last executing test programs: 3m27.966234802s ago: executing program 1 (id=5479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0) readv(r0, &(0x7f0000001740)=[{&(0x7f00000011c0)=""/253, 0xfd}], 0x1) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)='s', 0x1}], 0x1, 0x2) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000bc0)={0x0, 0x5, 0x2bb3, 0xe3, 0x94b, 0x7fff}, &(0x7f0000000c00)=0x14) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3m27.780566399s ago: executing program 1 (id=5483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000090900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0200000001010000000000000a00000904000000000000000000000400000000040000000000000f030000000000000061"], 0x0, 0x52}, 0x20) 3m27.590662976s ago: executing program 1 (id=5485): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0xba, 0xce02cd}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0xdca7, @private1, 0x6}}, 0x9, 0x81, 0xffffffff, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800452eb9c1f75a1ac7ef2f9078ac141408e0003707000065580401907800d8621b002c17a9"], 0x0) 3m27.453742511s ago: executing program 1 (id=5489): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000005f00)=[{{&(0x7f0000000280)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x19}]}}}], 0x18}}], 0x1, 0x4880) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) close(r0) 3m27.206507348s ago: executing program 1 (id=5493): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x4c, 0x2e, 0x17, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x38, 0x11, 0x0, 0x1, [@nested={0x33, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @typed={0x8, 0x75, 0x0, 0x0, @fd=r0}]}]}]}, 0x4c}], 0x1, 0x0, 0x0, 0x4004084}, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/uts\x00') r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r7 = getpid() write$cgroup_pid(r6, &(0x7f0000000880)=r7, 0x12) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001c80)={0x0, 0x0, 0x0}, &(0x7f0000001cc0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = gettid() r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000010000304f9fffffffedbdf2500007400", @ANYRES32=r9, @ANYBLOB="049c01000750050008001300", @ANYRES32=r10], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r12 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r13}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001d00)={0x0, 0x0, 0x0}, &(0x7f0000001d40)=0xc) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r17 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r17, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r18, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000006fffff30800000022050000f8ff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r20 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r19, &(0x7f0000000380), &(0x7f00000003c0)=@tcp=r20, 0x3}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0xc, &(0x7f0000001c00)=[{&(0x7f0000000480)={0x1010, 0x11, 0x10, 0x70bd29, 0x25dfdbfe, "", [@generic="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"]}, 0x1010}, {&(0x7f00000000c0)={0xc8, 0x20, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@nested={0xb8, 0x13b, 0x0, 0x1, [@typed={0x4, 0x40, 0x0, 0x0, @binary}, @generic="b98c97849f0a2c44157f4d2c743b43cc3b78b0d32da93299e7cedd141d566f62f3f7195f54289eb7bc8916026092e97d9a3611cd99c8bd4ec44b3d730bb3ff328a", @nested={0x4, 0x109}, @generic="c6d6414e499a0eac64ca99238bb647929e071154603da5f1bc099264471978080672b8c5b87315775825e69aafaba36900be50045320b3f7d8386f005e210c57609cd8c4059420e7fa0aaa56c0c4b943d1a6a9abaa1460d6d88fc2aa4bee0e0a6e6133ca5b4a129e3c0283"]}]}, 0xc8}, {&(0x7f0000000240)={0x34, 0x3a, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0xec, 0x0, 0x0, @uid}, @generic="650ae2128875a059c9737bbe54ec54", @nested={0xc, 0x46, 0x0, 0x1, [@typed={0x8, 0x49, 0x0, 0x0, @u32=0x1}]}]}, 0x34}, {&(0x7f00000014c0)={0x3f8, 0x2c, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x2f, 0x5e, 0x0, 0x1, [@nested={0x4, 0x47}, @nested={0x4, 0x99}, @nested={0x4, 0x126}, @generic="d1f5fa4cb98b823473d0e38d0dcda89e757981f2d218f1780bf326039d58ba"]}, @nested={0xeb, 0x4a, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0x8, 0xcf, 0x0, 0x0, @pid}, @generic="2a30a9e10ddeec6a08798ebf18a981563be1774d72d3a838154eb8e51c40e24113344929de5fdd7d9aef2b3faa2c363048bb73e6519a36ed297c32842bbf9ec864561a4c1018f432ae7478478f06b56a86f7e16a8f7af5f14e5f62316270b62d7e1cdb0bbf208f760e13afdff993264ef4bd0c1034501e89a49874eba2d0e8b04c9915005fd89736d1f2bfa86843", @generic="78641121b59b5fd104d3b7295cded232dba19dbc3526784561c11387851426ac615b8ed97063c5aaa82635dfe85785764158ee44d2ead65c1288a01723cf08305ff71c28e4e68a41c941ea4edb"]}, @nested={0x101, 0xeb, 0x0, 0x1, [@generic="e75f854b213228007b9958ee6ddaf69d185fb4c003a71a40a722b12dedbabd9bdc2c59f19730a361a7c55102e1619f755ac75425c03ba0c751c6f45b30ed8628e57b61ee9874d121ede4f3fd6595f9d6956af1f07419621d91fcaf97c3020cf42f77aeadd3d2b84d166b6307d0eb77fcd856feb312feba7e3c004c81498118c331e61e42c0ad3bbb916834859b7e927f9d0d13a8dc5a22df6b88", @generic="f3f98bbbb2e0e39cbe9a6dda6f3ea118e37b3448c20c1e620bcd51660b7c0051bbabb316f66cda16fa47754e053d38ff7bc3294da6556848cf37ab1b55549339d8260eaa09e9882b71ca0067a1fb5e70a69f280d20665ce166145d451d006d39dcb1f0"]}, @generic="366682ff5a490e4652d28399d0a2db7494e890139ace7abbea01e0817e86b5fdf4d4cc2a5624fed148ca6884cbce6a19237579983e5df507643ccd140a5bba15410ef387d1c63c0ad951cde531ce4056a021e0cda56929688accd30ddbfa03a36c25911af8ad4bcc7af134a706d9de7cb4c52b02d66b815eaa8fa55aac3995894b2d52e43961cf01663504142732770ad61a1a6ee6ce75c6be3cabd43e5b644f407479a176c59c9577254b597a4439b60aaa86cea1ed16912a0b3afe2c921543765dcb5bfcca5fb3ec0e24cc24ebf6f1050695de7c4c4bae5abd", @typed={0x14, 0xb5, 0x0, 0x0, @ipv6=@loopback}, @nested={0xcf, 0x2a, 0x0, 0x1, [@generic="2ad9fed8cc50304e086bb807b4d545783512e07cd2710d93da4d99b8f62fc877f29ca878a0abcf59d95798bf7c0436026d58f4d84476a1f0c9e93807f5c70eeb38a7b700b337867260ee388cfc2d61354c5a5f227f2637f2b2179adb006082f6672d07191a11d6a5c0b15331520168571c", @typed={0x8, 0x155, 0x0, 0x0, @u32=0x4}, @generic="47e6670867561e8d989e0a81de5b8b7c05b8cc20d40457fa7f6c7436509df34740694f562a4bb16602bfa6482bc4fe0d6c4b646e9c53a69dc4b375c76dd270283939", @nested={0x4, 0xc8}, @typed={0x8, 0x31, 0x0, 0x0, @u32=0x5}, @typed={0x4, 0x1e}]}, @nested={0x8, 0x132, 0x0, 0x1, [@nested={0x4, 0xc2}]}]}, 0x3f8}, {&(0x7f00000018c0)={0x2d0, 0x1c, 0x8, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x3, 0x0, 0x0, @uid}, @typed={0x8, 0xc1, 0x0, 0x0, @uid}, @typed={0x8, 0x59, 0x0, 0x0, @fd=r0}, @nested={0xc, 0xa, 0x0, 0x1, [@nested={0x4, 0x1f}, @nested={0x4, 0x30}]}, @nested={0x18, 0x142, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @pid=r2}, @typed={0xc, 0x53, 0x0, 0x0, @u64=0x6c}]}, @typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="fff22eead6e00e97354a3d72e14514fdae51c0ef317e7d82ad8de92b21aea365a5bc6aea8049c8bdc8b6931702b620c487908feac0a1aa964cc55ca0c125026423633b09e9b6c96f70fae2739c38bb84378c48592ddbb2480aac24a16d1ad331c3a71f4aa9e1eaec0c56b8afe0eed1d78b6ab1dbb65022c899cd5241cad05971adb0d87decb0c5c163f2963c16c768cd05d40dbe693b82d301046bf9424b6b8cb9", @nested={0x18, 0xb7, 0x0, 0x1, [@typed={0x14, 0x110, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @nested={0x1bf, 0x4, 0x0, 0x1, [@generic="20d25a11daf7a836a81d92060aaee8d0ed7a063784bc8d40bedc03e529e6cbb84fe2b719b3f940530ddd576a99bd233e570b9eb8bee2b01dec51285b3c3348ba1ff079a8491ae6aaaf469e59", @generic="33eed101a9b660a1ea0ec457c91254de2309f56d4bf673cfb3a0751debb141e5e3cb3080772a8c0d792c70d0531a4f40a62f156c1a765f344d2dbcb2a7c2bdd71a4f680d42705d558f8ec10525c50e86dcc7f598c2d050fa1e0e5508eef0f80de0ae8ed9e041edaee9e6819b8ca2c45a38c6883275bcc0997d85e61873eb14ee1d7f18d81a426e98642dcd1a5dc774b75e2074d5c22b851fa8bee0a1b5c28ebfeec1ab91abc0e6b775798571cb4843e05c2045863e986f8ce5c849938dfaad9bc9df71609fde56d347daceeee012383ab829ea794e60bff9ec30835d0bd265be1b7e9d9bfdc411cc08ea1a44b73e6dd49121e63fe9b86f", @typed={0x8, 0x13a, 0x0, 0x0, @str='%/)\x00'}, @generic="50e3d8578f8a00daff5f0b9bb5d5aa7641024486f892c8f6b5be1b503f38df824e7a6e44d0c9fc0804a52e667b9e22d6e1a6214356f1576dcb8378fa248807d1d5c9a029fc73efdbd73d1cab304674b1ec82835f83421a19b7e7c4e820f1a719", @nested={0x4, 0x6e}, @typed={0x4, 0x2c}, @typed={0x8, 0x1d, 0x0, 0x0, @u32=0xfff}]}]}, 0x2d0}, {&(0x7f0000000300)={0x18, 0x17, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x112, 0x0, 0x0, @pid=r3}]}, 0x18}, {&(0x7f0000001bc0)={0x18, 0x2d, 0x200, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x7, 0x0, 0x0, @pid=r4}]}, 0x18}], 0x7, &(0x7f0000001d80)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, r13, r14}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r15, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r20, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0xc0, 0x4}, 0x4040011) 3m26.674687421s ago: executing program 1 (id=5503): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c000018003780130003007172283414f6bba91973"], 0x2c}}, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x5, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) 2m59.966199367s ago: executing program 32 (id=5503): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c000018003780130003007172283414f6bba91973"], 0x2c}}, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x5, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) 2m24.943876299s ago: executing program 2 (id=5860): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113e00000000008510000002000000850000000500000095003300000000009500250500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x401) 2m24.801777062s ago: executing program 2 (id=5861): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000100000002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000014001680100001800c000300f4c8000077000000"], 0x48}}, 0x24040800) 2m24.684714049s ago: executing program 2 (id=5863): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x2, 'bond0\x00', {0x9}, 0x5}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r3, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0xc008}, 0x4008010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x2, 'bond0\x00', {0x9}, 0x5}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r3, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0xc008}, 0x4008010) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) 2m24.354665111s ago: executing program 2 (id=5865): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x29, 0x4, 0x4, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f00000002c0)=0x1, 0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x7, 0x0, 'vlan0\x00', 'veth0_to_team\x00', 'ip6gre0\x00', 'team0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x1a6) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r7, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0x1) writev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={r6, 0x7fffffff}, &(0x7f0000000200)=0x8) 2m24.046155438s ago: executing program 2 (id=5868): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, r2, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_UDP_DST={0x6}]}}]}, 0x4c}}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = epoll_create1(0x80000) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000140)) 2m23.806002726s ago: executing program 2 (id=5872): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000040)=@ethtool_rxfh={0x46, 0x7ad5d4dd, 0x9, 0x8, 0x1, "0ad6c8", 0xb5, [0x6, 0xe, 0x2, 0x4, 0x2, 0x83, 0x6ae, 0x800, 0x7fff, 0x80000000]}}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syz_tun\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000007c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, r5}, 0x18) pipe(&(0x7f0000000700)) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$inet6(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="29908231db0794467111ed689e0866f8fe322148afedf55e8765ea2b41d85d17f55285f4d73a9d86028cd80c59a6cdc148a0092564ac6b191138381eb17a606bb994a0f41c36283dad5331e3eefc6692", 0x50}], 0x1}, 0x40000) recvmsg$qrtr(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ec0)=""/64, 0x40}, {&(0x7f0000000740)=""/178, 0xb2}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x2) 2m8.712088912s ago: executing program 33 (id=5872): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000040)=@ethtool_rxfh={0x46, 0x7ad5d4dd, 0x9, 0x8, 0x1, "0ad6c8", 0xb5, [0x6, 0xe, 0x2, 0x4, 0x2, 0x83, 0x6ae, 0x800, 0x7fff, 0x80000000]}}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syz_tun\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000007c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, r5}, 0x18) pipe(&(0x7f0000000700)) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$inet6(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="29908231db0794467111ed689e0866f8fe322148afedf55e8765ea2b41d85d17f55285f4d73a9d86028cd80c59a6cdc148a0092564ac6b191138381eb17a606bb994a0f41c36283dad5331e3eefc6692", 0x50}], 0x1}, 0x40000) recvmsg$qrtr(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ec0)=""/64, 0x40}, {&(0x7f0000000740)=""/178, 0xb2}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x2) 48.216896994s ago: executing program 4 (id=6834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000003b80)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x0) 47.853514561s ago: executing program 4 (id=6839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0xffe0, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x41d808}]}}]}, 0x3c}}, 0x20040054) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x4) (rerun: 32) 47.381786515s ago: executing program 4 (id=6846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@hci={0x1f, 0x4788, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x5421, 0x110e22ffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}}, 0x4008014) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x2, 0x70bd2d, 0x25dfdbf4, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r5, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x2, 0x0, @l2={'eth', 0x3a, 'macvlan1\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 47.060797903s ago: executing program 4 (id=6851): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000100)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r1, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24) 46.838064947s ago: executing program 4 (id=6853): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xecd851, @mcast2, 0x3}, 0x1c) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x3, 0x2, 0x2, 0x10100, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xa}, 0x50) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pS \x00'}, 0x20) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000540)={r0, 0xa2, 0x3, 0xfffffffffffff19f}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pI4 \x00'}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000640)={r0, 0x7, 0x7, 0x1c}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x1c, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xb}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x100}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @generic={0x47, 0xb, 0xb, 0x64, 0x641}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000380)='GPL\x00', 0xb, 0x0, 0x0, 0x1e00, 0x24, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000400)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x3, 0x7e6, 0x5}, 0x10, 0x2f88b, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r5, r6, r7, r8, r9], &(0x7f0000000700)=[{0x3, 0x1, 0xd, 0x3}], 0x10, 0xfffffffd}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r9, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) splice(r5, &(0x7f00000008c0)=0x3, r9, &(0x7f0000000900), 0x9, 0xc) (async) write$cgroup_int(r8, &(0x7f0000000940)=0x20, 0x12) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000980)=0x1, 0x4) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000009c0)={0x57, 0x0}, 0x8) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a00)=r11, 0x4) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000a40)={r12}, 0x8) ioctl$FS_IOC_SETFSLABEL(r13, 0x41009432, &(0x7f0000000a80)="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") (async) recvmsg$unix(r13, &(0x7f0000000d00)={&(0x7f0000000b80), 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000c00)=""/152, 0x98}], 0x1}, 0x2000) (async) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000000d80), r0) sendmsg$GTP_CMD_GETPDP(r13, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x48, r14, 0x204, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4040) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000ec0), r8) (async) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000f00)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f0000001000)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001040)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e21, 0xa3, 0x4e20, 0x6, 0xc, 0x1c0, 0xa0, 0x33, r10, r15}, {0x800, 0x0, 0x3, 0x2, 0xffffffff, 0xcaa, 0x80, 0x7fffffffffffffff}, {0x6, 0x400, 0x0, 0x9}, 0x8, 0x6e6bb3, 0x2, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x3c}, 0xa, @in=@rand_addr=0x64010100, 0x0, 0x2, 0x3, 0x10, 0xef23aa8, 0x7, 0x9c}}, 0xe8) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000011c0)={0x0, 0x6}, 0x8) 44.15590797s ago: executing program 4 (id=6857): bpf$BPF_BTF_LOAD(0x12, &(0x7f000000abc0)={&(0x7f000000aa40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x5, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0x8}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x60, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9165}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x200000, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r9) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0x38, 0x3c, 0x0, @private0, @local, {[@hopopts={0x3b, 0x4, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x8, 0x61, 0x11, 0x63}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 29.086771939s ago: executing program 34 (id=6857): bpf$BPF_BTF_LOAD(0x12, &(0x7f000000abc0)={&(0x7f000000aa40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x5, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0x8}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x60, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9165}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x200000, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r9) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0x38, 0x3c, 0x0, @private0, @local, {[@hopopts={0x3b, 0x4, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x8, 0x61, 0x11, 0x63}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 17.06906412s ago: executing program 3 (id=7100): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3e6755ab, 0xc, 0x97c}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=@newtfilter={0x40, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x48c0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x9, 0x1}, {0x4, 0x10}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x4}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 16.602590536s ago: executing program 3 (id=7106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x18, r1, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) 16.368335129s ago: executing program 3 (id=7111): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000700000032490000ff"], 0x50) r0 = socket(0x10, 0x80002, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000023c0)=""/4111, 0x100f}], 0x1}}], 0x1, 0x26022, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e20, 0x3, @remote, 0x2}}, 0x5, 0x6, 0x4, 0x807, 0x8, 0x1, 0x87}, &(0x7f0000000200)=0x9c) 15.686685628s ago: executing program 3 (id=7120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000070000000000000900020000000000000004000800410073697700140033"], 0x38}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="080025bd7000fbdbdf251100000008000500070000001800018008000500010000000c0007000200000028000000080004000700000008000500000000000800060067040000080006000300000008000600f562000020000380140002006970365f76746930000000000000000008000100020000002c000280080004000008000008000700050000000800040000000100060002004e230000080006000500000008000500d80d0000"], 0xb0}, 0x1, 0x0, 0x0, 0x8400}, 0x20040010) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x24, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x3, 0x6, 0x2, 0x8, 0x1, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x77, &(0x7f0000000440)=""/119, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x6, 0xf, 0x1, 0x7fffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x1, 0x1, 0x1], &(0x7f0000000540)=[{0x0, 0x1, 0xc, 0x9}, {0x3, 0x3}, {0x1, 0x5, 0x7, 0x3}, {0x4, 0x1, 0xd, 0xc}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x6031, 0xffffffdd, 0xa}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x77, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 15.305626079s ago: executing program 3 (id=7123): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r2, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xe, 0x34, @random="4e65baf535c05caf9cd6"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac06}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, 0x0}, 0x494) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r2, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xe, 0x34, @random="4e65baf535c05caf9cd6"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac06}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, 0x0}, 0x494) (async) 12.76954949s ago: executing program 3 (id=7131): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_to_bond\x00', 0x8000}) (async, rerun: 64) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) recvmmsg(r3, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10122, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0}) (rerun: 32) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001b00)={{r2}, r4, 0x10, @unused=[0x1, 0x5, 0x7fffffffffffffff, 0x8], @subvolid=0x3}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xd, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0xffff, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) (async) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0xf, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x2f, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2e49c806a80c200000208060020001006d8b3aaaaaaaaaaaa1af1b30000000000000000000000d84fc8399d000000"], &(0x7f0000000180)={0x0, 0x4, [0x6b8, 0x876, 0x7, 0x192]}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0x400, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) (async) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r15, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 4.092970399s ago: executing program 6 (id=7228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x121000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x541b, &(0x7f00000002c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x1d4, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0xa0, 0x6c, 0x0, 0xee00}, {@in=@empty, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @tmpl={0x84, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x6c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x5, 0xfffffffc, 0x4}, {{@in=@empty, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x3500, 0x1, 0x0, 0x1, 0x2, 0xd726, 0x1}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.693755569s ago: executing program 0 (id=7234): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x2c, 0xa, 0x8005) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2712, &(0x7f00000193c0)=""/102394, &(0x7f0000000040)=0x18ffa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="60010000", @ANYRES16=r7, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x20040004}, 0x40400c0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000300)={r1, r4, 0x98c, 0x56, &(0x7f0000000100)="bbbe12f55411bf1c39b3813ac5623031ed4616fdf86c4accc6224c0e2f5d9cafa076772a07d1f8aa10dabd943a5d431d8c34194cd60a577d660cbf30ef18c60e7f1022cc2553f9dc3358819c46e5eb6cce9c665c78c8", 0x3, 0xab, 0xff, 0x1, 0x8, 0x2, 0x7ff, 'syz0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="08020000", @ANYRES16=r3, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x45}, 0x4000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xffffffffffffff71) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x427, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x504a3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xfff}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket(0x2c, 0xa, 0x8005) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket(0x15, 0x5, 0x0) (async) getsockopt(r4, 0x200000000114, 0x2712, &(0x7f00000193c0)=""/102394, &(0x7f0000000040)=0x18ffa) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="60010000", @ANYRES16=r7, @ANYBLOB="200029bd7000fedbdf250b0000001c00018008000b0073697000080009004900000008000b0073697000040001800c00028006000f000104000034000108b10d16000a000000060004004e21000008000b00736970000700060072720000080005000200000008000b00736970000c000180070006007368000024000280080008000800000008000800c701000008000800001000000800010003000000580003800600040009000000060007004e2100000600040003000000080003000100000008000500e0000001080001000000001308000500e000000114000600fe8000000000000000000000000000aa254c77867f0000010c00038005000800060000005800038014000200766c616e3100000000000000000000001400060000000000000000000000ffff640101020800030003000000060007004e23000008000500000000001400060000000000000000000000000000000000ffcd943f0df0c7437eb45978c2d91645ecdd363c3ecc4d4e66e24a344b429ab2547e273db910dd811c397a9591a45b093c42b9003559369d15bff9eaefefe2dc41c37f9d6e3411b9"], 0x160}, 0x1, 0x0, 0x0, 0x20040004}, 0x40400c0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000300)={r1, r4, 0x98c, 0x56, &(0x7f0000000100)="bbbe12f55411bf1c39b3813ac5623031ed4616fdf86c4accc6224c0e2f5d9cafa076772a07d1f8aa10dabd943a5d431d8c34194cd60a577d660cbf30ef18c60e7f1022cc2553f9dc3358819c46e5eb6cce9c665c78c8", 0x3, 0xab, 0xff, 0x1, 0x8, 0x2, 0x7ff, 'syz0\x00'}) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="08020000", @ANYRES16=r3, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x45}, 0x4000800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xffffffffffffff71) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x427, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x504a3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xfff}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) 1.693105454s ago: executing program 6 (id=7235): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) write(r0, &(0x7f0000000140)="410002000100e6", 0x7) 1.667259639s ago: executing program 5 (id=7236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000005000000000000000000711232000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000200000001000007000000000800010000000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xb162, 0x3, 0x6, 0x8040, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0xf}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f00000002c0)="fe0648ccbcf75cadb368f8e1366948b62f4a3837e5293a67aedf478a90607404099bc66a5e53ac6f69b19503744064b50dde22d4e314700b6ac8beb308f1abdc1d6428b29f63844ee011a71a644bde898cd03f13e48a0e16ed739d31f49bc236cbac7203f8ab9314eded28c5c1ff2b69e7992af644e36e2a3cf5ae31ecb3efa17837adb5552a90df3d9e4640b35f274040a66b8733c527c1500f20fd0587d47520f6ba", &(0x7f0000000500)=""/145, 0x4}, 0x20) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x3ff}]}, 0x2c}}, 0x40) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) 1.607032084s ago: executing program 7 (id=7237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) getsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = socket(0x15, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@gettaction={0x2c, 0x32, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.386177956s ago: executing program 0 (id=7238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x2, 0x1, 0x8000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc48c, 0x0, 0x0, 0x0, 0x7fffffff}, [@alu={0x7, 0x0, 0x5, 0xa, 0xb, 0x0, 0x8}, @generic={0x0, 0x2, 0x3, 0x401, 0x9}, @ldst={0x0, 0x3, 0x4, 0x0, 0x1, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x78, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000100)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xc, 0x100, 0x8f4}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[r5], &(0x7f0000000280)=[{0x2, 0x4, 0xc, 0x8}, {0x4, 0x3, 0x4, 0x6}, {0x3, 0x3, 0x9, 0x6}, {0x4, 0x4, 0x5, 0x6}, {0x0, 0x2, 0x3, 0x1}, {0x5, 0x5, 0x10, 0x7}, {0x5, 0x1, 0xa, 0xb}], 0x10, 0x97e}, 0x94) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x40) 1.363475252s ago: executing program 5 (id=7239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r2, 0x800, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x0) 1.315661484s ago: executing program 6 (id=7240): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56459, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x8f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom(r7, 0x0, 0x0, 0x40002062, 0x0, 0x0) sendto$inet6(r5, 0x0, 0xf00, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r4, 0x1ff, 0x8, 0xc66}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}, @TCA_FQ_FLOW_PLIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getchain={0x44, 0x66, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0x5}, {0x2, 0xd}, {0xf, 0x1}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8008015}, 0x22008850) 1.141837508s ago: executing program 7 (id=7241): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r3) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r7) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x24, r9, 0xbbc45a75e31f006f, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x174, r5, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x114, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2a0bd6b94e47446ede74338bda1cc47a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xf}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "169c712dba4bd04c7cc7c3820685bc87333e99fbd97933939337ae6e4e0425c8"}, @NL802154_KEY_ATTR_ID={0x98, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1d969c8eab5b46ca77a452e63cf1d182"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d60c556a75d789712df0c9809e614269"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x174}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x65}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffe62}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 1.125964546s ago: executing program 5 (id=7242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES8=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) accept$ax25(r1, &(0x7f0000000040)={{0x3, @netrom}, [@null, @netrom, @default, @bcast, @default, @bcast, @null]}, &(0x7f00000000c0)=0x48) close(r2) 1.005861192s ago: executing program 0 (id=7243): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x64, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x27dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xb}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x40}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e1}, 0x4008000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @broadcast}) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) (async) r10 = socket(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x200008c0) 781.590313ms ago: executing program 7 (id=7244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="d8b9af6b0000000014000300776c616e300000000099ecdaa00000000a0001"], 0x40}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10c6f7a0b5ec}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) sendmmsg(r2, &(0x7f0000000840)=[{{&(0x7f0000000200)=@isdn={0x22, 0xc, 0x3, 0xa7, 0x6}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="f3cc60004aaf7c36991333b3682ce1a5c1a6e7c4802d49d35360fe103368bdc292743cb9dbcecec9130e7cdb7da89ad6383721b7eac32acd67a84f9e5759a47a1c65b4c0376509271d05101f351b2c4075368ce593a77adba67fbcb1cd06aef68d30aa9ac4b380db31c344ef4a8cc3f81630461d5e7535892449cb962188ffd6e103be19c17604feee1fe9494c1ceed31d968d9bc2100421dc5800d2567826e872c9a40d0f880038c307c8fbaebf7ff85adbb48d6586712591cd97b450c5dc3cfed97360d7248333797b1f12", 0xcc}, {&(0x7f0000000380)="a87b47cfe6d6d198512ad83d6ac63a12d2cd294a919ff19e820d7b924dc9dc99deceffa9ce693acd00e7be2d284479b905d56f5b696ac7b11a588b6e1a2b384aa263addddb8cc3fb5bf85752e79a47e752af85ef875c73da5ec16cdfddbbd2e141bfbc48065943783facfed766beca08c44013077a0f78fb17ae57741cec987446bee6499c910456865666c994bc8691baeb9e5a75", 0x95}], 0x2, &(0x7f00000022c0)=[{0x88, 0x1, 0x4, "e603f2d3d3612dfc6a1480cd0621a64b03221e64aaf2df8ff91b22d986d860df25d6e84170883fc7ba0b2aa8a03c3744d206abc8937c03aed3228a5f961c46bff27ebc2fd0cc034f90f0dc3be0e3ba33b81817426083f6fab7056c84b354221361680606db95f4b11a8171ef06ad69dbe1c25d"}, {0xb0, 0x107, 0x8, "5bb4bada441ff4b00f60c1683914372f954c959908ef3da6fe12006f9abd2bd324e2cffdac94207bc4c486f484b7141f488c055ce79698cb5a12f5cc324a9187c771de4b568211d8a0bd7289f26018f8267b5c3b4e4bd12f1a03e40457510952f57cd255360595a38d594c06846567131ee6944c0e3af099891a31c19e2c5261d363daa2b318bbfff9a7a4fb31924c8caf9fdfc0a29c743b78459128"}, {0x88, 0x107, 0x9, "7c7e00f5c693e60e4d4b97a545d8d94046d5e1b26dd0b79953436f22826b85ef910d8daa77698c4270afacfec6947f3b69fed9faeb79d6778c77e9a83fc64d27f584893525d27a2a7d0ad984139a64cd8dded9cb00697c846e01fcb85a4d5fda12c9915a6e4068c342da7ce3fb780a0f81e831"}, {0xc8, 0xff, 0xd5, "63c64bd7bb044784b9f381df0e9c9ad739f8892c325cef2e62d6f538c07109c5d830de0417bbd15811d0e9d9908d6bed874f22d12f17a1f4e597084f338f5c42485ebd5d2778ae5fe69a06505e2012a884855026c814f0fa725847693247ec70b579a8f0dbd7505abf4d7d12d928dfd66377dc725209d5b5f82339e2497313de045b312c1d6ee5e7cb85dda626b2fbfb850bf0c4bfdb10307712a4d1ed0c0e6d96c7d790cc51c74521debae36ab9f3fef9bf4b"}, {0xf0, 0x117, 0xffffffff, "144d428aa525fe0d983a227f5779a25ae927adcde4685afcbabc9a0549a13e1ec50d6eca151d9d06144518ea05ab8c7cd8be712e10504decfd98930fdecc73eb5546f064a365272bfb6512a000283810aa38161a6dea1c6d4d8a94897591291d0bc640a6f307141e4c2b3db3f7854ef5a268811883a0736f8b3355f0de899fee2c56c1635900c464378ded8746f531a25db2e31be9314b5a7d5c922e27cb23e4989c083c654611a1f55759efe0358d5ae13ce7c33a77a3492fa516d08fea79e5526055d8f56b788432f1476e0a116477f8e25cac3b7f13eab83d"}, {0x1010, 0x108, 0x8d, "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"}, {0xf0, 0x11, 0xe, "28a3ba0cea74ec99394c9cafbf30d1cb40485a304389d14103588ab8b50c1476c938dd37a9fccd39a80dde760f1bd13c551951881a79c49b8970af84031cd3dab1c94929efec8a621335debd6f5c9e34aaf98c1139ebfd5a7bacc9b73861986642cb51f7fad188f6701a302506298d94837c45a44a12d8567e1bc268cc97fe8d0d6fb9ac6cc0a7e15d753d32dcce1f7576ceb44b3656d23e1e788ff5dfa78cb824c83c6f719895f12ad87a5763a5b4b8094b5ebf00970b86f4babf03de94a1c0680fe1e6ade8b80c7026ce197143ad67d01b7e9fc954eaba44e08359deecc8"}, {0x1010, 0x10e, 0x8, "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"}, {0x18, 0x111, 0x200, "7a125fb7b027703b"}, {0x20, 0x29, 0x7, "e80536ebc4ebee17a9c459c8bf"}], 0x24c0}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x1, 0x1, 0x2, {0xa, 0x4e22, 0x70000, @local, 0x54}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)="d5fea3affa836f36180cf40a3aa44f2783ab379660397320a886c21ec1ad310f6e386eacc86d9b071ce6d0f0b447d1aa7c9241bf7a19684a95302c51be0e", 0x3e}, {&(0x7f0000000540)="b618398952ab08b8d11944dc20a9f774b968247da9b1bedbc8e2d52e1314a7e7a79c40b12a9fe9cd69a2c7eb18ca46fe5d6e6e1fd1ba4a88cb70770690f344210ccdbb9dc327", 0x46}, {&(0x7f00000005c0)="f345871c0830d1e232d9b9a2eb90b014753630c64c2a0688ce72a6f9ef3c17c565d64fa85f0cdcd6deb334f6d7c4d7c804a14f5d5de9aef8f6271416484d0e2bc723f04d90c5d3c5b5beb1eb1e5c630dfe6977287acc7fff3a6686ca6f240df20302e72e38cac0c1b3cb79a677d5db1cf6480fa62d93c4785719d8cb4332e14665f9d9fea2d25d320626bff87cf1f165a811b193068e47ed9da39981a9810425a26b2f10800ca163c4edd072d84b3a0b1d4695e89b6baaa73a726d4a896682ff056cc5f1edb2c3adc3dec4273ae4ce75a3ed0b857ef08db837e5f8da98be9085d43b90fad73787b8a7016708b979f4ec229b53c55e", 0xf5}, {&(0x7f00000006c0)="dd27923b86e1a0f8959e86640ff11fa938ce0cd983f6ad1ecb3153faaf0e381dc0744fc09798b14cad9a4a13d95df8e60b43cadb0a41354dcf0d42557a09a947cef38c17a0a3cc73dd3ee57371", 0x4d}, {&(0x7f0000000740)="7f54c52cca42a900cc77eb29089a1faba13da8eab9de385953133045fa094a03a9d7d9efc05aca44b379a59c71a9c2f692c5d4f3b8d78d8b4366831bf5498af8e2fe97d6d82c3717322ae5c7154c97b6fbc5ca1ecb246ae87165ad2581c01f", 0x5f}], 0x5}}], 0x2, 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) 778.647214ms ago: executing program 6 (id=7245): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000100)=""/169, &(0x7f00000001c0)=0xa9) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xac, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_INDEX}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x56, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xac}}, 0x0) 719.94223ms ago: executing program 5 (id=7246): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000080)={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x1) connect$bt_l2cap(r1, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5, 0x1cf1cd988231dbb, 0x1, 0x2, 0xc, 0xffff}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b32, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x4080, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x6, 0x17, &(0x7f00000000c0), 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000000)={&(0x7f0000000140)=@can={{0x2}, 0x6, 0x1, 0x0, 0x0, "d34b22fc189a79d3"}, 0x10}}, 0x408d1) 555.982967ms ago: executing program 6 (id=7247): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@loopback, 0x4e22, 0x0, 0x4e23, 0xed1, 0xa, 0x20, 0x20, 0x3b}, {0x7, 0x10, 0x9, 0x0, 0x6, 0xe6, 0xffffffffffffffff, 0x400}, {0x4, 0x7, 0xffffffffffffffff, 0x10000}, 0xfffffff9, 0x0, 0x2, 0x1, 0x1, 0x1}, {{@in=@multicast2, 0x4d5, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x2, 0x4, 0x7, 0x5, 0x1}}, 0xe8) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf0, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x109}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x244}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1cb2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x345}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x81}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008010}, 0x42) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200c4}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x10000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7d}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x6}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000400)=@bpq0, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_ifreq(r4, 0x891b, &(0x7f00000004c0)={'veth1_to_hsr\x00', @ifru_addrs=@hci={0x1f, 0x1, 0x4}}) r6 = accept4$ax25(r3, &(0x7f0000000500)={{0x3, @netrom}, [@rose, @bcast, @null, @null, @null, @netrom, @netrom]}, &(0x7f0000000580)=0x48, 0x0) close(r6) write(r4, &(0x7f0000000c40), 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x80503, 0x0) write$tun(r7, 0x0, 0x0) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, 0x0, 0x0) (async) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$inet(r6, 0x0, 0x40000) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000001800)=@netrom={'nr', 0x0}, 0x10) 429.226354ms ago: executing program 0 (id=7248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x80801, 0x1) shutdown(r1, 0x1) unshare(0x24020400) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x18, 0x140f, 0x800, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8001) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="584bdf9f", @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x15}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x15}]}, 0x50}, 0x1, 0x0, 0x0, 0x40808}, 0x20000000) 428.981153ms ago: executing program 6 (id=7249): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) close(r0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180a00000014000327bd7020fedbdf250800010001000000"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) write(r1, &(0x7f0000000180)="a9bd85aca96b71e3cbba6f6a97d1bc805766b358c80d9608672de661b7cc6f36d6b7dfeba969c9a4f68b522b60f32da821db05944bbd9abf6c80bb7a57ab7f9c60638e1bb02069c81e69f662a0d0500aa5d035ed6d1a589d86867a77225fc6a72b3a07cce097ee36016277ec815308d31829553d157c91e1558d8314108c79ac39a745bbaed31e0cde3c436275db2a6173b215904b3ad90a3d4a60accfa17837eac621eb", 0xa4) accept4(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@id, &(0x7f0000000140)=0x80, 0x0) 428.422974ms ago: executing program 5 (id=7250): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800000}, 0x50) r1 = socket(0x2, 0x80805, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r0, 0x32, 0x0, 0xfffffffa, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex, r2, 0x1f, 0x18, 0x0, @void, @value=r4, @void, @void, r3}, 0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800000}, 0x50) (async) socket(0x2, 0x80805, 0x0) (async) pipe(&(0x7f00000000c0)) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r0, 0x32, 0x0, 0xfffffffa, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}, 0x40) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex, r2, 0x1f, 0x18, 0x0, @void, @value=r4, @void, @void, r3}, 0x20) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, &(0x7f0000000240)) (async) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r0, 0x0) (async) 406.266137ms ago: executing program 7 (id=7251): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) 262.672674ms ago: executing program 7 (id=7252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x101, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f000000ab00)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) bind$pptp(r7, &(0x7f000000ae00)={0x18, 0x2, {0x1, @local}}, 0x1e) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x278}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r11) sendmsg$NFC_CMD_LLC_SET_PARAMS(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r13, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x88000) 194.016893ms ago: executing program 0 (id=7253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = syz_init_net_socket$ax25(0x3, 0x4, 0xcc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x100000000, 0x7, 0xfffffffffffffff8}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xec, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4044001}, 0x4008000) 193.089272ms ago: executing program 5 (id=7254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000025c0)={0xffffffffffffffff, 0x20, &(0x7f0000002580)={&(0x7f0000001540)=""/41, 0x29, 0x0, &(0x7f0000001580)=""/4096, 0x1000}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000026c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r0, 0x4, r2}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x80811501, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r7, &(0x7f0000001480)=""/4096, 0x38) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x3, 0x4, {{0x6, 0x4, 0x3, 0x35, 0x18, 0x67, 0x0, 0xcb, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end]}}}}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r5}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010029bd700000000006001c004e2400"/35], 0x24}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x0, r5}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)=r5}, 0x20) 54.382972ms ago: executing program 0 (id=7255): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) tee(r0, r1, 0x80000000, 0x5) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @remote, 0x0, "d009000000000000006404000000dc3f0900000000000000d800000000000400", 0x0, 0x0, 0xfffffd, 0xfffffffd}, 0x3c) r3 = socket(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000900)=ANY=[], 0x48) r4 = accept4(r3, &(0x7f0000000680)=@isdn, &(0x7f0000000580)=0x80, 0x40800) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000600)={0x0, @multicast1, @dev}, &(0x7f0000000640)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r10, 0x701}, 0x14}}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100005ff8e000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="000000000122040028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="deba0b1d0420000008002900bb310600"], 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) 0s ago: executing program 7 (id=7256): unshare(0xa020480) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e00010069703667726574028014000700fe8000000000000000000000000000bb14000600fe8000000000000000000000000000150800010000000000000000", @ANYRES32=r2, @ANYBLOB], 0x68}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x20000000, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_sctp(0x2, 0x5, 0x84) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r9, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x370a3e077a6d5772) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) unshare(0x6020400) kernel console output (not intermixed with test programs): ng to 1000 [ 671.925716][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.934169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.399576][T32099] __nla_validate_parse: 6 callbacks suppressed [ 672.399597][T32099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5811'. [ 672.461281][T32105] netlink: 'syz.3.5811': attribute type 1 has an invalid length. [ 672.687626][T32105] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 672.689898][T32065] lo speed is unknown, defaulting to 1000 [ 672.929190][T32120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 672.936494][T32120] IPv6: NLM_F_CREATE should be set when creating new route [ 672.979150][T32121] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5815'. [ 673.223066][T32134] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5820'. [ 673.259492][T32065] hsr0 speed is unknown, defaulting to 1000 [ 673.295712][T32140] xt_TPROXY: Can be used only with -p tcp or -p udp [ 673.440243][T32145] netlink: 207992 bytes leftover after parsing attributes in process `syz.5.5824'. [ 673.590416][T32150] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5825'. [ 673.608341][T32150] dvmrp8: entered allmulticast mode [ 673.627962][T32155] nft_compat: unsupported protocol 0 [ 673.656080][T32150] dvmrp0: left allmulticast mode [ 673.663710][T32155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5827'. [ 673.675653][T32150] dvmrp8: left allmulticast mode [ 673.685893][ T52] Bluetooth: hci6: command tx timeout [ 673.862730][T32065] chnl_net:caif_netlink_parms(): no params data found [ 674.101892][T32175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5831'. [ 674.120280][T32175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5831'. [ 674.141557][T32175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5831'. [ 674.155317][T32175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5831'. [ 674.298807][T32065] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.306243][T32065] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.316732][T32065] bridge_slave_0: entered allmulticast mode [ 674.324780][T32065] bridge_slave_0: entered promiscuous mode [ 674.337039][T32065] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.344477][T32065] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.352264][T32065] bridge_slave_1: entered allmulticast mode [ 674.364267][T32065] bridge_slave_1: entered promiscuous mode [ 674.411481][T32187] vlan3: entered promiscuous mode [ 674.431538][T32187] vlan3: entered allmulticast mode [ 674.437601][T32187] hsr_slave_1: entered allmulticast mode [ 674.455695][T32065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.501837][T32065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.663035][T32065] team0: Port device team_slave_0 added [ 674.688982][T32065] team0: Port device team_slave_1 added [ 674.745356][T32209] netlink: 'syz.3.5841': attribute type 1 has an invalid length. [ 674.762018][T32202] syzkaller0: entered promiscuous mode [ 674.779653][T32202] syzkaller0: entered allmulticast mode [ 674.800325][T32065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.816675][T32065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.845111][T32065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.899657][T32065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.920041][T32065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.947637][T32065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.990559][T32216] bridge: RTM_NEWNEIGH with invalid ether address [ 675.006739][T32214] bridge: RTM_NEWNEIGH with invalid ether address [ 675.068162][T32221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.110947][T32224] netlink: 'syz.3.5844': attribute type 23 has an invalid length. [ 675.259723][T32065] hsr_slave_0: entered promiscuous mode [ 675.267003][T32065] hsr_slave_1: entered promiscuous mode [ 675.274136][T32065] debugfs: 'hsr0' already exists in 'hsr' [ 675.282029][T32065] Cannot create hsr debugfs directory [ 675.305891][T13594] net_ratelimit: 64 callbacks suppressed [ 675.305911][T13594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.320055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.484539][T32240] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 675.599525][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.755154][ T52] Bluetooth: hci6: command tx timeout [ 676.011326][T32065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.027943][T32065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.077578][T32264] geneve2: entered promiscuous mode [ 676.093620][T13594] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 37484 - 0 [ 676.155174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.163621][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.172196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.268100][T32065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.295922][T32065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.351096][T13594] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 37484 - 0 [ 676.380110][T13594] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 37484 - 0 [ 676.410532][T32279] pim6reg: entered allmulticast mode [ 676.491445][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.500451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.512538][T32065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.524267][T32065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.550506][T13594] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 37484 - 0 [ 676.694086][T32065] batman_adv: batadv0: Removing interface: netdevsim0 [ 676.736526][T32065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.769140][T32065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.883572][T32305] netlink: 'syz.5.5862': attribute type 10 has an invalid length. [ 676.939017][T32305] dummy0: entered promiscuous mode [ 676.949774][T32305] bridge0: port 3(dummy0) entered blocking state [ 676.961800][T32305] bridge0: port 3(dummy0) entered disabled state [ 676.968724][T32305] dummy0: entered allmulticast mode [ 676.979410][T32305] bridge0: port 3(dummy0) entered blocking state [ 676.985949][T32305] bridge0: port 3(dummy0) entered forwarding state [ 677.154101][T32314] netlink: 'syz.4.5864': attribute type 1 has an invalid length. [ 677.303988][T32065] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 677.396158][T32065] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 677.452584][T32065] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 677.489432][T32065] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 677.616177][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.733451][T32348] __nla_validate_parse: 13 callbacks suppressed [ 677.733471][T32348] netlink: 348 bytes leftover after parsing attributes in process `syz.5.5869'. [ 677.830426][T32065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.843447][ T52] Bluetooth: hci6: command tx timeout [ 677.869558][T32357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5874'. [ 677.907579][T32065] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.948895][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.956086][ T7173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.994713][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.002022][ T7173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.011482][T32353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5872'. [ 678.034314][T32362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5875'. [ 678.210860][T32363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5874'. [ 678.267391][T32357] netlink: 'syz.3.5874': attribute type 39 has an invalid length. [ 678.389355][T32372] syzkaller0: entered promiscuous mode [ 678.397136][T32372] syzkaller0: entered allmulticast mode [ 678.419643][T32372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5877'. [ 678.445038][T32372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5877'. [ 678.454178][T32372] netlink: 'syz.5.5877': attribute type 29 has an invalid length. [ 678.662026][T32379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5878'. [ 678.823743][T32391] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5879'. [ 678.920713][T32393] syzkaller0: entered promiscuous mode [ 678.937961][T32393] syzkaller0: entered allmulticast mode [ 678.988024][T32399] sctp: [Deprecated]: syz.4.5881 (pid 32399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 678.988024][T32399] Use struct sctp_sack_info instead [ 679.016739][T32065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.140086][T32065] veth0_vlan: entered promiscuous mode [ 679.183839][T32065] veth1_vlan: entered promiscuous mode [ 679.346984][T32065] veth0_macvtap: entered promiscuous mode [ 679.383893][T32065] veth1_macvtap: entered promiscuous mode [ 679.449323][T32065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.459985][T32417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5884'. [ 679.479648][T32065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.617839][T13592] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.643395][T13592] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.669977][T13592] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.717389][T13592] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.919339][ T52] Bluetooth: hci6: command tx timeout [ 679.947573][T32431] netlink: 'syz.5.5887': attribute type 11 has an invalid length. [ 680.005615][T13594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.013499][T13594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.144764][T32439] bond10: option xmit_hash_policy: invalid value (64) [ 680.172035][T32439] bond10 (unregistering): Released all slaves [ 680.263148][T32444] vlan2: entered promiscuous mode [ 680.271337][T32444] vlan2: entered allmulticast mode [ 680.278575][T32444] hsr_slave_1: entered allmulticast mode [ 680.308212][T13592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.310736][T32439] tipc: Failed to remove unknown binding: 66,1,1/0:2296710168/2296710170 [ 680.326696][T13592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.419334][T32453] syzkaller0: entered promiscuous mode [ 680.424878][T32453] syzkaller0: entered allmulticast mode [ 680.818919][T32467] bridge1: entered promiscuous mode [ 680.824317][T32467] bridge1: entered allmulticast mode [ 680.833767][T32467] team0: Port device bridge1 added [ 680.844774][T32467] bridge0: port 3(team0) entered blocking state [ 680.860780][T32480] netlink: 'syz.5.5897': attribute type 16 has an invalid length. [ 680.880785][T32467] bridge0: port 3(team0) entered disabled state [ 680.926311][T32467] team0: entered allmulticast mode [ 680.953600][T32467] team_slave_0: entered allmulticast mode [ 680.964498][T32467] team_slave_1: entered allmulticast mode [ 680.971721][ T7173] net_ratelimit: 6 callbacks suppressed [ 680.971741][ T7173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.986530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.006929][T32467] team0: entered promiscuous mode [ 681.049070][T32467] team_slave_0: entered promiscuous mode [ 681.088326][T32467] team_slave_1: entered promiscuous mode [ 681.108658][T32467] bridge0: port 3(team0) entered blocking state [ 681.115132][T32467] bridge0: port 3(team0) entered forwarding state [ 681.116056][T32488] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 681.229374][T32495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.359028][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.627709][T32512] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 681.637169][T32512] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 681.664656][T32516] xt_hashlimit: size too large, truncated to 1048576 [ 681.915192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.923599][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.932062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.152412][T32538] sctp: [Deprecated]: syz.0.5910 (pid 32538) Use of int in maxseg socket option. [ 682.152412][T32538] Use struct sctp_assoc_value instead [ 682.172731][ T7173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.181433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.247916][T32543] netlink: 'syz.3.5911': attribute type 1 has an invalid length. [ 682.294375][T32543] vlan4: entered promiscuous mode [ 682.314644][T32543] gretap0: entered promiscuous mode [ 682.343198][T32543] vlan4: entered allmulticast mode [ 682.369300][T32543] gretap0: entered allmulticast mode [ 682.474623][T32550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.866931][T32580] netlink: 'syz.0.5919': attribute type 3 has an invalid length. [ 682.940110][T32584] SET target dimension over the limit! [ 683.425805][T32603] tipc: Started in network mode [ 683.438731][T32603] tipc: Node identity e0000001, cluster identity 4711 [ 683.460466][T32603] tipc: Enabling of bearer rejected, failed to enable media [ 683.469687][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 683.482475][T32610] __nla_validate_parse: 9 callbacks suppressed [ 683.482489][T32610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5927'. [ 683.500002][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 683.503896][T32610] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5927'. [ 683.512756][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 683.529312][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 683.537609][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 683.674469][T32615] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5931'. [ 683.771772][T32606] ip6_vti0 speed is unknown, defaulting to 1000 [ 684.131796][T32630] netlink: 'syz.5.5935': attribute type 1 has an invalid length. [ 684.175388][T32630] netlink: 'syz.5.5935': attribute type 2 has an invalid length. [ 684.234260][T32630] netlink: 'syz.5.5935': attribute type 4 has an invalid length. [ 684.243596][T32630] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5935'. [ 684.352893][T32629] ip6_vti0 speed is unknown, defaulting to 1000 [ 684.794162][T32651] netlink: 208 bytes leftover after parsing attributes in process `syz.5.5939'. [ 684.931438][T32606] lo speed is unknown, defaulting to 1000 [ 685.508896][T32606] hsr0 speed is unknown, defaulting to 1000 [ 685.516393][T32629] lo speed is unknown, defaulting to 1000 [ 685.595761][ T5830] Bluetooth: hci5: command tx timeout [ 685.782655][T32688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5945'. [ 685.899351][T32694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5946'. [ 686.045968][T32606] chnl_net:caif_netlink_parms(): no params data found [ 686.281701][T32629] hsr0 speed is unknown, defaulting to 1000 [ 686.327243][T32606] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.334830][T32606] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.343331][T32606] bridge_slave_0: entered allmulticast mode [ 686.352217][T32606] bridge_slave_0: entered promiscuous mode [ 686.384575][T32606] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.392319][T32606] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.406002][T32606] bridge_slave_1: entered allmulticast mode [ 686.415960][T32606] bridge_slave_1: entered promiscuous mode [ 686.479219][T13592] net_ratelimit: 7 callbacks suppressed [ 686.479236][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.535825][T32717] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5950'. [ 686.573450][T32606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.597304][T32606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.663705][T32606] team0: Port device team_slave_0 added [ 686.682928][T32606] team0: Port device team_slave_1 added [ 686.737824][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.746297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.902212][T32606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.932497][T32606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.005018][T32606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.133826][T32606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.155094][T32606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.245154][T32606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.400409][T32744] xt_TCPMSS: Only works on TCP SYN packets [ 687.475612][T32606] hsr_slave_0: entered promiscuous mode [ 687.496490][T32606] hsr_slave_1: entered promiscuous mode [ 687.503087][T32606] debugfs: 'hsr0' already exists in 'hsr' [ 687.509586][T32606] Cannot create hsr debugfs directory [ 687.521833][ T9258] lec:lec_start_xmit: lec0:No lecd attached [ 687.675372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.683782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.692407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.702056][ T5830] Bluetooth: hci5: command tx timeout [ 687.887985][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.896473][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.068366][T32606] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.095605][T32606] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2560 - 0 [ 688.115000][T32606] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.210798][ T303] netlink: 'syz.5.5960': attribute type 10 has an invalid length. [ 688.272649][ T303] team0: Device ipvlan1 failed to register rx_handler [ 688.333573][T32606] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.349614][T32606] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2560 - 0 [ 688.397012][T32606] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.531294][T32606] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.553986][T32606] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2560 - 0 [ 688.595323][T32606] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.642063][ T314] lec:lec_atm_close: lec0: Shut down! [ 688.648529][ T311] syzkaller0: entered promiscuous mode [ 688.659946][ T311] syzkaller0: entered allmulticast mode [ 688.677988][T32606] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.708365][T32606] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2560 - 0 [ 688.721581][T32606] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.016903][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.025422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.064227][ T334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5966'. [ 689.100404][ T324] netlink: 'syz.4.5964': attribute type 1 has an invalid length. [ 689.109243][ T324] netlink: 'syz.4.5964': attribute type 11 has an invalid length. [ 689.120363][ T324] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5964'. [ 689.191197][ T334] netlink: 'syz.0.5966': attribute type 10 has an invalid length. [ 689.478573][T32606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 689.535380][T32606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 689.564294][T32606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 689.606423][ T353] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 689.616106][T32606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 689.631165][ T358] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5971'. [ 689.677804][ T362] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5971'. [ 689.760971][ T5830] Bluetooth: hci5: command tx timeout [ 689.950985][ T382] syzkaller0: entered promiscuous mode [ 689.959537][ T382] syzkaller0: entered allmulticast mode [ 690.003252][T32606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.070641][ T386] netlink: 4224 bytes leftover after parsing attributes in process `syz.5.5978'. [ 690.080631][T32606] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.087502][ T386] netlink: 6 bytes leftover after parsing attributes in process `syz.5.5978'. [ 690.087530][ T386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5978'. [ 690.129140][T13594] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.136417][T13594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.173249][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.180569][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.271272][ T391] netlink: 'syz.4.5979': attribute type 10 has an invalid length. [ 690.301144][ T391] dummy0: left allmulticast mode [ 690.427896][ T396] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5980'. [ 690.466620][ T396] syzkaller1: entered promiscuous mode [ 690.482444][ T396] syzkaller1: entered allmulticast mode [ 690.494863][ T399] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5981'. [ 690.526502][ T402] netlink: 'syz.5.5980': attribute type 21 has an invalid length. [ 690.541142][ T400] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5981'. [ 690.765616][ T412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.788774][T32606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.917054][T32606] veth0_vlan: entered promiscuous mode [ 690.948925][T32606] veth1_vlan: entered promiscuous mode [ 690.964084][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 691.050098][T32606] veth0_macvtap: entered promiscuous mode [ 691.113219][T32606] veth1_macvtap: entered promiscuous mode [ 691.176064][T32606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.214707][T32606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.250395][ T7172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.272921][ T7172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.324845][ T7172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.380373][ T7172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.641240][ T7173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.652719][ T7173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.748303][ T7172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.780507][ T7172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.835863][ T5830] Bluetooth: hci5: command tx timeout [ 692.028168][ T30] audit: type=1800 audit(1770313508.771:11): pid=474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5925" name="memory.events" dev="tmpfs" ino=18 res=0 errno=0 [ 692.101825][ T30] audit: type=1804 audit(1770313508.791:12): pid=474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5925" name="/newroot/0/memory.events" dev="tmpfs" ino=18 res=1 errno=0 [ 692.241483][ T8324] net_ratelimit: 4 callbacks suppressed [ 692.241504][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.366486][T13594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.375201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.168755][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 693.180678][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 693.189937][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 693.202120][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 693.225740][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 693.351843][ T527] ip6_vti0 speed is unknown, defaulting to 1000 [ 693.373317][ T532] bridge0: port 3(team0) entered disabled state [ 693.379875][ T532] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.387288][ T532] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.435184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.443659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.452086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.490898][ T537] netlink: 'syz.3.6013': attribute type 12 has an invalid length. [ 693.518876][ T537] netlink: 'syz.3.6013': attribute type 29 has an invalid length. [ 693.530711][ T7173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.532485][ T537] netlink: 'syz.3.6013': attribute type 2 has an invalid length. [ 693.541266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.632010][ T544] delete_channel: no stack [ 693.746517][ T549] netlink: 'syz.0.6016': attribute type 1 has an invalid length. [ 693.915019][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 693.923155][ C1] lec:lec_tx_timeout: lec0 [ 693.928386][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 693.964397][ T549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 694.215907][ T565] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 694.223529][ T567] __nla_validate_parse: 7 callbacks suppressed [ 694.223547][ T567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6021'. [ 694.249978][ T569] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 694.271524][ T567] bridge: RTM_NEWNEIGH with invalid ether address [ 694.368689][ T576] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6022'. [ 694.665189][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.673661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.704647][ T527] lo speed is unknown, defaulting to 1000 [ 695.068876][ T613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6032'. [ 695.115149][ T613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6032'. [ 695.275674][ T52] Bluetooth: hci0: command tx timeout [ 695.510181][ T527] hsr0 speed is unknown, defaulting to 1000 [ 695.663158][ T647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6040'. [ 695.950798][ T655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.020281][ T653] syzkaller1: entered promiscuous mode [ 696.045108][ T653] syzkaller1: entered allmulticast mode [ 696.242500][ T527] chnl_net:caif_netlink_parms(): no params data found [ 696.678909][ T688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6048'. [ 696.703576][ T684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.707889][ T688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6048'. [ 696.742985][ T685] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6049'. [ 696.816711][ T527] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.828659][ T527] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.850461][ T527] bridge_slave_0: entered allmulticast mode [ 696.873351][ T527] bridge_slave_0: entered promiscuous mode [ 696.909864][ T527] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.943536][ T527] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.972173][ T527] bridge_slave_1: entered allmulticast mode [ 696.992573][ T527] bridge_slave_1: entered promiscuous mode [ 697.111250][ T703] vcan0: tx address claim with dest, not broadcast [ 697.168522][ T527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.212096][ T527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.266377][ T710] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6054'. [ 697.355210][ T52] Bluetooth: hci0: command tx timeout [ 697.403866][ T527] team0: Port device team_slave_0 added [ 697.428352][ T527] team0: Port device team_slave_1 added [ 697.531324][ T527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.548192][ T527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.580173][ T724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6056'. [ 697.589706][ T527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.618752][ T527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.626939][ T527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.661445][ T527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.737744][ T724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 697.759932][ T725] macvlan2: entered promiscuous mode [ 697.766096][ T725] macvlan2: entered allmulticast mode [ 697.772062][ T725] bond2: entered allmulticast mode [ 697.778328][ T725] bond2: entered promiscuous mode [ 697.784691][ T725] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 697.797430][ T725] team0: Port device macvlan2 added [ 697.933306][ T527] hsr_slave_0: entered promiscuous mode [ 697.972881][ T527] hsr_slave_1: entered promiscuous mode [ 697.991264][ T527] debugfs: 'hsr0' already exists in 'hsr' [ 698.006314][ T12] net_ratelimit: 4 callbacks suppressed [ 698.006333][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.025258][ T527] Cannot create hsr debugfs directory [ 698.138831][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.147320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.456925][ T761] syzkaller1: entered promiscuous mode [ 698.483210][ T761] syzkaller1: entered allmulticast mode [ 698.532246][ T771] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 698.555314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.563802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.572255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.935515][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 698.943589][ C1] lec:lec_tx_timeout: lec0 [ 699.009691][ T527] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 699.140754][ T527] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 699.291585][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.300739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.337034][ T527] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 699.364655][ T527] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 699.445701][ T52] Bluetooth: hci0: command tx timeout [ 699.654485][ T830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.662144][ T830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.712213][ T830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.736019][ T830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.897531][ T527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.950526][ T527] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.046930][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.054227][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.090952][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.098197][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.270982][ T868] __nla_validate_parse: 2 callbacks suppressed [ 700.271001][ T868] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6088'. [ 700.469402][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.478333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.582637][ T885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6092'. [ 700.614791][ T885] sctp: [Deprecated]: syz.0.6092 (pid 885) Use of int in maxseg socket option. [ 700.614791][ T885] Use struct sctp_assoc_value instead [ 700.685953][ T885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6092'. [ 700.945651][ T885] team_slave_0 (unregistering): left promiscuous mode [ 700.952525][ T885] team_slave_0 (unregistering): left allmulticast mode [ 700.998620][ T885] team0: Port device team_slave_0 removed [ 701.326352][ T527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.425552][ T931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 701.433121][ T931] IPv6: NLM_F_CREATE should be set when creating new route [ 701.440788][ T931] IPv6: NLM_F_CREATE should be set when creating new route [ 701.448079][ T931] IPv6: NLM_F_CREATE should be set when creating new route [ 701.508677][ T931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 701.529058][ T52] Bluetooth: hci0: command tx timeout [ 701.640083][ T947] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 701.657684][ T947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6103'. [ 701.812189][ T958] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6104'. [ 701.837416][ T958] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6104'. [ 701.876793][ T958] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6104'. [ 702.282547][ T985] netlink: 'syz.4.6109': attribute type 9 has an invalid length. [ 702.469632][ T527] veth0_vlan: entered promiscuous mode [ 702.511124][ T527] veth1_vlan: entered promiscuous mode [ 702.584848][ T527] veth0_macvtap: entered promiscuous mode [ 702.603194][ T527] veth1_macvtap: entered promiscuous mode [ 702.619246][ T1002] SET target dimension over the limit! [ 702.644644][ T527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.666630][ T527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.690522][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.707082][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.720460][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.730312][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.770265][ T1006] dummy0: left allmulticast mode [ 702.778012][ T1006] bridge0: port 3(dummy0) entered disabled state [ 702.792169][ T1006] bridge_slave_0: left allmulticast mode [ 702.801354][ T1006] bridge_slave_0: left promiscuous mode [ 702.807428][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.819913][ T1006] bridge_slave_1: left allmulticast mode [ 702.826392][ T1006] bridge_slave_1: left promiscuous mode [ 702.832140][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.845275][ T1006] bond0: (slave bond_slave_0): Releasing backup interface [ 702.861517][ T1006] bond0: (slave bond_slave_1): Releasing backup interface [ 702.881672][ T1006] team0: Port device team_slave_0 removed [ 702.899450][ T1006] team0: Port device team_slave_1 removed [ 703.234168][ T1012] net_ratelimit: 5 callbacks suppressed [ 703.234183][ T1012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 703.250998][ T1012] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6115'. [ 703.595742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.604363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.612771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.757004][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.847397][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.855988][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.957070][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.966090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.142574][ T975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.322950][ T8324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.359435][ T1016] netlink: 'syz.0.6116': attribute type 4 has an invalid length. [ 705.361861][ T8324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.386201][ T1016] netlink: 193176 bytes leftover after parsing attributes in process `syz.0.6116'. [ 705.430132][ T1024] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6117'. [ 705.443526][ T1024] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6117'. [ 705.467500][ T1025] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6117'. [ 705.485261][ T1025] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6117'. [ 705.514374][ T1021] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6118'. [ 705.606972][T13592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.648419][T13592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.658584][ T1036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6117'. [ 705.670233][ T1036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6117'. [ 706.079911][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.112766][ T1065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.127224][ T1067] bridge0: port 4(wlan0) entered blocking state [ 706.133771][ T1067] bridge0: port 4(wlan0) entered disabled state [ 706.164246][ T1067] mac80211_hwsim hwsim61 wlan0: entered allmulticast mode [ 706.219408][ T1067] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 706.247791][ T1074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6123'. [ 706.280218][ T1068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6123'. [ 706.391156][ T1067] vlan2: entered promiscuous mode [ 706.402692][ T1067] geneve1: entered promiscuous mode [ 706.425307][ T1067] vlan2: entered allmulticast mode [ 706.437299][ T1067] geneve1: entered allmulticast mode [ 707.500256][ T1145] tipc: Started in network mode [ 707.508735][ T1145] tipc: Node identity 666cc1e02cbb, cluster identity 4711 [ 707.529354][ T1145] tipc: Enabled bearer , priority 0 [ 707.613570][ T1146] syzkaller0: entered promiscuous mode [ 707.630772][ T1146] syzkaller0: entered allmulticast mode [ 707.644323][ T1145] syzkaller0: entered promiscuous mode [ 707.651014][ T1145] syzkaller0: entered allmulticast mode [ 707.671619][ T1156] netlink: 'syz.3.6146': attribute type 1 has an invalid length. [ 708.346493][ T8324] net_ratelimit: 4 callbacks suppressed [ 708.346517][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.360719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.801699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.810163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.479051][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.487658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.518294][T13594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.009699][ T1161] tipc: Resetting bearer [ 710.018259][ T1175] netlink: 'syz.6.6151': attribute type 3 has an invalid length. [ 710.037953][ T1142] tipc: Resetting bearer [ 710.079658][ T1142] tipc: Disabling bearer [ 710.268667][ T1192] syzkaller0: entered promiscuous mode [ 710.274308][ T1192] syzkaller0: entered allmulticast mode [ 710.282980][ T5877] tipc: Node number set to 1255653856 [ 710.329729][ T1206] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 710.365690][ T1206] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 710.510133][ T1222] __nla_validate_parse: 7 callbacks suppressed [ 710.510155][ T1222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6160'. [ 710.605828][ T1226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6161'. [ 710.626764][ T7173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.635656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.718762][ T1229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6162'. [ 710.741601][ T1230] Cannot find set identified by id 0 to match [ 712.571986][ T1239] netlink: 'syz.4.6163': attribute type 3 has an invalid length. [ 712.674018][ T1242] netlink: 'syz.6.6164': attribute type 1 has an invalid length. [ 712.795874][ T1250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6166'. [ 712.886826][ T1252] veth3: entered promiscuous mode [ 712.909645][ T1242] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6164'. [ 713.064624][ T1261] bond11: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 713.091960][ T1261] bond11 (unregistering): Released all slaves [ 713.434149][ T1280] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 713.492688][ T1280] bond2 (unregistering): Released all slaves [ 713.623241][ T1290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6172'. [ 713.661823][ T1296] lo: entered promiscuous mode [ 713.703144][ T1296] netlink: 'syz.3.6173': attribute type 2 has an invalid length. [ 713.753344][ T1305] netlink: 'syz.0.6172': attribute type 7 has an invalid length. [ 713.765138][ T1296] net_ratelimit: 7 callbacks suppressed [ 713.765157][ T1296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.909398][ T1314] netlink: 'syz.5.6177': attribute type 1 has an invalid length. [ 713.958563][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.968027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.270181][ T1312] syzkaller1: entered promiscuous mode [ 714.288156][ T1312] syzkaller1: entered allmulticast mode [ 714.482765][ T1337] netlink: 'syz.5.6180': attribute type 1 has an invalid length. [ 714.494463][ T1337] netlink: 'syz.5.6180': attribute type 1 has an invalid length. [ 715.109940][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.118673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.280956][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.235684][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.244243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.475243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.483739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.853960][ T1371] bridge_slave_0: left allmulticast mode [ 716.861440][ T1371] bridge_slave_0: left promiscuous mode [ 716.868442][ T1371] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.879569][ T1375] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6187'. [ 716.902953][ T1375] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6187'. [ 716.927957][ T1371] bridge_slave_1: left allmulticast mode [ 716.934009][ T1371] bridge_slave_1: left promiscuous mode [ 716.940631][ T1371] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.960415][ T1371] bond0: (slave bond_slave_0): Releasing backup interface [ 716.979630][ T1380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6190'. [ 716.989913][ T1371] bond0: (slave bond_slave_1): Releasing backup interface [ 717.022800][ T1371] team0: Port device team_slave_0 removed [ 717.051969][ T1371] team0: Port device team_slave_1 removed [ 717.066423][ T1371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.074073][ T1371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.084905][ T1371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.103421][ T1371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.125915][ T1375] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6187'. [ 717.254833][ T1388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6191'. [ 717.281189][ T1388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.491141][ T1388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.096381][ T1431] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.6199'. [ 718.483983][ T1458] netlink: 124 bytes leftover after parsing attributes in process `syz.5.6204'. [ 719.214642][ T1487] tipc: Started in network mode [ 719.227739][ T1487] tipc: Node identity 6e39b86d0609, cluster identity 4711 [ 719.255352][ T1487] tipc: Enabled bearer , priority 0 [ 719.283127][ T1487] syzkaller0: entered promiscuous mode [ 719.307510][ T1487] syzkaller0: entered allmulticast mode [ 719.345330][ T1491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6212'. [ 719.365388][ T1491] net_ratelimit: 5 callbacks suppressed [ 719.365404][ T1491] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 719.399232][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 719.419060][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 719.429579][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 719.446684][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 719.451652][ T1487] tipc: Resetting bearer [ 719.486205][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 719.577462][T13594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.586403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.621057][ T1486] tipc: Resetting bearer [ 719.685177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.693674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.718619][ T1486] tipc: Disabling bearer [ 719.981032][ T1517] netlink: 'syz.0.6215': attribute type 3 has an invalid length. [ 720.044592][ T1517] netlink: 'syz.0.6215': attribute type 1 has an invalid length. [ 720.088250][ T1517] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6215'. [ 720.118732][ T1492] ip6_vti0 speed is unknown, defaulting to 1000 [ 720.155644][ T1517] netlink: 'syz.0.6215': attribute type 9 has an invalid length. [ 720.688206][ T1551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6222'. [ 720.737630][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.747402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.042092][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.151533][ T1568] xt_CT: No such helper "syz1" [ 721.595342][ T52] Bluetooth: hci7: command tx timeout [ 721.670893][ T1492] lo speed is unknown, defaulting to 1000 [ 721.852205][ T1598] netlink: 'syz.6.6233': attribute type 9 has an invalid length. [ 721.905688][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.914244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.171399][ T1611] netlink: 'syz.3.6236': attribute type 1 has an invalid length. [ 722.280171][ T1492] hsr0 speed is unknown, defaulting to 1000 [ 722.468287][ T1620] syzkaller1: entered promiscuous mode [ 722.473900][ T1620] syzkaller1: entered allmulticast mode [ 722.664799][ T1627] xt_connbytes: Forcing CT accounting to be enabled [ 722.742338][ T1639] __nla_validate_parse: 6 callbacks suppressed [ 722.742360][ T1639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6242'. [ 722.963082][ T1492] chnl_net:caif_netlink_parms(): no params data found [ 723.174262][ T1492] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.181695][ T1492] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.189718][ T1492] bridge_slave_0: entered allmulticast mode [ 723.199444][ T1492] bridge_slave_0: entered promiscuous mode [ 723.208760][ T1492] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.216228][ T1492] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.225161][ T1492] bridge_slave_1: entered allmulticast mode [ 723.234657][ T1492] bridge_slave_1: entered promiscuous mode [ 723.274667][ T1662] atomic_op ffff888077f21198 conn xmit_atomic 0000000000000000 [ 723.312029][ T1492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.358522][ T1492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.381390][ T1664] netlink: 'syz.6.6248': attribute type 1 has an invalid length. [ 723.408771][ T1664] netlink: 'syz.6.6248': attribute type 3 has an invalid length. [ 723.445015][ T1664] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6248'. [ 723.498844][ T1492] team0: Port device team_slave_0 added [ 723.519488][ T1492] team0: Port device team_slave_1 added [ 723.612896][ T1492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.648112][ T1492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.675174][ T52] Bluetooth: hci7: command tx timeout [ 723.696354][ T1679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6252'. [ 723.735072][ T1492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.769937][ T1492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.817412][ T1492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.893025][ T1492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.932357][ T1687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6254'. [ 723.950006][ T1690] macvlan3: entered promiscuous mode [ 723.956683][ T1690] macvlan3: entered allmulticast mode [ 723.997348][ T1690] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 724.222302][ T1709] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6259'. [ 724.442692][ T1710] veth1_macvtap: renamed from veth0_macvtap [ 724.492762][ T1492] hsr_slave_0: entered promiscuous mode [ 724.534240][ T1492] hsr_slave_1: entered promiscuous mode [ 724.570173][ T1492] debugfs: 'hsr0' already exists in 'hsr' [ 724.593976][ T1492] Cannot create hsr debugfs directory [ 724.652832][ T1732] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6265'. [ 724.690549][ T1724] bond3: option miimon: invalid value (18446744073709551585) [ 724.698625][ T1724] bond3: option miimon: allowed values 0 - 2147483647 [ 724.727723][ T1724] bond3 (unregistering): Released all slaves [ 724.948431][ T1747] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6267'. [ 724.961727][ T1747] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6267'. [ 724.978988][ T1741] veth0: entered promiscuous mode [ 725.051857][ T1753] syzkaller0: entered promiscuous mode [ 725.057636][ T1753] syzkaller0: entered allmulticast mode [ 725.210268][ T1738] veth0: left promiscuous mode [ 725.216907][ T1753] tipc: Enabled bearer , priority 0 [ 725.256106][T13594] net_ratelimit: 9 callbacks suppressed [ 725.256125][T13594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.270980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.351699][ T1765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6270'. [ 725.371719][ T1752] tipc: Resetting bearer [ 725.410573][ T1752] tipc: Disabling bearer [ 725.755735][ T52] Bluetooth: hci7: command tx timeout [ 725.807601][ T1492] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.826593][ T1492] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.941274][ T1794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6275'. [ 726.004023][ T1807] delete_channel: no stack [ 726.121366][ T1492] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.156469][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.164109][ T1492] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.223222][ T1795] pim6reg1: entered promiscuous mode [ 726.233196][ T1795] pim6reg1: entered allmulticast mode [ 726.364165][ T1492] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.388623][ T1492] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.435414][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.443901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.502386][ T1814] tap0: tun_chr_ioctl cmd 1074025676 [ 726.518101][ T1814] tap0: owner set to 0 [ 726.568337][ T1821] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 726.580767][ T1821] bond1 (unregistering): Released all slaves [ 726.758609][ T1492] batman_adv: batadv0: Removing interface: netdevsim0 [ 726.781380][ T1492] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.808018][ T1492] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.850383][ T1831] syzkaller0: entered promiscuous mode [ 726.857613][ T1831] syzkaller0: entered allmulticast mode [ 727.059538][ T1851] sit1: entered promiscuous mode [ 727.064647][ T1851] sit1: entered allmulticast mode [ 727.148168][ T1863] netlink: 'syz.5.6291': attribute type 1 has an invalid length. [ 727.290681][ T1863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 727.458120][ T1872] veth5: entered promiscuous mode [ 727.466325][ T1871] netlink: 'syz.3.6292': attribute type 4 has an invalid length. [ 727.572878][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.581980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.643898][ T1492] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 727.750020][ T1492] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 727.794836][ T1492] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 727.835618][ T52] Bluetooth: hci7: command tx timeout [ 727.856469][ T1492] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 727.888360][ T1908] x_tables: unsorted underflow at hook 4 [ 727.995220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.003628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.012055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.109264][ T1918] __nla_validate_parse: 1 callbacks suppressed [ 728.109286][ T1918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6303'. [ 728.149258][ T1926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6304'. [ 728.201872][ T1492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.258320][ T1926] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 728.273070][ T1926] batadv1: entered promiscuous mode [ 728.296164][ T1926] batadv1: entered allmulticast mode [ 728.310881][ T1926] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 728.323494][ T1926] team0: Failed to send options change via netlink (err -105) [ 728.332317][ T1926] team0: Port device batadv1 added [ 728.344080][ T1931] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 728.410098][ T1937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.459562][ T1492] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.496396][T13593] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.503728][T13593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.542095][ T1949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6309'. [ 728.628426][T13592] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.635687][T13592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.737236][T13592] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 728.746781][T13592] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 728.808859][ T5489] veth1_macvtap: left promiscuous mode [ 729.061154][ T1967] pim6reg: entered allmulticast mode [ 729.093343][ T1973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6318'. [ 729.137115][ T1973] netlink: 'syz.3.6318': attribute type 9 has an invalid length. [ 729.472165][ T1994] Bluetooth: MGMT ver 1.23 [ 729.552471][ T2000] IPv6: sit1: Disabled Multicast RS [ 729.631446][ T2000] sit1: entered allmulticast mode [ 729.751666][ T2004] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 729.843836][ T1492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.436560][ T2049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6332'. [ 730.591747][ T2055] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6333'. [ 730.857269][ T1492] veth0_vlan: entered promiscuous mode [ 730.873488][ T1492] veth1_vlan: entered promiscuous mode [ 730.971133][ T2070] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6335'. [ 730.987555][T13592] net_ratelimit: 4 callbacks suppressed [ 730.987576][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.001621][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.027142][ T1492] veth0_macvtap: entered promiscuous mode [ 731.058501][ T1492] veth1_macvtap: entered promiscuous mode [ 731.099533][ T1492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.132684][ T1492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.163958][T13592] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.192755][T13592] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.211595][ T30] audit: type=1800 audit(1770313547.951:13): pid=2076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6337" name="memory.events" dev="tmpfs" ino=450 res=0 errno=0 [ 731.261647][T13592] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.296233][T13592] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.549739][ T2092] netlink: 'syz.0.6342': attribute type 11 has an invalid length. [ 731.564696][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.571982][ T2092] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.6342'. [ 731.593551][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.703342][T13592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.735896][T13592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.750927][ T2102] netlink: 'syz.3.6344': attribute type 39 has an invalid length. [ 731.919238][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.095242][ T2115] netlink: 'syz.5.6346': attribute type 1 has an invalid length. [ 732.187093][T13594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.195982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.595161][ T2135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6352'. [ 733.077387][ T2156] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 733.115317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.123759][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.325838][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.334279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.884797][ T2185] Bluetooth: MGMT ver 1.23 [ 734.728141][ T2236] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6373'. [ 735.112560][ T2258] SET target dimension over the limit! [ 735.372412][ T2269] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 735.386514][ T2269] bond1: entered promiscuous mode [ 735.391610][ T2269] bond1: entered allmulticast mode [ 735.398528][ T2269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.725338][ T2291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6383'. [ 735.982942][ T2304] netlink: 'syz.3.6387': attribute type 1 has an invalid length. [ 736.153379][ T2312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6387'. [ 736.189698][ T2316] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6390'. [ 736.288431][ T2304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 736.297497][ T2304] bond2: (slave bond3): making interface the new active one [ 736.308427][ T2304] bond2: (slave bond3): Enslaving as an active interface with an up link [ 736.317932][ C0] net_ratelimit: 6 callbacks suppressed [ 736.317956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.318190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.368708][ T2312] 8021q: adding VLAN 0 to HW filter on device bond2 [ 736.533283][ T2324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6392'. [ 736.544732][ T2331] smc: net device team0 applied user defined pnetid SYZ2 [ 736.726019][ T7173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.734501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.833036][ T2343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6397'. [ 736.867856][ T2346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.274491][ T2359] macsec1: entered promiscuous mode [ 737.361860][ T2366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.602382][ T2375] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6406'. [ 737.666787][ T2382] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6405'. [ 737.683980][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.907857][ T7173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.916864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.100831][ T2403] netlink: 'syz.6.6409': attribute type 25 has an invalid length. [ 738.127691][ T2403] netlink: 'syz.6.6409': attribute type 10 has an invalid length. [ 738.158533][ T2403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6409'. [ 738.517724][ T2423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6414'. [ 738.879982][ T2440] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 739.091666][ T2458] netlink: 'syz.0.6424': attribute type 1 has an invalid length. [ 739.133381][ T2458] netlink: 'syz.0.6424': attribute type 2 has an invalid length. [ 739.144689][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.697069][ T2515] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 740.193417][ T2543] __nla_validate_parse: 3 callbacks suppressed [ 740.193436][ T2543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6438'. [ 740.212264][ T2543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6438'. [ 740.699135][ T2575] netlink: 'syz.5.6444': attribute type 12 has an invalid length. [ 741.417544][ T7173] net_ratelimit: 6 callbacks suppressed [ 741.417565][ T7173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.431613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.548306][ T2618] mac80211_hwsim hwsim65 wlan1: entered allmulticast mode [ 742.135901][ T2664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6460'. [ 742.191109][ T2665] netlink: 'syz.4.6460': attribute type 30 has an invalid length. [ 742.294081][ T2665] bond1: option arp_missed_max: invalid value (0) [ 742.313895][ T2665] bond1: option arp_missed_max: allowed values 1 - 255 [ 742.358020][ T2665] bond1 (unregistering): Released all slaves [ 742.534073][ T2690] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6462'. [ 742.622097][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.631178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.772904][ T2695] vlan2: entered promiscuous mode [ 742.805742][ T2695] bridge0: entered promiscuous mode [ 742.991657][ T2713] x_tables: unsorted underflow at hook 2 [ 743.441621][ T7173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.559020][ T2741] netlink: 'syz.4.6473': attribute type 6 has an invalid length. [ 743.645621][ T2743] syzkaller0: entered promiscuous mode [ 743.660991][ T2751] IPv6: NLM_F_CREATE should be specified when creating new route [ 743.675113][ T2743] syzkaller0: entered allmulticast mode [ 743.778511][ T7173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.787631][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.847197][ T2743] netlink: 596 bytes leftover after parsing attributes in process `syz.0.6474'. [ 744.063008][ T5489] veth0_macvtap: left promiscuous mode [ 744.102654][ T2769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6478'. [ 744.550735][ T2797] netlink: 'syz.3.6483': attribute type 1 has an invalid length. [ 744.635152][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.643678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.672778][ T2799] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6484'. [ 744.707578][ T2813] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6486'. [ 744.724015][ T2804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6483'. [ 744.857981][ T2804] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6483'. [ 744.916917][T13593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.981258][ T2824] rdma_rxe: rxe_newlink: failed to add bond0 [ 745.351681][ T2864] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6494'. [ 745.443265][ T2863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6495'. [ 745.531091][ T2863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6495'. [ 745.649251][ T2883] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6498'. [ 745.683840][ T2863] netlink: 'syz.3.6495': attribute type 2 has an invalid length. [ 745.751901][ T2887] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6498'. [ 745.938783][ T2896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.136017][ T2906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6503'. [ 746.191218][ T2906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6503'. [ 746.455363][ T2914] ip6_vti0 speed is unknown, defaulting to 1000 [ 746.732482][ T2928] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6509'. [ 747.114060][ T2950] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6515'. [ 747.130864][ T2951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6514'. [ 747.147096][T13592] net_ratelimit: 4 callbacks suppressed [ 747.147113][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.161167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.197023][ T2914] lo speed is unknown, defaulting to 1000 [ 747.360084][ T2955] bond3: option lp_interval: invalid value (0) [ 747.379647][ T2955] bond3: option lp_interval: allowed values 1 - 2147483647 [ 747.449587][ T2955] bond3 (unregistering): Released all slaves [ 747.536548][ T2959] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 747.547499][ T2914] hsr0 speed is unknown, defaulting to 1000 [ 747.809942][ T2968] ip6gre1: entered promiscuous mode [ 747.835781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.837654][ T2968] ip6gre1: entered allmulticast mode [ 747.844553][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.942699][ T2981] netlink: 'syz.3.6524': attribute type 8 has an invalid length. [ 748.296794][ T2987] x_tables: unsorted entry at hook 2 [ 748.306524][ T7172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.314951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.594710][ T3013] ksmbd: Unknown IPC event: 3, ignore. [ 748.643251][ T3014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.171536][ T3039] tipc: Enabling of bearer rejected, failed to enable media [ 749.196875][ T7172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.352305][ T3046] syzkaller0: entered promiscuous mode [ 749.384426][ T3046] syzkaller0: entered allmulticast mode [ 749.487586][T13594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.496138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.507432][ T3048] tipc: Started in network mode [ 749.512351][ T3048] tipc: Node identity c64cfbb51df9, cluster identity 4711 [ 749.547075][ T3048] tipc: Enabled bearer , priority 0 [ 749.823899][ T3072] syzkaller1: entered promiscuous mode [ 749.832888][ T3072] syzkaller1: entered allmulticast mode [ 749.848414][ T3072] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 750.055340][ T3040] tipc: Resetting bearer [ 750.144704][ T3040] tipc: Disabling bearer [ 750.209418][ T3084] netlink: 'syz.4.6551': attribute type 64 has an invalid length. [ 750.231564][ T3082] x_tables: duplicate underflow at hook 1 [ 750.591275][ T3110] __nla_validate_parse: 11 callbacks suppressed [ 750.591300][ T3110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6558'. [ 750.648808][ T3114] xt_l2tp: v2 tid > 0xffff: 1114244 [ 750.735288][ T3114] netlink: 'syz.6.6560': attribute type 7 has an invalid length. [ 750.749582][ T3122] xt_l2tp: v2 tid > 0xffff: 1114244 [ 750.852604][ T3126] netlink: 'syz.0.6563': attribute type 1 has an invalid length. [ 750.997675][ T3129] bond3: (slave ip6gretap1): making interface the new active one [ 751.007252][ T3129] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 751.015526][ T3129] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 751.023526][ T3129] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 751.033002][ T3131] netlink: 'syz.4.6562': attribute type 9 has an invalid length. [ 751.515092][ T3162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6572'. [ 751.588060][ T3162] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 751.721568][ T3162] team1: entered promiscuous mode [ 751.738157][ T3162] team1: entered allmulticast mode [ 751.854755][ T3190] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6578'. [ 751.935819][ T3190] gretap0: entered promiscuous mode [ 751.978877][ T3198] xt_TCPMSS: Only works on TCP SYN packets [ 752.020868][ T3198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.034223][ T3199] netlink: 'syz.6.6580': attribute type 9 has an invalid length. [ 752.077113][ T3199] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6580'. [ 752.082229][ T3205] netlink: 'syz.5.6581': attribute type 3 has an invalid length. [ 752.108085][ T3205] netlink: 'syz.5.6581': attribute type 1 has an invalid length. [ 752.127996][ T3205] netlink: 204 bytes leftover after parsing attributes in process `syz.5.6581'. [ 752.177255][ T3211] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 752.211869][ T3211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6582'. [ 752.339679][ T3217] xt_TCPMSS: Only works on TCP SYN packets [ 752.405290][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 752.411534][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 752.691301][ T3230] mac80211_hwsim hwsim65 wlan1: entered promiscuous mode [ 752.826992][ T3238] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 752.869635][T13594] net_ratelimit: 6 callbacks suppressed [ 752.869655][T13594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.884320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.022760][ T3249] syzkaller0: entered promiscuous mode [ 753.058978][ T3249] syzkaller0: entered allmulticast mode [ 753.577283][ T3285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6602'. [ 753.617618][ T3290] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6601'. [ 753.909139][ T3304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6607'. [ 753.972026][ T3308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6608'. [ 753.998157][ T3310] ipvlan0: mtu less than device minimum [ 754.046128][ T7172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.054542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.093114][ T3314] dvmrp0: entered allmulticast mode [ 754.213807][ T3323] netlink: 'syz.0.6611': attribute type 4 has an invalid length. [ 754.958502][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.168899][T13594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.178030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.515236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.523664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.756502][ T3405] syzkaller0: entered promiscuous mode [ 755.762138][ T3405] syzkaller0: entered allmulticast mode [ 755.845995][ T3420] netlink: 'syz.5.6635': attribute type 5 has an invalid length. [ 756.136329][ T3431] __nla_validate_parse: 39 callbacks suppressed [ 756.136350][ T3431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6637'. [ 756.280257][ T3435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6639'. [ 756.559748][ T3448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6643'. [ 756.618810][ T3451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6644'. [ 756.699512][ T3451] tipc: Enabled bearer , priority 0 [ 756.844733][ T3451] syzkaller0: entered promiscuous mode [ 756.854209][ T3426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6636'. [ 756.884849][ T3451] syzkaller0: entered allmulticast mode [ 756.891923][ T3451] tipc: Resetting bearer [ 756.926579][ T3474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6648'. [ 757.001787][ T3463] tipc: Resetting bearer [ 757.922194][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 757.930405][ C1] lec:lec_tx_timeout: lec0 [ 757.935807][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 758.576658][ T7173] net_ratelimit: 4 callbacks suppressed [ 758.576679][ T7173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.590928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.089992][ T3463] tipc: Disabling bearer [ 759.129842][ T3483] ipvlan2: entered allmulticast mode [ 759.139100][ T3483] batadv_slave_1: entered allmulticast mode [ 759.160493][ T3483] batman_adv: batadv0: Adding interface: ipvlan2 [ 759.179855][ T3483] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.216943][ T3483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.228001][ T3483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.239512][ T3483] batman_adv: batadv0: Interface activated: ipvlan2 [ 759.249459][ T3488] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6649'. [ 759.298446][ T5928] tipc: Node number set to 3686136757 [ 759.355394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.363841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.454542][ T3495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6652'. [ 759.493907][ T3498] netlink: 312 bytes leftover after parsing attributes in process `syz.6.6653'. [ 759.578593][ T3504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6654'. [ 759.707368][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.715981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.859266][ T3528] netlink: 'syz.6.6659': attribute type 1 has an invalid length. [ 760.058207][ T3541] netlink: 'syz.4.6664': attribute type 1 has an invalid length. [ 760.327843][ T3555] netlink: 'syz.4.6667': attribute type 12 has an invalid length. [ 760.358169][T13593] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.358586][ T3555] netlink: 'syz.4.6667': attribute type 12 has an invalid length. [ 760.403228][T13593] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.486674][T13593] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.528855][T13593] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.726435][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.848053][T13593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.857521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.257431][ T3604] __nla_validate_parse: 5 callbacks suppressed [ 761.257452][ T3604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6678'. [ 762.010038][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.069835][ T3644] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6691'. [ 762.231911][ T3657] : entered promiscuous mode [ 762.495789][ T3667] netlink: 'syz.5.6698': attribute type 1 has an invalid length. [ 762.503596][ T3667] netlink: 760 bytes leftover after parsing attributes in process `syz.5.6698'. [ 762.583082][ T3667] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6698'. [ 762.710171][ T3678] netlink: 'syz.3.6701': attribute type 3 has an invalid length. [ 762.742434][ T3672] geneve2: entered promiscuous mode [ 762.748225][ T3672] geneve2: entered allmulticast mode [ 762.945532][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 762.953744][ C1] lec:lec_tx_timeout: lec0 [ 762.971890][ T3696] netlink: 696 bytes leftover after parsing attributes in process `syz.0.6705'. [ 763.153612][ T3708] netlink: 'syz.0.6706': attribute type 3 has an invalid length. [ 763.219773][ T3708] netlink: 'syz.0.6706': attribute type 1 has an invalid length. [ 763.522836][ T3730] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6711'. [ 763.560568][ T3730] batman_adv: batadv0: Adding interface: dummy0 [ 763.579900][ T3730] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.670529][ T3730] batman_adv: batadv0: Interface activated: dummy0 [ 763.765936][ T3737] net_ratelimit: 5 callbacks suppressed [ 763.765959][ T3737] batadv0: mtu less than device minimum [ 763.815752][ T3737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.827625][ T3737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.839529][ T3737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.851567][ T3737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.863564][ T3737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.875521][ T3737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.887455][ T3737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.899287][ T3737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 763.911137][ T3737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 764.034857][ T3751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6718'. [ 764.063987][ T3751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6718'. [ 764.127520][ T3751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6718'. [ 764.156398][ T3754] nft_compat: unsupported protocol 0 [ 764.254644][ T3760] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6721'. [ 764.306218][ T3760] netlink: 'syz.5.6721': attribute type 7 has an invalid length. [ 764.336327][ T3764] netlink: 'syz.0.6720': attribute type 33 has an invalid length. [ 765.422553][ T3825] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 765.483722][ T3833] validate_nla: 1 callbacks suppressed [ 765.483742][ T3833] netlink: 'syz.6.6739': attribute type 21 has an invalid length. [ 765.878120][ T5877] IPVS: starting estimator thread 0... [ 765.975272][ T3847] IPVS: using max 28 ests per chain, 67200 per kthread [ 766.161056][ T3856] netlink: 'syz.6.6746': attribute type 1 has an invalid length. [ 766.306091][ T3861] __nla_validate_parse: 5 callbacks suppressed [ 766.306111][ T3861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6748'. [ 766.432084][ T3876] netlink: 'syz.6.6751': attribute type 1 has an invalid length. [ 766.509595][ T3870] bond6: entered promiscuous mode [ 766.516440][ T3870] bond6: entered allmulticast mode [ 766.547205][ T3870] 8021q: adding VLAN 0 to HW filter on device bond6 [ 766.597815][ T3876] bond2: entered promiscuous mode [ 766.613634][ T3876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 766.655323][ T3886] netlink: 'syz.4.6754': attribute type 1 has an invalid length. [ 766.698568][ T3882] bond2: (slave bridge2): making interface the new active one [ 766.707481][ T3882] bridge2: entered promiscuous mode [ 766.714894][ T3882] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 766.727978][ T3886] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 767.338835][ T3931] netlink: 'syz.3.6764': attribute type 10 has an invalid length. [ 767.481930][ T3931] mac80211_hwsim hwsim65 wlan1: left promiscuous mode [ 767.516246][ T3931] mac80211_hwsim hwsim65 wlan1: left allmulticast mode [ 767.586367][ T3931] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 767.679666][ T3947] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6766'. [ 767.783027][ T3952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6769'. [ 767.814790][ T3952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6769'. [ 767.868586][ T3956] macvtap1: entered promiscuous mode [ 767.873963][ T3956] bond0: entered promiscuous mode [ 767.905280][ T3956] macvtap1: entered allmulticast mode [ 767.926290][ T3956] bond0: entered allmulticast mode [ 767.931829][ T3955] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6768'. [ 767.946531][ T3956] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 767.999228][ T3957] macvtap2: entered promiscuous mode [ 768.061722][ T3957] macvtap2: entered allmulticast mode [ 768.287714][ T3975] netlink: 'syz.0.6775': attribute type 1 has an invalid length. [ 768.317669][ T3975] nbd: error processing sock list [ 768.341288][ T3975] block nbd1: shutting down sockets [ 768.485478][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6776'. [ 768.620583][ T3986] netlink: 'syz.5.6778': attribute type 39 has an invalid length. [ 768.991497][ T4004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6782'. [ 769.055889][ T4004] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6782'. [ 769.131099][ T4012] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6785'. [ 769.247015][ T4016] netlink: 388 bytes leftover after parsing attributes in process `syz.0.6786'. [ 769.422079][ T4027] vlan1: entered allmulticast mode [ 769.452279][ T4027] veth0_vlan: entered allmulticast mode [ 769.664588][ T4044] syzkaller0: entered promiscuous mode [ 769.700668][ T4044] syzkaller0: entered allmulticast mode [ 769.749223][ T4052] ip6t_srh: unknown srh match flags 4000 [ 769.837188][T13592] net_ratelimit: 25 callbacks suppressed [ 769.837211][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.852129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.924776][ T4054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 770.001645][ T4057] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 770.028234][ T4057] bond4 (unregistering): Released all slaves [ 770.335824][ T4063] netlink: 'syz.3.6799': attribute type 3 has an invalid length. [ 770.397052][ T4063] netlink: 'syz.3.6799': attribute type 3 has an invalid length. [ 770.562554][ T4075] syzkaller1: entered promiscuous mode [ 770.570515][ T4075] syzkaller1: entered allmulticast mode [ 770.875300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.883706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.892270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.968040][ T7173] wlan1: Trigger new scan to find an IBSS to join [ 770.987722][ T4125] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 771.016200][ T4125] bond0: (slave gre0): Error -95 calling set_mac_address [ 771.034524][T13594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.043648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.479802][ T4149] __nla_validate_parse: 6 callbacks suppressed [ 771.479824][ T4149] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6816'. [ 771.597705][T13594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.920104][ T4172] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 771.952814][ T4174] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6819'. [ 772.747602][ T4218] siw: device registration error -23 [ 772.794239][ T4223] netlink: 'syz.3.6829': attribute type 9 has an invalid length. [ 772.833314][ T4216] syzkaller0: entered allmulticast mode [ 772.928965][ T4216] syzkaller0 (unregistering): left allmulticast mode [ 773.091017][ T4237] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 773.185938][ T4243] netlink: 59 bytes leftover after parsing attributes in process `syz.3.6832'. [ 773.346340][ T4248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6833'. [ 773.735872][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6840'. [ 773.958580][ T4274] vlan2: entered allmulticast mode [ 774.209769][ T4295] tipc: Started in network mode [ 774.214805][ T4295] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 774.260040][ T4295] tipc: Enabled bearer , priority 2 [ 774.288601][ T4297] netlink: 'syz.3.6847': attribute type 10 has an invalid length. [ 774.346027][ T4297] team0: Device veth1_macvtap failed to register rx_handler [ 774.560588][ T4315] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6850'. [ 775.375142][ T24] tipc: Node number set to 10463914 [ 775.565690][ T12] net_ratelimit: 8 callbacks suppressed [ 775.565712][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.580448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.915937][ T13] wlan1: Trigger new scan to find an IBSS to join [ 775.995159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.003567][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.695386][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.703829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.816957][ T13] wlan1: Creating new IBSS network, BSSID 3a:68:be:df:a2:52 [ 777.202028][ T4297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 777.687264][ T4384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6857'. [ 777.740284][ T4384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6857'. [ 777.787503][ T4392] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6864'. [ 777.810119][ T4393] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6864'. [ 777.824595][ T4394] openvswitch: netlink: IP tunnel dst address not specified [ 777.847254][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.856378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.896660][ T4394] netlink: 'syz.0.6863': attribute type 4 has an invalid length. [ 778.201601][ T4412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6867'. [ 778.532033][ T4426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.734366][ T4432] team0: Device gtp0 is up. Set it down before adding it as a team port [ 778.763141][ T4435] netlink: 'syz.6.6875': attribute type 1 has an invalid length. [ 778.814410][ T4436] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6875'. [ 778.857808][ T4435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 778.979363][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.450036][ T4512] netlink: 150048 bytes leftover after parsing attributes in process `syz.0.6895'. [ 780.745648][ T4526] netlink: 248 bytes leftover after parsing attributes in process `syz.5.6898'. [ 780.793233][ T4526] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6898'. [ 780.928326][ T4545] netlink: 'syz.0.6899': attribute type 21 has an invalid length. [ 781.009946][ T4545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6899'. [ 781.195867][ T4235] net_ratelimit: 6 callbacks suppressed [ 781.195888][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.226374][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.234810][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.747313][ T4578] netlink: 'syz.3.6908': attribute type 29 has an invalid length. [ 781.786980][ T4578] netlink: 'syz.3.6908': attribute type 29 has an invalid length. [ 781.811483][ T4580] tipc: MTU too low for tipc bearer [ 782.358707][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.367162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.395200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.490629][ T4625] netlink: 'syz.3.6919': attribute type 1 has an invalid length. [ 782.529323][ T4625] bond7: entered promiscuous mode [ 782.537431][ T4625] 8021q: adding VLAN 0 to HW filter on device bond7 [ 782.564833][ T4624] 8021q: adding VLAN 0 to HW filter on device bond7 [ 782.572529][ T4624] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 782.596012][ T4624] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 782.618451][ T4624] bond7: (slave vti0): making interface the new active one [ 782.627264][ T4624] vti0: entered promiscuous mode [ 782.640388][ T4624] bond7: (slave vti0): Enslaving as an active interface with an up link [ 783.024369][ T4645] netlink: 'syz.0.6924': attribute type 1 has an invalid length. [ 783.035218][ T4648] __nla_validate_parse: 2 callbacks suppressed [ 783.035239][ T4648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6922'. [ 783.067647][ T4649] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6923'. [ 783.078819][ T4647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6924'. [ 783.116083][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 783.152171][ T4655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6924'. [ 783.175657][ T4645] 8021q: adding VLAN 0 to HW filter on device bond4 [ 783.266987][ T4658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6925'. [ 783.279544][ T4658] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 783.540940][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.549967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.803544][ T4690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6932'. [ 783.919553][ T4690] 8021q: adding VLAN 0 to HW filter on device bond5 [ 783.965899][ T4700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6935'. [ 783.977811][ T4700] lo: left promiscuous mode [ 784.029109][ T4704] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6935'. [ 784.059090][ T4700] gretap0: left promiscuous mode [ 784.209693][ T4700] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.217526][ T4700] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.393795][ T4700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.413552][ T4700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.524601][ T4700] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 784.562450][ T4700] sit1: left promiscuous mode [ 784.593578][ T4700] bond6: left promiscuous mode [ 784.600152][ T4700] bond7: left promiscuous mode [ 784.605300][ T4700] vti0: left promiscuous mode [ 784.638197][ T4713] bridge3: entered allmulticast mode [ 784.663477][T13594] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.673424][T13594] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.698158][T13594] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.713656][T13594] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.740201][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.848894][ T4721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6938'. [ 784.925726][ T4729] batman_adv: batadv0: Interface deactivated: dummy0 [ 785.045542][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6941'. [ 785.192492][ T4740] netlink: 'syz.0.6942': attribute type 39 has an invalid length. [ 785.974636][ T4729] bond1: left promiscuous mode [ 785.995946][ T4729] team1: left promiscuous mode [ 786.013948][ T4729] bond2: left promiscuous mode [ 786.018860][ T4729] bridge2: left promiscuous mode [ 786.185872][T13594] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.199367][T13594] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.218606][T13594] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.227941][ T4743] netlink: 'syz.3.6943': attribute type 1 has an invalid length. [ 786.236095][ C0] net_ratelimit: 3 callbacks suppressed [ 786.236116][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.236342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.236564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.288879][T13594] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.300254][ T4744] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 786.336105][ T4743] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 786.418224][ T4758] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 786.961967][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.016608][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.025070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.112409][ T4798] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 787.760591][ T4836] netlink: 'syz.5.6964': attribute type 1 has an invalid length. [ 787.769001][ T4836] netlink: 'syz.5.6964': attribute type 2 has an invalid length. [ 787.787369][ T4834] syzkaller1: entered promiscuous mode [ 787.804454][ T4834] syzkaller1: entered allmulticast mode [ 787.814591][ T4836] netlink: 'syz.5.6964': attribute type 2 has an invalid length. [ 787.851983][ T4836] netlink: 'syz.5.6964': attribute type 2 has an invalid length. [ 787.964818][ T4844] netem: invalid attributes len -24 [ 787.971197][ T4844] netem: change failed [ 787.983705][ T4850] netem: invalid attributes len -24 [ 787.998055][ T4850] netem: change failed [ 788.137879][ T4857] __nla_validate_parse: 6 callbacks suppressed [ 788.137898][ T4857] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6968'. [ 788.175966][ T7172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.184954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.867281][ T4896] sit1: entered promiscuous mode [ 788.893653][ T4896] sit1: entered allmulticast mode [ 788.926361][ T4897] syzkaller0: entered promiscuous mode [ 788.932373][ T4897] syzkaller0: entered allmulticast mode [ 788.944617][ T4891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6976'. [ 789.133420][ T4904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6979'. [ 789.345217][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.353652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.406583][ T4915] vlan3: entered allmulticast mode [ 789.440782][ T4917] xt_l2tp: v2 doesn't support IP mode [ 789.469110][ T4920] 8021q: VLANs not supported on sit0 [ 789.633166][ T4924] syzkaller0: entered promiscuous mode [ 789.640324][ T4924] syzkaller0: entered allmulticast mode [ 790.047219][ T4948] @0Ù: renamed from bond_slave_1 (while UP) [ 790.143706][ T4952] bridge0: entered allmulticast mode [ 790.752055][ T4977] syzkaller0: entered allmulticast mode [ 790.771832][ T4977] Cannot find del_set index 4 as target [ 790.877034][ T4988] syzkaller0 (unregistering): left allmulticast mode [ 791.009610][ T5001] IPVS: length: 28 != 24 [ 791.261005][ T5011] tipc: Failed to remove unknown binding: 66,1,1/3686136757:480478188/480478190 [ 791.292671][ T5011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7006'. [ 791.302201][ T5011] block nbd1: Unsupported socket: should be TCP or UNIX. [ 791.376595][ T5014] netlink: 'syz.6.7007': attribute type 1 has an invalid length. [ 791.405662][ T5014] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7007'. [ 791.426322][ T5014] netlink: 1 bytes leftover after parsing attributes in process `syz.6.7007'. [ 791.438993][ T5830] Bluetooth: hci7: command 0x0405 tx timeout [ 791.446711][ T5017] netlink: 'syz.0.7008': attribute type 1 has an invalid length. [ 791.476821][ T5014] netlink: 'syz.6.7007': attribute type 1 has an invalid length. [ 791.484628][ T5014] netlink: 618 bytes leftover after parsing attributes in process `syz.6.7007'. [ 791.519805][ T5017] 8021q: adding VLAN 0 to HW filter on device bond6 [ 791.653223][ T13] net_ratelimit: 5 callbacks suppressed [ 791.653244][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.668173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.685465][ T5022] 8021q: adding VLAN 0 to HW filter on device bond6 [ 791.700552][ T5022] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 791.727642][ T5022] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 791.841517][ T5017] veth3: entered promiscuous mode [ 791.869765][ T5017] bond6: (slave veth3): Enslaving as an active interface with a down link [ 791.920317][ T5030] vlan3: entered allmulticast mode [ 791.935246][ T5030] bond6: entered allmulticast mode [ 791.995259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.003712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.012342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.296823][ T5053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7014'. [ 792.307107][ T5053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7014'. [ 792.317789][ T5053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7014'. [ 792.733384][T13594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.743150][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 792.754739][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 792.763094][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 792.800169][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 792.817819][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 792.820822][ T5081] netlink: 'syz.3.7022': attribute type 1 has an invalid length. [ 792.865944][T13594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.874327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.013310][ T5085] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 793.121102][ T5078] ip6_vti0 speed is unknown, defaulting to 1000 [ 793.868483][ T5122] __nla_validate_parse: 4 callbacks suppressed [ 793.868499][ T5122] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7031'. [ 794.036749][T13594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.045160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.643251][ T5159] netlink: 'syz.6.7036': attribute type 1 has an invalid length. [ 794.889647][ T52] Bluetooth: hci2: command tx timeout [ 795.437235][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 796.410165][ T5078] lo speed is unknown, defaulting to 1000 [ 796.417169][ T5159] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 796.785296][ T5186] netlink: 'syz.5.7040': attribute type 1 has an invalid length. [ 796.790411][ T5184] ip6t_srh: unknown srh match flags 4000 [ 796.931995][ T5199] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 796.966197][ T5830] Bluetooth: hci2: command tx timeout [ 797.090587][ T5193] bond3: (slave ip6gretap1): making interface the new active one [ 797.106518][ T5193] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 797.114811][ T5193] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 797.125773][ C1] net_ratelimit: 4 callbacks suppressed [ 797.125791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.129121][ T5193] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 797.132264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.157030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.182576][ T5078] hsr0 speed is unknown, defaulting to 1000 [ 797.458604][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.467099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.552853][ T5226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7044'. [ 797.638369][ T5231] netlink: 'syz.0.7046': attribute type 14 has an invalid length. [ 797.673905][ T5078] chnl_net:caif_netlink_parms(): no params data found [ 797.838058][T13593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.069248][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.079718][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.088834][ T5078] bridge_slave_0: entered allmulticast mode [ 798.099018][ T5078] bridge_slave_0: entered promiscuous mode [ 798.109073][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.125285][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.142926][ T5078] bridge_slave_1: entered allmulticast mode [ 798.166044][ T5078] bridge_slave_1: entered promiscuous mode [ 798.238722][ T5078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.253885][ T5078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.306739][ T5078] team0: Port device team_slave_0 added [ 798.317792][ T5078] team0: Port device team_slave_1 added [ 798.353867][ T5261] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7053'. [ 798.379417][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.386669][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.415498][ T5078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.429203][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.437571][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.464530][ T5078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.576741][ T5078] hsr_slave_0: entered promiscuous mode [ 798.584135][ T5078] hsr_slave_1: entered promiscuous mode [ 798.591389][ T5078] debugfs: 'hsr0' already exists in 'hsr' [ 798.599515][ T5078] Cannot create hsr debugfs directory [ 798.635491][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.643912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.035585][ T5830] Bluetooth: hci2: command tx timeout [ 799.757433][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.766721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.370872][ T5212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 800.421764][ T5078] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 800.499998][ T5078] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 800.517781][ T5272] netlink: 'syz.5.7054': attribute type 1 has an invalid length. [ 800.555141][ T5272] netlink: 'syz.5.7054': attribute type 2 has an invalid length. [ 800.589226][ T5078] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 800.597826][ T5270] netlink: 'syz.5.7054': attribute type 1 has an invalid length. [ 800.629802][ T5078] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 800.638159][ T5270] netlink: 'syz.5.7054': attribute type 2 has an invalid length. [ 800.841106][ T5297] nbd: device at index 6 is going down [ 800.916895][ T5294] veth1_to_bridge: entered promiscuous mode [ 800.922996][ T5294] veth1_to_bridge: entered allmulticast mode [ 801.116584][ T5830] Bluetooth: hci2: command tx timeout [ 801.191453][ T5078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.223952][ T5078] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.254069][T13593] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.261319][T13593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.286588][ T5310] netlink: 'syz.3.7063': attribute type 1 has an invalid length. [ 801.318104][ T5316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7064'. [ 801.389560][ T5310] 8021q: adding VLAN 0 to HW filter on device bond8 [ 801.421504][T13593] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.428802][T13593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.504161][ T5327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7066'. [ 801.532646][ T5330] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 801.597313][ T5327] veth0: entered promiscuous mode [ 801.662184][ T5326] veth0: left promiscuous mode [ 801.760236][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7069'. [ 801.769775][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7069'. [ 801.874210][ T5346] netlink: 'syz.3.7071': attribute type 1 has an invalid length. [ 801.893165][ T5346] netlink: 'syz.3.7071': attribute type 1 has an invalid length. [ 801.990965][ T5354] netlink: 'syz.3.7072': attribute type 1 has an invalid length. [ 802.160514][ T5357] gretap1: entered promiscuous mode [ 802.172505][ T5362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7073'. [ 802.235421][ C0] net_ratelimit: 5 callbacks suppressed [ 802.235441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.249580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.258061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.284798][ T5362] bond0 (unregistering): Released all slaves [ 802.324681][ T5078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.877233][T13593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.930465][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7080'. [ 803.039547][ T5402] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7082'. [ 803.128549][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.137996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.200150][ T5078] veth0_vlan: entered promiscuous mode [ 803.308134][ T5416] x_tables: duplicate underflow at hook 4 [ 803.377243][ T5078] veth1_vlan: entered promiscuous mode [ 803.448673][ T5422] netlink: 'syz.0.7088': attribute type 1 has an invalid length. [ 803.477137][ T5078] veth0_macvtap: entered promiscuous mode [ 803.509914][ T5078] veth1_macvtap: entered promiscuous mode [ 803.528046][ T5422] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7088'. [ 803.567653][ T5422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7088'. [ 803.575826][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.594722][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.650236][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.661643][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.708336][ T7173] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.754818][ T7173] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.951552][ T5437] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 804.162099][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.196626][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.256019][ T7172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.264463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.306314][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.314194][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.387644][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7098'. [ 804.664660][ T5463] netlink: 'syz.3.7100': attribute type 13 has an invalid length. [ 804.930256][ T5486] Cannot find add_set index 0 as target [ 804.982142][ T5494] nbd: must specify a size in bytes for the device [ 805.017241][ T5496] netlink: 'syz.0.7108': attribute type 58 has an invalid length. [ 805.415248][ T7173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.423658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.582805][ T5523] dvmrp8: entered allmulticast mode [ 805.633995][ T5525] dvmrp8: left allmulticast mode [ 805.679246][ T5430] Bluetooth: hci6: command 0x0406 tx timeout [ 805.680288][T30918] Bluetooth: hci5: command 0x0406 tx timeout [ 805.987272][ T5540] netlink: 'syz.3.7120': attribute type 10 has an invalid length. [ 806.054612][ T5543] syzkaller0: entered promiscuous mode [ 806.072883][ T5543] syzkaller0: entered allmulticast mode [ 806.166393][ T5541] syzkaller0: entered promiscuous mode [ 806.172086][ T5541] syzkaller0: entered allmulticast mode [ 807.750749][ T7172] net_ratelimit: 2 callbacks suppressed [ 807.750765][ T7172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.766211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.996860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.005285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.013726][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.592905][ T5556] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 808.718175][T13593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.824248][ T5584] __nla_validate_parse: 4 callbacks suppressed [ 808.824267][ T5584] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7130'. [ 808.889485][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.898198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.219627][ T5610] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7135'. [ 809.260922][ T5612] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7134'. [ 809.358096][ T8324] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 809.421775][ T5621] netlink: 'syz.6.7138': attribute type 2 has an invalid length. [ 809.703348][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7143'. [ 809.913063][ T5656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7144'. [ 809.950222][ T5655] : entered promiscuous mode [ 810.065157][ T5661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7146'. [ 810.071394][ T7173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.082925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.500601][ T5681] netlink: 'syz.7.7149': attribute type 2 has an invalid length. [ 810.679632][ T5691] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7151'. [ 810.912890][ T5699] syzkaller0: entered allmulticast mode [ 811.170389][ T5709] tipc: Enabling of bearer rejected, failed to enable media [ 811.328036][ T5714] netlink: 'syz.0.7158': attribute type 1 has an invalid length. [ 811.466023][ T5714] 8021q: adding VLAN 0 to HW filter on device bond7 [ 811.533873][ T5716] 8021q: adding VLAN 0 to HW filter on device bond7 [ 811.559787][ T5716] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 811.592494][ T5716] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 811.729548][ T5727] veth5: entered promiscuous mode [ 811.790875][ T5727] bond7: (slave veth5): Enslaving as an active interface with a down link [ 811.889318][ T5714] vlan3: entered allmulticast mode [ 811.903604][ T5714] bond7: entered allmulticast mode [ 812.153095][ T5761] x_tables: duplicate underflow at hook 1 [ 812.253870][ T5765] bridge0: left allmulticast mode [ 812.374131][ T5773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7170'. [ 812.439081][ T5772] netlink: 'syz.7.7171': attribute type 3 has an invalid length. [ 812.476719][ T5772] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7171'. [ 812.621293][ T5785] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7173'. [ 813.115134][ C1] net_ratelimit: 5 callbacks suppressed [ 813.115155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.129723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.138157][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.196415][ T5818] netlink: 'syz.6.7180': attribute type 12 has an invalid length. [ 813.369722][ T5826] syzkaller0: entered allmulticast mode [ 813.417865][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.426386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.843867][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 813.850479][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 814.272203][ T5903] syzkaller0: entered promiscuous mode [ 814.478290][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.502705][ T5916] __nla_validate_parse: 4 callbacks suppressed [ 814.502727][ T5916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7197'. [ 814.579839][ T7173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.588312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.677166][ T5966] netlink: 'syz.0.7206': attribute type 2 has an invalid length. [ 815.696068][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.697316][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7206'. [ 815.704773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.765118][ T5969] netlink: 'syz.0.7206': attribute type 2 has an invalid length. [ 815.783741][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7206'. [ 816.498016][ T6009] netlink: 124 bytes leftover after parsing attributes in process `syz.7.7217'. [ 816.585438][ T6015] ipt_REJECT: ECHOREPLY no longer supported. [ 816.880525][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.888327][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.916739][ T6027] xt_hashlimit: overflow, rate too high: 0 [ 817.056150][ T6037] netlink: 'syz.6.7225': attribute type 14 has an invalid length. [ 817.075270][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7225'. [ 817.180660][ T6035] syzkaller0: entered promiscuous mode [ 817.186910][ T6035] syzkaller0: entered allmulticast mode [ 817.205938][ T6037] netlink: 'syz.6.7225': attribute type 14 has an invalid length. [ 817.233161][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7225'. [ 817.259171][ T7173] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.271362][ T7173] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.306590][ T7173] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.879384][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 818.887443][ C1] lec:lec_tx_timeout: lec0 [ 818.892155][ C1] net_ratelimit: 6 callbacks suppressed [ 818.892167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.906203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.914555][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.046641][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.055070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.660076][ T7173] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.681366][ T9258] lec:lec_start_xmit: lec0:No lecd attached [ 819.918616][ T6078] netlink: 'syz.5.7236': attribute type 5 has an invalid length. [ 819.960967][ T6078] netlink: 'syz.5.7236': attribute type 1 has an invalid length. [ 819.993959][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7236'. [ 820.031805][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7235'. [ 820.061665][ T6083] Bluetooth: MGMT ver 1.23 [ 820.217454][ T7173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.226635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.236639][T13593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.399203][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7241'. [ 820.472499][ T6106] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7242'. [ 820.706857][ T6111] syzkaller0: entered promiscuous mode [ 820.712406][ T6111] syzkaller0: entered allmulticast mode [ 820.837418][ T6121] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7245'. [ 820.854141][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7245'. [ 820.864696][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7245'. [ 821.090351][ T6132] netlink: 'syz.0.7248': attribute type 12 has an invalid length. [ 821.109675][ T6132] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7248'. [ 821.326232][ T6148] xt_TPROXY: Can be used only with -p tcp or -p udp [ 821.359565][ T6152] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.7254'. [ 821.374324][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.383365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.516787][ T31] INFO: task syz.2.5872:32351 blocked for more than 143 seconds. [ 821.541135][ T31] Not tainted syzkaller #0 [ 821.548771][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 821.557639][ T31] task:syz.2.5872 state:D stack:27104 pid:32351 tgid:32350 ppid:19826 task_flags:0x400040 flags:0x00080002 [ 821.571033][ T31] Call Trace: [ 821.575740][ T31] [ 821.578812][ T31] __schedule+0x14ea/0x5050 [ 821.583479][ T31] ? __pfx___schedule+0x10/0x10 [ 821.590112][ T31] ? schedule+0x90/0x360 [ 821.594496][ T31] schedule+0x164/0x360 [ 821.599579][ T31] schedule_preempt_disabled+0x13/0x30 [ 821.606861][ T31] __mutex_lock+0x7fe/0x1300 [ 821.612796][ T31] ? __mutex_lock+0x5ac/0x1300 [ 821.621313][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 821.627552][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 821.632708][ T31] ? __nlmsg_put+0xef/0x1b0 [ 821.638130][ T31] ? genlmsg_put+0x137/0x2e0 [ 821.642859][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 821.651409][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 821.656986][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 821.663730][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 821.670370][ T31] ? __asan_memcpy+0x40/0x70 [ 821.676711][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 821.683169][ T6158] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7256'. [ 821.694318][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 821.702260][ T31] genl_rcv_msg+0x61c/0x7a0 [ 821.707541][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 821.712746][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 821.720126][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 821.730374][ T31] netlink_rcv_skb+0x232/0x4b0 [ 821.735678][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 821.743184][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 821.757864][ T31] ? genl_rcv+0x19/0x40 [ 821.767153][ T31] ? down_read+0x272/0x2e0 [ 821.777559][ T31] ? genl_rcv+0xd/0x40 [ 821.787374][ T31] genl_rcv+0x28/0x40 [ 821.796133][ T31] netlink_unicast+0x80f/0x9b0 [ 821.808913][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 821.820245][ T31] ? __alloc_skb+0x193/0x390 [ 821.831967][ T31] ? netlink_sendmsg+0x650/0xb40 [ 821.850595][ T31] ? skb_put+0x11b/0x210 [ 821.857287][ T31] netlink_sendmsg+0x813/0xb40 [ 821.862294][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.868721][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 821.873880][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 821.879702][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.885629][ T31] ____sys_sendmsg+0xa68/0xad0 [ 821.890608][ T31] ? __might_fault+0xaf/0x130 [ 821.902892][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.908813][ T31] ? import_iovec+0x73/0xa0 [ 821.913550][ T31] ___sys_sendmsg+0x2a5/0x360 [ 821.928919][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 821.937972][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.943259][ T31] ? futex_wait+0x29a/0x380 [ 821.948127][ T31] ? __fget_files+0x2a/0x420 [ 821.952774][ T31] ? __fget_files+0x3a0/0x420 [ 821.984992][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 821.990069][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.005133][ T31] ? rcu_is_watching+0x15/0xb0 [ 822.009994][ T31] do_syscall_64+0xe2/0xf80 [ 822.014641][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.045025][ T31] ? trace_irq_disable+0x37/0x100 [ 822.050145][ T31] ? clear_bhb_loop+0x60/0xb0 [ 822.076688][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.082666][ T31] RIP: 0033:0x7fd42339aeb9 [ 822.093916][ T31] RSP: 002b:00007fd4242a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.125700][ T31] RAX: ffffffffffffffda RBX: 00007fd423615fa0 RCX: 00007fd42339aeb9 [ 822.133756][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 822.164749][ T31] RBP: 00007fd423408c1f R08: 0000000000000000 R09: 0000000000000000 [ 822.188289][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.196483][ T31] R13: 00007fd423616038 R14: 00007fd423615fa0 R15: 00007ffd55095af8 [ 822.204527][ T31] [ 822.225162][ T31] [ 822.225162][ T31] Showing all locks held in the system: [ 822.232955][ T31] 1 lock held by khungtaskd/31: [ 822.242154][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 822.256355][ T31] 2 locks held by getty/5581: [ 822.261186][ T31] #0: ffff88814d5950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 822.276580][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 822.287921][ T31] 2 locks held by syz.1.5503/29940: [ 822.293163][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.303907][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 822.320051][ T31] 1 lock held by udevd/30926: [ 822.324793][ T31] #0: ffff88802f842358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 822.334210][ T31] 2 locks held by syz.2.5872/32351: [ 822.339757][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.349048][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 822.360472][ T31] 3 locks held by kworker/u8:3/4235: [ 822.370410][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 822.384054][ T31] #1: ffffc90010ca7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 822.399645][ T31] #2: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 822.412299][ T31] 2 locks held by syz.4.6857/4374: [ 822.417798][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.426530][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 822.437460][ T31] 1 lock held by poweroff/5561: [ 822.442351][ T31] #0: ffff88802f842358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 [ 822.451952][ T31] 2 locks held by syz.3.7131/5582: [ 822.457360][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.469742][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1ba/0x700 [ 822.482333][ T31] 1 lock held by syz.6.7249/6135: [ 822.488232][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 822.498140][ T31] 3 locks held by syz.5.7254/6147: [ 822.503291][ T31] #0: ffff88805a3835c8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 822.518769][ T31] #1: ffff888024ac4260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1cd/0x940 [ 822.528922][ T31] #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 822.540370][ T31] 1 lock held by syz.0.7255/6154: [ 822.545809][ T31] #0: ffff888053bd63c8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 822.560055][ T31] 3 locks held by syz.0.7255/6155: [ 822.565396][ T31] #0: ffffffff8f110dc8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 822.582492][ T31] #1: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 822.594186][ T31] #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 822.607255][ T31] 1 lock held by syz.7.7256/6158: [ 822.612316][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 822.623308][ T31] 1 lock held by syz.7.7256/6161: [ 822.631691][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 822.643890][ T31] 1 lock held by syz.7.7256/6165: [ 822.649740][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 822.660293][ T31] 1 lock held by syz.7.7256/6167: [ 822.665544][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 822.677369][ T31] 1 lock held by syz.7.7256/6170: [ 822.682438][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 822.693505][ T31] 4 locks held by rm/6181: [ 822.700189][ T31] [ 822.702608][ T31] ============================================= [ 822.702608][ T31] [ 822.711577][ T31] NMI backtrace for cpu 1 [ 822.711596][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 822.711619][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 822.711632][ T31] Call Trace: [ 822.711641][ T31] [ 822.711651][ T31] dump_stack_lvl+0xe8/0x150 [ 822.711683][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 822.711713][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 822.711748][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 822.711780][ T31] sys_info+0x135/0x170 [ 822.711804][ T31] watchdog+0xf90/0xfe0 [ 822.711833][ T31] ? watchdog+0x209/0xfe0 [ 822.711864][ T31] kthread+0x726/0x8b0 [ 822.711891][ T31] ? __pfx_watchdog+0x10/0x10 [ 822.711913][ T31] ? __pfx_kthread+0x10/0x10 [ 822.711948][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 822.711979][ T31] ? __pfx_kthread+0x10/0x10 [ 822.712004][ T31] ret_from_fork+0x51b/0xa40 [ 822.712045][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 822.712075][ T31] ? __switch_to+0xc82/0x1410 [ 822.712108][ T31] ? __pfx_kthread+0x10/0x10 [ 822.712133][ T31] ret_from_fork_asm+0x1a/0x30 [ 822.712180][ T31] [ 822.712188][ T31] Sending NMI from CPU 1 to CPUs 0: [ 822.842682][ C0] NMI backtrace for cpu 0 [ 822.842701][ C0] CPU: 0 UID: 0 PID: 6181 Comm: rm Not tainted syzkaller #0 PREEMPT(full) [ 822.842721][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 822.842733][ C0] RIP: 0010:__lock_acquire+0x70/0x2cf0 [ 822.842765][ C0] Code: 48 3d c0 83 b6 93 0f 84 da 13 00 00 41 89 cd 41 89 d6 8b 0d 22 33 a2 0c 85 c9 44 0f 44 c1 31 c9 48 3d b0 83 b6 93 41 0f 45 c8 <89> 4c 24 10 8b 0d 06 c3 5d 18 85 c9 0f 95 c0 83 fe 08 0f 92 c2 08 [ 822.842780][ C0] RSP: 0018:ffffc9000ba6f050 EFLAGS: 00000006 [ 822.842797][ C0] RAX: ffffffff9a023be0 RBX: 0000000000000000 RCX: 0000000000000000 [ 822.842810][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e55a360 [ 822.842821][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8e55a360 [ 822.842833][ C0] R10: ffffc9000ba6f358 R11: ffffffff81afb170 R12: 0000000000000002 [ 822.842845][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 822.842857][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 822.842872][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.842884][ C0] CR2: 00007f62394d5e9c CR3: 0000000031700000 CR4: 00000000003526f0 [ 822.842911][ C0] Call Trace: [ 822.842917][ C0] [ 822.842927][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 822.842956][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 822.842978][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 822.842995][ C0] lock_acquire+0x106/0x330 [ 822.843018][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 822.843040][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 822.843058][ C0] ? exit_mm+0x168/0x220 [ 822.843078][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 822.843096][ C0] unwind_next_frame+0xc2/0x23c0 [ 822.843113][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 822.843134][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 822.843152][ C0] ? __mmput+0x118/0x430 [ 822.843176][ C0] ? exit_mm+0x168/0x220 [ 822.843203][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 822.843225][ C0] arch_stack_walk+0x11b/0x150 [ 822.843246][ C0] ? exit_mm+0x168/0x220 [ 822.843267][ C0] stack_trace_save+0xa9/0x100 [ 822.843288][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 822.843309][ C0] ? stack_depot_save_flags+0x33/0x810 [ 822.843334][ C0] save_stack+0x122/0x230 [ 822.843361][ C0] ? __pfx_save_stack+0x10/0x10 [ 822.843384][ C0] ? page_ext_get+0x22/0x2e0 [ 822.843407][ C0] ? free_unref_folios+0xdce/0x1510 [ 822.843423][ C0] ? folios_put_refs+0x789/0x8d0 [ 822.843444][ C0] ? free_pages_and_swap_cache+0x2e7/0x5b0 [ 822.843467][ C0] ? tlb_flush_mmu+0x6d3/0xa30 [ 822.843487][ C0] ? tlb_finish_mmu+0xf9/0x230 [ 822.843504][ C0] ? exit_mmap+0x451/0xb30 [ 822.843546][ C0] ? __mmput+0x118/0x430 [ 822.843574][ C0] ? exit_mm+0x168/0x220 [ 822.843599][ C0] ? page_ext_put+0x97/0xc0 [ 822.843626][ C0] __reset_page_owner+0x71/0x1f0 [ 822.843654][ C0] free_unref_folios+0xdce/0x1510 [ 822.843679][ C0] folios_put_refs+0x789/0x8d0 [ 822.843700][ C0] ? exit_mmap+0x449/0xb30 [ 822.843731][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 822.843755][ C0] ? free_swap_cache+0x9b/0x300 [ 822.843779][ C0] free_pages_and_swap_cache+0x2e7/0x5b0 [ 822.843807][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 822.843846][ C0] ? __virt_addr_valid+0x1c8/0x5b0 [ 822.843879][ C0] tlb_flush_mmu+0x6d3/0xa30 [ 822.843898][ C0] ? __pfx_down_write+0x10/0x10 [ 822.843921][ C0] tlb_finish_mmu+0xf9/0x230 [ 822.843942][ C0] exit_mmap+0x451/0xb30 [ 822.843968][ C0] ? uprobe_clear_state+0x20f/0x290 [ 822.843989][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 822.844014][ C0] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 822.844040][ C0] ? __pfx_exit_aio+0x10/0x10 [ 822.844065][ C0] ? uprobe_clear_state+0x27c/0x290 [ 822.844087][ C0] __mmput+0x118/0x430 [ 822.844113][ C0] exit_mm+0x168/0x220 [ 822.844136][ C0] do_exit+0x62e/0x2310 [ 822.844161][ C0] ? __pfx_do_exit+0x10/0x10 [ 822.844185][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 822.844210][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 822.844239][ C0] do_group_exit+0x21b/0x2d0 [ 822.844264][ C0] __x64_sys_exit_group+0x3f/0x40 [ 822.844286][ C0] x64_sys_call+0x2210/0x2210 [ 822.844309][ C0] do_syscall_64+0xe2/0xf80 [ 822.844327][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.844345][ C0] ? trace_irq_disable+0x37/0x100 [ 822.844362][ C0] ? clear_bhb_loop+0x60/0xb0 [ 822.844383][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.844399][ C0] RIP: 0033:0x7f62396346c5 [ 822.844414][ C0] Code: Unable to access opcode bytes at 0x7f623963469b. [ 822.844423][ C0] RSP: 002b:00007ffd385cee68 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 822.844441][ C0] RAX: ffffffffffffffda RBX: 00007f6239735fe8 RCX: 00007f62396346c5 [ 822.844454][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 822.844466][ C0] RBP: 0000000000000001 R08: 00007ffd385cedf8 R09: 0000000000000000 [ 822.844478][ C0] R10: 00007ffd385cec90 R11: 0000000000000202 R12: 0000000000000000 [ 822.844489][ C0] R13: 0000000000000000 R14: 00007f6239734680 R15: 00007f6239736000 [ 822.844510][ C0] [ 823.411967][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 823.418901][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 823.428041][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 823.438151][ T31] Call Trace: [ 823.441470][ T31] [ 823.444430][ T31] vpanic+0x1e0/0x670 [ 823.448458][ T31] panic+0xc5/0xd0 [ 823.452255][ T31] ? __pfx_panic+0x10/0x10 [ 823.456726][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 823.462157][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 823.468361][ T31] watchdog+0xfda/0xfe0 [ 823.472562][ T31] ? watchdog+0x209/0xfe0 [ 823.476965][ T31] kthread+0x726/0x8b0 [ 823.481084][ T31] ? __pfx_watchdog+0x10/0x10 [ 823.485802][ T31] ? __pfx_kthread+0x10/0x10 [ 823.490451][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 823.495694][ T31] ? __pfx_kthread+0x10/0x10 [ 823.500346][ T31] ret_from_fork+0x51b/0xa40 [ 823.504993][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 823.510155][ T31] ? __switch_to+0xc82/0x1410 [ 823.514874][ T31] ? __pfx_kthread+0x10/0x10 [ 823.519513][ T31] ret_from_fork_asm+0x1a/0x30 [ 823.524316][ T31] [ 823.527962][ T31] Kernel Offset: disabled [ 823.532298][ T31] Rebooting in 86400 seconds..