ 170.974670][T10883] #2: ffff88807a4c0538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 170.984303][T10883] [ 170.984303][T10883] stack backtrace: [ 170.990173][T10883] CPU: 0 UID: 0 PID: 10883 Comm: syz.4.1241 Not tainted syzkaller #0 PREEMPT(full) [ 170.990186][T10883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 170.990193][T10883] Call Trace: [ 170.990198][T10883] [ 170.990204][T10883] dump_stack_lvl+0xe8/0x150 [ 170.990220][T10883] print_circular_bug+0x2e1/0x300 [ 170.990250][T10883] check_noncircular+0x12e/0x150 [ 170.990281][T10883] __lock_acquire+0x15a5/0x2cf0 [ 170.990297][T10883] ? trace_contention_end+0x3d/0x150 [ 170.990306][T10883] ? __mutex_lock+0x319/0x1300 [ 170.990321][T10883] ? kernel_text_address+0xa5/0xe0 [ 170.990334][T10883] lock_acquire+0xf0/0x2e0 [ 170.990346][T10883] ? __kmalloc_cache_noprof+0x40/0x660 [ 170.990359][T10883] ? in6_dev_get+0x1a/0x290 [ 170.990373][T10883] fs_reclaim_acquire+0x71/0x100 [ 170.990385][T10883] ? __kmalloc_cache_noprof+0x40/0x660 [ 170.990396][T10883] __kmalloc_cache_noprof+0x40/0x660 [ 170.990407][T10883] ? __ipv6_dev_mc_inc+0x44f/0xa50 [ 170.990421][T10883] __ipv6_dev_mc_inc+0x44f/0xa50 [ 170.990436][T10883] pndisc_constructor+0xe0/0x150 [ 170.990448][T10883] ? __pfx_pndisc_constructor+0x10/0x10 [ 170.990460][T10883] ? pneigh_create+0x15b/0x4b0 [ 170.990471][T10883] pneigh_create+0x246/0x4b0 [ 170.990482][T10883] neigh_add+0x6ea/0xf70 [ 170.990497][T10883] ? __pfx_neigh_add+0x10/0x10 [ 170.990514][T10883] ? __pfx_neigh_add+0x10/0x10 [ 170.990526][T10883] rtnetlink_rcv_msg+0x77e/0xbe0 [ 170.990538][T10883] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 170.990549][T10883] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.990559][T10883] ? ref_tracker_free+0x693/0x840 [ 170.990569][T10883] ? __copy_skb_header+0xa3/0x4a0 [ 170.990583][T10883] ? __pfx_ref_tracker_free+0x10/0x10 [ 170.990594][T10883] netlink_rcv_skb+0x232/0x4b0 [ 170.990606][T10883] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.990617][T10883] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.990629][T10883] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.990641][T10883] netlink_unicast+0x80f/0x9b0 [ 170.990652][T10883] ? __pfx_netlink_unicast+0x10/0x10 [ 170.990661][T10883] ? netlink_sendmsg+0x650/0xb40 [ 170.990671][T10883] ? skb_put+0x11b/0x210 [ 170.990683][T10883] netlink_sendmsg+0x813/0xb40 [ 170.990695][T10883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.990707][T10883] ? aa_sock_msg_perm+0xf1/0x1b0 [ 170.990723][T10883] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.990736][T10883] ____sys_sendmsg+0x972/0x9f0 [ 170.990749][T10883] ? futex_unqueue+0x211/0x240 [ 170.990762][T10883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.990779][T10883] ? import_iovec+0x73/0xa0 [ 170.990790][T10883] ___sys_sendmsg+0x2a5/0x360 [ 170.990804][T10883] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.990819][T10883] ? futex_wait+0x29a/0x380 [ 170.990837][T10883] ? __fget_files+0x2a/0x420 [ 170.990846][T10883] ? __fget_files+0x3a0/0x420 [ 170.990856][T10883] __x64_sys_sendmsg+0x1bd/0x2a0 [ 170.990870][T10883] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.990885][T10883] ? rcu_is_watching+0x15/0xb0 [ 170.990901][T10883] do_syscall_64+0x14d/0xf80 [ 170.990914][T10883] ? trace_irq_disable+0x3b/0x150 [ 170.990923][T10883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.990932][T10883] ? clear_bhb_loop+0x40/0x90 [ 170.990943][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.990953][T10883] RIP: 0033:0x7f2f0159c819 [ 170.990964][T10883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.990973][T10883] RSP: 002b:00007f2f024bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.990984][T10883] RAX: ffffffffffffffda RBX: 00007f2f01816090 RCX: 00007f2f0159c819 [ 170.990991][T10883] RDX: 0000000000000004 RSI: 0000200000000940 RDI: 0000000000000004 [ 170.990998][T10883] RBP: 00007f2f01632c91 R08: 0000000000000000 R09: 0000000000000000 [ 170.991004][T10883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.991010][T10883] R13: 00007f2f01816128 R14: 00007f2f01816090 R15: 00007ffe44ee0bb8 [ 170.991026][T10883] [ 171.376797][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.788109][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.429327][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.467249][ T8132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.846866][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 173.854860][ C0] lec:lec_tx_timeout: lec0 [ 173.859420][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 174.507231][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.827476][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.557071][ T8131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.587182][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.628924][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.866986][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.668916][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.866863][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 178.874897][ C0] lec:lec_tx_timeout: lec0 [ 178.879497][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 179.467169][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.717256][ T8131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog