last executing test programs: 10m39.968594013s ago: executing program 3 (id=10333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0xa}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r2}, 0x38) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xb4, 0x4, 0x9, 0x101, 0x70bd27, 0x25dfdbfe, {0x3, 0x0, 0x8}, [@nested={0x9e, 0x35, 0x0, 0x1, [@typed={0x4, 0x9d}, @nested={0x4, 0xd}, @generic="bb349f8997f24988faf13af92f16e1790bbae9951f696dc07eca08a793fd73996449525606e1a6001d5dca6ab5fb597b70c9dc5eb78f715cc64c5fb038d0ed602db3cea227b7753d12cf48a716250c97a2563db4104b5dca337e1598e3fe6d1741ae249a2ec1b7a1e9a6efcf5a9d1b438243447d44bfa6054f5b427b4913785b23431633c9420f65866091567f9a70e454b8"]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc010}, 0x40010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x12c, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x76}}}}, [@NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4ad23f4c96612882"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c098a042caf6ca9d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6526b0ce3649b55a7e67a88f8e6a3af538257aac54ecce8c89ab6772989504fe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "281fcb59a326d321"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ce406b5552464ae79a7902b5d8b945af"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1f3a2abca469a1ec"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52f735781be22584"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9fffe2ba915abc4c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2b0893adb606a8d35298d79c222411efbc48b472c3403f42f99556af9f7dac12"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d410f28ad507ddd1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="64aaa1426337a42fd2f6d659620b0783611c13cff3c366a2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e7ed100987d66646f0687c6daf368430"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4a5bf36ad5ee905ad648f8f3a2fd9a9b8ca5530a6957a19b"}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 10m39.790292757s ago: executing program 3 (id=10337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e20, 0x4, @private2, 0x3}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e24, 0x5, @empty, 0x4}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000180)={r8, @in6={{0xa, 0x4e24, 0x9, @empty, 0x7}}, 0xd, 0x7fff}, &(0x7f0000001040)=0x90) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x9, r9, 0xa9}, 0xc) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000001121c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x4) 10m39.630362732s ago: executing program 3 (id=10339): r0 = epoll_create(0x5b96) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000000)={0x0, 0x8, 0xb5b, 0x9, 0x3}) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20048044) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f00000001c0)={0x80}) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000280)={@loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2010100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) r5 = socket$pptp(0x18, 0x1, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r6, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x48040) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/time\x00') ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x204, r6, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x1c0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xe162}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x59e}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x204}, 0x1, 0x0, 0x0, 0x8010}, 0x4080) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000940), 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000980)={0x1f, 0x7ff, @any, 0x3ff, 0x1}, 0xe) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000009c0)={'nat\x00', 0xd1, "378852f636992c7b02f952521d959754c909e459445acd49dfda201c0638e07860cda42fe98507ff1d6bc881240b523f11134b954f391cdeee357ac4c93d57f1d7cf9ec8b409534813ba592fc2e34f57a0a9532fc625c045dbec580171397cdbd68a9bf49f9a1113e53739611b96239da9b01ec4c20fc3b37fabb5bcb9de268788419f7a83686248c0883cbfb3c47ae7335890d65b7b38e0037708c11abba7dbbeef9f828e3a45d029a71406b8f2579e8abfb8738d7a86599c80cdd4e2069295a20ea99a72594ebd7cb876c1727aa95130"}, &(0x7f0000000ac0)=0xf5) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000b00)={0x0, 0x5e, "6a46b6fd301196316c4b53116be1d2f77b59c8d0cd4f94a9bbf635bf97c9804c2333d68fa342b3e818bbd97ac85882b5223d31ded50ec2253ced6e96f1bbdf8b4f2f36656c91d72d75250ea6dee5589b0e0f25bd486a8ffcef6c66069a88"}, &(0x7f0000000b80)=0x66) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000bc0)={0x9, 0x768, 0x4, 0x8, 0x0, 0x5785, 0x5, 0x3, r10}, &(0x7f0000000c00)=0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c40)={'syzkaller1\x00', 0x0}) r12 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r12, &(0x7f0000000c80)={0x1d, r11, 0x0, {0x0, 0xf0, 0x4}}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 10m39.449780567s ago: executing program 3 (id=10343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000a000}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 10m39.337612053s ago: executing program 3 (id=10344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6}]}, 0x84}}, 0x20004084) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="340300001000808ae00d042abd7000000000000000000008c2dde8a75bb309a007bdf8ea67333a96be84789ae234d9377fda878a368e7cdf278db85e1488623c454393", @ANYRES32=0x0, @ANYBLOB="1101000000000000140035007465616d3000"/28], 0x39}}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)={0x4e0, r5, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x82}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x62}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x51d}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x153e}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x46b9, 0x1, 0x3, 0x5}, {0x0, 0x8, 0x6, 0x8000}, {0xfbff, 0x2, 0x6, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x40015}, 0x4040) 10m39.265294333s ago: executing program 3 (id=10346): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x48}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6(0xa, 0x3, 0x1b) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$rfkill(r9, &(0x7f0000000140), 0x8) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r10 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r10, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 10m24.195356924s ago: executing program 32 (id=10346): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x48}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6(0xa, 0x3, 0x1b) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$rfkill(r9, &(0x7f0000000140), 0x8) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r10 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r10, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 2.045376046s ago: executing program 1 (id=15926): syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000001"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @broadcast}, {0x1}, 0xa, {0x2, 0x4e20, @broadcast}, 'gretap0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES64, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4048810) 1.991047332s ago: executing program 2 (id=15927): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3, 0x0, 0x3, 0x20001}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x83, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x5c) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x30, r5, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x20004000) 1.763603508s ago: executing program 1 (id=15929): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x22000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x104038, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x7ff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000100)={r1, 0x1}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000140)="40582eb5f93915e77ed0c9bc3e7d7108d40e8d006a99e6f9a8cca5f80ddd791d7e17266a631552aa4a8b1c0cf8a4") r5 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default}, [@null, @remote, @remote, @default, @remote, @netrom, @bcast, @netrom]}, &(0x7f0000000200)=0x48, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private2}}, &(0x7f0000000340)=0xe8) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000380)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r2) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r8, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x4004) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r5, 0x91ca4000) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000500)='wg0\x00', 0x4) socketpair(0x1e, 0x80000, 0x6, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x14c, 0x14, 0x100, 0x70bd2b, 0x25dfdbfb, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x93, 0x1, "85ff4e9da691a5d0d098e5ef4f552c99f45bf9ceb790d9b670890dbedbc50c51eb0f9f71bb68f9f0003b4e1b693a54c3abe12b08861e7cba41d57520f05d7e3210b0de371d392484d9fd4d5388fb7c645796344d6c279e961013721145fa4df0c1f8051ef6861e11e83b2856f1e7e5c1ffc429a6d1f8db706e54886429914e59a403d87d5a368a931782a7ee73de36"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "fdbcdc537cb88a3d284da695a36d1654601a5ceb6074795735a656df4913597a1bcad12aa32d8c3ba86c7f57a2c0506c8ae9ba6ed98905c10ce072c4706f0f55aa90d65847a7a7d3eb321ac50612cec61cec694013343e9776b1a52ada145c985a8066073ba911162cfd99a7c1dd9eee6a4505610c0e4e1a0d381bc861fc6c27fb97f581fbcd212850836df12210f307cc77588739464b3b4dcde05f791009"}]}, 0x14c}, 0x1, 0x0, 0x0, 0x44000}, 0x80) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x1, 0x6, 0x6, 0x5, 0xffffffffffffffff, 0xffffffffffffffff}, @ldst={0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffffffffffc0, 0xfffffffffffffff6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0xd, 0x58, &(0x7f00000008c0)=""/88, 0x41000, 0x0, '\x00', r6, 0x0, r10, 0x8, &(0x7f0000000940)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0xc, 0x9, 0x229dc47}, 0x10, 0x125f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r11, 0x0, 0x17, 0x83, &(0x7f0000000a80)="1379d7bdd136a71866fc1f16b476d067d1b23511e80ba3", &(0x7f0000000ac0)=""/131, 0x7ff, 0x0, 0x3d, 0x85, &(0x7f0000000b80)="aaf6800faf6d43fc6d32fb4360d2e747e5959cf4a738a3f1a693193dcae4199484631bd2cf1db5e706728fdad334eaec3ce75cd7527c849bd6bce809bc", &(0x7f0000000bc0)="f8faa9d35763eefced2139eaa00206508ba6c89cabbf67073ada6444cafb67625b05c4cba619c3f177bf02b0aeed6464bf7b1fc73f6889734e48e75d01e35de62fa5f7ae1ec6a46da18a63d9acd230eb4214b6f7ecbb67543b8ab7ff670adccceafd50e346fba429825653d0c931976b882fa4a582fa7c0f2cd3d7dfe69b6577b56fdf32b9", 0x7, 0x0, 0xa}, 0x50) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, r12, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x724ce17f}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2c0}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x4006044) connect$can_bcm(r3, &(0x7f0000000e80)={0x1d, r6}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000ec0)={0xd, 0x5, 0x0, 0x101, 0x5, 0xff6, 0x4, 0x8, r1}, &(0x7f0000000f00)=0x20) sendmsg$nl_route(r10, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=@ipv4_delroute={0x24, 0x19, 0x20, 0x70bd25, 0x25dfdbfd, {0x2, 0x80, 0x20, 0x40, 0xfc, 0x3, 0xff, 0xb, 0x1900}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000001040)={0x6d, 0x6}) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000001080)=0x2ba75726, 0x4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f00000010c0)={r1, 0x3, 0x5}, 0x8) sendmsg$NL80211_CMD_SET_QOS_MAP(r11, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xdc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xa0}, {0x8, 0x1}, {0xa5, 0x4}, {0x93, 0x1}, {0x1, 0x5}, {0xc, 0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x3, 0x1}, {0x4, 0x7}, {0x9, 0x3}, {0x10, 0x1}, {0x10, 0x6}, {0x5, 0x7}, {0xa, 0x5}], "4f759091cd67f20b"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5, 0x3}, {0x1, 0x6}], "0756e53a486f0cec"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "5722ddedab7ffd79"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x55, 0x1}, {0x4, 0x2}, {0x4, 0x2}, {0x9, 0x7}], "c2e86fd1a0a2b5ed"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x9, 0x5}, {0x5, 0x3}, {0x82, 0x2}, {0x32, 0x7}, {0x40, 0x3}, {0x3b, 0x2}, {0x3, 0x6}, {0x3, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0xc8}, {0xc3, 0x4}, {0xfc, 0x7}, {0x3, 0x5}, {0x3, 0x6}], "f9e191bd5ab1a7be"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0xed}, {0x9}, {0x4, 0x2}, {0xe4}, {0xd}, {0x5, 0x5}, {0x7, 0x4}, {0x1, 0x6}, {0xcb, 0x7}, {0x9}, {0x6, 0x2}, {0x1}, {0x4, 0x6}, {0x1, 0x3}, {0x0, 0x4}, {0x9, 0x2}, {0x4, 0x2}, {0x9, 0x1}, {0x1, 0x7}, {0x9, 0x3}, {0x27, 0x2}], "a8749c1af98df3c3"}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4080000}, 0x20008800) 1.762668669s ago: executing program 2 (id=15931): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r3], 0x24}}, 0x4046014) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x80000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xa}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_virt_wifi\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x392, 0x5, 0xfffffff7, 0x4}}]}, @TCA_NETEM_RATE={0x14, 0xd, {0xfdf}}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040081}, 0x480c0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r6, 0x25, 0x2, @val=@netfilter={0x7}}, 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd4f, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r6, {0x0, 0x7}, {0x0, 0x4}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20000005}, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6(0xa, 0x2, 0x3a) (async) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000) (async) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) close(0x4) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) getgid() (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000100003042bbd7000fedbdf250000740014d2b045b9aa86221638ef3edd9134334ce6bfe3089b29dccbfd644bbc83dffc1a65d8f57f92b595690d59cf898da084d602a42a3a63bb9208f7ceaf68c06a8f943280372e1c03107e65a1b4a659485b6a3ee6da057f6562a9c3319b71ba74c277da248d0aab172741d3e4237c3bfdbb2fd5553052eb527a6ad570e35aa4d80d84823ec4b69e93605dc3ba1d86305985bddbdac856060bd216db1af6059f382f086a491a5a459ada4d12db601dc08582", @ANYRES32=r6, @ANYBLOB="049c01000750050008001b00d8190000"], 0x28}, 0x1, 0x0, 0x0, 0x802}, 0x20000000) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f00000004c0)) getgid() 1.606377654s ago: executing program 1 (id=15933): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x100b) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) 1.397194163s ago: executing program 2 (id=15936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x98, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa0000}, @NL80211_ATTR_MESH_SETUP={0x74, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0xffffff16}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x47, 0x3, "056d050b7cd07e1dcf1b50dd60c50909466f967156d91747a68262cbb7ec5e5b9a80a4fa1f37b38dce26e95119cb91c4eed3133a2c0f6daf09baf6e11b110dc3dd4ba0"}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x3}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x98, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa0000}, @NL80211_ATTR_MESH_SETUP={0x74, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0xffffff16}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x47, 0x3, "056d050b7cd07e1dcf1b50dd60c50909466f967156d91747a68262cbb7ec5e5b9a80a4fa1f37b38dce26e95119cb91c4eed3133a2c0f6daf09baf6e11b110dc3dd4ba0"}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x3}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000040)={{}, {@void, @max}}) (async) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000040)={{}, {@void, @max}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000010401030000bb81000000005400000905000100010000000500010004"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x2d, 0x0, &(0x7f0000000b40)) (async) getsockopt$inet6_tcp_int(r7, 0x6, 0x2d, 0x0, &(0x7f0000000b40)) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x48}}, 0x4040000) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) r11 = openat$cgroup_ro(r10, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r11, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@getchain={0x44, 0x66, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x8}, {0x8, 0xf}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xf83}, {0x8, 0xb, 0x7}, {0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8150}, 0x48000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="0c00990041000000600000000800a0007c030000080026009a03000008009f0009"], 0x40}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_SWAPEXT(r6, 0xc0c0586d, &(0x7f00000002c0)={0x0, r10, r14, 0x6, 0x100, '\x00', {0x8, 0x6, 0x60, 0x9, 0x3, 0x2, 0x169, 0x9, {0x0, 0x7}, {0x852c, 0x6}, {0x3, 0x9}, 0x3, 0x4, 0x4, 0x7ff, 0x9, 0xff, 0x8, 0x101, 0x0, 0x80, '\x00', 0x8, 0x7, 0xb3f, 0x2}}) (async) ioctl$XFS_IOC_SWAPEXT(r6, 0xc0c0586d, &(0x7f00000002c0)={0x0, r10, r14, 0x6, 0x100, '\x00', {0x8, 0x6, 0x60, 0x9, 0x3, 0x2, 0x169, 0x9, {0x0, 0x7}, {0x852c, 0x6}, {0x3, 0x9}, 0x3, 0x4, 0x4, 0x7ff, 0x9, 0xff, 0x8, 0x101, 0x0, 0x80, '\x00', 0x8, 0x7, 0xb3f, 0x2}}) 1.309359081s ago: executing program 5 (id=15938): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a00010000000500040002"], 0x88}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x7, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) unshare(0x600) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000640)=0x4) ioctl$PPPIOCGIDLE(r5, 0x4004743c, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, 0x0, 0x0) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x2a, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000045b20c00f0ffffff18120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7000085100000fcffffff185b00000400ddff07002bb6746a0000000000000018110000000000000000000000000067e95a7195c03eef2ded254918eb2a9c5a825b6d801e375a0561c2bb3e9dbb4b997a0c1af0599223421257b0498c09a88f9add7d5f094015875d92dd895987951bd9c999f5fc3b21d89dd62165408f396fda7ed52f46f9cab43c", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000800)='syzkaller\x00', 0x3, 0x1b, &(0x7f0000000840)=""/27, 0x41100, 0x55, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x4, 0x3, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000900)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, r6, 0x1, 0x1], &(0x7f0000000940)=[{0x5, 0x1, 0xd, 0x7}, {0x4, 0x3, 0x7, 0x4}, {0x2, 0x4, 0xb, 0x2}, {0x1, 0x1, 0x6}, {0x1, 0x2, 0x3, 0x8}], 0x10, 0x81}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x49, &(0x7f0000000340)=r9, 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="cd000001640101010000000001000000ffffffff"], 0x14) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="7236feff100000e7441aa8fffcffffff18110000672c059b67f95b967bdbf7b3ae6393869013a9cdb487230192830ed775552627e8abf6db641fcf76137c3bb184268f4560766488bbf45042efb000854f73fa1430ec3322c35f0ef04e46b5c4ea1ab40e878117cebb171057688174656515e1ebd14bfa92ef647284c77c17aa5b7105afff2577bcff14a3330e46c9dfba180f3fc18b17b935a42c00644d15a6c7d0896eccb5f6af1021a241aa18a915359d6b761d972c54ff375b4eca26935b0806e2db7c05979aa2120ba7d544cb49bafafdf7fc3d1b7564815aa1743ea9575adfa941d67dda514d075c080b9cebb2151ed1d0f32f90b16266d568d429db8138968aa63a2228b94f4b3cee3b95f423e232160bdfc4f9e8fe120e13568c3b32327831d0d267bdfa9a4ea0967662c3a5ccb99748d765cc7af8608d014c1b7f582ea3ee66736e447cb30fd6911401a825e7061da691b04fd7f142810837082858e788d745b6b7fa1cf53860ee8076d01fb1b79460580d4db558a69b60bb514c316f41af58892134d3c993d90507b0adf49628218f5b95a92ec962fcb8f7956094af80e997b0a7e992ce9fb4c8208762984fd76ef977342063a09fc02d10ff795e1a5c186800", @ANYRES32=0x1, @ANYBLOB="0000000000000000950000000000000018000000a10f0000000000003aa1000018460000fcffffff00000000000000001801000020756c2500000000"], &(0x7f00000000c0)='GPL\x00', 0xd, 0x33, &(0x7f00000001c0)=""/51, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xb, 0x5, 0xbed}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x1], &(0x7f00000002c0)=[{0x2, 0x2, 0x0, 0x5}, {0x2, 0x5, 0x3, 0x8}, {0x0, 0x5, 0xb, 0x2}, {0x5, 0x5, 0x9, 0xb}, {0x5, 0x2, 0xb, 0x3}], 0x10, 0x6}, 0x94) 1.292040835s ago: executing program 4 (id=15939): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40000044, '\x00', 0x0, r1, 0x4, 0x2, 0x3}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x3df, 0xffffffffffffffff, 0x1, 0xffff7fff}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) 1.105255385s ago: executing program 4 (id=15940): socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) (async) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x7}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)}, 0x0) (async) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000080)={'gretap0\x00', {0x2, 0x0, @loopback}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x0, 'macvtap0\x00', {0x1}, 0x8000}) 1.103894328s ago: executing program 2 (id=15941): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000900ffff0000000000000000180100002020752500400000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020049c40bbf03ae07c54bd71a1dfa0008000000b7030067a7cba6859b019c"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000900ffff0000000000000000180100002020752500400000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020049c40bbf03ae07c54bd71a1dfa0008000000b7030067a7cba6859b019c"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) 1.028078368s ago: executing program 2 (id=15942): syz_emit_ethernet(0xd3, &(0x7f0000000240)={@multicast, @local, @void, {@ipv4={0x800, @tipc={{0x26, 0x4, 0x3, 0x36, 0xc5, 0x66, 0x0, 0x7, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_mcast={{{{{{0x2d, 0x0, 0x0, 0x0, 0x1, 0xb, 0x1, 0x2, 0xdc4a, 0x0, 0x2, 0x3, 0x1, 0x1, 0xa8d3, 0x6, 0x1, 0x4e22, 0x4e24}, 0x2, 0x3}, 0x1, 0x3}, 0x3}}, [0x0]}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r4, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8932, &(0x7f0000000900)={'batadv_slave_1\x00'}) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaabfaaaaaa0000000000000800450e00280067000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50ee6071907800e6"], 0x0) r6 = accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @default}, [@netrom, @remote, @remote, @remote, @default, @rose]}, &(0x7f0000000100)=0x48) connect$netrom(r6, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null, @null]}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000200025a729bd01000200060000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040090}, 0x20040840) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESOCT=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) close(0x3) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r11 = openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_freezer_state(r11, &(0x7f0000000040), 0x2, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x80010, r12, 0xf95eb000) 903.2165ms ago: executing program 4 (id=15943): r0 = socket(0x10, 0x3, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) getsockname$llc(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r2, @ANYBLOB="040014000a000100000000000000000008000f0004"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 766.989169ms ago: executing program 4 (id=15945): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0xc9, 0x37, 0x2c, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x8, 0x0, 0x9, 0xfffff800}}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', r0, @fallback=0x17, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 764.754889ms ago: executing program 5 (id=15946): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x80000d6e, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000d800000", 0x45) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 733.89558ms ago: executing program 4 (id=15947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000ee7c715e43b34787b5d58b19000000000000cbd7bd334920328d1f490d9dbac392e27fdd120d6bd01866447f7b3cff408735d8aaf49cd1eb47e4976f7efaeb47d51b49f7978402074469253fd2417c480329d707f21d3f34053a4a3ffbd47391f7f2638964d800ab008f61ce90fde3c05a80ef2e8dee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000a72e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000012c0)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x1a6) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x840) setsockopt$inet6_int(r3, 0x29, 0x63, &(0x7f0000000140)=0x2, 0x4) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002000000000000000000000008001b00", @ANYRES32=0x0, @ANYBLOB="ecff18009ec59deba19b4a83d11b604bd837b1806972a38d4d97888912c26523d73dfc4c85d37d9cc8c39302a9d6c35f3a4f2264aa0664ed35f6b3dbb25a1b5360b79affa0284591ea34fc47d5a203cd162a4351143d58431f38d6db86a54d99624a23c941df4ca0a334066ba3369cb42e16d9e69c6721453d20b0e5064b9aa8d1bca5f823c3c33925f591da2c5c82c44a622dd04a5d8fb43e521c810581d11bc9a51fe325e1571ac7a27fc2e6b11b", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) 525.753992ms ago: executing program 0 (id=15949): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bridge_slave_1\x00', {0x2, 0x4e20, @empty}}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928c4a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf5e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a56da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e40bb4b68ff4e3a8fe314a018e506ed"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x27, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x1f) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000780)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="f149909ed577", 0x6}], 0x1}, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0xffffffff) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x1, &(0x7f00000000c0), 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd2b, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$netlink(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="02000001fcd3df25"], 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r6, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) close(r6) 525.066724ms ago: executing program 5 (id=15950): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) (async) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000100)=@proc={0x1d, 0x0, 0x6, 0x80000}, 0xc, &(0x7f0000003f00)=[{&(0x7f0000000000)={0x18, 0x15, 0x300, 0x70bd26, 0x25dfdbfd, "", [@typed={0x8, 0xa1, 0x0, 0x0, @fd}]}, 0x18}, {&(0x7f00000003c0)={0x3c, 0x3c, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@typed={0xc, 0x3d, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0xca, 0x0, 0x0, @pid}, @typed={0x8, 0x52, 0x0, 0x0, @fd}, @typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x3c}, {&(0x7f0000001b00)={0xd8, 0x3a, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@nested={0xa9, 0x4f, 0x0, 0x1, [@nested={0x4, 0xe2}, @typed={0x14, 0x30, 0x0, 0x0, @ipv6=@loopback}, @generic="4836bed1a64f24623b1a4e8d40de155af3faf808b038d8e01291fd1c0dbb12c355e133dc5406841cfd6241762cd84888b271", @generic="b8fce92cfffda571e8632fa92bc1983c2631ab7ea403573e6311a882de1b6f9fb3e47dad000ba7c0c13c6369cea96ca4483565f4dfa6862b5b32cf8092372eb135ea263155cd38b10830a2fcd64063e3d7265f", @nested={0x4, 0xee}, @nested={0x4, 0xd8}]}, @nested={0x1c, 0xe3, 0x0, 0x1, [@typed={0x14, 0x37, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x4, 0x11a, 0x0, 0x0, @binary}]}]}, 0xd8}, {&(0x7f0000003f80)={0x44, 0x39, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@typed={0xa, 0x60, 0x0, 0x0, @str='\x03\x03\x03\x03\x03\x03'}, @nested={0x4, 0x4e}, @typed={0x8, 0x13b, 0x0, 0x0, @u32=0x8}, @typed={0x19, 0x113, 0x0, 0x0, @binary="47bb1a63a6c01c5d972b2ade4fa18fcc97c2776460"}]}, 0x44}, {&(0x7f0000000680)={0xe4, 0x39, 0x20, 0x70bd2d, 0x25dfdbfe, "", [@nested={0xd1, 0x10a, 0x0, 0x1, [@nested={0x4, 0xdb}, @generic="c4fa49e30e7d6130523f13ec06870ae3ebbba2007dd9c925329d23eb2cd798e814d15e9c1a12e22bd64d07264f6dcf7b3ac1f452414bd2a2914db6c8e50c4b2a557583251e7c990427a3877f987e6dc83a3b15c5021a091e5f7f8a324e9dd7715411bfdb410d20006e369ba3457fb2ab89f33a337b346e5494966bdf740d72c103e38c461aaf0a8bdaaa1ee4824efe07e7db23f08e3dc486ebd696a6eee2f00c45e112a729e394a0c606d92f91f8abbf9dd4d66b25e439df7e9cf1e69e089eedf4009fc428716af48f"]}]}, 0xe4}, {&(0x7f0000002d40)={0x1c, 0x1c, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@typed={0xc, 0x51, 0x0, 0x0, @u64=0x3}]}, 0x1c}, {&(0x7f0000005dc0)={0x48, 0x29, 0x4701a270be9d3955, 0x70bd26, 0x25dfdbfe, "", [@generic="8204bddcd9a1ca85365584c10fd122eafc", @typed={0xc, 0xdb, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0xcc}, @typed={0x8, 0x27, 0x0, 0x0, @fd}, @typed={0x8, 0xde, 0x0, 0x0, @u32=0x80000001}, @nested={0x4, 0x14a}]}, 0x48}], 0x7, 0x0, 0x0, 0x44011}, 0x40830) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) r3 = socket(0x15, 0x5, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000851000000200000085007dff3f000000950000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 474.84353ms ago: executing program 4 (id=15951): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0xfffe}, 0x90) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x0, 0x0, 0x5, 0x168, 0x7e8e}, 0x20) sendmmsg$inet(r0, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8044) 459.526064ms ago: executing program 0 (id=15952): ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x6, 'geneve0\x00', {}, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x6, 'geneve0\x00', {}, 0x3}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 375.147065ms ago: executing program 5 (id=15953): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) unshare(0x400) (async) unshare(0x400) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0xa, 0x0, 0x5, 0x0, 0x4, 0x3], 0x5, 0x1}, {0xffffffffffffffff, [0x2, 0x4, 0x0, 0x4, 0x1, 0x4], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x3, 0x194c, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 374.403106ms ago: executing program 1 (id=15954): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x9c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, @NFTA_SET_DESC={0x4c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x13b}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=@delqdisc={0x24, 0x26, 0x1f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x9, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3, 0xffffffffffffffff}, 0x4) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x9c}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r7, 0x10c, 0x6, &(0x7f0000000200), &(0x7f0000000480)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) unshare(0x20040600) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c00008008"], 0x20}}, 0x40816) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2c, 0x0, 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r6, 0x3, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0xfffffffd, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x7, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x0, 0x4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) 269.140665ms ago: executing program 1 (id=15955): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r3, 0x181}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$int_out(r4, 0x5460, &(0x7f0000000080)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], &(0x7f0000000540)='syzkaller\x00'}, 0x94) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 268.298686ms ago: executing program 0 (id=15956): unshare(0x22020400) (async) unshare(0x22020400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) tee(r2, r1, 0xa000000000000000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 250.161696ms ago: executing program 5 (id=15957): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @rand_addr=0x64010102, 0xffff00, 0xff000000, 0x7, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0xff]}}, 0x4d00, 0x7, 0x5, 0xfffd, 0x4, 0x3, 'hsr0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x0, 0x128}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast1, @local, 0xf}}}, {{@arp={@initdev={0xac, 0x1e, 0x11, 0x0}, @broadcast, 0xffffffff, 0xff0000ff, 0xc, 0x1, {@empty, {[0x0, 0x2064f8bb0fa89a85, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x10, 0x4, 0x6, 0xffff, 0x42, 0x8001, 'batadv_slave_1\x00', 'ipvlan0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xd7}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000180)=0x1c) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2, 0x8}, 0x1c) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) connect$tipc(0xffffffffffffffff, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x1, 0x3}}, 0x10) 188.539423ms ago: executing program 0 (id=15958): bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0xa, 0x8, 0x8, 0x2}, 0x50) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/247, 0x200105d0}], 0xc}, 0x1f00) (async) sendmsg$tipc(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)="196213548b49b85b0a554e70ce848a11f804a15aa421db2a29ea26d7a9e494bfe63a3e1f71af99de65b8b66cbb6021ef9588664d6abdc8793f35", 0x3a}, {&(0x7f0000000640)="87e88b454b319f91974bdb3d9b5f62e4c62b9ce3595636bbd3ec663d41364687bc14918d6ee6494992180fde64a07cbce5dad7454c256326107d0a8b067f32e59b47535b0513d5facbdb5108350502d0d6fbfbad4beaa15647d618737c9d2b346086fc42ede01297d1a1c4c41aa671761789cfcb3cc82fe44d71c04295aa574f94fd5ff219bfd66edd44883a7060895ba826b57a74cb53a696cafbfe242c60131145d8b4f0bd2cedfe53cc8de1ac2f288467187fdd51574a20a74fe4d7aef5f9bf0f22b3b6c1d9d3533d80404f569384d0d9788e23b51eef53a6c42ced", 0xdd}, {&(0x7f00000009c0)="aed4e23c16b1c27449819a4038e1273c040b3d533cd9d3f5ca046f882337a2984701f76208e2cdb586d7fce7fda087a464e7d3307193eb81c5299cc9ce98db3036dc35cc5b3b20f4b389d6bf741bc7bb1c1da7513824da97e066e7487131fff55d39e036729242979edb0e", 0x6b}, {&(0x7f0000000880)="c03d24a889ad848819eb4c60bdc3b91c42d8c1d20aad4651a4b59faa5b560ae5af0bce656b33085cc5fd8196f79a15b4ee724a514643b886af83fb92ea7da631dbb451ca278bbe31d1e03824a825ccdc7c2141e2374a1994dae58946db6eba80c9c74d1fbd82f766e35a0d9aacb200c4603d73e87d3bfac3305c7b6caf5a2d80c538e0d80437caf60586cbe88ef2aa49c9a0567f02cc5747656bd7927fc146fad4b0a6089e02a01061424585c587f901291c52ec9983fc4d16e8", 0xba}, {&(0x7f0000000740)="093555c971cbf9f62c294295da88a26a", 0x10}], 0x5, 0x0, 0x0, 0x40}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) close(0x4) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000040)={r9, 0x10ba}, 0x8) (async) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006000000244a68b77360575d000800007860f19844ddf2779d0510a1623fd86a87164d5272d054b70edd4779275f2f1c740a01b355c4f25176a66e1a3447692447b031166beccc685a06feac89899fd1d3294c29a41c3a87f973b2e8532d65607c4883fa1a6e80602be8460addf8b2b93e07e2c382c56187d6a2b0750d56bd1cf2bbd1cc4c3bc48ef352dd29ccbd23c104366ff374"], 0x1c}}, 0x0) (async) recvmmsg(r6, 0x0, 0x0, 0x20, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff0000000001000000850000008a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x1, 0x1, 0x7}]}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x30, 0x30, 0x0, 0x5f, 0x5f]}}, &(0x7f0000001a00)=""/16, 0x3a, 0x10, 0x1, 0x8}, 0x28) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x98, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}, @IFLA_LINK={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2c707}, @IFLA_AF_SPEC={0x40, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x20, 0x0, 0x0, 0xb7}, {0x8, 0x14}, {0x8, 0xb, 0x0, 0x0, 0x10000}, {0x8, 0x15, 0x0, 0x0, 0x1}]}}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) write(r0, &(0x7f0000000340)="3f000000010003", 0x7) (async, rerun: 32) unshare(0x22020400) (rerun: 32) 141.950641ms ago: executing program 1 (id=15959): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x60, r1, 0x1, 0x70bd29, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191b}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 136.805984ms ago: executing program 5 (id=15960): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x8, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x7, 0x0, 0x11000, 0xb, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x1, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x808, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x4, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 78.253409ms ago: executing program 0 (id=15961): socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'dvmrp0\x00', {0x2, 0x4e21, @multicast2}}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x10001, 0x9, 0x2}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x10001, 0x9, 0x2}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @empty}}}, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000001340)={&(0x7f0000000180)=@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000001c0)="314c6ce45657fdfef6dda4f146c503f9745df71a1fd294a37cc6bc4e76573247c1c434e18955f027bd16528400a5326a2331ae4343a63bd4015d7a3d26361da9a39c3fafac39d18e372b7c1d633c893123e700330b602194732b2080b310b115d7275875d02ffc105a9ab30c91de47c17664d96aaf20c13e270ba8bb34bcd97bb169029982e194515abdaea3a0188f03caf744ad35e394", 0x97}, {&(0x7f0000000280)="06d109e3bcf40afeade92f7a3e86867312e05e7c98814be71aae60263318d924f0fbad4d4fcfa3e44dbbfbe40544bbf2011886b7e944cd9b10ffa5562c109134ad1b0d7f8a1f137b085ce9d01d8b9956b6b6a097a48eb1c7f4293202de1f5329ae9fa36e9792561466fc6aca2c8e86181daf50c893eda25a8dc20d60330fafb3c60111c2053a316b8c81659d049ac321ff7c693c4c8e87e307c24c1e25bb91773e29bc71f6be725b1473c6cb92f41ffd6c7cb4400526d5bfd61888660ebba6f444b66783a3014a267f6c1ecfb3a7126f3d8a0d18218b1c94fa695089f735930db2983fb7656645372c9e46981ed9eff83661e69c7eb5d582a97846fee8a49b539843d8ca8b5a0031870a2682052fa1a5c89da543deab5bea1c4bd91d1ee25c6ac497eed8452ab52756036951fc2ca28f83c56271d1ad1e026fcabd0e4dc0b09a9b9817f39b6c94da6b643d7ea71039c813e8b36e3c1fc82f411be022bffab665850fdb61f93dbf757c89415f14fe638e494240b5c8fa28257ede099df80d022fcf49561457e5b6e278e8be628ab3e5124f212d0c3309d50fb0ebb6e77fa33b31cbd0f23a2026df45eee92d56cce068904bfb81cad3ccebfb628fec99eaa2f90c587dd358d8377341a42c70856505994ae68b7b6a7c175f42409f3fb373306dcebeb4e23f60e350517684bf41b1b54ce691b23e71228997f37a6f45816c1f3669365c9804462252143256b1178d1fd01870fb7f61fcaf420165926a4716785bc2267cad5659b5d2b360ed7ad52e797d0f7755763599bc8f8e9105242b8f24374a4ab7813bec8317209bf1ac5160a87d5e3e3bb1a7f66663d887a147d152956f3f9a1dcc6f63471e751971951fa9456ec845e38c73e24425da23dcaf7478ee22548af78f90846bdf76e07ac20fe2b4000347560140582481c6e11d3fea731be8922e5ca1b82c4785de6c99bcd37318faf2e76c6896c9d1eed36e20ec0c7620091630ef6a185d2ae051f7cd59192870ba17bca84666467b910004b18da49514b8604cf74e81a5ae83ebc3a53c434e36516d4b27f02ecde7c65713c3a2e4fc422d8a0f4d23343094e5ac67403bd7768c1da3e5ea9d9e2a1be2282dbabdc0d3331315ced87f236346d5c26e83621eee29e7984d3395cfe2754acd1db177710bc2872fa8b60cdc9bdef4bb2dd79d42047e1c6eac315400f1c206c198e2f094f6fbfc16a216063c01f798ebe2ae244d01f33b38dd3f61aa1abf323bc0f28eb40205b0326033bcd29e986b7bde8d2eaba01b7da619ed68613da26e4e419d8810cf924f9b9c5f4a9dacedffec2a1f9ce7fbace3fc7be1cbded7f476c6f94cbc7cce297e8002c3cd62d489476b5db080000bd9ae535870a43212864f5e30016b52272a9f8a6112bd9d4cfc5d09e9c31417587a2707827903828a7bbd33d77a8dbbe78a671d3e3e621155ad2cb54141196ec465d378859118f7001c90483b53d9257a70997620b94375d59d5d86549e4023c56c7ef9a14a42fc3bc2881661ad37d54e5cf8a64c2f73f5b233c7c051ddf2282757a818e1e6282f6532d26e2b72590a613be853cb45369a2343d739184afa7db3c6136d12217802eb44f9fd7e4df53bc55cb662b58a96ba60ed7392283bc8bd2d80142788d669558e2d26fc8002b8bdcfd866c85d9b2955e555c30a40eeeee9b94df18dd74d06400310c6878e72f0ee7d6aec7e1948502e26f56a90378e6c65c13df1c4638e37b0a6fa636b470c24f9ee2e2d384ae801289df2fc2fd9f2114e06272ee7e1625215c2cdc23f2628ad8732400c556423312fc90f592acd934e00d4e27c4f89a7d52be244819bd52d4e8f8fce7b0367f0a97521e06d8715946d02953488551f661f89f0669e6138e142d5387dcdcaf1f0cbe8abbeae4cbb9df1850c9fc944ce3d5e41dc798bda83f3c2ef6b54e1b866051a58c44ade39af664ad0977fdecd3d69e361b6056b04f4d50acdb1c7dce2459145dc49c0066781e06be464adf503964a5a7930aaba9044a0add37fb4afbcdd95b3043483e954d41e44bd3cec4613fab19c1a17eb165cec3083e5e4b56393a4de8908389cfca835b2bff2e1b8a3cabe7af26bed58312a82c6436f6a727051f81f60d548127542f875b7c5146cd44725b24a3ecb0c403ecd6203e1e055c3ca462b00ff03c2baec5ec310a934163c88362f02092440d6537789101d2952627e135709a9b529afde4b562d59693d21d4740b22bcfb713f9e8981e7942c35bfe968dc046c854e6f87244cf99a505f844f44f472566369f285c74959d81074bd0882304eb3ee082ecc1c9d6286543fcc67497efd1b7454921a8d888bc44130f5ff8781deb8ff138bc0a235f8cf3a2fc17d2c888d809fd2d76715b8b6b9415d534133093f0cacf76b0c6e36c9d42a27cd91a305c4183707f114c62e29a6f8243f1258314cbf5dee242fa6e6ae37abf82376b41de1754c31997af62bed854e981b58545434535860eb5a664a8370ef7f99f8286175ef036e0ef644b133879d7a3532e24f082f948f16812cbc4bbc2ed1e39a184d6c040fc949495e4fb18d13209455d0875d28ff8ed00ee2e3efd25b1b17c60d4a07afa31894f7ea6f4f1c8897766bbd7534c0aff8a118919acfedbb5b1da14cbaf1c63a478d96b0d2d32bda5db5e87376243c66bd93bf19164a2dba8cc446af575c30f770a304fa6a2df154d0423457f3f41ffce2dca8aefb8b21f9c9861466a70acf1f9d75c3a2e50b314c08f9b26df770393e4d1f9305063ec3590ba1227f914a1c8537d1efff302634280cdf3397be5e88631641a07b10ffc025d7f27d7b3c9202c4c8f31904b0b45ffe88db6807f9fa2a3652981a5b61105232439cb1a2afcd65fe13f130fa131d03259f3c778edb65aa72ecc2e314896e7074e48e2fe37f691f1aabeb03b2b0a1307292658779a255a5a00c717ffb1e419346b6ea52d0c3f24b8130b952d525525944cb6c0fe66d1f4fc1195a8d6ca23463885cde9c1e07b400ccef376e7b947bb0437e2564cd4cbaf588f534eb59c07b074117e5ec18757f487d3c110a49293374801c0bd79eb800115aa64eee5a28c3962f76a5b7407aafef903b80652a968fb757b9b3eef06a13901d8e249a109b7f5b90d1573ea7e04dd4a231d3e6dc5ede4e3716132353cd453924b404ee8d62b77b73f57429b194d9d2dcf630cf2907d540f01bd679fe59f591155088964efd80ef8ebf0507f1957a99fc0dbaaed3121b51af8685d0bae2bb7a5c6a205f66c3e7482af330df7d52f39cb1640189123d306694b3f6e761303ec60e3fda91e960e74d29960919a55a17a1d6398668abe9a3902b610f3fa705174bac6d8a1f9d599642d9dec494705b5d22bed00f9f3ea02ad2debd8fc1eb2637488fe371642bc651aa8227193eb13951cabed23e933a0a4d8f28d66db673769d7ed74d4bf3ee38fb8f8f97e31821a568a42aef9d395ea9444b2da6e1622c743a5ee832541100fa834b12745affa9e2314ed8aa25d46ce3c65ab845bacab4cc1cb39235f0ecfc268b99dbfc5dc27aaffe3da9c8b8fe58ba540c4bb629cc1ca5b4d5b5b89fdfcab429ce09772f3c200929142e8a142a7b592fccf7887273fe62ceb9e71ba0bfb411d5745d50a9056204fe41b22e591f908df80f550a26c89ddbdb57b2f2047c9a11fe553e87307123f332038f0158df429ec0e5d504ff10139f844ef46f54e2c9bb3bd6d4c812b2ee756a155f9e9d8532ba5cbce11555536fd505cf0f81b42428ac109eb76ced7340554652f47ae62314ccf6c43de7ae93e006dff1d6305139b17b9d934613293d7965c11eaf90a0201940923f5afca6c98640f529bd847d0adc930dcca80c43ff6ae174074e1fa1cfa67baac7ca38d9274c63d7b9430c967f95e8eb08719d31d23f341599f0a33f3a15309b0cb6e7d3fb7b7bc159e3f7b712261c518382f16d6946cc954511351ec9755a6c8087bc6520a7349a47a3532424c5fbb4bf9e4ec719534c3670eaba027d1d93600d8b7074fcd2a73d23f5b61ce68247086b05c934d85d77aeb84de3c12e836f51ef7115012fcb188548531798a7ddc28e4ea5db0bf0a68e38815bae1d27f4e40dea5c5998cc94aaefc67f7ffe04481a0387af12f4d3a66372b733100bc6625813a551ad534ea37f1b5492cf0cd084fb1a1f5a460154edf8a8b52b5d98fd22540bc9f55553d04290b16e8b3aaf3d7aaf836b1e1f911624e363b4facd24bbab0666ec8a37ce2f26a22a03eabf83cc96f8262deee4778a619d2e958c819fd089e27814dfdf53a548ddb3ece73b972d7211bf2aa399fff4a0e320eb49813015bc6a687e2a63539add812a7e7766471ec3f9a57ff5e1bc0f02d88272f1c82891088c556c0559197be670ffc8a6daa6fea4a92c3c09e833efabd1e4e7ebadb474a1d65354222e95507e114d6371ecc28ce2ad3d5b66a1512238f52db3d3684213000c8f85d7184e0a5275471f9dfc6dd139ca596a3b055efad193eca2f4d99f8e9141295892d6da92af81ba25aa388ca5d760ae522d821f7741d582aa56eaae4f6e44e1f0245a5715f372469c257f3f61b95e2bdf9107084246ada6100c29bfe2f8d76c6480737201ec2ab37235aef24c68bca41d5977ab0f846df41e7ed1e398998cbd64149d775790408f04c5debb514c2776bf27081ccd0a0afc627c885cb06e05501a274a628635960dde70c68c0ca9c937108b6d63be7b5288799d1936ee9a6ec070b7ce090873da92c57f8847bd7af495c70a372b58b0fb09f06ce615bc2f3fb5e223dde3af6a6d2ac8dea3c0db90f25ad5459097dc1c13565e998fb537e64e2ec418ccc1f957d23cd007f88c080eb4cc2dd49e32a15689e631da9f798b659ad7e4dbaf0231a20fb6e15811c021d59aad2e22c6ae37095d3a08086c66101429501f672eb2eb90c61ed6c2ee918c11fc9386cb2f4afea32cf4a24a42a73346c64887392ad39cec3673268f0a2d08fcfb5e1b76754718645fe1e782417554a47b61f6caacc54e8e9fc286ed8ba16793b4ac18ab16f1654f39f5ba615edbdda658f16b157bd95f5ebb78879d2cc6d760f1706f39b8618769994a08ab948138130fb5c148599c8a60a556733921e6cce7c09baf552e596aa6a16f1e471f59d1a0f30875a65edc743663e7f12c031487cdee6a597c23d284928b58744a0fb87c46f9718439992a755d4791cec5e1ae79308ccd23a6d4dbc4d1d9452e99308a95956421d186ed1a181156528c0c809e1d3491d6e1cd0e9eae0387f6a28f0d8661f829efcf5db7172c4956c1abf4caf849bd5184b6c1b951eae1bd7af13f05029299a0826a9e193a9d73eb4b919eb814e1fda031848d9825a530d9d868002e99be492654f0f15007f69a1f858c1f0fe64cb553ce8f79ea240724114a18719cda10ab74a4d072032be4d896d51b3aa0c0943bd13883731dbd200c04cb85b15c0ebeaecc56f0e3acb94eb11d0b80b79de0e9f4b82c0e39f46820f754c4d5441cba7f59a425b04dcd86eaaa35a535fc0270a5f917b2307ec32be67f32c6647988b4838d1e0991a3dea9071ba069c93ad71c62457d0afcf19c58a5c8e6c12fe7fbd048e7f1fd85f2afdd4e9e639fc4b6e1ee04892b2c2b08b246ca131b47be72213cce5dea74f9bfb1bd091b2e4fd5454fe8165352fe345ff59434409fb55a3baa02df98eb169c8282b2a8bd1d8d82e9cb0e114765ce5608d0bb9027591c26311843797bd5840c348fc9c7b4e6bb307ac0506e59f65576b7a0881153d4288df8851ffa75057335be2bd6b4", 0x1000}], 0x2, &(0x7f00000012c0)=[@sndrcv={0x30, 0x84, 0x1, {0x7, 0x5, 0x8, 0x5, 0x1, 0xf5c, 0x3, 0xbe6, r1}}, @authinfo={0x18, 0x84, 0x6, {0x40}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0x60, 0x4}, 0x1) (async) sendmsg$inet_sctp(r2, &(0x7f0000001340)={&(0x7f0000000180)=@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000001c0)="314c6ce45657fdfef6dda4f146c503f9745df71a1fd294a37cc6bc4e76573247c1c434e18955f027bd16528400a5326a2331ae4343a63bd4015d7a3d26361da9a39c3fafac39d18e372b7c1d633c893123e700330b602194732b2080b310b115d7275875d02ffc105a9ab30c91de47c17664d96aaf20c13e270ba8bb34bcd97bb169029982e194515abdaea3a0188f03caf744ad35e394", 0x97}, {&(0x7f0000000280)="06d109e3bcf40afeade92f7a3e86867312e05e7c98814be71aae60263318d924f0fbad4d4fcfa3e44dbbfbe40544bbf2011886b7e944cd9b10ffa5562c109134ad1b0d7f8a1f137b085ce9d01d8b9956b6b6a097a48eb1c7f4293202de1f5329ae9fa36e9792561466fc6aca2c8e86181daf50c893eda25a8dc20d60330fafb3c60111c2053a316b8c81659d049ac321ff7c693c4c8e87e307c24c1e25bb91773e29bc71f6be725b1473c6cb92f41ffd6c7cb4400526d5bfd61888660ebba6f444b66783a3014a267f6c1ecfb3a7126f3d8a0d18218b1c94fa695089f735930db2983fb7656645372c9e46981ed9eff83661e69c7eb5d582a97846fee8a49b539843d8ca8b5a0031870a2682052fa1a5c89da543deab5bea1c4bd91d1ee25c6ac497eed8452ab52756036951fc2ca28f83c56271d1ad1e026fcabd0e4dc0b09a9b9817f39b6c94da6b643d7ea71039c813e8b36e3c1fc82f411be022bffab665850fdb61f93dbf757c89415f14fe638e494240b5c8fa28257ede099df80d022fcf49561457e5b6e278e8be628ab3e5124f212d0c3309d50fb0ebb6e77fa33b31cbd0f23a2026df45eee92d56cce068904bfb81cad3ccebfb628fec99eaa2f90c587dd358d8377341a42c70856505994ae68b7b6a7c175f42409f3fb373306dcebeb4e23f60e350517684bf41b1b54ce691b23e71228997f37a6f45816c1f3669365c9804462252143256b1178d1fd01870fb7f61fcaf420165926a4716785bc2267cad5659b5d2b360ed7ad52e797d0f7755763599bc8f8e9105242b8f24374a4ab7813bec8317209bf1ac5160a87d5e3e3bb1a7f66663d887a147d152956f3f9a1dcc6f63471e751971951fa9456ec845e38c73e24425da23dcaf7478ee22548af78f90846bdf76e07ac20fe2b4000347560140582481c6e11d3fea731be8922e5ca1b82c4785de6c99bcd37318faf2e76c6896c9d1eed36e20ec0c7620091630ef6a185d2ae051f7cd59192870ba17bca84666467b910004b18da49514b8604cf74e81a5ae83ebc3a53c434e36516d4b27f02ecde7c65713c3a2e4fc422d8a0f4d23343094e5ac67403bd7768c1da3e5ea9d9e2a1be2282dbabdc0d3331315ced87f236346d5c26e83621eee29e7984d3395cfe2754acd1db177710bc2872fa8b60cdc9bdef4bb2dd79d42047e1c6eac315400f1c206c198e2f094f6fbfc16a216063c01f798ebe2ae244d01f33b38dd3f61aa1abf323bc0f28eb40205b0326033bcd29e986b7bde8d2eaba01b7da619ed68613da26e4e419d8810cf924f9b9c5f4a9dacedffec2a1f9ce7fbace3fc7be1cbded7f476c6f94cbc7cce297e8002c3cd62d489476b5db080000bd9ae535870a43212864f5e30016b52272a9f8a6112bd9d4cfc5d09e9c31417587a2707827903828a7bbd33d77a8dbbe78a671d3e3e621155ad2cb54141196ec465d378859118f7001c90483b53d9257a70997620b94375d59d5d86549e4023c56c7ef9a14a42fc3bc2881661ad37d54e5cf8a64c2f73f5b233c7c051ddf2282757a818e1e6282f6532d26e2b72590a613be853cb45369a2343d739184afa7db3c6136d12217802eb44f9fd7e4df53bc55cb662b58a96ba60ed7392283bc8bd2d80142788d669558e2d26fc8002b8bdcfd866c85d9b2955e555c30a40eeeee9b94df18dd74d06400310c6878e72f0ee7d6aec7e1948502e26f56a90378e6c65c13df1c4638e37b0a6fa636b470c24f9ee2e2d384ae801289df2fc2fd9f2114e06272ee7e1625215c2cdc23f2628ad8732400c556423312fc90f592acd934e00d4e27c4f89a7d52be244819bd52d4e8f8fce7b0367f0a97521e06d8715946d02953488551f661f89f0669e6138e142d5387dcdcaf1f0cbe8abbeae4cbb9df1850c9fc944ce3d5e41dc798bda83f3c2ef6b54e1b866051a58c44ade39af664ad0977fdecd3d69e361b6056b04f4d50acdb1c7dce2459145dc49c0066781e06be464adf503964a5a7930aaba9044a0add37fb4afbcdd95b3043483e954d41e44bd3cec4613fab19c1a17eb165cec3083e5e4b56393a4de8908389cfca835b2bff2e1b8a3cabe7af26bed58312a82c6436f6a727051f81f60d548127542f875b7c5146cd44725b24a3ecb0c403ecd6203e1e055c3ca462b00ff03c2baec5ec310a934163c88362f02092440d6537789101d2952627e135709a9b529afde4b562d59693d21d4740b22bcfb713f9e8981e7942c35bfe968dc046c854e6f87244cf99a505f844f44f472566369f285c74959d81074bd0882304eb3ee082ecc1c9d6286543fcc67497efd1b7454921a8d888bc44130f5ff8781deb8ff138bc0a235f8cf3a2fc17d2c888d809fd2d76715b8b6b9415d534133093f0cacf76b0c6e36c9d42a27cd91a305c4183707f114c62e29a6f8243f1258314cbf5dee242fa6e6ae37abf82376b41de1754c31997af62bed854e981b58545434535860eb5a664a8370ef7f99f8286175ef036e0ef644b133879d7a3532e24f082f948f16812cbc4bbc2ed1e39a184d6c040fc949495e4fb18d13209455d0875d28ff8ed00ee2e3efd25b1b17c60d4a07afa31894f7ea6f4f1c8897766bbd7534c0aff8a118919acfedbb5b1da14cbaf1c63a478d96b0d2d32bda5db5e87376243c66bd93bf19164a2dba8cc446af575c30f770a304fa6a2df154d0423457f3f41ffce2dca8aefb8b21f9c9861466a70acf1f9d75c3a2e50b314c08f9b26df770393e4d1f9305063ec3590ba1227f914a1c8537d1efff302634280cdf3397be5e88631641a07b10ffc025d7f27d7b3c9202c4c8f31904b0b45ffe88db6807f9fa2a3652981a5b61105232439cb1a2afcd65fe13f130fa131d03259f3c778edb65aa72ecc2e314896e7074e48e2fe37f691f1aabeb03b2b0a1307292658779a255a5a00c717ffb1e419346b6ea52d0c3f24b8130b952d525525944cb6c0fe66d1f4fc1195a8d6ca23463885cde9c1e07b400ccef376e7b947bb0437e2564cd4cbaf588f534eb59c07b074117e5ec18757f487d3c110a49293374801c0bd79eb800115aa64eee5a28c3962f76a5b7407aafef903b80652a968fb757b9b3eef06a13901d8e249a109b7f5b90d1573ea7e04dd4a231d3e6dc5ede4e3716132353cd453924b404ee8d62b77b73f57429b194d9d2dcf630cf2907d540f01bd679fe59f591155088964efd80ef8ebf0507f1957a99fc0dbaaed3121b51af8685d0bae2bb7a5c6a205f66c3e7482af330df7d52f39cb1640189123d306694b3f6e761303ec60e3fda91e960e74d29960919a55a17a1d6398668abe9a3902b610f3fa705174bac6d8a1f9d599642d9dec494705b5d22bed00f9f3ea02ad2debd8fc1eb2637488fe371642bc651aa8227193eb13951cabed23e933a0a4d8f28d66db673769d7ed74d4bf3ee38fb8f8f97e31821a568a42aef9d395ea9444b2da6e1622c743a5ee832541100fa834b12745affa9e2314ed8aa25d46ce3c65ab845bacab4cc1cb39235f0ecfc268b99dbfc5dc27aaffe3da9c8b8fe58ba540c4bb629cc1ca5b4d5b5b89fdfcab429ce09772f3c200929142e8a142a7b592fccf7887273fe62ceb9e71ba0bfb411d5745d50a9056204fe41b22e591f908df80f550a26c89ddbdb57b2f2047c9a11fe553e87307123f332038f0158df429ec0e5d504ff10139f844ef46f54e2c9bb3bd6d4c812b2ee756a155f9e9d8532ba5cbce11555536fd505cf0f81b42428ac109eb76ced7340554652f47ae62314ccf6c43de7ae93e006dff1d6305139b17b9d934613293d7965c11eaf90a0201940923f5afca6c98640f529bd847d0adc930dcca80c43ff6ae174074e1fa1cfa67baac7ca38d9274c63d7b9430c967f95e8eb08719d31d23f341599f0a33f3a15309b0cb6e7d3fb7b7bc159e3f7b712261c518382f16d6946cc954511351ec9755a6c8087bc6520a7349a47a3532424c5fbb4bf9e4ec719534c3670eaba027d1d93600d8b7074fcd2a73d23f5b61ce68247086b05c934d85d77aeb84de3c12e836f51ef7115012fcb188548531798a7ddc28e4ea5db0bf0a68e38815bae1d27f4e40dea5c5998cc94aaefc67f7ffe04481a0387af12f4d3a66372b733100bc6625813a551ad534ea37f1b5492cf0cd084fb1a1f5a460154edf8a8b52b5d98fd22540bc9f55553d04290b16e8b3aaf3d7aaf836b1e1f911624e363b4facd24bbab0666ec8a37ce2f26a22a03eabf83cc96f8262deee4778a619d2e958c819fd089e27814dfdf53a548ddb3ece73b972d7211bf2aa399fff4a0e320eb49813015bc6a687e2a63539add812a7e7766471ec3f9a57ff5e1bc0f02d88272f1c82891088c556c0559197be670ffc8a6daa6fea4a92c3c09e833efabd1e4e7ebadb474a1d65354222e95507e114d6371ecc28ce2ad3d5b66a1512238f52db3d3684213000c8f85d7184e0a5275471f9dfc6dd139ca596a3b055efad193eca2f4d99f8e9141295892d6da92af81ba25aa388ca5d760ae522d821f7741d582aa56eaae4f6e44e1f0245a5715f372469c257f3f61b95e2bdf9107084246ada6100c29bfe2f8d76c6480737201ec2ab37235aef24c68bca41d5977ab0f846df41e7ed1e398998cbd64149d775790408f04c5debb514c2776bf27081ccd0a0afc627c885cb06e05501a274a628635960dde70c68c0ca9c937108b6d63be7b5288799d1936ee9a6ec070b7ce090873da92c57f8847bd7af495c70a372b58b0fb09f06ce615bc2f3fb5e223dde3af6a6d2ac8dea3c0db90f25ad5459097dc1c13565e998fb537e64e2ec418ccc1f957d23cd007f88c080eb4cc2dd49e32a15689e631da9f798b659ad7e4dbaf0231a20fb6e15811c021d59aad2e22c6ae37095d3a08086c66101429501f672eb2eb90c61ed6c2ee918c11fc9386cb2f4afea32cf4a24a42a73346c64887392ad39cec3673268f0a2d08fcfb5e1b76754718645fe1e782417554a47b61f6caacc54e8e9fc286ed8ba16793b4ac18ab16f1654f39f5ba615edbdda658f16b157bd95f5ebb78879d2cc6d760f1706f39b8618769994a08ab948138130fb5c148599c8a60a556733921e6cce7c09baf552e596aa6a16f1e471f59d1a0f30875a65edc743663e7f12c031487cdee6a597c23d284928b58744a0fb87c46f9718439992a755d4791cec5e1ae79308ccd23a6d4dbc4d1d9452e99308a95956421d186ed1a181156528c0c809e1d3491d6e1cd0e9eae0387f6a28f0d8661f829efcf5db7172c4956c1abf4caf849bd5184b6c1b951eae1bd7af13f05029299a0826a9e193a9d73eb4b919eb814e1fda031848d9825a530d9d868002e99be492654f0f15007f69a1f858c1f0fe64cb553ce8f79ea240724114a18719cda10ab74a4d072032be4d896d51b3aa0c0943bd13883731dbd200c04cb85b15c0ebeaecc56f0e3acb94eb11d0b80b79de0e9f4b82c0e39f46820f754c4d5441cba7f59a425b04dcd86eaaa35a535fc0270a5f917b2307ec32be67f32c6647988b4838d1e0991a3dea9071ba069c93ad71c62457d0afcf19c58a5c8e6c12fe7fbd048e7f1fd85f2afdd4e9e639fc4b6e1ee04892b2c2b08b246ca131b47be72213cce5dea74f9bfb1bd091b2e4fd5454fe8165352fe345ff59434409fb55a3baa02df98eb169c8282b2a8bd1d8d82e9cb0e114765ce5608d0bb9027591c26311843797bd5840c348fc9c7b4e6bb307ac0506e59f65576b7a0881153d4288df8851ffa75057335be2bd6b4", 0x1000}], 0x2, &(0x7f00000012c0)=[@sndrcv={0x30, 0x84, 0x1, {0x7, 0x5, 0x8, 0x5, 0x1, 0xf5c, 0x3, 0xbe6, r1}}, @authinfo={0x18, 0x84, 0x6, {0x40}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0x60, 0x4}, 0x1) writev(r0, &(0x7f0000001740)=[{&(0x7f0000001380)="23a0f00794d7df16feea83c7ab582389a2f8ba63903f601474fd8d434a056513a165a9145dbb0f3071fb3f52568e27b84b1e59fa51cdc8b70983a052b44c1984f00e81e6e310b38ff791a0d389e5277c2efb0d73c287a90abcc743f01c9136509474a29ae5fecb2e10c4d637ce8a6bf27bd26e7b3ce923326b650fbc715e478382034c27b27361a4756837554423e8cce779e528a7cf36780b51b7511ad33dcd4eab894a3d0022489748c6b22ececcd168147f1c58f0cfdd4cfabb34ee0f16b771483327130a95c28d8fa999883a5a74ba5c5dd7d972", 0xd6}, {&(0x7f0000001480)="8c09e70ad2ece9832ee92b89289dae300ffdda1c6e205f3e321f239da879a7d933e528e1e00666090bd24c4e3bf530c2d7d52fd3f2230a6cf8bb2aa7546c1be8376ef6e469782f8e6e7d6bc09ffe0ee1caee70ef03531730ace660b23ea504e89e0a7847bfae1e0d0ff39e170b4d215b2e33ed1f3a36c4ba95447de954b6aca7aac11e96b5cba7aef56087fc760a3628c659e7cfc69951f1fd3ddc71026011ac1ac1c7d4262f", 0xa6}, {&(0x7f0000001540)="0155770c320b2369eb026c4fade5e721c70308a178eacfa19440088aedfce82e38584ae49e93627f4b7703d8dc59fb9e80ce9a2617769a967d26a7c302", 0x3d}, {&(0x7f0000001580)="6fbbc75acf67c963963eb7a0b7d4d4ffcb1cf3211bdd285ce6b26a43cb", 0x1d}, {&(0x7f00000015c0)="838fef1dec3ea72b983d77d49aa0d03e5f63ecda97f6a58585b47aa57f743466c017a9bda2efad4c69a454b894d4a9f218da4f7727036ebd47d6ecd5c234d7a519190c7c5bc7a041a91b3d9e13ceb0b9ca0c4925a9b91aca97549ab52201ab353ba78da4c40b5a9795c57789b66fd7e9c154849c58812618fffa2c52115964aa9dd855c96bb4972a716d76b93f6e9f6859f1c65c8a7e33b509a3ec35d93ab79a129a988132d20deb6d1756fbdf7b52323753233fc33b8ec4bba04e86d39df36808ab13bb306f7b6f751e2530071cf8f5a2fadff4ee5b5b", 0xd7}, {&(0x7f00000016c0)="08392971cd9d3866cc6654273b70ce4bb013b57edfdf99aba4ea8d3bcdd920089cfe2439d721267e9054c591455fb12ad55310b2fbb3002a5f2695f8905f7db210b5a1e94c59899d630e222f3e6b38b4824776e789b4831808789befe9688057b36a6f061ddc192b", 0x68}], 0x6) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000017c0)={r1, 0x1ff, 0x10001, 0x8, 0x77, 0xf, 0x7, 0xfffffffd, {r1, @in6={{0xa, 0x4e23, 0xdc, @private0, 0x3}}, 0xca, 0x1, 0xba0, 0xc2, 0x7}}, &(0x7f0000001880)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000018c0)={r3, @in6={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}, 0x10, 0x3}, 0x90) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000001980)={0x3, 0xffffffffffffb4fc, 0x3, 0x1, 0x7}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000019c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) r5 = accept4$ax25(r4, &(0x7f0000001a00)={{0x3, @null}, [@netrom, @rose, @bcast, @netrom, @netrom, @remote, @bcast, @rose]}, &(0x7f0000001a80)=0x48, 0x81000) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000001ac0)=0x9, 0x4) pipe(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000001b40), &(0x7f0000001b80)=0x30) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000001bc0)={{r5}, 0x5, 0xfffffffffffffff8, 0xb}) (async) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000001bc0)={{r5}, 0x5, 0xfffffffffffffff8, 0xb}) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000001c00)=@req={0x0, 0x6b, 0x1, 0x5}, 0x10) (async) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000001c00)=@req={0x0, 0x6b, 0x1, 0x5}, 0x10) close(r9) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000001c40)={{{@in=@dev, @in=@multicast1}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000001d40)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000001c40)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000001d40)=0xe8) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000001d80)={0x1, 'lo\x00', {}, 0x2}) ioctl$XFS_IOC_AG_GEOMETRY(r7, 0xc080583d, &(0x7f0000001dc0)={0xffff8001, 0xfff, 0x904, 0x9, 0xb, 0x1, 0x7, 0x6}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e80), r7) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x90, r11, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x100000001}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x30, 0xa9, @random="678961139108c1c2a39f15248ec4ca543e2393a4719d55aa9ef755297116b25ffa5fe050fd1ce498024f67cf"}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x4000010) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000002000)) (async) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000002000)) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002280), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002340)={{r8, 0xffffffffffffffff}, &(0x7f00000022c0), &(0x7f0000002300)='%-010d \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000002380)=@base={0x1c, 0xa, 0x3, 0x6, 0x400, 0xffffffffffffffff, 0x1, '\x00', r10, r7, 0x2, 0x3, 0x5}, 0x50) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000002380)=@base={0x1c, 0xa, 0x3, 0x6, 0x400, 0xffffffffffffffff, 0x1, '\x00', r10, r7, 0x2, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x12, 0x26, &(0x7f0000002040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5b38}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x52}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002180)='syzkaller\x00', 0x800, 0x47, &(0x7f00000021c0)=""/71, 0x0, 0x1, '\x00', r10, @cgroup_sock_addr=0xf, r7, 0x8, &(0x7f0000002240)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r12, 0x9, &(0x7f0000002400)=[r7, r4, r13, r7, r8, r4, r7, r8, r14], &(0x7f0000002440)=[{0x1, 0x1, 0x6, 0x4}, {0x1, 0x2, 0xb, 0x3}, {0x4, 0x1, 0xe, 0x3}, {0x5, 0x2, 0xa, 0x5}, {0x3, 0x2, 0xe, 0x3}, {0x5, 0x2, 0xf, 0xc}, {0x2, 0x5, 0x3, 0x4}, {0x2, 0x3, 0x6}, {0x5, 0x5, 0x8, 0xb}], 0x10, 0xf}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x12, 0x26, &(0x7f0000002040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5b38}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x52}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002180)='syzkaller\x00', 0x800, 0x47, &(0x7f00000021c0)=""/71, 0x0, 0x1, '\x00', r10, @cgroup_sock_addr=0xf, r7, 0x8, &(0x7f0000002240)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r12, 0x9, &(0x7f0000002400)=[r7, r4, r13, r7, r8, r4, r7, r8, r14], &(0x7f0000002440)=[{0x1, 0x1, 0x6, 0x4}, {0x1, 0x2, 0xb, 0x3}, {0x4, 0x1, 0xe, 0x3}, {0x5, 0x2, 0xa, 0x5}, {0x3, 0x2, 0xe, 0x3}, {0x5, 0x2, 0xf, 0xc}, {0x2, 0x5, 0x3, 0x4}, {0x2, 0x3, 0x6}, {0x5, 0x5, 0x8, 0xb}], 0x10, 0xf}, 0x94) 25.718207ms ago: executing program 2 (id=15962): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x3}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xe, 0x1, 0x1}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) tee(r1, r1, 0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x80000001) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000100001bed417667c0200000000000011", @ANYRES32=0x0, @ANYBLOB="5d5b00000000000024001a8020000a8014000700fc020000000000000000000000000001050008000200000014003500776731"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2202, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) write$tcp_congestion(r1, &(0x7f0000000040)='veno\x00', 0x5) ioctl$TUNSETLINK(r5, 0x400454cd, 0x337) 0s ago: executing program 0 (id=15963): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000800020004000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=0x77359400, @ANYRES64, @ANYBLOB="0000000001000000000000000000"], 0x48}}, 0x410) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) kernel console output (not intermixed with test programs): ED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.892059][T30388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1708.063090][T30804] IPVS: length: 132 != 8 [ 1708.075684][T30804] pimreg: entered allmulticast mode [ 1708.082332][T30804] pimreg: left allmulticast mode [ 1708.201399][T30825] syzkaller0: entered promiscuous mode [ 1708.214608][T30825] syzkaller0: entered allmulticast mode [ 1708.854234][T28518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.005718][T19134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.014149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.645335][ T7664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.889186][T28518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.184394][T30833] batadv0: entered promiscuous mode [ 1710.189715][T30833] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1710.429202][T30857] syzkaller0: entered promiscuous mode [ 1710.436168][T30857] syzkaller0: entered allmulticast mode [ 1710.449876][ T7664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.487723][T30856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14288'. [ 1710.541912][T30863] tipc: Enabled bearer , priority 0 [ 1710.570965][T30388] veth0_vlan: entered promiscuous mode [ 1710.586304][T30857] tipc: Resetting bearer [ 1710.590187][T30870] netlink: 'syz.5.14292': attribute type 13 has an invalid length. [ 1710.600922][T30855] tipc: Resetting bearer [ 1710.609417][T30870] netlink: 'syz.5.14292': attribute type 17 has an invalid length. [ 1710.639387][T30855] tipc: Disabling bearer [ 1710.659068][T30872] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14293'. [ 1710.738117][T30388] veth1_vlan: entered promiscuous mode [ 1710.879216][T30882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14296'. [ 1710.902040][T30388] veth0_macvtap: entered promiscuous mode [ 1710.915471][T30388] veth1_macvtap: entered promiscuous mode [ 1710.922818][T30882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14296'. [ 1710.958984][T30882] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.14296'. [ 1711.028117][T30890] bridge0: Device is already in use. [ 1711.039424][T30388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1711.152657][ T5121] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1711.171540][ T5121] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1711.237186][T30388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1711.267616][ T5121] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1711.290850][ T5121] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1711.352155][ T5119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.366959][ T5119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.435617][T30917] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.14305'. [ 1711.484338][ T5119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.507760][ T5119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.536641][T30923] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14309'. [ 1711.662932][T30920] syzkaller1: entered allmulticast mode [ 1711.886779][T30944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14315'. [ 1711.898033][T30944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14315'. [ 1711.908631][T30945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14315'. [ 1711.919283][T30944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14315'. [ 1711.928806][T30945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14315'. [ 1711.964049][T21306] net_ratelimit: 7 callbacks suppressed [ 1711.964067][T21306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.008448][T30951] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14316'. [ 1712.020461][T30952] dvmrp6: entered allmulticast mode [ 1712.167918][T30921] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1712.174134][T30921] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1712.187472][T30921] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1712.193452][T30921] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1712.356063][T19134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.387286][T19134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.505834][T30966] lo speed is unknown, defaulting to 1000 [ 1712.514195][ T5121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.522025][ T5121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.678421][T30978] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14320'. [ 1712.722004][T30979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.776676][T30979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.822255][T30979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.849270][T30979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.870275][T30979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.881758][T30980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.007429][T28432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.091309][T30980] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.115132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.140857][T30996] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 1713.163382][T30996] macsec3: entered promiscuous mode [ 1713.169784][T30996] ip6gretap0: entered promiscuous mode [ 1713.178610][T30996] macsec3: entered allmulticast mode [ 1713.186198][T30996] ip6gretap0: entered allmulticast mode [ 1713.206229][T30996] ip6gretap0: left allmulticast mode [ 1713.211789][T30996] ip6gretap0: left promiscuous mode [ 1713.264471][T31003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14328'. [ 1713.267625][T30980] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.416037][T30980] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.542957][T30976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.593052][T30980] netdevsim netdevsim5 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.707225][T31028] netlink: 'syz.4.14335': attribute type 13 has an invalid length. [ 1713.719323][ T5102] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.844273][T31028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.851730][T31028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.934879][T31028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.951641][T31028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.095543][T31038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14337'. [ 1714.136895][T31046] netlink: 'syz.4.14338': attribute type 1 has an invalid length. [ 1714.158352][T23385] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.170320][T23385] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.200688][T31049] veth0: entered promiscuous mode [ 1714.209534][T31049] veth0: entered allmulticast mode [ 1714.219212][T23385] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.234085][T23385] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.277133][T23385] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.314788][T23385] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.375267][ T5121] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.384215][T31056] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14341'. [ 1714.395302][T31053] syzkaller1: entered promiscuous mode [ 1714.400789][T31053] syzkaller1: entered allmulticast mode [ 1714.652822][T31068] bridge0: entered allmulticast mode [ 1714.659257][T31068] bridge0: left allmulticast mode [ 1715.022097][T31087] dvmrp1: entered allmulticast mode [ 1715.219428][T31087] dvmrp1: left allmulticast mode [ 1715.647301][T31117] sctp: [Deprecated]: syz.2.14356 (pid 31117) Use of int in max_burst socket option deprecated. [ 1715.647301][T31117] Use struct sctp_assoc_value instead [ 1717.164917][T27552] net_ratelimit: 6 callbacks suppressed [ 1717.164936][T27552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.648199][ T7664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.213876][T28432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.873147][T31169] lo speed is unknown, defaulting to 1000 [ 1719.212316][T31216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.221750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.235428][T31216] __nla_validate_parse: 7 callbacks suppressed [ 1719.235448][T31216] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14383'. [ 1719.254128][T27552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.263144][ T7664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.465947][T31225] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14386'. [ 1719.584105][T31234] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1719.605546][T31232] netlink: 'syz.1.14388': attribute type 21 has an invalid length. [ 1719.614431][T31232] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14388'. [ 1719.625828][T31232] netlink: 'syz.1.14388': attribute type 1 has an invalid length. [ 1719.635512][T31229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14387'. [ 1719.647131][ T5834] block nbd8: Receive control failed (result -32) [ 1719.884459][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.892810][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.087143][T31255] netlink: 'syz.4.14398': attribute type 11 has an invalid length. [ 1720.264270][T31261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14396'. [ 1720.293939][T28432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.307909][T31269] lo speed is unknown, defaulting to 1000 [ 1720.346840][T31261] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14396'. [ 1720.496617][T31279] netlink: 'syz.4.14399': attribute type 4 has an invalid length. [ 1720.720005][ T30] audit: type=1804 audit(1770790146.911:52): pid=31286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.14401" name="/newroot/438/cgroup.controllers" dev="tmpfs" ino=2247 res=1 errno=0 [ 1720.785930][ T30] audit: type=1800 audit(1770790146.911:53): pid=31286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14401" name="cgroup.controllers" dev="tmpfs" ino=2247 res=0 errno=0 [ 1721.234639][T31314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14407'. [ 1721.381124][T31322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14409'. [ 1721.684716][T31339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14415'. [ 1721.848102][T31344] netlink: 'syz.2.14417': attribute type 1 has an invalid length. [ 1721.963188][T31344] bond7: entered promiscuous mode [ 1722.008663][T31344] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1722.064223][T31352] bridge0: Device is already in use. [ 1722.115111][T31358] xt_bpf: check failed: parse error [ 1722.125381][T31358] netlink: 'syz.1.14419': attribute type 8 has an invalid length. [ 1722.140053][T24577] IPVS: starting estimator thread 0... [ 1722.264608][T31359] IPVS: using max 28 ests per chain, 67200 per kthread [ 1722.278357][T31365] netlink: 'syz.0.14420': attribute type 7 has an invalid length. [ 1722.292122][T31365] netlink: 'syz.0.14420': attribute type 8 has an invalid length. [ 1722.303476][T31365] netlink: 209828 bytes leftover after parsing attributes in process `syz.0.14420'. [ 1722.366863][T27552] net_ratelimit: 2 callbacks suppressed [ 1722.366882][T27552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.524676][T31369] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1722.818508][T31391] lo speed is unknown, defaulting to 1000 [ 1722.827854][T31402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.843862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.852363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.072791][T31414] netlink: 'syz.5.14434': attribute type 1 has an invalid length. [ 1723.102638][T31416] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1723.305996][T31429] netlink: 'syz.4.14438': attribute type 1 has an invalid length. [ 1723.334588][T31429] netlink: 'syz.4.14438': attribute type 3 has an invalid length. [ 1723.414130][T28432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.724530][ T7664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.773542][T31445] bridge_slave_1: left allmulticast mode [ 1723.779866][T31445] bridge_slave_1: left promiscuous mode [ 1723.792074][T31445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1723.823268][T31445] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1724.031169][ T7664] IPVS: starting estimator thread 0... [ 1724.079176][T31464] pim6reg: entered allmulticast mode [ 1724.085435][T31468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1724.134539][T31467] IPVS: using max 29 ests per chain, 69600 per kthread [ 1724.296258][T31481] __nla_validate_parse: 13 callbacks suppressed [ 1724.296279][T31481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14457'. [ 1724.445732][T27552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.597455][T31506] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 1724.606582][T31503] netlink: 500 bytes leftover after parsing attributes in process `syz.0.14464'. [ 1724.740001][T31514] validate_nla: 2 callbacks suppressed [ 1724.740022][T31514] netlink: 'syz.4.14467': attribute type 29 has an invalid length. [ 1724.775869][T31514] netlink: 'syz.4.14467': attribute type 29 has an invalid length. [ 1724.814717][T31517] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14469'. [ 1724.871470][T31523] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14469'. [ 1724.949743][T31532] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14471'. [ 1724.971184][T31532] netlink: 'syz.5.14471': attribute type 1 has an invalid length. [ 1725.484231][T27552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.919385][T31588] netlink: 'syz.2.14483': attribute type 61 has an invalid length. [ 1726.405026][T31614] syzkaller0: entered promiscuous mode [ 1726.423612][T31614] syzkaller0: entered allmulticast mode [ 1726.445391][T31616] tipc: Enabled bearer , priority 0 [ 1726.507667][T31616] tipc: Resetting bearer [ 1726.550627][T31616] tipc: Disabling bearer [ 1727.046791][T31640] syzkaller0: entered promiscuous mode [ 1727.062687][T31640] syzkaller0: entered allmulticast mode [ 1727.135437][T31650] tipc: Started in network mode [ 1727.140352][T31650] tipc: Node identity c6813dcab5ed, cluster identity 4711 [ 1727.184933][T31650] tipc: Enabled bearer , priority 0 [ 1727.220670][T31638] tipc: Resetting bearer [ 1727.332124][T31638] tipc: Disabling bearer [ 1727.554924][T31669] netlink: 'syz.4.14507': attribute type 1 has an invalid length. [ 1727.574010][T21306] net_ratelimit: 6 callbacks suppressed [ 1727.574029][T21306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.611922][T31674] netlink: 'syz.1.14510': attribute type 10 has an invalid length. [ 1727.627076][T31669] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1727.654847][T31675] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.14508'. [ 1727.720896][T31675] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1727.748021][T31687] netlink: 'syz.1.14510': attribute type 10 has an invalid length. [ 1727.777224][T31674] bond0: (slave dummy0): Releasing backup interface [ 1727.803515][T31674] team0: Port device dummy0 added [ 1727.824929][T31687] team0: Port device dummy0 removed [ 1727.826084][T31689] tipc: Failed to remove unknown binding: 66,1,1/0:320939393/320939395 [ 1727.835956][T31687] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1727.861922][T31689] tipc: Failed to remove unknown binding: 66,1,1/0:320939393/320939395 [ 1727.895262][T31689] tipc: Failed to remove unknown binding: 66,1,1/0:320939393/320939395 [ 1727.946637][T31689] netlink: 'syz.4.14512': attribute type 1 has an invalid length. [ 1728.158266][T31698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.167088][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.269192][ T8059] lec:lec_start_xmit: lec0:No lecd attached [ 1728.289329][T31705] netlink: 'syz.5.14513': attribute type 1 has an invalid length. [ 1728.375855][T31708] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14515'. [ 1728.380656][T31706] gretap1: entered allmulticast mode [ 1728.477977][T31710] netlink: 128 bytes leftover after parsing attributes in process `syz.4.14515'. [ 1728.606943][T21306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.668027][T31719] vlan2: entered promiscuous mode [ 1728.677839][T31719] geneve1: entered promiscuous mode [ 1728.695740][T31719] vlan2: entered allmulticast mode [ 1728.704304][T31719] geneve1: entered allmulticast mode [ 1728.728997][T31722] gre0: entered promiscuous mode [ 1728.734636][T31722] gre0: entered allmulticast mode [ 1728.775105][T31723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14519'. [ 1729.436477][T31767] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14531'. [ 1729.643795][T21306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.672086][T31781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14537'. [ 1729.804364][T24577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.169025][T31806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14544'. [ 1730.198595][T31807] netlink: 'syz.0.14545': attribute type 3 has an invalid length. [ 1730.209348][T31807] netlink: 666 bytes leftover after parsing attributes in process `syz.0.14545'. [ 1730.239032][T31811] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14547'. [ 1730.255119][T31811] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1730.304085][T31812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14545'. [ 1730.321120][T31812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14545'. [ 1730.397339][T31820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14549'. [ 1730.476273][T31824] netlink: 'syz.4.14548': attribute type 4 has an invalid length. [ 1730.534859][T31825] netlink: 'syz.4.14548': attribute type 4 has an invalid length. [ 1730.552424][T31811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14547'. [ 1730.693930][T21306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.733035][T31832] lo speed is unknown, defaulting to 1000 [ 1730.866382][T31834] macsec1: entered allmulticast mode [ 1730.872105][T31834] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 1731.267177][T31850] netlink: 'syz.2.14556': attribute type 3 has an invalid length. [ 1731.279333][T31850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14556'. [ 1731.404523][ T5121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.412890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.869503][T31886] netlink: 'syz.0.14563': attribute type 10 has an invalid length. [ 1732.645933][T31924] tipc: Started in network mode [ 1732.650950][T31924] tipc: Node identity f63e3cb94dc7, cluster identity 4711 [ 1732.659493][T31924] tipc: Enabled bearer , priority 0 [ 1732.672541][T31926] netlink: 'syz.4.14578': attribute type 10 has an invalid length. [ 1732.761542][T31924] syzkaller0: entered promiscuous mode [ 1732.767868][T21306] net_ratelimit: 3 callbacks suppressed [ 1732.767885][T21306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.782262][T31924] syzkaller0: entered allmulticast mode [ 1732.790611][T31924] tipc: Resetting bearer [ 1732.805660][T31926] team0: Port device dummy0 added [ 1732.855977][T24577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.916683][T30846] tipc: Resetting bearer [ 1732.934091][T31923] tipc: Resetting bearer [ 1733.731634][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5450 ms [ 1733.739714][ C0] lec:lec_tx_timeout: lec0 [ 1733.744743][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1733.807054][T21306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.851253][T21306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.894668][T31923] tipc: Disabling bearer [ 1734.917217][T24577] tipc: Node number set to 3153673401 [ 1735.124903][T31965] __nla_validate_parse: 2 callbacks suppressed [ 1735.124924][T31965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14588'. [ 1735.221016][T31978] netlink: 'syz.4.14591': attribute type 1 has an invalid length. [ 1735.251367][T31978] 8021q: VLANs not supported on vxcan0 [ 1735.384750][T31985] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14593'. [ 1735.446252][T31994] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14596'. [ 1735.468710][T31994] nbd: must specify at least one socket [ 1735.502067][T31995] macsec2: entered promiscuous mode [ 1735.508024][T31995] macsec2: entered allmulticast mode [ 1735.526944][T32000] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14596'. [ 1735.552874][T32000] nbd: must specify at least one socket [ 1735.844492][T32018] netlink: 164 bytes leftover after parsing attributes in process `syz.4.14602'. [ 1735.890476][T24577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.899483][T21306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.965461][T24577] page_pool_release_retry() stalled pool shutdown: id 114, 1 inflight 1329 sec [ 1736.275216][T32044] lo speed is unknown, defaulting to 1000 [ 1736.311824][T32045] lo speed is unknown, defaulting to 1000 [ 1736.477578][T32058] netlink: 'syz.5.14612': attribute type 1 has an invalid length. [ 1736.485989][T32058] netlink: 'syz.5.14612': attribute type 4 has an invalid length. [ 1736.502139][T32058] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.14612'. [ 1736.524371][ T5119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.532744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.812383][T32074] netlink: 'syz.2.14618': attribute type 2 has an invalid length. [ 1736.854432][T32074] netlink: 'syz.2.14618': attribute type 8 has an invalid length. [ 1736.862410][T32074] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14618'. [ 1736.923853][T27552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.959846][T32081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14620'. [ 1736.998189][T32081] netlink: 'syz.4.14620': attribute type 15 has an invalid length. [ 1737.012474][T32081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14620'. [ 1737.024668][T32089] tipc: Enabled bearer , priority 0 [ 1737.031652][T32082] tipc: Enabling of bearer rejected, already enabled [ 1737.046948][T32089] syzkaller0: entered promiscuous mode [ 1737.054781][T32089] syzkaller0: entered allmulticast mode [ 1737.073061][ T5119] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1737.091400][ T5119] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1737.107673][T32081] tipc: Resetting bearer [ 1737.140943][T32081] tipc: Disabling bearer [ 1737.156158][ T5119] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1737.166145][ T5119] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1737.277448][T32098] openvswitch: netlink: ufid size 5796 bytes exceeds the range (1, 16) [ 1737.290976][T32103] netlink: 'syz.4.14626': attribute type 13 has an invalid length. [ 1737.306802][T32103] netlink: 'syz.4.14626': attribute type 17 has an invalid length. [ 1737.325736][T32103] gretap0: refused to change device tx_queue_len [ 1737.546470][T32118] netlink: 'syz.0.14631': attribute type 4 has an invalid length. [ 1737.554689][T32118] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14631'. [ 1737.974007][T21306] net_ratelimit: 2 callbacks suppressed [ 1737.974048][T21306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.002410][T32148] siw: device registration error -23 [ 1738.040769][T32148] 0ªî{X¹¦: left allmulticast mode [ 1738.259706][T32148] bridge0: port 1(team0) entered disabled state [ 1738.382231][T32148] bridge_slave_0: left promiscuous mode [ 1738.416482][T32148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.502152][T32148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1738.534890][T32148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1738.619672][T32148] .70·: left allmulticast mode [ 1738.627799][T32148] hsr_slave_0: left allmulticast mode [ 1738.633212][T32148] hsr_slave_1: left allmulticast mode [ 1738.703444][T32148] tipc: Resetting bearer [ 1738.764067][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1738.772100][ C0] lec:lec_tx_timeout: lec0 [ 1738.814803][T32148] veth1_to_hsr: left allmulticast mode [ 1738.831047][T32148] macvtap1: left promiscuous mode [ 1738.837183][T32148] macvtap1: left allmulticast mode [ 1738.848008][T32148] geneve2: left promiscuous mode [ 1738.867361][T32148] ip6tnl3: left promiscuous mode [ 1738.876650][T32148] ip6tnl3: left allmulticast mode [ 1738.885013][T32148] vlan2: left allmulticast mode [ 1738.905044][T32148] gretap1: left promiscuous mode [ 1738.918935][T32148] bond4: left promiscuous mode [ 1738.927006][T32148] erspan1: left promiscuous mode [ 1738.927032][T24577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.932109][T32148] bond4: left allmulticast mode [ 1738.953522][T32148] erspan1: left allmulticast mode [ 1738.988331][T32148] bond8: left promiscuous mode [ 1738.993261][T32148] bridge4: left promiscuous mode [ 1739.011403][T28432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.031916][T32150] vlan0: entered promiscuous mode [ 1739.055284][ T5121] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1739.095105][ T5121] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.106274][ T5121] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1739.144428][ T5121] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1739.195762][ T5121] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1739.211013][ T5121] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.226623][ T5121] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1739.235583][ T5121] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1739.267471][ T5121] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1739.293700][ T5121] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.312539][ T5121] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1739.326372][ T5121] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1739.380619][ T5121] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1739.396583][ T5121] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.423772][ T5121] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1739.452682][ T5121] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1739.616394][T32189] syzkaller0: entered promiscuous mode [ 1739.622013][T32189] syzkaller0: entered allmulticast mode [ 1739.704745][T32201] tipc: Enabled bearer , priority 0 [ 1739.733390][T32201] syzkaller0: entered promiscuous mode [ 1739.794075][T32201] syzkaller0: entered allmulticast mode [ 1739.846116][T32201] tipc: Resetting bearer [ 1739.906500][T32199] tipc: Resetting bearer [ 1739.968226][T32199] tipc: Disabling bearer [ 1740.045420][T21306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.252492][T32233] __nla_validate_parse: 3 callbacks suppressed [ 1740.252510][T32233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14662'. [ 1740.307117][T32241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14663'. [ 1740.338019][T32231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14661'. [ 1740.361972][T32231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14661'. [ 1740.393894][T32231] netlink: 'syz.0.14661': attribute type 14 has an invalid length. [ 1740.419341][T32231] netlink: 'syz.0.14661': attribute type 13 has an invalid length. [ 1740.934199][T32274] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14669'. [ 1741.044123][T32278] bond9: option all_slaves_active: invalid value (13) [ 1741.086671][T32278] bond9 (unregistering): Released all slaves [ 1741.120369][T21306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.167006][T32288] netlink: 'syz.0.14672': attribute type 1 has an invalid length. [ 1741.243389][T32288] bond9: entered promiscuous mode [ 1741.291053][T32288] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1741.369924][T32298] lo speed is unknown, defaulting to 1000 [ 1741.419957][T32312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14676'. [ 1741.520766][T32308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14675'. [ 1741.599166][T32316] syzkaller0: entered promiscuous mode [ 1741.608578][T32316] syzkaller0: entered allmulticast mode [ 1741.968219][ T7664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.010973][T32343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14682'. [ 1742.125977][T27552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.170050][T32355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14686'. [ 1742.287545][ T5121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.295987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.363291][T32368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14688'. [ 1742.368217][T32372] netlink: 'syz.1.14690': attribute type 10 has an invalid length. [ 1742.423051][T32372] bond0: (slave dummy0): Releasing backup interface [ 1742.436851][T32372] team0: Port device dummy0 added [ 1742.596767][T32372] lo speed is unknown, defaulting to 1000 [ 1742.906803][T32388] lo speed is unknown, defaulting to 1000 [ 1743.163894][T27552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.506265][T32395] lec:lec_atm_close: lec0: Shut down! [ 1743.665286][T32412] tipc: Enabled bearer , priority 0 [ 1743.759955][T32412] syzkaller0: entered promiscuous mode [ 1743.766102][T32412] syzkaller0: entered allmulticast mode [ 1743.774715][T32412] tipc: Resetting bearer [ 1743.792735][T32410] tipc: Resetting bearer [ 1744.219756][T27552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.005863][ T7664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.244678][T27552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.773165][T32410] tipc: Disabling bearer [ 1745.794606][T32426] __nla_validate_parse: 3 callbacks suppressed [ 1745.794624][T32426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14705'. [ 1745.819045][T32426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14705'. [ 1745.860640][T32432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.868242][T32432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.969351][T32432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.981123][T32432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1746.012851][T32432] veth1_vlan: left allmulticast mode [ 1746.127946][T23382] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1746.209355][T23382] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1746.239131][T23382] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1746.273398][T32429] lo speed is unknown, defaulting to 1000 [ 1746.283094][T23382] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1746.322991][T23382] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.359635][T23382] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.381767][T23382] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.440215][T32447] lo speed is unknown, defaulting to 1000 [ 1746.451481][T23382] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.564724][T32462] lo speed is unknown, defaulting to 1000 [ 1746.651402][T32477] netlink: 'syz.4.14717': attribute type 11 has an invalid length. [ 1746.728783][T32480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14717'. [ 1747.117719][T32500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14722'. [ 1747.892826][T32539] netlink: 548 bytes leftover after parsing attributes in process `syz.5.14728'. [ 1747.913007][T32534] netlink: 'syz.5.14728': attribute type 29 has an invalid length. [ 1747.931698][T32539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14728'. [ 1747.943424][T32538] netlink: 'syz.5.14728': attribute type 29 has an invalid length. [ 1748.096060][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.104482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.361700][T32560] netlink: 'syz.4.14735': attribute type 33 has an invalid length. [ 1748.370701][T32560] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14735'. [ 1748.475877][T32572] netlink: 'syz.5.14738': attribute type 1 has an invalid length. [ 1748.508334][T32574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14739'. [ 1748.741237][T32595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14744'. [ 1748.763659][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 1748.771771][ C0] lec:lec_tx_timeout: lec0 [ 1748.996981][T32608] netlink: 'syz.5.14748': attribute type 83 has an invalid length. [ 1749.340303][T32629] netlink: get zone limit has 8 unknown bytes [ 1749.438471][T32633] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.14757'. [ 1749.448813][T32633] netlink: Unknown conntrack attr (type=2304, max=9) [ 1749.515365][T32638] netlink: 'syz.5.14758': attribute type 5 has an invalid length. [ 1749.648515][T32646] netlink: 'syz.5.14761': attribute type 14 has an invalid length. [ 1749.708280][T32648] openvswitch: : Dropping previously announced user features [ 1749.900368][T32662] netlink: 'syz.5.14763': attribute type 10 has an invalid length. [ 1749.915718][T32662] team0: Port device dummy0 added [ 1750.066340][T32671] lo speed is unknown, defaulting to 1000 [ 1750.151147][T32680] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1750.181011][T32683] xt_hashlimit: size too large, truncated to 1048576 [ 1750.328711][T32688] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1750.585671][T32705] netlink: 'syz.4.14776': attribute type 1 has an invalid length. [ 1750.622550][T32705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1750.669571][T32700] lo speed is unknown, defaulting to 1000 [ 1750.890401][T32725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1750.920038][T32718] __nla_validate_parse: 70 callbacks suppressed [ 1750.920057][T32718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14779'. [ 1751.092838][T32731] lo speed is unknown, defaulting to 1000 [ 1751.101265][T32739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14782'. [ 1751.317800][T32748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14784'. [ 1751.442608][T32755] lo speed is unknown, defaulting to 1000 [ 1751.512097][T32766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14789'. [ 1751.872727][T32758] IPVS: length: 132 != 8 [ 1751.901935][ T304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14792'. [ 1751.918686][ T315] netlink: 88 bytes leftover after parsing attributes in process `syz.2.14794'. [ 1752.901148][ T364] netlink: 2712 bytes leftover after parsing attributes in process `syz.4.14799'. [ 1753.816831][ T5121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.825306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.189068][ T388] syzkaller1: entered promiscuous mode [ 1756.206104][ T388] syzkaller1: entered allmulticast mode [ 1756.246800][ T391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14807'. [ 1756.254032][ T395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1756.274610][ T391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14807'. [ 1756.422071][ T402] lo: Caught tx_queue_len zero misconfig [ 1756.554320][ T418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14816'. [ 1756.590093][ T420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14813'. [ 1756.642008][ T420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14813'. [ 1756.674313][T19134] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1756.675154][ T427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14818'. [ 1756.733263][T19134] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1756.774080][T19134] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1756.783006][T19134] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.892427][ T484] sctp: [Deprecated]: syz.1.14828 (pid 484) Use of int in max_burst socket option deprecated. [ 1757.892427][ T484] Use struct sctp_assoc_value instead [ 1758.140543][T19134] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1758.164863][T19134] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1758.215487][T19134] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1758.224562][T19134] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1758.705747][ T522] netlink: 80 bytes leftover after parsing attributes in process `syz.0.14839'. [ 1758.752720][ T522] 6eth1_to_bond: renamed from 30ªî{X¹¦ [ 1758.779422][ T522] A link change request failed with some changes committed already. Interface 6eth1_to_bond may have been left with an inconsistent configuration, please check. [ 1758.843176][ T525] bond11: entered promiscuous mode [ 1758.856257][ T525] bond11: entered allmulticast mode [ 1758.866950][ T525] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1758.935560][T19134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.944377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.374205][ T554] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14846'. [ 1759.590339][ T566] macsec1: entered promiscuous mode [ 1759.614010][ T566] macsec1: entered allmulticast mode [ 1759.641847][ T570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14849'. [ 1759.926635][ T579] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14851'. [ 1760.198626][ T582] lo speed is unknown, defaulting to 1000 [ 1760.580343][ T598] xfrm0: entered promiscuous mode [ 1760.597837][ T598] xfrm0: entered allmulticast mode [ 1760.626168][ T601] tipc: Invalid UDP bearer configuration [ 1760.626217][ T601] tipc: Enabling of bearer rejected, failed to enable media [ 1760.814649][ T618] netlink: 'syz.2.14858': attribute type 39 has an invalid length. [ 1761.051858][ T614] pim6reg1: entered promiscuous mode [ 1761.063198][ T614] pim6reg1: entered allmulticast mode [ 1761.349024][ T632] lo speed is unknown, defaulting to 1000 [ 1761.760446][ T656] lo speed is unknown, defaulting to 1000 [ 1761.896273][ T674] __nla_validate_parse: 4 callbacks suppressed [ 1761.896292][ T674] netlink: 7076 bytes leftover after parsing attributes in process `syz.5.14872'. [ 1761.933441][ T674] openvswitch: netlink: Flow key attr not present in new flow. [ 1762.200744][ T693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14877'. [ 1762.334888][ T708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14881'. [ 1762.382643][ T712] netlink: 'syz.1.14880': attribute type 4 has an invalid length. [ 1762.391422][ T712] netlink: 17 bytes leftover after parsing attributes in process `syz.1.14880'. [ 1762.391855][ T708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14881'. [ 1762.666565][ T726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14886'. [ 1762.721539][ T724] syzkaller0: entered promiscuous mode [ 1762.738522][ T724] syzkaller0: entered allmulticast mode [ 1762.770874][ T724] tipc: Enabled bearer , priority 0 [ 1762.843048][ T724] team0: Device veth7 is up. Set it down before adding it as a team port [ 1762.898397][ T747] netlink: 56 bytes leftover after parsing attributes in process `syz.5.14885'. [ 1762.938008][ T743] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 1762.974764][ T743] batman_adv: batadv0: Adding interface: gretap4 [ 1762.981212][ T743] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1763.009297][ T743] batman_adv: batadv0: Interface activated: gretap4 [ 1763.212224][ T750] syzkaller0: entered promiscuous mode [ 1763.227457][ T750] syzkaller0: entered allmulticast mode [ 1763.381848][ T777] syzkaller0: entered promiscuous mode [ 1763.391337][ T777] syzkaller0: entered allmulticast mode [ 1763.422997][ T723] tipc: Resetting bearer [ 1763.467651][ T723] tipc: Disabling bearer [ 1763.594756][ T766] openvswitch: netlink: IP tunnel dst address not specified [ 1763.669678][ T766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14894'. [ 1764.147156][ T808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14898'. [ 1764.602094][ T826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14903'. [ 1764.686662][T19134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.695183][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.786941][ T848] netlink: 'syz.4.14904': attribute type 8 has an invalid length. [ 1767.046280][T23385] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1767.063466][T23385] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1767.074139][ T872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14910'. [ 1767.104265][T23385] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1767.118426][T23385] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1767.356116][ T897] netlink: 240 bytes leftover after parsing attributes in process `syz.1.14911'. [ 1767.392715][ T895] lo speed is unknown, defaulting to 1000 [ 1767.628934][ T906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14918'. [ 1767.640471][ T909] syzkaller0: entered promiscuous mode [ 1767.653908][ T909] syzkaller0: entered allmulticast mode [ 1767.687112][ T911] syzkaller0: entered promiscuous mode [ 1767.703907][ T911] syzkaller0: entered allmulticast mode [ 1767.920626][ T919] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1514) ! [ 1768.165582][ T956] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1768.214915][ T953] bond2: option all_slaves_active: invalid value (13) [ 1768.228706][ T953] bond2 (unregistering): Released all slaves [ 1768.360050][ T967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14927'. [ 1768.488050][ T972] netlink: 'syz.4.14929': attribute type 1 has an invalid length. [ 1768.520512][ T972] netlink: 352 bytes leftover after parsing attributes in process `syz.4.14929'. [ 1768.623949][ T966] lo speed is unknown, defaulting to 1000 [ 1768.629781][ T972] netlink: 'syz.4.14929': attribute type 1 has an invalid length. [ 1768.646617][ T972] netlink: 352 bytes leftover after parsing attributes in process `syz.4.14929'. [ 1769.039953][ T1007] syzkaller0: entered promiscuous mode [ 1769.053199][ T1007] syzkaller0: entered allmulticast mode [ 1769.224253][ T1025] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14940'. [ 1769.340344][ T1028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14941'. [ 1769.460999][ T1039] netlink: 'syz.4.14942': attribute type 6 has an invalid length. [ 1769.469591][ T1039] netlink: 'syz.4.14942': attribute type 5 has an invalid length. [ 1769.661990][ T1052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14944'. [ 1769.734826][ T1052] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.14944'. [ 1770.144185][ T1066] bond0: option min_links: invalid value (18446744071562067968) [ 1770.152074][ T1066] bond0: option min_links: allowed values 0 - 2147483647 [ 1770.475259][ T1090] lo speed is unknown, defaulting to 1000 [ 1770.483394][ T1107] netlink: set zone limit has 4 unknown bytes [ 1770.816671][ T1132] netlink: 'syz.4.14961': attribute type 10 has an invalid length. [ 1770.837036][ T1132] team0: Device vxcan1 is of different type [ 1770.989288][ T1143] batman_adv: batadv0: Interface deactivated: gretap4 [ 1771.058043][ T1139] syzkaller0: entered promiscuous mode [ 1771.065931][ T1139] syzkaller0: entered allmulticast mode [ 1771.173486][ T1090] lo speed is unknown, defaulting to 1000 [ 1771.582074][ T1169] lo speed is unknown, defaulting to 1000 [ 1771.641764][ T1170] syzkaller1: entered promiscuous mode [ 1771.648285][ T1170] syzkaller1: entered allmulticast mode [ 1771.724690][T19134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.733127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.786936][ T1180] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1772.410732][ T1194] __nla_validate_parse: 11 callbacks suppressed [ 1772.410754][ T1194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14978'. [ 1772.706417][ T1209] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14980'. [ 1772.911897][ T1223] netlink: 'syz.5.14980': attribute type 2 has an invalid length. [ 1772.923132][ T1223] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14980'. [ 1773.029993][ T1230] ip6tnl4: entered allmulticast mode [ 1773.076203][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14984'. [ 1773.102640][ T1229] batadv_slave_0: entered promiscuous mode [ 1773.148032][ T1228] bond0: entered promiscuous mode [ 1773.160942][ T1228] bond_slave_0: entered promiscuous mode [ 1773.199933][ T1228] bond_slave_1: entered promiscuous mode [ 1773.242216][ T1228] gretap0: entered promiscuous mode [ 1773.263168][ T1228] hsr1: entered promiscuous mode [ 1773.344385][ T1247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14987'. [ 1773.446928][ T1250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14989'. [ 1773.490251][ T1253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14990'. [ 1773.659162][ T1257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14992'. [ 1773.671569][ T1257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14992'. [ 1773.695010][ T1227] batadv_slave_0: left promiscuous mode [ 1773.753192][ T1262] netlink: 'syz.0.14995': attribute type 1 has an invalid length. [ 1773.866960][ T1262] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1773.911596][ T1276] netlink: 11 bytes leftover after parsing attributes in process `syz.5.14996'. [ 1773.931362][ T1272] netlink: 'syz.0.14995': attribute type 6 has an invalid length. [ 1773.959216][ T1265] lo speed is unknown, defaulting to 1000 [ 1774.028205][ T1280] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1774.255115][ T1300] IPVS: set_ctl: invalid protocol: 0 172.20.20.56:20003 [ 1774.495218][ T1310] netlink: 'syz.1.15004': attribute type 1 has an invalid length. [ 1774.638102][ T1319] netlink: 'syz.2.15007': attribute type 49 has an invalid length. [ 1775.073435][ T1341] vlan2: entered promiscuous mode [ 1775.103835][ T1341] bridge0: entered promiscuous mode [ 1775.259376][ T1344] syzkaller0: entered promiscuous mode [ 1775.269404][ T1344] syzkaller0: entered allmulticast mode [ 1775.279087][ T1354] tipc: Enabled bearer , priority 10 [ 1777.484689][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.493014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.702437][ T1402] bond13: option arp_all_targets: invalid value (129) [ 1777.731313][ T1402] bond13 (unregistering): Released all slaves [ 1777.751961][ T1407] xt_hashlimit: size too large, truncated to 1048576 [ 1777.761890][ T1408] __nla_validate_parse: 9 callbacks suppressed [ 1777.761908][ T1408] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15027'. [ 1777.820993][ T1408] nbd: couldn't find a device at index 1 [ 1777.825877][ T1412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15029'. [ 1777.918289][ T1412] lo speed is unknown, defaulting to 1000 [ 1777.928404][ T1418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1778.086047][ T1426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1778.229202][ T1434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15034'. [ 1778.629078][ T1457] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1778.646124][ T1457] bond2 (unregistering): Released all slaves [ 1779.066641][T23385] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1779.098411][T23385] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1779.170136][T23385] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1779.197852][T23385] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1779.443767][ T1513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15052'. [ 1779.481441][ T1513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15052'. [ 1779.554859][ T1517] xt_hashlimit: size too large, truncated to 1048576 [ 1779.581003][ T1524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15056'. [ 1779.621676][ T1527] bridge0: entered allmulticast mode [ 1779.637299][ T1524] netlink: 76 bytes leftover after parsing attributes in process `syz.2.15056'. [ 1779.648809][ T1527] pim6reg: left allmulticast mode [ 1779.654928][ T1527] bridge0: left allmulticast mode [ 1779.720542][ T1533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15057'. [ 1780.400332][ T1541] bond2 (unregistering): Released all slaves [ 1780.761327][ T1569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15067'. [ 1781.581754][ T1586] lo speed is unknown, defaulting to 1000 [ 1782.134210][ T1603] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.15078'. [ 1782.227613][ T1603] netlink: 'syz.1.15078': attribute type 5 has an invalid length. [ 1782.768796][ T1641] __nla_validate_parse: 2 callbacks suppressed [ 1782.768813][ T1641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15090'. [ 1783.058127][ T1653] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15093'. [ 1783.245760][T23382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.254216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.321420][ T1675] netlink: 'syz.2.15098': attribute type 4 has an invalid length. [ 1783.324158][ T1674] netlink: 'syz.2.15098': attribute type 4 has an invalid length. [ 1783.371695][ T1672] netlink: 'syz.2.15098': attribute type 4 has an invalid length. [ 1783.424663][ T1681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15101'. [ 1783.439971][ T1681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1783.448075][ T1683] netlink: 'syz.0.15103': attribute type 32 has an invalid length. [ 1783.456691][ T1683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15103'. [ 1783.480230][ T1683] bond13: Setting coupled_control to off (0) [ 1783.492656][ T1685] netlink: 'syz.0.15103': attribute type 32 has an invalid length. [ 1783.505825][ T1685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15103'. [ 1783.543764][ T1685] bond14: Setting coupled_control to off (0) [ 1783.683431][ T1696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15106'. [ 1783.768266][ T1696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15106'. [ 1783.812113][ T1713] gre0: left promiscuous mode [ 1783.819413][ T1696] netlink: 'syz.4.15106': attribute type 19 has an invalid length. [ 1783.829747][ T1713] batadv0: left promiscuous mode [ 1783.872659][ T1713] macsec1: left promiscuous mode [ 1783.886372][ T1696] netlink: 'syz.4.15106': attribute type 20 has an invalid length. [ 1783.899236][ T1713] geneve2: left promiscuous mode [ 1783.918660][ T1713] bond2: left promiscuous mode [ 1783.923482][ T1713] bond3: left promiscuous mode [ 1783.954335][ T1713] macsec2: left promiscuous mode [ 1783.994025][ T1713] bond7: left promiscuous mode [ 1784.044062][ T1718] netlink: 'syz.1.15108': attribute type 12 has an invalid length. [ 1784.062300][ T1718] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15108'. [ 1784.092909][ T1720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15112'. [ 1784.287056][ T1730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15115'. [ 1784.347643][ T1735] netlink: 'syz.2.15117': attribute type 1 has an invalid length. [ 1784.413047][ T1735] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1784.424548][ T1735] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 1785.415463][ T1743] bond12: (slave bridge8): Enslaving as an active interface with a down link [ 1785.434713][ T1756] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1785.500893][ T1747] bond12: (slave bridge9): Enslaving as an active interface with a down link [ 1785.577214][ T1753] macvlan2: entered promiscuous mode [ 1785.582547][ T1753] macvlan2: entered allmulticast mode [ 1785.624201][ T1753] bond12: entered promiscuous mode [ 1785.634623][ T1753] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1785.652246][ T1753] bond12: left promiscuous mode [ 1786.001403][ T1794] lo speed is unknown, defaulting to 1000 [ 1786.379381][ T1832] pimreg: entered allmulticast mode [ 1786.397998][ T1829] IPVS: Error connecting to the multicast addr [ 1786.476674][ T1829] pimreg: left allmulticast mode [ 1786.561763][ T1838] tipc: Enabled bearer , priority 0 [ 1786.599094][ T1836] syzkaller0: entered promiscuous mode [ 1786.630759][ T1836] syzkaller0: entered allmulticast mode [ 1786.657726][ T1833] lo speed is unknown, defaulting to 1000 [ 1786.678928][ T1851] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1786.699802][ T1851] bond2 (unregistering): Released all slaves [ 1786.752683][ T1836] tipc: Resetting bearer [ 1786.797875][ T1835] tipc: Resetting bearer [ 1786.847883][ T1835] tipc: Disabling bearer [ 1787.251968][ T1881] bond15: entered promiscuous mode [ 1787.287235][ T1881] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1787.308269][ T1882] bridge0: port 2(macsec0) entered blocking state [ 1787.316562][ T1882] bridge0: port 2(macsec0) entered disabled state [ 1787.323218][ T1882] macsec0: entered allmulticast mode [ 1787.338562][ T1882] macsec0: entered promiscuous mode [ 1787.530688][ T1881] bond15: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1787.558593][ T1881] bond15: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 1787.575575][ T1881] bond15: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 1787.778759][ T1906] validate_nla: 5 callbacks suppressed [ 1787.778781][ T1906] netlink: 'syz.2.15164': attribute type 2 has an invalid length. [ 1787.809237][ T1906] __nla_validate_parse: 9 callbacks suppressed [ 1787.809254][ T1906] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15164'. [ 1787.845853][ T1916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1787.970224][ T1920] tunl0: Caught tx_queue_len zero misconfig [ 1787.985217][ T1920] sch_tbf: burst 2 is lower than device tunl0 mtu (1480) ! [ 1788.111602][ T1924] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1788.531940][ T1933] lo speed is unknown, defaulting to 1000 [ 1788.929640][ T1956] delete_channel: no stack [ 1788.957809][ T1956] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15178'. [ 1789.005358][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.013735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.138916][ T1967] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15182'. [ 1789.254724][ T1975] xt_TCPMSS: Only works on TCP SYN packets [ 1789.394996][ T1982] team0: Device macvlan2 is already an upper device of the team interface [ 1789.479919][ T1985] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15187'. [ 1790.098846][ T2019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1790.345518][ T2034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15198'. [ 1790.359765][ T2030] lo speed is unknown, defaulting to 1000 [ 1790.369261][ T2034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15198'. [ 1790.389874][ T2034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15198'. [ 1790.518577][ T2039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1790.581276][ T2029] netlink: 'syz.2.15197': attribute type 1 has an invalid length. [ 1790.642160][ T2042] netlink: 'syz.2.15197': attribute type 11 has an invalid length. [ 1790.730537][ T2029] bond14: entered promiscuous mode [ 1790.749309][ T2029] bond14: entered allmulticast mode [ 1790.764430][ T2029] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1790.897284][ T2056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15205'. [ 1790.939816][T18878] block nbd9: Receive control failed (result -32) [ 1790.973496][T18878] block nbd10: Receive control failed (result -1) [ 1791.207394][ T2066] netlink: 'syz.4.15207': attribute type 8 has an invalid length. [ 1791.316272][ T2070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15209'. [ 1791.598908][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1791.660754][ T2084] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15213'. [ 1791.875583][ T2092] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1792.364197][ T5834] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1792.677537][T18878] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1792.698395][T18878] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1792.708716][T18878] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1792.718324][T18878] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1792.735989][T18878] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1794.504281][ T2121] lo speed is unknown, defaulting to 1000 [ 1794.511630][ T2111] lo speed is unknown, defaulting to 1000 [ 1794.606296][ T2131] bond2: option miimon: invalid value (18446744073709551607) [ 1794.615211][ T2131] bond2: option miimon: allowed values 0 - 2147483647 [ 1794.622117][ T2136] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15225'. [ 1794.634769][ T2131] bond2 (unregistering): Released all slaves [ 1794.654033][ T2136] netlink: 35 bytes leftover after parsing attributes in process `syz.1.15225'. [ 1794.675825][ T2136] netlink: 'syz.1.15225': attribute type 5 has an invalid length. [ 1794.693280][ T2136] netlink: 'syz.1.15225': attribute type 6 has an invalid length. [ 1794.703290][ T2136] netlink: 35 bytes leftover after parsing attributes in process `syz.1.15225'. [ 1794.758141][ T2138] lo speed is unknown, defaulting to 1000 [ 1794.764803][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.773089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.790531][ T2136] macsec3: entered promiscuous mode [ 1794.796541][ T2136] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1794.845505][ T5834] Bluetooth: hci6: command tx timeout [ 1794.969331][ T2143] bond8 (unregistering): Released all slaves [ 1794.995828][ T2145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15228'. [ 1795.242070][ T2151] lo speed is unknown, defaulting to 1000 [ 1795.317842][ T2111] chnl_net:caif_netlink_parms(): no params data found [ 1795.426320][ T2165] IPVS: persistence engine module ip_vs_pe_ not found [ 1795.487630][ T2164] IPVS: persistence engine module ip_vs_pe_ not found [ 1795.676852][ T2111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.687963][ T2111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.732498][ T2111] bridge_slave_0: entered allmulticast mode [ 1795.767049][ T2111] bridge_slave_0: entered promiscuous mode [ 1795.792421][ T2111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.803487][ T2111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.811576][ T2111] bridge_slave_1: entered allmulticast mode [ 1795.819975][ T2111] bridge_slave_1: entered promiscuous mode [ 1795.894662][ T2111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1795.907893][ T2111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1795.950501][ T2111] team0: Port device team_slave_0 added [ 1795.960865][ T2111] team0: Port device team_slave_1 added [ 1795.992275][ T2111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1796.000022][ T2111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.027458][ T2111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1796.096255][ T2111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1796.180760][ T2111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.208067][ T2111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1796.255084][ T2195] veth5: entered promiscuous mode [ 1796.383962][T24577] page_pool_release_retry() stalled pool shutdown: id 114, 1 inflight 1390 sec [ 1796.403087][ T2202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15236'. [ 1796.713268][ T2111] hsr_slave_0: entered promiscuous mode [ 1796.773608][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5170 ms [ 1796.781669][ C0] lec:lec_tx_timeout: lec0 [ 1796.787144][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1796.855019][ T2111] hsr_slave_1: entered promiscuous mode [ 1796.868702][ T2111] debugfs: 'hsr0' already exists in 'hsr' [ 1796.894094][ T2111] Cannot create hsr debugfs directory [ 1796.899680][ T2206] netlink: 'syz.2.15238': attribute type 7 has an invalid length. [ 1796.912557][ T2206] netlink: 'syz.2.15238': attribute type 8 has an invalid length. [ 1796.926794][ T5834] Bluetooth: hci6: command tx timeout [ 1796.982936][ T2210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15240'. [ 1798.047911][ T2251] lo speed is unknown, defaulting to 1000 [ 1798.112654][ T2257] netlink: 'syz.1.15251': attribute type 49 has an invalid length. [ 1798.211387][ T2264] netlink: 'syz.4.15253': attribute type 10 has an invalid length. [ 1798.257445][ T2257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15251'. [ 1798.281710][ T2257] nbd: couldn't find a device at index 65546 [ 1799.005539][ T5834] Bluetooth: hci6: command tx timeout [ 1799.067611][ T2111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1799.086765][ T2111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1799.118249][ T2111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1799.160577][ T2111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1799.300354][ T2111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1799.312545][ T2295] veth0: left promiscuous mode [ 1799.364192][ T2295] veth0: left allmulticast mode [ 1799.386241][ T2295] macsec1: left promiscuous mode [ 1799.391215][ T2295] macsec1: left allmulticast mode [ 1799.471645][ T2111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1799.492392][T30846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.499594][T30846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1799.536664][T30846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.543847][T30846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1799.603396][ T2111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1799.626864][ T2111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1799.885045][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.893321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.094358][ T5834] Bluetooth: hci6: command tx timeout [ 1801.803630][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1801.811648][ C0] lec:lec_tx_timeout: lec0 [ 1801.880721][ T2111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1802.027382][ T2111] veth0_vlan: entered promiscuous mode [ 1802.076250][ T2111] veth1_vlan: entered promiscuous mode [ 1802.218976][ T2111] veth0_macvtap: entered promiscuous mode [ 1802.249098][ T2111] veth1_macvtap: entered promiscuous mode [ 1802.320504][ T2111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1802.346360][ T2339] bridge0: entered allmulticast mode [ 1802.363430][ T2111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1802.403684][T30846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.491442][T19134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.566039][ T2353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15275'. [ 1802.593726][ T2353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15275'. [ 1802.631188][T19134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.677984][T19134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.797988][ T2355] pim6reg1: entered promiscuous mode [ 1802.832217][ T2355] pim6reg1: entered allmulticast mode [ 1803.012408][ T5121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.024849][ T5121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.181159][T19134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.189360][T19134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.305333][ T2386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15220'. [ 1803.320188][ T2387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15220'. [ 1803.436819][ T2399] netlink: 'syz.0.15285': attribute type 2 has an invalid length. [ 1803.635923][ T2409] syzkaller1: entered promiscuous mode [ 1803.641762][ T2409] syzkaller1: entered allmulticast mode [ 1803.658106][ T2417] netlink: 'syz.5.15291': attribute type 1 has an invalid length. [ 1803.668086][ T2417] netlink: 244 bytes leftover after parsing attributes in process `syz.5.15291'. [ 1803.958979][ T2431] netlink: 100 bytes leftover after parsing attributes in process `syz.2.15292'. [ 1804.249472][ T2452] netlink: 'syz.4.15299': attribute type 21 has an invalid length. [ 1804.268304][ T2452] netlink: 128 bytes leftover after parsing attributes in process `syz.4.15299'. [ 1804.287943][ T2452] netlink: 'syz.4.15299': attribute type 4 has an invalid length. [ 1804.328295][ T2452] netlink: 3 bytes leftover after parsing attributes in process `syz.4.15299'. [ 1804.497457][ T2458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15301'. [ 1804.507646][ T2458] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1804.523226][ T2458] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1804.561199][ T2470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15303'. [ 1804.581662][ T2470] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1804.696308][ T2485] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1804.747047][ T2485] 8021q: VLANs not supported on caif0 [ 1804.859144][ T2496] xt_hashlimit: size too large, truncated to 1048576 [ 1804.922595][ T2503] nbd: nbd2 already in use [ 1805.140671][ T2526] lo speed is unknown, defaulting to 1000 [ 1805.644732][ T5121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.653072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.013157][ T2552] vlan0: entered promiscuous mode [ 1806.864408][ T2612] netlink: 'syz.5.15335': attribute type 2 has an invalid length. [ 1806.948240][ T2613] bond1 (unregistering): Released all slaves [ 1807.307136][T18878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1807.318737][T18878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1807.328947][T18878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1807.338678][T18878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1807.346936][T18878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1807.456097][ T2629] lo speed is unknown, defaulting to 1000 [ 1807.740726][ T2634] __nla_validate_parse: 3 callbacks suppressed [ 1807.740744][ T2634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15338'. [ 1807.758347][ T2644] syzkaller0: entered promiscuous mode [ 1807.764359][ T2644] syzkaller0: entered allmulticast mode [ 1807.990673][ T2648] netlink: 'syz.4.15340': attribute type 10 has an invalid length. [ 1808.001863][ T2648] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15340'. [ 1808.135172][ T2648] batadv0: entered promiscuous mode [ 1808.142560][ T2648] batadv0: entered allmulticast mode [ 1808.150588][ T2648] bridge0: port 3(batadv0) entered blocking state [ 1808.158453][ T2648] bridge0: port 3(batadv0) entered disabled state [ 1808.208298][ T2657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15343'. [ 1808.308493][ T2657] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1808.332240][ T2665] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15345'. [ 1808.387125][ T2666] bridge0: left allmulticast mode [ 1808.421003][ T2666] xfrm0: left promiscuous mode [ 1808.427792][ T640] udevd[640]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1808.457375][ T2676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15346'. [ 1808.470060][ T2666] xfrm0: left allmulticast mode [ 1808.481128][ T640] udevd[640]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1808.488046][ T2671] nbd11: detected capacity change from 0 to 127 [ 1808.496842][ T2666] gretap1: left allmulticast mode [ 1808.496947][ T2666] vlan2: left promiscuous mode [ 1808.512651][ T2666] geneve1: left promiscuous mode [ 1808.518601][ T2666] vlan2: left allmulticast mode [ 1808.529579][ T2666] geneve1: left allmulticast mode [ 1808.548580][ T5834] block nbd11: Receive control failed (result -104) [ 1808.595224][ T5119] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1808.604741][ T5119] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1808.609383][T23385] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1808.628585][ T2678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15347'. [ 1808.644772][T23385] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1808.664076][T23385] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1808.677930][T23385] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1808.704240][ T2629] chnl_net:caif_netlink_parms(): no params data found [ 1808.733466][T23385] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1808.756740][T23385] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1808.771404][T23385] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1808.781312][T23385] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1808.946682][ T2697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15352'. [ 1808.956620][ T2706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15354'. [ 1808.994496][ T2697] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15352'. [ 1809.062554][ T2702] Can't find ip_set type hash:ip,portÿp [ 1809.085504][ T2629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.105398][ T2629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.122402][ T2629] bridge_slave_0: entered allmulticast mode [ 1809.140401][ T2629] bridge_slave_0: entered promiscuous mode [ 1809.155792][ T2629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.163063][ T2629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1809.176390][ T2629] bridge_slave_1: entered allmulticast mode [ 1809.184560][ T2629] bridge_slave_1: entered promiscuous mode [ 1809.240230][ T2629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1809.271144][ T2629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1809.349280][ T2742] netlink: 60 bytes leftover after parsing attributes in process `syz.5.15362'. [ 1809.377447][ T2740] tipc: Started in network mode [ 1809.382434][ T2740] tipc: Node identity b6cc93dd63a1, cluster identity 4711 [ 1809.389991][ T2740] tipc: Enabled bearer , priority 0 [ 1809.398840][ T2740] syzkaller0: entered promiscuous mode [ 1809.406138][ T5834] Bluetooth: hci2: command tx timeout [ 1809.412852][ T2740] syzkaller0: entered allmulticast mode [ 1809.476765][ T2629] team0: Port device team_slave_0 added [ 1809.496502][ T2629] team0: Port device team_slave_1 added [ 1809.511354][ T2740] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1809.660809][ T2752] tipc: Resetting bearer [ 1809.675165][ T2629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1809.682121][ T2629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1809.893111][ T2629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1809.934084][ T2737] tipc: Resetting bearer [ 1811.409568][T23385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.418575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.484025][ T5834] Bluetooth: hci2: command tx timeout [ 1811.594773][ T2737] tipc: Disabling bearer [ 1811.925764][ T2629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1811.932732][ T2629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1811.959002][ T2629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1811.994664][T21593] tipc: Node number set to 3580728285 [ 1812.042812][ T2629] hsr_slave_0: entered promiscuous mode [ 1812.055710][ T2629] hsr_slave_1: entered promiscuous mode [ 1812.062130][ T2629] debugfs: 'hsr0' already exists in 'hsr' [ 1812.080404][ T2629] Cannot create hsr debugfs directory [ 1812.379648][ T2785] netlink: 'syz.0.15372': attribute type 10 has an invalid length. [ 1812.398591][ T2785] team0: Port device geneve0 added [ 1812.496436][ T2795] sctp: [Deprecated]: syz.5.15374 (pid 2795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1812.496436][ T2795] Use struct sctp_sack_info instead [ 1812.682743][ T2818] netlink: 'syz.2.15377': attribute type 32 has an invalid length. [ 1812.717910][ T2818] bond15: option coupled_control: invalid value (128) [ 1812.747756][ T2818] bond15 (unregistering): Released all slaves [ 1813.038441][ T2629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1813.059602][ T2629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1813.080716][ T2855] __nla_validate_parse: 7 callbacks suppressed [ 1813.080733][ T2855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15385'. [ 1813.105739][ T2629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1813.118201][ T2629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1813.223466][ T2629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1813.241650][ T2629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1813.254939][T23385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1813.262131][T23385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1813.277132][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1813.284298][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1813.486481][ T2629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1813.541285][ T2629] veth0_vlan: entered promiscuous mode [ 1813.548874][ T2883] xt_connbytes: Forcing CT accounting to be enabled [ 1813.554672][ T2629] veth1_vlan: entered promiscuous mode [ 1813.558683][ T2883] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1813.570863][ T5834] Bluetooth: hci2: command tx timeout [ 1813.600254][ T2629] veth0_macvtap: entered promiscuous mode [ 1813.619282][ T2629] veth1_macvtap: entered promiscuous mode [ 1813.666938][ T2629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1813.697066][ T2629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1813.721619][T23385] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.745422][T23385] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.771670][T23385] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.789249][T23385] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.917932][ T2898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15394'. [ 1813.967311][ T2898] macvlan2: entered promiscuous mode [ 1813.987638][T30846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1814.003720][T30846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.050493][ T5119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1814.059307][ T5119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.322742][ T2923] netem: change failed [ 1814.331407][ T2923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15398'. [ 1814.457656][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 1814.466053][ T2926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15401'. [ 1814.478617][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 1814.495376][ T2924] team0 (unregistering): Port device geneve0 removed [ 1814.552583][ T2931] bridge10: port 1(veth7) entered blocking state [ 1814.575313][ T2931] bridge10: port 1(veth7) entered disabled state [ 1814.590018][ T2931] veth7: entered allmulticast mode [ 1814.609213][ T2931] veth7: entered promiscuous mode [ 1814.688893][ T2926] bridge10: port 2(veth9) entered blocking state [ 1814.696256][ T2926] bridge10: port 2(veth9) entered disabled state [ 1814.703093][ T2926] veth9: entered allmulticast mode [ 1814.710790][ T2938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15404'. [ 1814.722463][ T2926] veth9: entered promiscuous mode [ 1814.758779][ T2936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15403'. [ 1815.449301][ T2972] sctp: [Deprecated]: syz.5.15411 (pid 2972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1815.449301][ T2972] Use struct sctp_sack_info instead [ 1815.560335][ T2977] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1815.644068][ T5834] Bluetooth: hci2: command tx timeout [ 1815.760902][ T2988] lo speed is unknown, defaulting to 1000 [ 1815.835671][ T2999] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 1815.899043][ T3001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1815.921890][ T3001] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1816.003999][ T5121] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1816.060404][ T3013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15427'. [ 1816.104309][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.112027][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.159004][ T5121] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1816.205121][ T3007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1816.219376][ T3007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1816.350091][ T3013] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1816.409580][T23382] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.444133][T19134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.452523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.463506][T23382] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.475096][T23382] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.540654][T23382] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.592213][ T3040] netlink: 428 bytes leftover after parsing attributes in process `syz.5.15428'. [ 1816.670388][ T3034] bond15: option arp_all_targets: invalid value (129) [ 1816.710328][ T3034] bond15 (unregistering): Released all slaves [ 1816.825299][ T3036] bond15: option arp_all_targets: invalid value (129) [ 1816.833436][ T3036] bond15 (unregistering): Released all slaves [ 1817.078016][ T3071] netlink: 'syz.1.15438': attribute type 2 has an invalid length. [ 1817.098827][ T3071] : entered promiscuous mode [ 1817.111573][ T3071] netlink: 'syz.1.15438': attribute type 2 has an invalid length. [ 1817.138576][ T3071] : left promiscuous mode [ 1817.182228][ T3075] netlink: 'syz.4.15439': attribute type 2 has an invalid length. [ 1817.200428][ T3076] netlink: 'syz.4.15439': attribute type 2 has an invalid length. [ 1817.399283][ T3093] netlink: 1984 bytes leftover after parsing attributes in process `syz.5.15442'. [ 1817.435636][ T3093] openvswitch: netlink: Flow key attr not present in new flow. [ 1817.777123][ T3114] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15448'. [ 1818.249891][ T3139] __nla_validate_parse: 1 callbacks suppressed [ 1818.249911][ T3139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15453'. [ 1818.668968][ T3165] netlink: 'syz.5.15462': attribute type 9 has an invalid length. [ 1818.717768][ T3165] bond2: option resend_igmp: invalid value (2878) [ 1818.724522][ T3165] bond2: option resend_igmp: allowed values 0 - 255 [ 1818.732776][ T3165] bond2 (unregistering): Released all slaves [ 1818.735298][ T3171] netlink: 'syz.2.15460': attribute type 10 has an invalid length. [ 1818.765920][ T3161] netlink: 'syz.2.15460': attribute type 10 has an invalid length. [ 1818.884466][ T3177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1818.891848][ T3185] tipc: Enabled bearer , priority 0 [ 1818.961861][ T3185] syzkaller0: entered promiscuous mode [ 1818.968160][ T3185] syzkaller0: entered allmulticast mode [ 1818.975377][ T3185] tipc: Resetting bearer [ 1819.010033][ T3179] tipc: Resetting bearer [ 1819.202224][ T3201] netlink: 148 bytes leftover after parsing attributes in process `syz.1.15469'. [ 1819.212638][ T3201] netlink: 116 bytes leftover after parsing attributes in process `syz.1.15469'. [ 1819.222309][ T3201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15469'. [ 1819.361244][ T3205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15469'. [ 1820.864948][ T3224] netlink: 116 bytes leftover after parsing attributes in process `syz.0.15471'. [ 1821.640541][ T3179] tipc: Disabling bearer [ 1821.653688][T27552] tipc: Node number set to 1936473546 [ 1821.674564][ T3210] tipc: Enabled bearer , priority 0 [ 1821.710184][ T3208] tipc: Disabling bearer [ 1821.788433][ T3227] syzkaller1: entered promiscuous mode [ 1821.800977][ T3227] syzkaller1: entered allmulticast mode [ 1821.882516][ T3238] netlink: 83 bytes leftover after parsing attributes in process `syz.2.15473'. [ 1821.956040][ T3240] tipc: Enabled bearer , priority 0 [ 1821.973880][ T3240] syzkaller0: entered promiscuous mode [ 1821.981884][ T3240] syzkaller0: entered allmulticast mode [ 1821.994739][ T3236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15475'. [ 1822.024672][ T3236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15475'. [ 1822.026486][ T3242] lo speed is unknown, defaulting to 1000 [ 1822.166121][ T3244] xt_CT: No such helper "snmp_trap" [ 1822.174377][ T3252] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1822.246659][ T3247] tipc: Resetting bearer [ 1822.294559][ T5119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1822.302842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1822.335374][ T3239] tipc: Resetting bearer [ 1822.470162][T18878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1822.483134][T18878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1822.491357][ T3268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15480'. [ 1822.491394][T18878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1822.509439][ T3239] tipc: Disabling bearer [ 1822.516313][T18878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1822.538486][T18878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1822.574768][ T3254] syzkaller1: entered promiscuous mode [ 1822.580269][ T3254] syzkaller1: entered allmulticast mode [ 1822.637458][ T3264] lo speed is unknown, defaulting to 1000 [ 1823.085000][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 1823.166737][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.174153][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.184380][ T3264] bridge_slave_0: entered allmulticast mode [ 1823.191305][ T3264] bridge_slave_0: entered promiscuous mode [ 1823.199391][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.206995][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.214346][ T3264] bridge_slave_1: entered allmulticast mode [ 1823.221293][ T3264] bridge_slave_1: entered promiscuous mode [ 1823.250031][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1823.261416][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1823.288796][ T3264] team0: Port device team_slave_0 added [ 1823.298526][ T3264] team0: Port device team_slave_1 added [ 1823.320256][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1823.327485][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.354333][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1823.366854][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1823.374410][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.400756][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1823.440047][ T3264] hsr_slave_0: entered promiscuous mode [ 1823.446434][ T3264] hsr_slave_1: entered promiscuous mode [ 1823.452529][ T3264] debugfs: 'hsr0' already exists in 'hsr' [ 1823.458688][ T3264] Cannot create hsr debugfs directory [ 1824.603794][ T5834] Bluetooth: hci1: command tx timeout [ 1825.118797][ T3251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1825.166449][ T3264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1825.252261][ T3303] __nla_validate_parse: 4 callbacks suppressed [ 1825.252281][ T3303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15490'. [ 1825.273455][ T3264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1825.301865][ T3307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15489'. [ 1825.311563][ T3264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1825.339641][ T3307] netlink: 'syz.0.15489': attribute type 11 has an invalid length. [ 1825.353122][ T3307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15489'. [ 1825.362556][ T3307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15489'. [ 1825.403321][ T3264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1825.418724][ T3312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15493'. [ 1825.546429][ T3324] netlink: 84 bytes leftover after parsing attributes in process `syz.0.15495'. [ 1825.563127][ T3324] netlink: 'syz.0.15495': attribute type 1 has an invalid length. [ 1825.575698][ T3326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15493'. [ 1825.642146][ T3330] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15498'. [ 1825.660653][ T3329] netlink: 7 bytes leftover after parsing attributes in process `syz.1.15497'. [ 1825.689978][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1825.740432][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1825.772710][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1825.779905][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1825.796541][ T3334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15499'. [ 1825.810473][ T3336] ipt_rpfilter: unknown options [ 1825.819083][T23382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.826265][T23382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1826.052287][ T3348] lo speed is unknown, defaulting to 1000 [ 1826.345797][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1826.358966][ T3364] tipc: Enabled bearer , priority 0 [ 1826.422418][ T3364] syzkaller0: entered promiscuous mode [ 1826.428422][ T3364] syzkaller0: entered allmulticast mode [ 1826.434868][ T3364] tipc: Resetting bearer [ 1826.471849][ T3371] syzkaller1: entered promiscuous mode [ 1826.482446][ T3371] syzkaller1: entered allmulticast mode [ 1826.684454][ T5834] Bluetooth: hci1: command tx timeout [ 1828.054872][T23385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1828.063169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1828.770092][ T5834] Bluetooth: hci1: command tx timeout [ 1828.780581][ T3377] tipc: Resetting bearer [ 1828.800508][ T3382] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1828.811720][ T5102] tipc: Resetting bearer [ 1828.852812][ T3363] tipc: Resetting bearer [ 1828.900384][ T3363] tipc: Disabling bearer [ 1828.964899][ T3264] veth0_vlan: entered promiscuous mode [ 1829.019255][ T3264] veth1_vlan: entered promiscuous mode [ 1829.131065][ T3264] veth0_macvtap: entered promiscuous mode [ 1829.150449][ T3264] veth1_macvtap: entered promiscuous mode [ 1829.204683][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1829.241301][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1829.287424][T23382] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.314152][T23382] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.359273][T23382] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.384681][T23382] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.556098][ T3420] lo speed is unknown, defaulting to 1000 [ 1829.644834][T30846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1829.656670][T30846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1829.723441][ T3432] netlink: 'syz.0.15526': attribute type 10 has an invalid length. [ 1829.783653][ T3432] syz_tun: entered promiscuous mode [ 1829.797467][ T3432] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1829.837273][T30846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1829.854763][T30846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.037772][ T3446] syzkaller1: entered promiscuous mode [ 1830.043279][ T3446] syzkaller1: entered allmulticast mode [ 1830.291569][ T3464] netlink: 'syz.1.15534': attribute type 10 has an invalid length. [ 1830.329503][ T3468] __nla_validate_parse: 4 callbacks suppressed [ 1830.329523][ T3468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15536'. [ 1830.336544][ T3464] team0: Port device dummy0 added [ 1830.344143][ T3464] netlink: 'syz.1.15534': attribute type 10 has an invalid length. [ 1830.488805][ T3464] team0: Port device dummy0 removed [ 1830.494926][ T5834] block nbd12: Receive control failed (result -1) [ 1830.548042][ T3464] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1830.614439][ T3481] netlink: 'syz.0.15537': attribute type 1 has an invalid length. [ 1830.735880][ T3486] netlink: 'syz.4.15538': attribute type 21 has an invalid length. [ 1830.759780][ T3486] netlink: 'syz.4.15538': attribute type 6 has an invalid length. [ 1830.784212][ T3486] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15538'. [ 1830.843824][ T5834] Bluetooth: hci1: command tx timeout [ 1830.886925][ T3491] netlink: 'syz.4.15540': attribute type 10 has an invalid length. [ 1830.899738][ T3491] team0: Device veth0_vlan failed to register rx_handler [ 1831.051434][ T3471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15534'. [ 1831.387616][ T3509] bond2 (unregistering): Released all slaves [ 1831.514977][ T3520] lo speed is unknown, defaulting to 1000 [ 1831.668887][ T3535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15552'. [ 1831.693332][ T3535] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15552'. [ 1831.718552][ T3535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15552'. [ 1831.752692][ T3535] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15552'. [ 1831.799035][ T3540] netlink: 'syz.0.15552': attribute type 21 has an invalid length. [ 1831.825652][ T3540] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15552'. [ 1831.885831][ T3544] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1831.894515][ T3544] syzkaller1: linktype set to 768 [ 1831.935882][ T3546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15554'. [ 1832.044366][ T3546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1832.310965][ T3563] syz_tun: left promiscuous mode [ 1832.336838][ T3563] macvlan2: left promiscuous mode [ 1832.892831][ T3604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15568'. [ 1832.970377][ T3604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1833.000801][ T3606] bond2: option miimon: invalid value (18446744071562067968) [ 1833.030380][ T3606] bond2: option miimon: allowed values 0 - 2147483647 [ 1833.164591][ T5119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1833.172962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1833.745656][ T3624] lo speed is unknown, defaulting to 1000 [ 1834.438868][ T3669] syzkaller1: entered promiscuous mode [ 1834.450828][ T3669] syzkaller1: entered allmulticast mode [ 1834.546024][ T3669] lo speed is unknown, defaulting to 1000 [ 1834.839151][ T3692] netlink: 'syz.1.15593': attribute type 4 has an invalid length. [ 1834.897335][ T3697] netlink: 'syz.1.15593': attribute type 4 has an invalid length. [ 1835.282974][ T3678] IPVS: length: 132 != 8 [ 1835.368055][ T3714] lo speed is unknown, defaulting to 1000 [ 1835.376423][ T3720] netlink: 'syz.2.15599': attribute type 9 has an invalid length. [ 1835.888942][ T3745] xt_HMARK: spi-set and port-set can't be combined [ 1836.025716][ T3755] __nla_validate_parse: 7 callbacks suppressed [ 1836.025736][ T3755] netlink: 148 bytes leftover after parsing attributes in process `syz.4.15610'. [ 1836.065192][ T3756] lo speed is unknown, defaulting to 1000 [ 1836.073382][ T3755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15610'. [ 1836.094493][ T3755] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1836.257527][ T3768] FAULT_INJECTION: forcing a failure. [ 1836.257527][ T3768] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.274207][ T3768] CPU: 1 UID: 0 PID: 3768 Comm: syz.0.15614 Not tainted syzkaller #0 PREEMPT(full) [ 1836.274232][ T3768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1836.274243][ T3768] Call Trace: [ 1836.274251][ T3768] [ 1836.274259][ T3768] dump_stack_lvl+0xe8/0x150 [ 1836.274286][ T3768] should_fail_ex+0x412/0x560 [ 1836.274312][ T3768] should_failslab+0xa8/0x100 [ 1836.274334][ T3768] __kmalloc_noprof+0xde/0x7e0 [ 1836.274352][ T3768] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1836.274376][ T3768] ? rcu_is_watching+0x15/0xb0 [ 1836.274399][ T3768] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1836.274428][ T3768] genl_family_rcv_msg_doit+0xd9/0x330 [ 1836.274450][ T3768] ? __asan_memcpy+0x40/0x70 [ 1836.274475][ T3768] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1836.274506][ T3768] ? apparmor_capable+0x137/0x1a0 [ 1836.274531][ T3768] ? bpf_lsm_capable+0x9/0x20 [ 1836.274552][ T3768] ? security_capable+0x7e/0x2c0 [ 1836.274579][ T3768] genl_rcv_msg+0x61c/0x7a0 [ 1836.274608][ T3768] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1836.274628][ T3768] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 1836.274648][ T3768] ? __pfx_nl802154_set_ackreq_default+0x10/0x10 [ 1836.274669][ T3768] ? __pfx_nl802154_post_doit+0x10/0x10 [ 1836.274704][ T3768] netlink_rcv_skb+0x232/0x4b0 [ 1836.274725][ T3768] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1836.274749][ T3768] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1836.274766][ T3768] ? genl_rcv+0x19/0x40 [ 1836.274805][ T3768] ? down_read+0x272/0x2e0 [ 1836.274821][ T3768] ? genl_rcv+0xd/0x40 [ 1836.274844][ T3768] genl_rcv+0x28/0x40 [ 1836.274864][ T3768] netlink_unicast+0x80f/0x9b0 [ 1836.274891][ T3768] ? __pfx_netlink_unicast+0x10/0x10 [ 1836.274912][ T3768] ? netlink_sendmsg+0x650/0xb40 [ 1836.274936][ T3768] ? skb_put+0x11b/0x210 [ 1836.274961][ T3768] netlink_sendmsg+0x813/0xb40 [ 1836.274990][ T3768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1836.275014][ T3768] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1836.275035][ T3768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1836.275054][ T3768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1836.275072][ T3768] ____sys_sendmsg+0xa68/0xad0 [ 1836.275093][ T3768] ? __might_fault+0xaf/0x130 [ 1836.275123][ T3768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1836.275154][ T3768] ? import_iovec+0x73/0xa0 [ 1836.275182][ T3768] ___sys_sendmsg+0x2a5/0x360 [ 1836.275202][ T3768] ? __lock_acquire+0x6b5/0x2cf0 [ 1836.275227][ T3768] ? __pfx____sys_sendmsg+0x10/0x10 [ 1836.275286][ T3768] ? __fget_files+0x2a/0x420 [ 1836.275304][ T3768] ? __fget_files+0x3a0/0x420 [ 1836.275334][ T3768] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1836.275359][ T3768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1836.275391][ T3768] ? __pfx_ksys_write+0x10/0x10 [ 1836.275427][ T3768] do_syscall_64+0xe2/0xf80 [ 1836.275448][ T3768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.275465][ T3768] ? trace_irq_disable+0x37/0x100 [ 1836.275481][ T3768] ? clear_bhb_loop+0x60/0xb0 [ 1836.275502][ T3768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.275519][ T3768] RIP: 0033:0x7f7e7299bf79 [ 1836.275534][ T3768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1836.275548][ T3768] RSP: 002b:00007f7e7389e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1836.275567][ T3768] RAX: ffffffffffffffda RBX: 00007f7e72c15fa0 RCX: 00007f7e7299bf79 [ 1836.275578][ T3768] RDX: 0000000000000004 RSI: 00002000000011c0 RDI: 0000000000000006 [ 1836.275588][ T3768] RBP: 00007f7e7389e090 R08: 0000000000000000 R09: 0000000000000000 [ 1836.275599][ T3768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1836.275609][ T3768] R13: 00007f7e72c16038 R14: 00007f7e72c15fa0 R15: 00007fffd59fcfc8 [ 1836.275639][ T3768] [ 1836.299472][ T3772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15615'. [ 1836.452128][ T3774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15615'. [ 1836.479243][ T3772] bond0: entered promiscuous mode [ 1836.675795][ T3772] bond_slave_0: entered promiscuous mode [ 1836.681988][ T3772] bond_slave_1: entered promiscuous mode [ 1836.687972][ T3772] team0: entered promiscuous mode [ 1836.692999][ T3772] team_slave_0: entered promiscuous mode [ 1836.704133][ T3772] team_slave_1: entered promiscuous mode [ 1836.709969][ T3772] dummy0: entered promiscuous mode [ 1836.717749][ T3772] batadv0: entered promiscuous mode [ 1836.723786][ T3772] debugfs: 'hsr1' already exists in 'hsr' [ 1836.729525][ T3772] Cannot create hsr debugfs directory [ 1836.734397][ T3784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15617'. [ 1837.079099][ T3799] netlink: 'syz.5.15623': attribute type 18 has an invalid length. [ 1837.089524][ T3800] netlink: 'syz.0.15625': attribute type 10 has an invalid length. [ 1837.104539][ T3799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15623'. [ 1837.123943][ T3800] tipc: Enabled bearer , priority 0 [ 1837.131575][ T3799] netlink: 'syz.5.15623': attribute type 18 has an invalid length. [ 1837.150874][ T3799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15623'. [ 1837.154977][ T3802] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15624'. [ 1837.262462][ T3800] syzkaller0: entered promiscuous mode [ 1837.268730][ T3800] syzkaller0: entered allmulticast mode [ 1837.277452][ T3800] tipc: Resetting bearer [ 1837.280571][ T3808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1837.294074][ T3797] tipc: Resetting bearer [ 1837.353230][ T3824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15628'. [ 1837.382273][ T3803] openvswitch: netlink: Flow actions attr not present in new flow. [ 1838.926443][T23385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1838.934823][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1838.944148][ T25] block nbd11: Possible stuck request ffff888025768000: control (read@0,1024B). Runtime 30 seconds [ 1838.971464][ T25] block nbd11: Possible stuck request ffff888025768200: control (read@1024,1024B). Runtime 30 seconds [ 1838.983457][ T25] block nbd11: Possible stuck request ffff888025768400: control (read@2048,1024B). Runtime 30 seconds [ 1838.995809][ T25] block nbd11: Possible stuck request ffff888025768600: control (read@3072,1024B). Runtime 30 seconds [ 1839.037414][ T3797] tipc: Disabling bearer [ 1839.191229][ T3834] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.15629'. [ 1839.302169][ T3846] lo speed is unknown, defaulting to 1000 [ 1839.309987][ T3847] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1840.002177][ T3894] netlink: 'syz.5.15646': attribute type 6 has an invalid length. [ 1840.024189][ T3894] netlink: 'syz.5.15646': attribute type 1 has an invalid length. [ 1840.411281][ T3911] netlink: 'syz.0.15652': attribute type 1 has an invalid length. [ 1840.519523][ T3911] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 1840.537644][ T3919] netlink: 'syz.4.15654': attribute type 4 has an invalid length. [ 1840.575729][ T3911] macvlan3: entered promiscuous mode [ 1840.581056][ T3911] macvlan3: entered allmulticast mode [ 1840.587843][ T3911] bond2: entered promiscuous mode [ 1840.597680][ T3911] gretap1: entered promiscuous mode [ 1840.624714][ T3911] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1840.649576][ T3911] bond2: left promiscuous mode [ 1840.663984][ T3911] gretap1: left promiscuous mode [ 1841.160975][ T3964] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1841.172068][ T3964] __nla_validate_parse: 36 callbacks suppressed [ 1841.172079][ T3964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15663'. [ 1841.188595][ T3964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15663'. [ 1841.198343][ T3964] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1841.250932][ T3966] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.15664'. [ 1841.260457][ T3966] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1841.412528][ T3968] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 1843.458174][ T3914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1843.564648][ T3984] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 1843.697572][ T3989] sch_tbf: burst 7 is lower than device tunl0 mtu (1536) ! [ 1843.746903][ T3984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15668'. [ 1843.757324][ T3984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15668'. [ 1843.964730][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.973048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.040615][ T4009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15677'. [ 1844.211941][ T4018] netlink: 156 bytes leftover after parsing attributes in process `syz.4.15679'. [ 1844.617031][ T4033] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15684'. [ 1844.740430][ T4035] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15681'. [ 1844.763981][ T4036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15683'. [ 1845.201496][ T4055] lo speed is unknown, defaulting to 1000 [ 1845.259237][ T4058] netlink: 'syz.4.15691': attribute type 3 has an invalid length. [ 1845.276733][ T4058] netlink: 'syz.4.15691': attribute type 1 has an invalid length. [ 1845.331992][ T4064] netlink: 'syz.4.15691': attribute type 1 has an invalid length. [ 1845.372399][ T4067] netlink: 'syz.5.15693': attribute type 10 has an invalid length. [ 1846.109213][ T4103] lo speed is unknown, defaulting to 1000 [ 1846.310007][ T4114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1846.535443][ T4130] netlink: 'syz.2.15707': attribute type 10 has an invalid length. [ 1846.552270][ T4122] __nla_validate_parse: 10 callbacks suppressed [ 1846.552288][ T4122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15706'. [ 1846.592712][ T4131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1846.596860][ T4130] team0: Device ipvlan1 failed to register rx_handler [ 1846.819543][ T4145] netlink: 'syz.4.15712': attribute type 1 has an invalid length. [ 1846.900236][ T4143] syzkaller0: entered promiscuous mode [ 1846.905838][ T4143] syzkaller0: entered allmulticast mode [ 1846.954166][ T4145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15712'. [ 1848.732719][ T4164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15716'. [ 1848.754243][ T4165] netlink: 'syz.1.15715': attribute type 8 has an invalid length. [ 1848.762085][ T4165] sch_fq: defrate 0 ignored. [ 1848.784678][ T4158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15715'. [ 1848.794209][ T4158] tc_dump_action: action bad kind [ 1848.794772][ T4168] netlink: 'syz.5.15717': attribute type 2 has an invalid length. [ 1849.807003][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.815653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1850.567179][ T4168] : entered promiscuous mode [ 1850.664146][ T4182] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15720'. [ 1850.790321][ T4193] netlink: 'syz.5.15726': attribute type 1 has an invalid length. [ 1850.817948][ T4193] netlink: 224 bytes leftover after parsing attributes in process `syz.5.15726'. [ 1851.555126][ T4233] netlink: 'syz.4.15738': attribute type 4 has an invalid length. [ 1851.602106][ T4234] netlink: 'syz.2.15737': attribute type 6 has an invalid length. [ 1851.649689][ T4238] netlink: 84 bytes leftover after parsing attributes in process `syz.0.15739'. [ 1851.669138][ T4238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.698884][ T4241] netlink: 'syz.2.15740': attribute type 13 has an invalid length. [ 1851.707506][ T4241] netlink: 'syz.2.15740': attribute type 12 has an invalid length. [ 1851.929589][ T4241] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15740'. [ 1851.959773][ T4252] lo speed is unknown, defaulting to 1000 [ 1852.147011][ T4266] ipt_rpfilter: unknown options [ 1852.448513][ T4286] netlink: 108 bytes leftover after parsing attributes in process `syz.4.15752'. [ 1852.489957][ T4282] syzkaller0: entered promiscuous mode [ 1852.495833][ T4282] syzkaller0: entered allmulticast mode [ 1852.818227][ T4303] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15756'. [ 1852.829894][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15756'. [ 1852.846104][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15756'. [ 1852.939622][ T4309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15758'. [ 1853.013615][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1853.580202][ T4350] netlink: 140 bytes leftover after parsing attributes in process `syz.0.15767'. [ 1855.244855][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15763'. [ 1855.338937][ T4363] IPVS: Unknown mcast interface: pimreg0 [ 1855.410036][ T4366] netlink: 'syz.4.15769': attribute type 1 has an invalid length. [ 1855.481722][ T4366] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1855.536269][ T4371] syzkaller0: entered promiscuous mode [ 1855.541775][ T4371] syzkaller0: entered allmulticast mode [ 1855.556880][ T4371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1855.567225][ T5104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.575848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.629623][ T4366] veth7: entered promiscuous mode [ 1855.656621][ T4366] bond2: (slave veth7): Enslaving as an active interface with an up link [ 1855.781770][ T4384] lo speed is unknown, defaulting to 1000 [ 1855.952893][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15779'. [ 1856.003484][ T4409] syzkaller0: entered promiscuous mode [ 1856.014099][ T4409] syzkaller0: entered allmulticast mode [ 1856.055738][ T4405] syzkaller0: entered promiscuous mode [ 1856.061237][ T4405] syzkaller0: entered allmulticast mode [ 1856.241716][ T4423] sctp: [Deprecated]: syz.0.15784 (pid 4423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1856.241716][ T4423] Use struct sctp_sack_info instead [ 1856.536942][ T4434] lo speed is unknown, defaulting to 1000 [ 1856.687207][T21593] page_pool_release_retry() stalled pool shutdown: id 114, 1 inflight 1450 sec [ 1856.710278][ T4446] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1856.720990][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15787'. [ 1856.746481][ T4446] hsr_slave_0: left promiscuous mode [ 1856.817532][ T4450] netlink: 'syz.4.15788': attribute type 3 has an invalid length. [ 1856.828125][ T4450] netlink: 104 bytes leftover after parsing attributes in process `syz.4.15788'. [ 1857.015189][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15794'. [ 1857.356489][ T4489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15800'. [ 1857.369922][ T4489] ipvlan0: entered promiscuous mode [ 1857.377129][ T4489] ipvlan0: left promiscuous mode [ 1857.771729][ T4511] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1857.781533][ T4511] bond2: entered promiscuous mode [ 1857.788382][ T4511] team0: Port device bond2 added [ 1857.834592][ T4511] xt_hashlimit: size too large, truncated to 1048576 [ 1857.890451][ T4516] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.15807'. [ 1857.913889][ T4518] netlink: 'syz.2.15808': attribute type 1 has an invalid length. [ 1858.037267][ T4528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15809'. [ 1858.081839][ T4522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15809'. [ 1858.288489][ T4542] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.15813'. [ 1858.342008][ T4547] syz_tun: entered allmulticast mode [ 1858.359042][ T4545] syz_tun: left allmulticast mode [ 1858.387694][ T4550] netlink: 'syz.1.15816': attribute type 1 has an invalid length. [ 1858.397213][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15816'. [ 1858.555427][ T4562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15819'. [ 1858.763808][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 1858.771893][ C0] lec:lec_tx_timeout: lec0 [ 1858.776765][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1859.141403][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.149124][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1859.521084][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1859.567357][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1860.073272][ T4577] geneve2: entered promiscuous mode [ 1860.109858][T30846] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.133686][T30846] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.142622][T30846] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.191715][T30846] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.209223][ T4588] lo speed is unknown, defaulting to 1000 [ 1860.216112][T30846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1860.259728][T30846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1860.271642][T30846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1860.290778][ T4607] hsr0: entered promiscuous mode [ 1860.309898][T30846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1860.340159][ T4607] hsr_slave_0: left promiscuous mode [ 1860.355001][ T4607] hsr_slave_1: left promiscuous mode [ 1860.620733][ T4624] bridge0: entered allmulticast mode [ 1861.329656][ T4213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1861.338084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1861.624973][ T4661] lo speed is unknown, defaulting to 1000 [ 1861.735759][ T4667] sctp: [Deprecated]: syz.0.15848 (pid 4667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1861.735759][ T4667] Use struct sctp_sack_info instead [ 1861.758791][ T4667] tipc: New replicast peer: 255.255.255.255 [ 1861.767200][ T4667] tipc: Enabled bearer , priority 6 [ 1861.918040][ T4679] __nla_validate_parse: 152 callbacks suppressed [ 1861.918058][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15853'. [ 1861.936030][ T4679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1861.944246][T30846] bond0: (slave bond_slave_0): interface is now down [ 1861.951304][T30846] bond0: (slave bond_slave_1): interface is now down [ 1862.003444][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15853'. [ 1862.096687][ T5119] bond0: (slave bond_slave_0): interface is now down [ 1862.103409][ T5119] bond0: (slave bond_slave_1): interface is now down [ 1862.253957][ T5119] bond0: (slave bond_slave_0): interface is now down [ 1862.260773][ T5119] bond0: (slave bond_slave_1): interface is now down [ 1862.292854][ T4694] netlink: 640 bytes leftover after parsing attributes in process `syz.1.15857'. [ 1862.311040][ T5119] bond0: now running without any active interface! [ 1862.321800][ T4694] netlink: 640 bytes leftover after parsing attributes in process `syz.1.15857'. [ 1862.572297][ T4672] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15850'. [ 1862.588076][ T4713] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.15862'. [ 1862.612692][ T4709] xt_CT: No such helper "pptp" [ 1862.982026][ T4727] lo speed is unknown, defaulting to 1000 [ 1863.059310][ T4738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15867'. [ 1863.141246][ T4742] netlink: 'syz.0.15869': attribute type 21 has an invalid length. [ 1863.155215][ T4741] ip6gre1: entered promiscuous mode [ 1863.160456][ T4741] ip6gre1: entered allmulticast mode [ 1863.186894][ T4741] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1863.492549][ T4752] syzkaller0: entered promiscuous mode [ 1863.515117][ T4752] syzkaller0: entered allmulticast mode [ 1863.783913][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1863.790723][ T4770] netlink: 'syz.2.15880': attribute type 1 has an invalid length. [ 1863.791951][ C0] lec:lec_tx_timeout: lec0 [ 1863.917918][ T4778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15883'. [ 1863.938287][ T4770] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1864.045028][T30846] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1864.063825][T30846] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1864.075133][T10066] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1864.241944][ T4797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15887'. [ 1864.420986][ T4802] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1864.440156][ T4808] netlink: 'syz.0.15889': attribute type 1 has an invalid length. [ 1864.450818][ T4810] netlink: 'syz.1.15890': attribute type 1 has an invalid length. [ 1864.468658][ T4810] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1864.606954][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15889'. [ 1864.673906][T10066] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1864.738281][ T4829] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20001 [ 1864.844704][T10066] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1864.925594][ T4839] bridge0: entered allmulticast mode [ 1864.935224][ T4839] bridge_slave_1: left allmulticast mode [ 1864.940909][ T4839] bridge_slave_1: left promiscuous mode [ 1864.973863][ T4839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.041275][ T4839] bridge_slave_0: left allmulticast mode [ 1865.079773][ T4839] bridge_slave_0: left promiscuous mode [ 1865.100078][ T4839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.146990][ T4851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1865.263901][ T4844] lo speed is unknown, defaulting to 1000 [ 1865.711581][ T4890] lo speed is unknown, defaulting to 1000 [ 1865.758166][ T4901] veth0: entered promiscuous mode [ 1865.763349][ T4901] veth0: entered allmulticast mode [ 1866.495578][ T4944] netlink: 'syz.2.15921': attribute type 2 has an invalid length. [ 1866.866708][ T4967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1866.874033][ T4967] IPv6: NLM_F_CREATE should be set when creating new route [ 1866.881294][ T4967] IPv6: NLM_F_CREATE should be set when creating new route [ 1867.084668][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1867.093010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1867.139075][ T4978] __nla_validate_parse: 4 callbacks suppressed [ 1867.139092][ T4978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15931'. [ 1867.225865][ T4978] hsr_slave_1 (unregistering): left promiscuous mode [ 1867.249474][ T4988] netlink: 'syz.1.15933': attribute type 4 has an invalid length. [ 1867.278399][ T4988] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15933'. [ 1867.322421][ T4990] netlink: 'syz.5.15934': attribute type 1 has an invalid length. [ 1867.364161][ T4990] netlink: 96 bytes leftover after parsing attributes in process `syz.5.15934'. [ 1867.384758][ T4990] netlink: 1 bytes leftover after parsing attributes in process `syz.5.15934'. [ 1867.416017][ T4990] netlink: 'syz.5.15934': attribute type 1 has an invalid length. [ 1867.431524][ T4996] tipc: Enabled bearer , priority 0 [ 1867.449648][ T4994] tipc: Enabling of bearer rejected, already enabled [ 1867.484456][ T4996] syzkaller0: entered promiscuous mode [ 1867.489977][ T4996] syzkaller0: entered allmulticast mode [ 1867.550217][ T5004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15938'. [ 1867.579544][ T5004] netlink: 32 bytes leftover after parsing attributes in process `syz.5.15938'. [ 1867.606222][ T5006] netlink: 'syz.4.15939': attribute type 4 has an invalid length. [ 1867.624818][ T4996] tipc: Resetting bearer [ 1867.709481][ T4996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15935'. [ 1867.786022][ T5015] netlink: 'syz.5.15938': attribute type 10 has an invalid length. [ 1867.871270][ T4992] tipc: Resetting bearer [ 1867.894162][ T4992] tipc: Disabling bearer [ 1867.963807][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1868.077883][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15946'. [ 1868.106279][ T5030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15947'. [ 1868.164028][ T5037] validate_nla: 1 callbacks suppressed [ 1868.164046][ T5037] netlink: 'syz.4.15947': attribute type 27 has an invalid length. [ 1868.204060][ T5037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15947'. [ 1868.352376][ T5046] netlink: 'syz.0.15952': attribute type 8 has an invalid length. [ 1868.386314][ T5046] netlink: 'syz.0.15952': attribute type 8 has an invalid length. [ 1868.474922][ T5054] SET target dimension over the limit! [ 1868.523371][ T5062] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1868.548669][ T5061] nbd: must specify a device to reconfigure [ 1868.582997][ T5067] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1868.748434][ T5076] lo speed is unknown, defaulting to 1000 [ 1868.855674][ T5072] [ 1868.858036][ T5072] ====================================================== [ 1868.865051][ T5072] WARNING: possible circular locking dependency detected [ 1868.872076][ T5072] syzkaller #0 Not tainted [ 1868.876489][ T5072] ------------------------------------------------------ [ 1868.883504][ T5072] syz.1.15959/5072 is trying to acquire lock: [ 1868.889568][ T5072] ffff8881417585a0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1868.898976][ T5072] [ 1868.898976][ T5072] but task is already holding lock: [ 1868.906339][ T5072] ffff888141758060 (&q->q_usage_counter(io)#62){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1868.916536][ T5072] [ 1868.916536][ T5072] which lock already depends on the new lock. [ 1868.916536][ T5072] [ 1868.926941][ T5072] [ 1868.926941][ T5072] the existing dependency chain (in reverse order) is: [ 1868.935950][ T5072] [ 1868.935950][ T5072] -> #6 (&q->q_usage_counter(io)#62){++++}-{0:0}: [ 1868.944571][ T5072] blk_alloc_queue+0x52f/0x610 [ 1868.949887][ T5072] __blk_mq_alloc_disk+0x197/0x390 [ 1868.955505][ T5072] nbd_dev_add+0x499/0xb50 [ 1868.960447][ T5072] nbd_init+0x168/0x1f0 [ 1868.965105][ T5072] do_one_initcall+0x250/0x840 [ 1868.970376][ T5072] do_initcall_level+0x104/0x190 [ 1868.975824][ T5072] do_initcalls+0x59/0xa0 [ 1868.980659][ T5072] kernel_init_freeable+0x2a6/0x3d0 [ 1868.986394][ T5072] kernel_init+0x1d/0x1d0 [ 1868.991228][ T5072] ret_from_fork+0x51b/0xa40 [ 1868.996325][ T5072] ret_from_fork_asm+0x1a/0x30 [ 1869.001594][ T5072] [ 1869.001594][ T5072] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1869.008796][ T5072] fs_reclaim_acquire+0x71/0x100 [ 1869.014252][ T5072] kmem_cache_alloc_node_noprof+0x48/0x6f0 [ 1869.020571][ T5072] __alloc_skb+0x1d0/0x7d0 [ 1869.025494][ T5072] __ip6_append_data+0x2a44/0x3c50 [ 1869.031113][ T5072] ip6_append_data+0x10f/0x280 [ 1869.036390][ T5072] rawv6_sendmsg+0x12d3/0x18e0 [ 1869.041669][ T5072] ____sys_sendmsg+0x894/0xad0 [ 1869.046946][ T5072] ___sys_sendmsg+0x2a5/0x360 [ 1869.052135][ T5072] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1869.057580][ T5072] do_syscall_64+0xe2/0xf80 [ 1869.062617][ T5072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.069030][ T5072] [ 1869.069030][ T5072] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1869.076756][ T5072] lock_sock_nested+0x48/0x100 [ 1869.082032][ T5072] inet_shutdown+0x6a/0x390 [ 1869.087051][ T5072] nbd_mark_nsock_dead+0x2e9/0x560 [ 1869.092683][ T5072] sock_shutdown+0x15e/0x260 [ 1869.097787][ T5072] nbd_clear_sock+0x24/0x170 [ 1869.102892][ T5072] nbd_config_put+0x2dd/0x580 [ 1869.108078][ T5072] nbd_genl_connect+0x19d5/0x1cf0 [ 1869.113617][ T5072] genl_family_rcv_msg_doit+0x22a/0x330 [ 1869.119677][ T5072] genl_rcv_msg+0x61c/0x7a0 [ 1869.124727][ T5072] netlink_rcv_skb+0x232/0x4b0 [ 1869.130010][ T5072] genl_rcv+0x28/0x40 [ 1869.134510][ T5072] netlink_unicast+0x80f/0x9b0 [ 1869.139805][ T5072] netlink_sendmsg+0x813/0xb40 [ 1869.145081][ T5072] ____sys_sendmsg+0xa68/0xad0 [ 1869.150359][ T5072] ___sys_sendmsg+0x2a5/0x360 [ 1869.155548][ T5072] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1869.160999][ T5072] do_syscall_64+0xe2/0xf80 [ 1869.166029][ T5072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.172427][ T5072] [ 1869.172427][ T5072] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1869.180059][ T5072] __mutex_lock+0x19f/0x1300 [ 1869.185163][ T5072] nbd_queue_rq+0x37b/0x1100 [ 1869.190330][ T5072] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1869.196406][ T5072] __blk_mq_sched_dispatch_requests+0xdce/0x15d0 [ 1869.203258][ T5072] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1869.209835][ T5072] blk_mq_run_hw_queue+0x348/0x4f0 [ 1869.215467][ T5072] blk_mq_dispatch_list+0xd16/0xe10 [ 1869.221177][ T5072] blk_mq_flush_plug_list+0x48d/0x570 [ 1869.227056][ T5072] __blk_flush_plug+0x3ed/0x4d0 [ 1869.232411][ T5072] __submit_bio+0x4c6/0x5d0 [ 1869.237423][ T5072] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 1869.243560][ T5072] block_read_full_folio+0x599/0x830 [ 1869.249363][ T5072] filemap_read_folio+0x137/0x3b0 [ 1869.254903][ T5072] do_read_cache_folio+0x358/0x590 [ 1869.260528][ T5072] read_part_sector+0xb6/0x2b0 [ 1869.265797][ T5072] adfspart_check_ICS+0xa5/0xa40 [ 1869.271239][ T5072] bdev_disk_changed+0x765/0x14c0 [ 1869.276769][ T5072] blkdev_get_whole+0x380/0x510 [ 1869.282129][ T5072] bdev_open+0x31e/0xd30 [ 1869.286876][ T5072] blkdev_open+0x470/0x610 [ 1869.291800][ T5072] do_dentry_open+0x7ce/0x1420 [ 1869.297080][ T5072] vfs_open+0x3b/0x340 [ 1869.301654][ T5072] path_openat+0x3486/0x3e20 [ 1869.306750][ T5072] do_filp_open+0x22d/0x490 [ 1869.311762][ T5072] do_sys_openat2+0x12f/0x220 [ 1869.316944][ T5072] __x64_sys_openat+0x138/0x170 [ 1869.322305][ T5072] do_syscall_64+0xe2/0xf80 [ 1869.327318][ T5072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.333716][ T5072] [ 1869.333716][ T5072] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1869.340916][ T5072] __mutex_lock+0x19f/0x1300 [ 1869.346036][ T5072] nbd_queue_rq+0xc6/0x1100 [ 1869.351050][ T5072] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1869.357105][ T5072] __blk_mq_sched_dispatch_requests+0xdce/0x15d0 [ 1869.363946][ T5072] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1869.370430][ T5072] blk_mq_run_hw_queue+0x348/0x4f0 [ 1869.376053][ T5072] blk_mq_dispatch_list+0xd16/0xe10 [ 1869.381754][ T5072] blk_mq_flush_plug_list+0x48d/0x570 [ 1869.387632][ T5072] __blk_flush_plug+0x3ed/0x4d0 [ 1869.393085][ T5072] __submit_bio+0x4c6/0x5d0 [ 1869.398095][ T5072] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 1869.404322][ T5072] block_read_full_folio+0x599/0x830 [ 1869.410120][ T5072] filemap_read_folio+0x137/0x3b0 [ 1869.415735][ T5072] do_read_cache_folio+0x358/0x590 [ 1869.421350][ T5072] read_part_sector+0xb6/0x2b0 [ 1869.426615][ T5072] adfspart_check_ICS+0xa5/0xa40 [ 1869.432053][ T5072] bdev_disk_changed+0x765/0x14c0 [ 1869.437578][ T5072] blkdev_get_whole+0x380/0x510 [ 1869.442936][ T5072] bdev_open+0x31e/0xd30 [ 1869.447683][ T5072] blkdev_open+0x470/0x610 [ 1869.452606][ T5072] do_dentry_open+0x7ce/0x1420 [ 1869.457879][ T5072] vfs_open+0x3b/0x340 [ 1869.462460][ T5072] path_openat+0x3486/0x3e20 [ 1869.467562][ T5072] do_filp_open+0x22d/0x490 [ 1869.472573][ T5072] do_sys_openat2+0x12f/0x220 [ 1869.477757][ T5072] __x64_sys_openat+0x138/0x170 [ 1869.483112][ T5072] do_syscall_64+0xe2/0xf80 [ 1869.488127][ T5072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.494524][ T5072] [ 1869.494524][ T5072] -> #1 (set->srcu){.+.+}-{0:0}: [ 1869.501722][ T5072] __synchronize_srcu+0xca/0x3e0 [ 1869.507187][ T5072] elevator_switch+0x1e8/0x750 [ 1869.512478][ T5072] elevator_change+0x2cc/0x450 [ 1869.517763][ T5072] elevator_set_default+0x36c/0x430 [ 1869.523481][ T5072] blk_register_queue+0x34e/0x3f0 [ 1869.529018][ T5072] __add_disk+0x677/0xd50 [ 1869.533865][ T5072] add_disk_fwnode+0xfb/0x480 [ 1869.539050][ T5072] nbd_dev_add+0x72c/0xb50 [ 1869.543987][ T5072] nbd_init+0x168/0x1f0 [ 1869.548647][ T5072] do_one_initcall+0x250/0x840 [ 1869.553923][ T5072] do_initcall_level+0x104/0x190 [ 1869.559393][ T5072] do_initcalls+0x59/0xa0 [ 1869.564236][ T5072] kernel_init_freeable+0x2a6/0x3d0 [ 1869.569942][ T5072] kernel_init+0x1d/0x1d0 [ 1869.574778][ T5072] ret_from_fork+0x51b/0xa40 [ 1869.579869][ T5072] ret_from_fork_asm+0x1a/0x30 [ 1869.585138][ T5072] [ 1869.585138][ T5072] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1869.592942][ T5072] __lock_acquire+0x15a5/0x2cf0 [ 1869.598301][ T5072] lock_acquire+0x106/0x330 [ 1869.603313][ T5072] __mutex_lock+0x19f/0x1300 [ 1869.608413][ T5072] elevator_change+0x1b3/0x450 [ 1869.613684][ T5072] elevator_set_none+0xb5/0x140 [ 1869.619035][ T5072] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 1869.625356][ T5072] nbd_start_device+0x17f/0xb10 [ 1869.630716][ T5072] nbd_genl_connect+0x165b/0x1cf0 [ 1869.636250][ T5072] genl_family_rcv_msg_doit+0x22a/0x330 [ 1869.642313][ T5072] genl_rcv_msg+0x61c/0x7a0 [ 1869.647325][ T5072] netlink_rcv_skb+0x232/0x4b0 [ 1869.652595][ T5072] genl_rcv+0x28/0x40 [ 1869.657102][ T5072] netlink_unicast+0x80f/0x9b0 [ 1869.662376][ T5072] netlink_sendmsg+0x813/0xb40 [ 1869.667647][ T5072] ____sys_sendmsg+0xa68/0xad0 [ 1869.672918][ T5072] ___sys_sendmsg+0x2a5/0x360 [ 1869.678101][ T5072] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1869.683559][ T5072] do_syscall_64+0xe2/0xf80 [ 1869.688571][ T5072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.694966][ T5072] [ 1869.694966][ T5072] other info that might help us debug this: [ 1869.694966][ T5072] [ 1869.705174][ T5072] Chain exists of: [ 1869.705174][ T5072] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#62 [ 1869.705174][ T5072] [ 1869.718901][ T5072] Possible unsafe locking scenario: [ 1869.718901][ T5072] [ 1869.726329][ T5072] CPU0 CPU1 [ 1869.731685][ T5072] ---- ---- [ 1869.737038][ T5072] lock(&q->q_usage_counter(io)#62); [ 1869.742412][ T5072] lock(fs_reclaim); [ 1869.748906][ T5072] lock(&q->q_usage_counter(io)#62); [ 1869.756794][ T5072] lock(&q->elevator_lock); [ 1869.761382][ T5072] [ 1869.761382][ T5072] *** DEADLOCK *** [ 1869.761382][ T5072] [ 1869.769513][ T5072] 6 locks held by syz.1.15959/5072: [ 1869.774704][ T5072] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1869.782887][ T5072] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1869.791844][ T5072] #2: ffff8880255c79d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 1869.803239][ T5072] #3: ffff8880255c78d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 1869.814201][ T5072] #4: ffff888141758060 (&q->q_usage_counter(io)#62){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1869.824837][ T5072] #5: ffff888141758098 (&q->q_usage_counter(queue)#46){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1869.835719][ T5072] [ 1869.835719][ T5072] stack backtrace: [ 1869.841599][ T5072] CPU: 1 UID: 0 PID: 5072 Comm: syz.1.15959 Not tainted syzkaller #0 PREEMPT(full) [ 1869.841620][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1869.841631][ T5072] Call Trace: [ 1869.841640][ T5072] [ 1869.841649][ T5072] dump_stack_lvl+0xe8/0x150 [ 1869.841671][ T5072] print_circular_bug+0x2e1/0x300 [ 1869.841689][ T5072] check_noncircular+0x12e/0x150 [ 1869.841707][ T5072] __lock_acquire+0x15a5/0x2cf0 [ 1869.841736][ T5072] ? elevator_change+0x1b3/0x450 [ 1869.841750][ T5072] lock_acquire+0x106/0x330 [ 1869.841768][ T5072] ? elevator_change+0x1b3/0x450 [ 1869.841788][ T5072] __mutex_lock+0x19f/0x1300 [ 1869.841809][ T5072] ? elevator_change+0x1b3/0x450 [ 1869.841825][ T5072] ? rcu_is_watching+0x15/0xb0 [ 1869.841841][ T5072] ? elevator_change+0x1b3/0x450 [ 1869.841856][ T5072] ? __pfx___mutex_lock+0x10/0x10 [ 1869.841876][ T5072] ? enable_work+0x17f/0x230 [ 1869.841892][ T5072] ? lockdep_hardirqs_on+0x7a/0x110 [ 1869.841919][ T5072] ? __cancel_work_sync+0xf7/0x110 [ 1869.841935][ T5072] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1869.841954][ T5072] elevator_change+0x1b3/0x450 [ 1869.841971][ T5072] elevator_set_none+0xb5/0x140 [ 1869.841986][ T5072] ? __pfx_elevator_set_none+0x10/0x10 [ 1869.842004][ T5072] ? xa_load+0x1db/0x210 [ 1869.842029][ T5072] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 1869.842052][ T5072] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1869.842072][ T5072] ? kernfs_add_one+0x46f/0x5c0 [ 1869.842093][ T5072] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1869.842115][ T5072] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1869.842136][ T5072] nbd_start_device+0x17f/0xb10 [ 1869.842160][ T5072] ? device_create_file+0xf4/0x1b0 [ 1869.842183][ T5072] nbd_genl_connect+0x165b/0x1cf0 [ 1869.842207][ T5072] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1869.842231][ T5072] ? rcu_is_watching+0x15/0xb0 [ 1869.842246][ T5072] ? __nla_parse+0x40/0x60 [ 1869.842267][ T5072] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1869.842291][ T5072] genl_family_rcv_msg_doit+0x22a/0x330 [ 1869.842314][ T5072] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1869.842338][ T5072] ? __lock_acquire+0x6b5/0x2cf0 [ 1869.842361][ T5072] genl_rcv_msg+0x61c/0x7a0 [ 1869.842383][ T5072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1869.842404][ T5072] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1869.842433][ T5072] netlink_rcv_skb+0x232/0x4b0 [ 1869.842450][ T5072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1869.842470][ T5072] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1869.842485][ T5072] ? genl_rcv+0x19/0x40 [ 1869.842509][ T5072] ? down_read+0x272/0x2e0 [ 1869.842521][ T5072] ? genl_rcv+0xd/0x40 [ 1869.842540][ T5072] genl_rcv+0x28/0x40 [ 1869.842558][ T5072] netlink_unicast+0x80f/0x9b0 [ 1869.842576][ T5072] ? __pfx_netlink_unicast+0x10/0x10 [ 1869.842591][ T5072] ? netlink_sendmsg+0x650/0xb40 [ 1869.842607][ T5072] ? skb_put+0x11b/0x210 [ 1869.842627][ T5072] netlink_sendmsg+0x813/0xb40 [ 1869.842646][ T5072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1869.842664][ T5072] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1869.842683][ T5072] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1869.842700][ T5072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1869.842716][ T5072] ____sys_sendmsg+0xa68/0xad0 [ 1869.842736][ T5072] ? __might_fault+0xaf/0x130 [ 1869.842760][ T5072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1869.842782][ T5072] ? import_iovec+0x73/0xa0 [ 1869.842804][ T5072] ___sys_sendmsg+0x2a5/0x360 [ 1869.842823][ T5072] ? __lock_acquire+0x6b5/0x2cf0 [ 1869.842844][ T5072] ? __pfx____sys_sendmsg+0x10/0x10 [ 1869.842866][ T5072] ? futex_wait+0x29a/0x380 [ 1869.842891][ T5072] ? __fget_files+0x2a/0x420 [ 1869.842907][ T5072] ? __fget_files+0x3a0/0x420 [ 1869.842926][ T5072] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1869.842946][ T5072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1869.842969][ T5072] ? __sys_socketpair+0x4a8/0x560 [ 1869.842990][ T5072] do_syscall_64+0xe2/0xf80 [ 1869.843009][ T5072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.843024][ T5072] ? trace_irq_disable+0x37/0x100 [ 1869.843039][ T5072] ? clear_bhb_loop+0x60/0xb0 [ 1869.843056][ T5072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.843072][ T5072] RIP: 0033:0x7f262399bf79 [ 1869.843088][ T5072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1869.843103][ T5072] RSP: 002b:00007f2624775028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1869.843121][ T5072] RAX: ffffffffffffffda RBX: 00007f2623c15fa0 RCX: 00007f262399bf79 [ 1869.843133][ T5072] RDX: 0000000020000040 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 1869.843144][ T5072] RBP: 00007f2623a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1869.843154][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1869.843164][ T5072] R13: 00007f2623c16038 R14: 00007f2623c15fa0 R15: 00007ffc5d6f3cc8 [ 1869.843183][ T5072] [ 1870.354008][ T25] block nbd11: Possible stuck request ffff888025768000: control (read@0,1024B). Runtime 60 seconds [ 1870.365380][ T25] block nbd11: Possible stuck request ffff888025768200: control (read@1024,1024B). Runtime 60 seconds [ 1870.381193][ T25] block nbd11: Possible stuck request ffff888025768400: control (read@2048,1024B). Runtime 60 seconds [ 1870.392317][ T25] block nbd11: Possible stuck request ffff888025768600: control (read@3072,1024B). Runtime 60 seconds [ 1870.419656][ T5834] block nbd13: Receive control failed (result -32) [ 1870.426509][T18878] block nbd13: Receive control failed (result -32) [ 1870.426527][ T2041] block nbd13: Receive control failed (result -32) [ 1870.433116][T18878] block nbd13: Receive control failed (result -32) [ 1872.844420][ T5104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1872.852656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1873.521607][ T5189] udevd[5189]: worker [640] /devices/virtual/block/nbd11 is taking a long time [ 1875.413725][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1878.604878][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1878.613075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog