last executing test programs: 3.083216946s ago: executing program 4 (id=6654): pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) close(0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa002a1}, 0xc, &(0x7f0000000180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000090a010100000000ff000000020000060c000b400000000062af001b080008400000000010001180090001007866726d000000001c000000090a010200"], 0xa8}, 0x1, 0x0, 0x0, 0x20000001}, 0x8884) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r1, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r5, &(0x7f0000000340), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002000)={r5, &(0x7f0000001ec0), &(0x7f0000001f00)=""/208}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) pipe(0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) close(0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa002a1}, 0xc, &(0x7f0000000180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000090a010100000000ff000000020000060c000b400000000062af001b080008400000000010001180090001007866726d000000001c000000090a010200"], 0xa8}, 0x1, 0x0, 0x0, 0x20000001}, 0x8884) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r1, 0x215eb000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x80002, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x4, 0x0, 0x1}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r5, &(0x7f0000000340), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002000)={r5, &(0x7f0000001ec0), &(0x7f0000001f00)=""/208}, 0x20) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) (async) 2.844408382s ago: executing program 1 (id=6655): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104d000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="647bf66f99beb782a87236f213f525211e359604359083e1c6c5653d9e75d2678704fa0b206427ee68f64da4f706e3635156695faf7fc46e0299307b32a574d04b5efb1b752e94957b230683e157bde817a491ec22ee2ffde1d78d9cdeb596b5aea34431e0c50e7ed0d75fd8153b4582e7a08b41b91787e607d58d850f5b9b0bee055ab90dc8fe0bdc65a1f92d3e3776b68f34b2c54109af53d264a815a653536d0c840e99d3ec1048111c5164879993598235a06df3a46bf116a1cac16238a5cdb50c041c285de004d41f05df7562d490e653b07e9ff2d17c7a436fe6ad28876ee351d633cd3b3e04e021eaa754234525", @ANYRESOCT=r0, @ANYBLOB="ad754ab2", @ANYRES64=r1], 0x140}, 0x1, 0x0, 0x0, 0x8000000}, 0x4004000) 2.844078314s ago: executing program 4 (id=6656): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'wg1\x00', {}, 0x108}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge_slave_0\x00', {0x4}, 0xf1ee}) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000800000000000000080000009100549ebb843dcaf7e3d71fb2ac7b2afec673f3562eb3fad3ce528ed8888f7cc865e3d31e1d532515ff815d9aa76cb85471ee4b24fe99ab46d2c4f9fc2d"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) getsockopt$inet6_opts(r2, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x70}}, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a010400000000000000000200000708000240000000020900010073797a31000000004c000000030a01040000000000000000020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a31000000000900020073797a320000000058000480540001800a0001006d61746368000000440002800b0001006e6661636374000008000200000000002c0003"], 0x120}}, 0x20008800) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000005201040000000000000000010000070900010073797a30000000002c000000030a010200000600000000000100000009797a320000000068000000060a010400000000000000000100000008000b40000000004c000480340001800b000100657874686472000024000280080001400000000c080003400000007a08000440000000220500023189000000140001800c0001006269747769736500040002"], 0xdc}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r6, 0x0, 0xa, 0x0, &(0x7f00000001c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c000000180001801400020076657468300000000000020000000000140003800400038007"], 0x40}}, 0x4040004) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0x70bd2b, 0x100, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@local, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0x8, 0x8251c, 0x0, 0xfffffffffffffffc, 0x4}, {0xad25, 0x80ffffff, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x70bd29, 0x3505, 0x2, 0x4, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8024}, 0x844) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) 2.841370448s ago: executing program 3 (id=6657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000b0000000000000000400040085100000060000001800000065000000000000000900000066000000f10000001800972f9d990000f8ffffff0000000001100000950000000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000"], &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f0000000200)='GPL\x00', 0x100, &(0x7f0000000240)={@align=0xd7ce, {0x3, 0x404, 0x3, 0x6}}, 0x7f, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x39d}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002cbd7000fcdbdf251401000008000300ffff000008001300030000000500180000000000080008000700000005000b000000000005000c000100000008000d0013ffffff0500180001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4810}, 0x8884) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r5, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x209, 0x79, 0x7, 0x6, 0x3, 0x4, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@flushpolicy={0x34, 0x1d, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd26, 0x70bd29, 0x70bd26, 0x70bd2b, 0xfffffffb, [0xe, 0x5]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 2.676185881s ago: executing program 1 (id=6659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) (async) listen(r1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000240)={r4, &(0x7f0000000140)='\x00', 0x80, &(0x7f0000000180)={@_ha_fsid={[0x3, 0x4]}, {0x9, 0x1b, 0x7, 0x2}}, 0x1, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x2}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINK={0x8, 0x5, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x8004042) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0x21, 0x1, 0x3) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) (async) shutdown(r9, 0x0) 2.539222279s ago: executing program 3 (id=6661): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'veth1_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 2.401836659s ago: executing program 4 (id=6662): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2edb, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x21}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="dafeffff", @ANYRES16=r9, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="040087000800a1002c3c1104bb65d2732a0d00070000"], 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r6, @ANYRES16=r11, @ANYBLOB="010025bd7000fcdbdf003f00000008000300", @ANYRES16=r8, @ANYRESHEX=r9], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="27000600", @ANYRES16=r9, @ANYBLOB="080026bd7000fbdbdf251900000008000300", @ANYRES32=r12, @ANYBLOB="05001d000300000005001d0007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write(r2, &(0x7f0000000000)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb970a0df15000000cdb70466518907efd04373a0e64e30bbd8", 0x41) r13 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r13, &(0x7f0000000380)={0x1d, r14, 0x2, {0x2, 0x0, 0x2}}, 0x18) r15 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r15, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r15, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) 2.271514309s ago: executing program 3 (id=6663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="4c00000011000f140011000200000f0002000000200000", 0x17) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) unshare(0x10000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r5) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x3, 0x8, 0x4, 0x9, 0xa902, 0x800, 0x400, 0xfffffff8, 0x8, 0x1c, 0x1c, 0xd, 0x2, 0x9, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x2, 0xfffff000}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) 2.249725028s ago: executing program 2 (id=6664): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000004d2eca1f6740e5ef8a2b120000000000", @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r3, @ANYBLOB="3f9d02000000fcdbdf251700000008000300", @ANYRES32=r4, @ANYBLOB="e3013080e80001804000038006000300a3aa0000060001000300000006000100000000000c000400000100000000000006000300feff000006000300a2aa0000060001000200000008000100020000000c00050000000000000000000c000500ebfd00000000000058000380080002000100000006000100020000000800020003000000060001000000000006000300a2aa00000800020002000000060003000000000006000100000000000c0004000000000000000000060001000100000008000100000000000c00050023050000000000000800010001000000100003800c0004000201aaaaaaaaaaaa050002"], 0x264}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000f0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000300000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000680), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x10ff, 0x10ff, 0xfebc, &(0x7f0000000380)="f17b85654f877025428d584dffcdbebb7d573c1df496aed95d970f0bb7994307a7ac95a7c710160e9a8f822720586b3bcf3d43e1955734bad4bf72e12ab36d6b0b22071b07270318996de4c2e3dc571a5095e3062ebf9297b594260fed68e5621548bd08c001920f516eda8acad70111e1866a6237d68df8e2eba091cbb55526d5b6325b43a00e6ccce53fbc91cfecc2a3bc69", 0x0, 0x100, 0x0, 0x0, 0x19, 0x0, &(0x7f0000000180)="dec8b3e9a45e0bbbe0ce791cdc00d0bc2b6e3c9039b42647353158b42d045c6138910d5fe68689683893d1876464906b0048912e058f5c51b2cd89ebde80129aeb9d53f79c376bcc607f412f611678145ca4a7bacf9f7cfe012b336119dd9cf7dd775b9c176ca94c79cec413d683854975cc02714ac49709c2c6f93ab76fa289e6371ba22bafe775d5e6ed6c39231b4ba8af0aaa6ea015a5b4159ee8379e44ff65b1330f6e815b6eb9d30077cb", 0x6}, 0x3a) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000200200000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) close(0x4) r11 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000b80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3d8cdd70d5321bcaf9fdcc005bb6e1ae3578ff0edcdcbb1faa13d298f7bd09899a00d42ebdea00", @ANYRES16=0x0, @ANYBLOB="100028bd7000fddbdf250700000008000c0002000000080002000700000006000100210000000800070000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000011000101000000000000000000000000b3bb33dafde1d25a4867068870764e6d43a8532accf6e8e8642ba49ffeee294e49", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 2.180806438s ago: executing program 0 (id=6665): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'b', ' *:* ', 'm\x00'}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r1}, 0x18) 2.088023956s ago: executing program 4 (id=6666): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$netlink(0x10, 0x3, 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) (async, rerun: 32) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) (async) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ffffffffff0400dd60ecff8000181100fc000000000000000000000000000000ff02000000000000000000000000000100004e220018907803000000000800"/78], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r8, 0x0, 0x10, 0xfc, &(0x7f0000000740)="12f72e64aee8dfb7161566f29d01d567", &(0x7f0000000500)=""/252, 0x10, 0x0, 0xc8, 0xae, &(0x7f0000000b00)="a1858098862c163ac364c9aed971b5adabb0ecf1255a6e094f998ced8449ed795304a13379b89dec65b60994f1ad0035446a0ec70721471acff224a12f17ca4240307b6d6c397af03a180620b87ebf7e899f4cd17611e4629cd483e2301f514512b6b884e1dc07e34a3ce7ee947973917b194cb0bbfe7134bb3577ede0ce5fe02eaa8110e445ff4c8134561a5a520a49d8c3d45919757d49b85039d940abb374b80a2b884652b0e75b3bcfff03c510143b6f1acbbf9999e1f4f7115af34b4b9cb01e3efd13535184", &(0x7f0000000c00)="c723f6ef90e7eab20669717beb00eac801c36524050f9f23d94a6458b8b5c92ad934ad5c5269b92dcc7b5c99cde00fcc890e055bb6986aaacfc2554fa1a8209b16439dabaad424d49e370cc8b9126a94ce5e68f8a5ce822209a41448ca0803395d9cd0c01aced38b86f08e04499c842effa71ab6da134daedc66cfce7a465f87e5499687d61ef42f9280204085646345b9dacae785828dbb74d53bf677e17d0312dd0cb67b4a8fb5027b4e329046", 0x7, 0x0, 0x7}, 0x50) (async) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48041}, 0x8004) (async) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) setsockopt$inet6_int(r0, 0x29, 0x1e, &(0x7f0000000600)=0x2, 0x4) write$cgroup_freezer_state(r4, &(0x7f0000000200)='THAWED\x00', 0x7) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000180), 0x4) (async) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000300)) (async, rerun: 64) r9 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000000c0)={r11, 0x3}, &(0x7f0000000140)=0x8) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYRESDEC=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 2.066563872s ago: executing program 0 (id=6667): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x24}}, 0x45) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) (async) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000000)={0x401, 0xfd7b, 0x8, 0x80, 0x2, 0x6, 0x12, "71838c1bacdb6933eab024cdc4e0cba36bbcec1e", "8046e33da602d673126589cd342daf0bcc5116d5"}) 1.961882812s ago: executing program 2 (id=6668): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x180}, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x20000008}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0xd4, 0x4) r5 = epoll_create(0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r7, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1e, 0x8}}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000280)={0x40002000}) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) ppoll(&(0x7f0000000040)=[{r2, 0x140}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000c80)="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", &(0x7f00000005c0)="d0030e43bc20", 0x800, r1}, 0x38) 1.659059762s ago: executing program 2 (id=6669): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x40, 0x80, 0xfff, 0x0, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x66, 0x0, 0xeb, 0x2f, 0x0, @remote, @empty, {[@end]}}}}}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x4, 0x2, 0x2, {0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x6}}}, 0x80, 0x0}, 0x2004b761) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="ade335cf6034"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x6, 0x3, 0x85, 0x9, 0x80, r1, 0x8, '\x00', 0x0, r1, 0x0, 0x1, 0x4}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, r1, 0x2, 0x3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0x21, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x6e}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x12, '\x00', r0, @flow_dissector, r1, 0x8, &(0x7f0000000900)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x6, 0x9, 0x7f}, 0x10, 0xffffffffffffffff, r2, 0x2, &(0x7f0000000a80)=[r4, r1, r1, r5, r1, r1, r1, r1, r1, r1], &(0x7f0000000ac0)=[{0x5, 0x4, 0x5, 0x7}, {0x4, 0x3, 0xd, 0x3}], 0x10, 0x5}, 0x94) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x32a, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x5, 0x10}, 0xc) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000280)={0x1000, {{0x2, 0x4e20, @loopback}}}, 0x90) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xa, &(0x7f0000000000)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x3, 0x2, 0x6, 0x4, 0x7, 0x1, 0x1}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @jmp={0x5, 0x0, 0x2, 0x7, 0x6, 0x8, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x3, 0xd9, &(0x7f0000000200)=""/217, 0x41100, 0x48, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x8, 0xd, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r1, r6, r7, r8, 0x1, r10], &(0x7f0000000600)=[{0x2, 0x5, 0x10, 0x3}, {0x0, 0x3, 0xc, 0xc}, {0x1, 0x5, 0xc, 0x1}], 0x10, 0x6}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e65766500002000028008001100e8"], 0x64}}, 0x20000000) 1.523347658s ago: executing program 1 (id=6670): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) socket$can_raw(0x1d, 0x3, 0x1) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x0, 0x96}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x0, 0x96}, 0x28) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080002000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) (async) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080002000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, 0x0, &(0x7f0000000000)) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfa, {0x1, 0x7c}, [@generic='b']}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 1.512460884s ago: executing program 2 (id=6671): socket(0x2a, 0x2, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r2}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x0, 0x218, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x2, 0x1, [0xffff, 0x2c6f, 0x6, 0x2, 0x6140, 0x200, 0x6, 0x5, 0x6, 0x2c73, 0x9, 0x1, 0x4, 0x6d, 0x8, 0x76], 0x7}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffff00], [0xff000000, 0xffffffff, 0xff000000], 'wlan1\x00', 'wg0\x00', {}, {0xff}, 0x73, 0x9, 0x0, 0x40}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x0, 0x41, 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, [0xff, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0x0, 0xffffff00], 'bridge_slave_1\x00', 'macsec0\x00', {0xff}, {}, 0x2c, 0x6, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xfe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3000}, @generic={0x66, 0x8, 0x0, 0x0, 0x900}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 1.246036594s ago: executing program 3 (id=6672): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x5, &(0x7f0000000000)=@raw=[@generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080), 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf25ac1414aa000000000000000000000000ac1414bb00000000000000000000000000000004000000000a0060803b0000", @ANYRES32=0x0, @ANYRES32=0xee01], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9b90000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x1, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x9}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xf00}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x409}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x52a9ffc0}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x13, 0x29, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xb, 0x6, 0x6, 0x4e, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcc03}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x5, 0xb3, &(0x7f0000000940)=""/179, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x3, 0x3, 0x1a, 0x6}, 0x10, 0x0, r3, 0x0, &(0x7f0000000ec0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r2, r1], &(0x7f0000000f00), 0x10, 0x40}, 0x94) 1.172818384s ago: executing program 2 (id=6673): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250b00000008000300", @ANYRES32=r2, @ANYBLOB="0c0006000041000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x4c004}, 0x800) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="430000009053e346852be7435e6638eb38f8fb3492a0a687fc0c1dbfeb267f67de5d48beefa4ad956a06944f18f582328d39d6deb61bec4d2365e66bc8588df7542ddfa9ebeca1517e5a1f830d33b5d403c10f198ce5ded54dca6d4806f4cfcf504453af1df7ccea0d1a8680c341f52e11cc3b02d938fbccfc11961478ca175265eefb7367b6719b6fd8424c22fa", @ANYRES16=r3, @ANYRES8=r3], 0x40}, 0x1, 0x0, 0x0, 0x200448c0}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000200)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000226bd7000fbdbdf25200000000c0006000300000003002d800802020001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4088) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x54, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000fc0)={0x5c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000014) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r7, @ANYBLOB='\a\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x1c, 0x7, 0x14, 0x5}}]}}]}, 0x44}}, 0x4000010) (async, rerun: 64) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="080f0000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100080000000c000180080001000500000004"], 0x64}, 0x1, 0x0, 0x0, 0x40005}, 0xc8c0) (rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r8 = socket$inet6(0xa, 0x4, 0x60000) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x1, 0x1234}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async, rerun: 64) r9 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000040)={0x33}, 0x8) (async, rerun: 32) sendmmsg$inet6(r9, 0x0, 0x0, 0x4000000) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x20008000) (async) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x7a2, &(0x7f0000000700)={@random="05c38c886b60", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020008", 0x76c, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xc, 0x1000, "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"}}}}}}, 0x0) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000200000000000080010000100400000002000000020000000000"], 0x0, 0x2e}, 0x28) (async) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.127465438s ago: executing program 3 (id=6674): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x5, 0xe, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a8", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x5, 0xe, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a8", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair(0x11, 0x2, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x11, 0x3, 0x1) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100000086dd60000000001c2cfffe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e00"], 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB="0000018385b8948bc60499c21c4a8e4700000000000900"/33, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB="0000018385b8948bc60499c21c4a8e4700000000000900"/33, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000280), 0x0}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a00010a0000000000000000236a"], 0x14}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x35f, @empty, 0xfffffffe}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x2c, &(0x7f00000005c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0xb, @private1, 0x1}]}, &(0x7f00000004c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x2c, &(0x7f00000005c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0xb, @private1, 0x1}]}, &(0x7f00000004c0)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.055855991s ago: executing program 1 (id=6675): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e23590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x20, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0xfffffffffffffd4f, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 949.759367ms ago: executing program 0 (id=6676): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="6000508011000e004abee339084eeef16f162471f40000000800030005ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a2c000000180abf4c0000000000000000020000000900020073797a30000000000900010073797a3000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @remote, [0xffffffff, 0xff000000, 0xff, 0xffffffff], [0xffffff00, 0xff, 0xff000000], 'bridge_slave_0\x00', 'caif0\x00', {0xff}, {0xff}, 0x4, 0x5, 0x1, 0x60}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x5, 0x40, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xff000000, 0xff, 0xffffffff, 0xff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], 'bridge_slave_0\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x1, 0x6, 0xa}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2, 0x2}, {0x4, 0x3, 0x1}, {0x3, 0x1}, 0x4, 0xfb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 938.821927ms ago: executing program 4 (id=6677): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0xfe, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="18230001000000000000d9c300"/24], 0x18}}, 0x0) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000240)={0x0, r0, r0, 0x4, 0x5, '\x00', {0x5, 0x80, 0x8001, 0x6, 0x5, 0x40, 0x8, 0x7c83, {0x7, 0x6}, {0x2d}, {0x7ff, 0x7}, 0x4, 0x5, 0x96c3, 0x10000000, 0xbfb, 0x0, 0x0, 0x3, 0x8, 0x9, '\x00', 0x7, 0x9, 0x9fe2, 0x8}}) ppoll(&(0x7f0000000000)=[{r0, 0x402a}, {r0, 0x8048}, {r0, 0x600}, {r0, 0x218a}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x2]}, 0x8) 771.337632ms ago: executing program 1 (id=6678): syz_emit_ethernet(0x6c, &(0x7f00000002c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x68, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0x219a, 0x9], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0xfffffffe, {{0x0, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x4}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe960}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40040d0) 754.919478ms ago: executing program 2 (id=6679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11180000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r4, 0x0) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000040)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r6) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x120}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7b}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 712.998535ms ago: executing program 1 (id=6680): unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000f00)={{}, 0x3, 0x858, 0x32a}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000327bd7000fbdbdf25010005004e21000008000300ac1414aa060005004e2200000800040006000000000000008000000000010000000000002cb5e211172c8df75525c6037f0bb5ba81c836e86b72e5029471783e9f00c05577cad1a9e0af7ecb5ce31eee5fbdac23b0df99f0db09bd27b5f6070af7d131b4bd0e9c6d84b25f879f86694c145fabd245140255809c5f232f01da5a8e9804dab2e169c71209f55c95b1d37f7ca3190641c5df5ac8fa8997fc901d12b1ddf8530204626426fc68485073646858c8020732aa18420a8c71cd95e9b8826499d56e578371"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)=[0x401], 0x0, 0x2000000026fe, 0x100000, 0x1}}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xf, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4, 0xa2, &(0x7f0000000540)=""/162, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x9, 0x3, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x1], 0x0, 0x10, 0x20000000}, 0x94) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) unshare(0x22020600) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x18, r7, 0x301, 0xf0bd29, 0x25dfdafc, {0x24}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x0) setsockopt$inet_int(r6, 0x0, 0x19, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000000c0)={r9, r9, 0x7, 0x3, &(0x7f0000000040)='9fm', 0xe, 0x4, 0x8, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x14) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 508.974382ms ago: executing program 4 (id=6681): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x6a040000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(0x0, r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRESHEX=r4, @ANYBLOB="00000000800000000008a116edfe", @ANYRESDEC=r6, @ANYRES16=r4, @ANYRES8=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000001000000000000000000000085100000f8ffffff9535ead33b90cb11ec4477b1a2b2d2000000ff0f0000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x3}, 0x1c) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x3}}, {{0xa, 0x0, 0x0, @empty, 0x8000}}}, 0x108) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r5) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x7f8fd8ce9467eae8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) accept4(r4, 0x0, 0x0, 0x80000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00'}) 443.977578ms ago: executing program 0 (id=6682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202602, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x7, 0x7, 0x5c33, 0xffffff81, {{0xb, 0x4, 0x3, 0x1, 0x2c, 0x68, 0x0, 0x2, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x44}, {[@lsrr={0x83, 0x17, 0x8f, [@dev={0xac, 0x14, 0x14, 0x14}, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)=r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000004) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x1) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x2c}}, 0x20000010) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000540)="7dc25ca9a74070d4fdb3d15d6b7bac33", 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000580)={'nicvf0\x00', @random="0e91a825e24c"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x10201, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000600)) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000640)=0xf, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x8, 0x0, 0x3}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWTABLE={0x12c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xe2, 0x6, "2c76b164837fbbddbb5bad48ce69dab9e13ded09f7f2e10ff307a72bfc16830524e87978ecf396a822736346cfff0b34d794a4990ff4fa6e0c00ad80df69f74349472a6032b7967b1f45f0427966c6115df9f3ca10eec3379c71cee26ec1d46773696d3855cf42fb9a12e36494337067f5cc6084af008bf05ce4bfcaaa2e010311854aa778b198065a63e18bb27367daefb1455ceadc2c01244e6a239863fc601eb0e4032bde82ee99c253fe1ac9d0111cf6a5cd34d181730f471e8b9685303edf937ca16ff58cde7f626434fa1237f59a3035a8662fd6260405a94dc310"}, @NFTA_TABLE_USERDATA={0x28, 0x6, "f371f7a351ca8433fb6f7e9d82232b2b93281070d107e4ee8242750f85a1a2247d57dd44"}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_NEWTABLE={0xa4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x83, 0x6, "fcec194c87d902637efbe9d502f63b9aabed0d9fdb51fd9c62f016c8205d6da6543b1b6fd6f9fcdcdb6c404a7f49e75ad6bb5943510d4c930fe82c3e34f4268e1a4b74ab94e5ac0c7ee37bc8ba530357a5667d6d357ecd1ffea8033d9492eb3cc77130d97f14ec183eca32dfd0da4132d88552a1200695b23dfae90d70c7e7"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x144}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1e}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000a00)) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x4080, 0x0) ioctl$OCFS2_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000a80)={0x2, 0x0, 0x5, 0x6, 0x0, 0x6}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r7, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x74}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}}, 0x8000) r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000c40)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000c80)=0x1c, 0x80000) recvfrom$l2tp6(r9, &(0x7f0000000cc0)=""/161, 0xa1, 0x11, &(0x7f0000000d80)={0xa, 0x0, 0x0, @loopback}, 0x20) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x160, 0x13, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x7, 0x8, "127815"}, @NFTA_OBJ_USERDATA={0xf9, 0x8, "78e291ee5fd98c2054c7e4561bd70c3d23e57c392b9295fd5436c9d9dde16bb6a63258ef842e52b969ffc0517b35499b02af42d988aaf0552bc5232550874cc1eaf0b29c714ba03f46a44a19a69178d5c9e802f6eb3f8cef7146529f8194ee8be0a682adcba9772ccd07035477c03262d6f54bd6e857372c6dff1a8685f9a65cba602a519897517675a68f363cdd5b92b0f933563ccb1229d783e007e40f07ea209b5f1f1f0e99c7fcfed12af2f67d55e269d2da78d2d1000a4faec27eee55e6ddb8a0300b8feb9f773aedd827ffaf15ec3983445a7c5b8cf4c97ad0254c264682eb5c5c216b398d6f1e6e2fc8b99540471abf8601"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000011c0)={{r0, &(0x7f0000001000)='}%}\\\x00', 0x80000, &(0x7f0000001040)={@_ha_fsid={[0x800, 0x10000]}, {0x0, 0x4, 0x3, 0xfffffffffffffc01}}, 0x7fff, &(0x7f0000001080)={@_ha_fsid}, &(0x7f00000010c0)=0x7ff}, {[0x7, 0x0, 0x6, 0x5b]}, 0x7, 0xb1, &(0x7f0000001100)=""/177}) setsockopt$inet_sctp_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f0000001240)=0x9, 0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0xa52e051f7fce911d}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) 285.690958ms ago: executing program 0 (id=6683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300400000fbdbdf250c00000008000300", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4c054) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000001c0)={0x0, 'virt_wifi0\x00', {0x5}}) 115.786077ms ago: executing program 3 (id=6684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002340)=ANY=[@ANYBLOB="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"/5257], 0x149c}, 0x1, 0x0, 0x0, 0x44080}, 0x44006) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001940)={0x38, 0x1412, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000880}, 0x40) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@local, 0x8000000, 0x0, 0xff, 0x3, 0x0, 0x2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRES8=r4, @ANYRES16, @ANYRES8=r0], 0x8c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r6) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f37a1c000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf25000000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x24040810) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2ecffffebe65fbcee5586dd6001010000641100fe8000000000000000000000000000bbfe80000000000000000000000000000900030e22006490780200000000000000000000000f38658c432ae1d6778795efa7a386131c1675f922693ba9049b2e9f33c5149573b69e324dd51880f20b589ea815d390be3440806a943b51aba6678ad203f5783dfd68ca7bdc832e437bb8b8deadbfca92d48ce907f941"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x7c2}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYRES16=r5], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) close(0xffffffffffffffff) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r11, 0x0, 0x48a, &(0x7f00000003c0)={0x8, 0x1, 0xfffffffd}, 0xc) ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, &(0x7f0000000000)=r10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r9], 0x1c}}, 0x4800) r12 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r13, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)) 0s ago: executing program 0 (id=6685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x24000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r0}, 0x48) syz_emit_ethernet(0x32, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@rr={0x7, 0x3, 0xfd}, @ra={0x94, 0x4}]}}, @address_reply={0xd}}}}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'lo\x00', 0x2000}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): S: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.069031][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.069133][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.069238][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.069371][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.096298][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.096456][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.096640][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.096788][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.096892][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.099350][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.099473][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.099578][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.099681][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.106253][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.112114][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.112311][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.112425][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.112941][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.113055][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.113159][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.113278][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.113390][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.113499][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.113639][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.121237][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.123853][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.123973][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.124075][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.124173][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.124284][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.124391][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.124496][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.124600][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.124729][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.136139][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.137544][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.137687][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.145696][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.145816][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.145927][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.146032][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.146138][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.146251][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.146357][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.146464][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.146569][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.146694][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.146796][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.146896][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.146998][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.189969][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.190108][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.190212][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.190321][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.190427][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.190562][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.190669][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.190772][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.190875][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.190981][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.191084][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.191187][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.191303][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.209096][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.209249][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.209365][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.209470][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.209577][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.213730][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.213852][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.213961][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.214066][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.220635][T25242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.224179][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.224312][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.224434][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.224552][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.224656][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.224758][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.224879][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.225044][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.229247][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.229372][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.229507][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.229628][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.235109][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.235285][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.236391][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.236534][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.236639][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.239046][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.239158][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.239262][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.239373][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.246272][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.246402][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.246507][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.246610][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.246727][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.246836][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.246939][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.247041][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.247144][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.247279][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.266932][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.267054][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.267159][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.277694][ T676] syzkaller1: entered promiscuous mode [ 1028.277716][ T676] syzkaller1: entered allmulticast mode [ 1028.289412][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.289537][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.289646][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.290197][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.290317][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.290458][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.290564][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.290668][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.290772][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.295933][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.296066][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.313041][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.313160][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.313274][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.313385][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.313501][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.313610][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.313713][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.313817][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.313922][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.316740][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.316862][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.316985][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.332922][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.333045][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.333151][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.333266][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.333369][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.333512][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.333616][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.333858][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.334042][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.334153][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.334259][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.404137][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.404272][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.404392][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.464471][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.464603][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.464708][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.464811][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.464914][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.465017][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.465121][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.465225][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.465335][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.465438][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.469020][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.469135][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.473945][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.474065][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.474174][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.474302][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.474406][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.474511][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.474614][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.474713][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.474817][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.474927][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.475031][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.484926][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.485050][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.485155][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.485266][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.485370][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.485474][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.485582][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.485687][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.492671][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.492793][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.492899][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.493033][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.498247][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.498379][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.498484][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.498587][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.498692][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.498794][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.498899][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.499002][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.499104][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.499206][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.499315][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.499420][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.499525][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.499631][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.524502][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.524622][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.524728][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.524834][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.524942][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.525047][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.525150][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.525254][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.525363][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.525466][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.525569][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.525676][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.525826][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.537059][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.537198][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.537380][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.537486][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.537590][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.537698][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.537802][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.537906][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.538009][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.538112][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.538264][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.538368][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.538494][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.552552][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.552671][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.552775][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.552879][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.552989][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.553134][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.553239][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.553350][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.553454][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.553558][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.553662][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.553764][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.553896][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.554067][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.554176][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.554285][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.554391][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.554493][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.554597][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.554700][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.554803][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.554907][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.555010][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.555113][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.555233][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.555341][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.555448][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.555551][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.555659][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.555763][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.555867][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.555969][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.556072][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.556177][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.556286][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.556389][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.556492][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.556595][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.556698][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.556799][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.556930][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.557081][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.557185][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.557297][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.557401][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.557503][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.557606][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.557708][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.557809][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.557911][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.558013][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.558115][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.558239][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.558409][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.558513][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.558617][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.558719][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.558822][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.558925][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.559028][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.559131][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.559235][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.559344][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.559446][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.559552][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.559658][ T668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1029.475468][ T712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6139'. [ 1029.591748][T30833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.954497][ T720] netlink: 'syz.3.6140': attribute type 2 has an invalid length. [ 1030.186532][ T736] bond2: option mode: unable to set because the bond device is up [ 1030.206838][ T736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6144'. [ 1030.206860][ T736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6144'. [ 1030.268186][ T736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.307770][ T741] ieee802154 phy1 wpan1: encryption failed: -22 [ 1030.333997][ T736] bond2: (slave bond0): making interface the new active one [ 1030.342842][ T736] bond2: (slave bond0): Enslaving as an active interface with an up link [ 1030.474466][ T740] bond2 (unregistering): (slave bond0): Releasing active interface [ 1030.505902][ T740] bond2 (unregistering): Released all slaves [ 1031.097838][ T761] netlink: 556 bytes leftover after parsing attributes in process `syz.3.6149'. [ 1031.187809][ T764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6150'. [ 1031.220856][ T763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6151'. [ 1031.502704][T25243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.732690][ T784] netlink: 'syz.0.6156': attribute type 17 has an invalid length. [ 1031.831956][ T777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6155'. [ 1031.877800][ T785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6156'. [ 1031.959116][ T773] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 1032.140621][ T5623] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1033.579205][ T842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6166'. [ 1033.894719][ T852] macvlan2: entered promiscuous mode [ 1033.909264][ T852] bond0: entered promiscuous mode [ 1033.909288][ T852] bond_slave_0: entered promiscuous mode [ 1033.909525][ T852] bond_slave_1: entered promiscuous mode [ 1033.928220][ T849] netlink: 'syz.4.6169': attribute type 3 has an invalid length. [ 1033.928242][ T849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6169'. [ 1033.933205][ T852] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1033.994503][ T852] bond2: (slave macvlan2): making interface the new active one [ 1034.013296][ T852] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 1034.058791][ T855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6171'. [ 1034.063455][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.130755][ T862] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1034.764946][ T872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6176'. [ 1034.940490][ T880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6176'. [ 1035.343049][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.180600][ T889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1036.422300][ T915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6182'. [ 1036.683259][ T918] netlink: 'syz.0.6183': attribute type 1 has an invalid length. [ 1036.735820][ T933] netlink: 'syz.0.6183': attribute type 10 has an invalid length. [ 1036.826658][ T940] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6183'. [ 1036.847344][ T918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1036.858799][ T933] veth0: left promiscuous mode [ 1036.909496][ T933] veth0: entered promiscuous mode [ 1036.913732][ T933] team0: Port device veth0 added [ 1037.000631][ T948] xt_policy: output policy not valid in PREROUTING and INPUT [ 1037.267470][T25240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.478692][ T963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6190'. [ 1037.637596][T28915] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1037.651567][T28915] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1037.652470][T28915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1037.653374][T28915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1037.654092][T28915] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1037.754690][ T975] ovs-dp0: entered promiscuous mode [ 1037.838495][ T967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6191'. [ 1037.856348][ T981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6191'. [ 1038.159138][ T994] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6194'. [ 1038.386790][ T1006] netlink: Unknown conntrack attr (0) [ 1038.396366][ T1006] netlink: Unknown conntrack attr (0) [ 1038.747828][ T1031] netlink: 'syz.4.6200': attribute type 1 has an invalid length. [ 1039.062814][ T1031] bond12: entered promiscuous mode [ 1039.063234][ T1031] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1039.092651][ T1041] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1039.093060][ T1041] bond12: (slave gre3): The slave device specified does not support setting the MAC address [ 1039.093079][ T1041] bond12: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 1039.130817][ T1041] bond12: (slave gre3): making interface the new active one [ 1039.130842][ T1041] gre3: entered promiscuous mode [ 1039.138027][ T1041] bond12: (slave gre3): Enslaving as an active interface with an up link [ 1039.180340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.487735][T25243] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.487771][T25243] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.716260][T25243] : (slave netdevsim1): Releasing backup interface [ 1039.727910][T25243] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.727944][T25243] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.740614][ T5623] Bluetooth: hci2: command tx timeout [ 1039.824423][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.955577][ T1098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6209'. [ 1040.006126][T25243] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1040.006567][T25243] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1040.006598][T25243] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.086848][ T1102] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1040.259278][ T1109] netlink: 'syz.3.6212': attribute type 15 has an invalid length. [ 1040.259302][ T1109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6212'. [ 1040.360777][ T1109] netlink: 'syz.3.6212': attribute type 15 has an invalid length. [ 1040.360801][ T1109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6212'. [ 1040.421185][ T1116] bond13: option ad_user_port_key: invalid value (65535) [ 1040.421202][ T1116] bond13: option ad_user_port_key: allowed values 0 - 1023 [ 1040.424203][ T1116] bond13 (unregistering): Released all slaves [ 1040.464899][T25241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.640291][T30846] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1040.640752][T25252] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1040.640803][T25252] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1040.640840][T25252] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1040.755818][ T978] wlan1 speed is unknown, defaulting to 1000 [ 1041.046324][T25243] veth0: left allmulticast mode [ 1041.046351][T25243] veth0: left promiscuous mode [ 1041.046573][T25243] bridge0: port 3(veth0) entered disabled state [ 1041.071108][T25243] bridge_slave_1: left allmulticast mode [ 1041.071135][T25243] bridge_slave_1: left promiscuous mode [ 1041.078049][T25243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.112701][T25243] bridge_slave_0: left allmulticast mode [ 1041.112731][T25243] bridge_slave_0: left promiscuous mode [ 1041.112931][T25243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.509437][T25243] bond14 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1041.525369][T25243] bond14 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1041.525394][T25243] bond14 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - be:9e:53:46:15:f2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1041.787428][T25243] erspan0 (unregistering): left promiscuous mode [ 1041.820297][ T5623] Bluetooth: hci2: command tx timeout [ 1041.822038][T25243] bond2 (unregistering): (slave erspan1): Releasing active interface [ 1041.853440][T25243] bond12 (unregistering): (slave gretap1): Releasing active interface [ 1041.853463][T25243] bond12 (unregistering): (slave gretap1): the permanent HWaddr of slave - 7a:97:c8:5d:4f:c7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1042.125446][T25243] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 1042.125474][T25243] bridge3 (unregistering): left allmulticast mode [ 1042.182018][ T1167] netlink: 'syz.0.6223': attribute type 16 has an invalid length. [ 1042.182040][ T1167] netlink: 'syz.0.6223': attribute type 17 has an invalid length. [ 1042.182847][ T1168] netlink: 'syz.0.6223': attribute type 16 has an invalid length. [ 1042.182865][ T1168] netlink: 'syz.0.6223': attribute type 17 has an invalid length. [ 1042.183568][T25243]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.184882][T25243]  (unregistering): Released all slaves [ 1042.189081][T25243] bond1 (unregistering): Released all slaves [ 1042.204020][T25243] bond2 (unregistering): Released all slaves [ 1042.218634][T25243] bond3 (unregistering): Released all slaves [ 1042.243186][T25243] bond4 (unregistering): Released all slaves [ 1042.267000][T25243] bond5 (unregistering): Released all slaves [ 1042.279406][T25243] bond6 (unregistering): Released all slaves [ 1042.300709][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.309507][T25243] bond7 (unregistering): Released all slaves [ 1042.324374][T25243] bond8 (unregistering): Released all slaves [ 1042.337095][T25243] bond9 (unregistering): Released all slaves [ 1042.353250][T25243] bond10 (unregistering): Released all slaves [ 1042.367201][T25243] bond11 (unregistering): Released all slaves [ 1042.383753][T25243] bond12 (unregistering): (slave bond13): Releasing active interface [ 1042.384329][T25243] bond12 (unregistering): Released all slaves [ 1042.417661][T25243] bond13 (unregistering): Released all slaves [ 1042.433325][T25243] bond14 (unregistering): (slave veth13): Releasing backup interface [ 1042.434636][T25243] bond14 (unregistering): Released all slaves [ 1042.459360][ T1146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6220'. [ 1042.459442][ T1150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6221'. [ 1042.465090][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1042.487897][ T1167] lo: left promiscuous mode [ 1042.488076][ T1167] tunl0: left promiscuous mode [ 1042.488341][ T1167] gre0: left promiscuous mode [ 1042.488355][ T1167] gre0: left allmulticast mode [ 1042.498558][ T1167] gretap0: left promiscuous mode [ 1042.498694][ T1167] erspan0: left promiscuous mode [ 1042.498802][ T1167] ip_vti0: left promiscuous mode [ 1042.498941][ T1167] ip6_vti0: left promiscuous mode [ 1042.499046][ T1167] sit0: left promiscuous mode [ 1042.499162][ T1167] ip6tnl0: left promiscuous mode [ 1042.499274][ T1167] ip6gre0: left promiscuous mode [ 1042.505148][ T1167] syz_tun: left promiscuous mode [ 1042.505311][ T1167] ip6gretap0: left promiscuous mode [ 1042.505895][ T1167] bridge0: left promiscuous mode [ 1042.506018][ T1167] vcan0: left promiscuous mode [ 1042.590551][ T1167] team0: left promiscuous mode [ 1042.590574][ T1167] veth0: left promiscuous mode [ 1042.590904][ T1167] dummy0: left promiscuous mode [ 1042.591046][ T1167] nlmon0: left promiscuous mode [ 1042.591180][ T1167] batadv0: left promiscuous mode [ 1042.591350][ T1167] vxcan0: left promiscuous mode [ 1042.591487][ T1167] vxcan1: left promiscuous mode [ 1042.632070][ T1167] veth1: left promiscuous mode [ 1042.632240][ T1167] wg0: left promiscuous mode [ 1042.642539][ T1167] wg1: left promiscuous mode [ 1042.645033][ T1167] wg2: left promiscuous mode [ 1042.658364][ T1167] veth0_to_bridge: left promiscuous mode [ 1042.659140][ T1167] bridge_slave_0: left promiscuous mode [ 1042.659294][ T1167] veth1_to_bridge: left promiscuous mode [ 1042.659457][ T1167] bridge_slave_1: left promiscuous mode [ 1042.659600][ T1167] veth0_to_bond: left promiscuous mode [ 1042.675821][ T1167] bond_slave_0: left promiscuous mode [ 1042.675993][ T1167] veth1_to_bond: left promiscuous mode [ 1042.676132][ T1167] bond_slave_1: left promiscuous mode [ 1042.676264][ T1167] veth0_to_team: left promiscuous mode [ 1042.676404][ T1167] team_slave_0: left promiscuous mode [ 1042.676534][ T1167] veth1_to_team: left promiscuous mode [ 1042.676692][ T1167] team_slave_1: left promiscuous mode [ 1042.676823][ T1167] veth0_to_batadv: left promiscuous mode [ 1042.676958][ T1167] batadv_slave_0: left promiscuous mode [ 1042.677087][ T1167] veth1_to_batadv: left promiscuous mode [ 1042.677228][ T1167] batadv_slave_1: left promiscuous mode [ 1042.695677][ T1167] xfrm0: left promiscuous mode [ 1042.695834][ T1167] veth0_to_hsr: left promiscuous mode [ 1042.696091][ T1167] veth1_to_hsr: left promiscuous mode [ 1042.696361][ T1167] hsr0: left promiscuous mode [ 1042.696497][ T1167] veth1_virt_wifi: left promiscuous mode [ 1042.696631][ T1167] veth0_virt_wifi: left promiscuous mode [ 1042.696761][ T1167] virt_wifi0: left promiscuous mode [ 1042.718065][ T1167] vlan0: left promiscuous mode [ 1042.718362][ T1167] vlan1: left promiscuous mode [ 1042.718634][ T1167] macvlan0: left promiscuous mode [ 1042.718771][ T1167] macvlan1: left promiscuous mode [ 1042.718905][ T1167] ipvlan0: left promiscuous mode [ 1042.721016][ T1167] ipvlan1: left promiscuous mode [ 1042.731280][ T1167] macvtap0: left promiscuous mode [ 1042.731455][ T1167] macsec0: left promiscuous mode [ 1042.731577][ T1167] geneve0: left promiscuous mode [ 1042.731714][ T1167] geneve1: left promiscuous mode [ 1042.751215][ T1167] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1042.751243][ T1167] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1042.752033][ T1167] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 1042.752154][ T1167] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 1042.752265][ T1167] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 1042.752388][ T1167] mac80211_hwsim hwsim84 wlan1: left promiscuous mode [ 1042.926121][T25243] ovs-system: left promiscuous mode [ 1043.087277][T25243] tipc: Disabling bearer [ 1043.088043][T25243] tipc: Left network mode [ 1043.319568][ T1193] bridge1: entered allmulticast mode [ 1043.387944][ T1196] netlink: 284 bytes leftover after parsing attributes in process `syz.2.6230'. [ 1043.625555][T25252] smbdirect: ib_dev[syz0] removed [ 1043.903846][ T5623] Bluetooth: hci2: command tx timeout [ 1043.951227][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1043.957317][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.957452][ T978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.957565][ T978] bridge_slave_0: entered allmulticast mode [ 1043.963594][ T978] bridge_slave_0: entered promiscuous mode [ 1043.969771][ T978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.969870][ T978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.970003][ T978] bridge_slave_1: entered allmulticast mode [ 1043.983100][ T978] bridge_slave_1: entered promiscuous mode [ 1044.130903][ T978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.163663][ T978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.422783][ T978] team0: Port device team_slave_0 added [ 1044.441341][ T978] team0: Port device team_slave_1 added [ 1044.586498][T25243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.586560][T25243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.860931][T25252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.973671][ T978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.973690][ T978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.973715][ T978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.040427][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1045.041807][ T978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.041822][ T978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.041847][ T978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.311362][ T978] hsr_slave_0: entered promiscuous mode [ 1045.317107][ T978] hsr_slave_1: entered promiscuous mode [ 1045.317813][ T978] debugfs: 'hsr0' already exists in 'hsr' [ 1045.317832][ T978] Cannot create hsr debugfs directory [ 1045.435619][ T1280] netlink: zone id is out of range [ 1045.435635][ T1280] netlink: del zone limit has 4 unknown bytes [ 1045.476155][ T1278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6240'. [ 1045.476179][ T1278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6240'. [ 1045.683696][T25243] IPVS: stop unused estimator thread 0... [ 1045.944440][ T1304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6244'. [ 1045.990204][ T5623] Bluetooth: hci2: command tx timeout [ 1046.025881][ T1306] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6244'. [ 1046.149069][ T1316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6246'. [ 1046.178496][ T1316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6246'. [ 1046.196572][ T1316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6246'. [ 1046.203792][ T1316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6246'. [ 1046.213788][ T1316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6246'. [ 1046.223216][T25252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.420625][T25241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.578889][ T1346] IPVS: length: 39 != 24 [ 1047.756070][ T1362] netlink: 'syz.2.6254': attribute type 1 has an invalid length. [ 1049.258885][ T1407] ¬0Ù: renamed from bond_slave_1 (while UP) [ 1049.623801][ T978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1049.654151][ T978] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1049.806861][ T978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1049.824262][ T978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1049.840892][ T1446] __nla_validate_parse: 32 callbacks suppressed [ 1049.840912][ T1446] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6262'. [ 1049.866414][ T978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1049.880346][ T978] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1049.902142][T25240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.915123][ T978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1049.949602][ T978] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1050.128533][ T1461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6266'. [ 1050.401405][ T1477] netlink: 'syz.2.6268': attribute type 2 has an invalid length. [ 1050.501194][ T978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.584911][ T978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.623500][T25252] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.623609][T25252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.675746][T25252] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.675805][T25252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.947622][ T1493] netlink: 'syz.2.6271': attribute type 1 has an invalid length. [ 1051.261544][T25240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.395382][ T1512] TCP: tcp_parse_options: Illegal window scaling value 75 > 14 received [ 1051.709083][ T1533] netlink: 'syz.3.6279': attribute type 1 has an invalid length. [ 1051.766304][ T1533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1051.778855][ T1531] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6279'. [ 1051.806908][ T1531] bond1: (slave geneve3): making interface the new active one [ 1051.808853][ T1531] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 1051.854166][ T978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.953741][ T978] veth0_vlan: entered promiscuous mode [ 1051.968200][ T978] veth1_vlan: entered promiscuous mode [ 1052.019531][ T978] veth0_macvtap: entered promiscuous mode [ 1052.044225][ T978] veth1_macvtap: entered promiscuous mode [ 1052.086174][ T978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.111137][ T978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.214686][T25241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.222798][T25243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.223964][T25243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.242008][T25243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.455960][ T1556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6281'. [ 1052.696959][ T1569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6283'. [ 1052.717466][ T1569] bond2: option lacp_active: invalid value (5) [ 1052.719193][ T1569] bond2 (unregistering): Released all slaves [ 1053.263469][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.424880][ T1605] syzkaller0: entered promiscuous mode [ 1053.424905][ T1605] syzkaller0: entered allmulticast mode [ 1053.427609][ T1605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6288'. [ 1053.633776][ T1483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1053.892262][T25243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.892285][T25243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.073511][ T1634] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6293'. [ 1054.122256][T25243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.122278][T25243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.283607][ T5623] block nbd3: Receive control failed (result -32) [ 1054.457392][ T8540] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1054.478105][ T1650] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1054.543018][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.587338][T28915] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1054.606868][T28915] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1054.607974][ T1665] netlink: 'syz.0.6296': attribute type 32 has an invalid length. [ 1054.608957][T28915] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1054.628516][T28915] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1054.649554][T28915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1054.716670][ T1661] ip_tables: iptables: counters copy to user failed while replacing table [ 1054.744111][ T1661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6295'. [ 1054.744147][ T1661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1054.775692][ T1667] dvmrp0: entered allmulticast mode [ 1054.776733][ T1661] dvmrp0: left allmulticast mode [ 1054.941163][T25243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.311154][ T1690] veth0_to_bridge: entered promiscuous mode [ 1055.311347][ T1690] macsec0: entered allmulticast mode [ 1055.311363][ T1690] veth0_to_bridge: entered allmulticast mode [ 1055.377625][ T1690] veth0_to_bridge: left allmulticast mode [ 1055.377657][ T1690] veth0_to_bridge: left promiscuous mode [ 1055.596212][ T1706] ip_tables: iptables: counters copy to user failed while replacing table [ 1055.598795][ T1706] ip_tables: iptables: counters copy to user failed while replacing table [ 1055.657269][T19774] bond0: (slave syz_tun): Releasing backup interface [ 1055.664224][T19774] syz_tun (unregistering): left promiscuous mode [ 1055.664248][T19774] syz_tun (unregistering): left allmulticast mode [ 1055.700790][T25240] smbdirect: ib_dev[s`z1] removed [ 1055.722641][ T1709] ip_tables: iptables: counters copy to user failed while replacing table [ 1055.808741][ T318] infiniband s`z1: ib_query_port failed (-19) [ 1056.115080][ T1718] syz.1.6306: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1056.115147][ T1718] CPU: 1 UID: 0 PID: 1718 Comm: syz.1.6306 Not tainted syzkaller #0 PREEMPT(full) [ 1056.115170][ T1718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1056.115183][ T1718] Call Trace: [ 1056.115191][ T1718] [ 1056.115201][ T1718] dump_stack_lvl+0xe8/0x150 [ 1056.115241][ T1718] warn_alloc+0x24d/0x270 [ 1056.115263][ T1718] ? kasan_save_track+0x4f/0x80 [ 1056.115283][ T1718] ? kasan_save_track+0x3e/0x80 [ 1056.115306][ T1718] ? __pfx_warn_alloc+0x10/0x10 [ 1056.115324][ T1718] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1056.115351][ T1718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.115391][ T1718] __vmalloc_node_range_noprof+0x127/0x1540 [ 1056.115442][ T1718] ? rcu_is_watching+0x16/0xb0 [ 1056.115471][ T1718] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1056.115500][ T1718] ? __kmalloc_cache_noprof+0x321/0x600 [ 1056.115521][ T1718] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1056.115541][ T1718] ? xskq_create+0x56/0x220 [ 1056.115573][ T1718] xskq_create+0x148/0x220 [ 1056.115599][ T1718] ? xsk_init_queue+0x8a/0xe0 [ 1056.115627][ T1718] xsk_init_queue+0x8a/0xe0 [ 1056.115655][ T1718] xsk_setsockopt+0x52a/0x960 [ 1056.115681][ T1718] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1056.115705][ T1718] ? __pfx_aa_sk_perm+0x10/0x10 [ 1056.115738][ T1718] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1056.115763][ T1718] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1056.115789][ T1718] do_sock_setsockopt+0x17c/0x1b0 [ 1056.115819][ T1718] __x64_sys_setsockopt+0x13d/0x1b0 [ 1056.115850][ T1718] do_syscall_64+0x166/0x520 [ 1056.115877][ T1718] ? trace_irq_disable+0x3b/0x140 [ 1056.115898][ T1718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.115917][ T1718] ? clear_bhb_loop+0x70/0xc0 [ 1056.115941][ T1718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.115961][ T1718] RIP: 0033:0x7f392439e159 [ 1056.115981][ T1718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.115998][ T1718] RSP: 002b:00007f3925199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1056.116018][ T1718] RAX: ffffffffffffffda RBX: 00007f3924625fa0 RCX: 00007f392439e159 [ 1056.116033][ T1718] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1056.116046][ T1718] RBP: 00007f392443506b R08: 0000000000000004 R09: 0000000000000000 [ 1056.116058][ T1718] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.116071][ T1718] R13: 00007f3924626038 R14: 00007f3924625fa0 R15: 00007ffe492f8168 [ 1056.116103][ T1718] [ 1056.116111][ T1718] Mem-Info: [ 1056.116121][ T1718] active_anon:11002 inactive_anon:0 isolated_anon:0 [ 1056.116121][ T1718] active_file:21 inactive_file:43352 isolated_file:0 [ 1056.116121][ T1718] unevictable:0 dirty:172 writeback:0 [ 1056.116121][ T1718] slab_reclaimable:12508 slab_unreclaimable:123951 [ 1056.116121][ T1718] mapped:29690 shmem:2398 pagetables:1657 [ 1056.116121][ T1718] sec_pagetables:0 bounce:0 [ 1056.116121][ T1718] kernel_misc_reclaimable:0 [ 1056.116121][ T1718] free:1287830 free_pcp:10997 free_cma:0 [ 1056.116173][ T1718] Node 0 active_anon:44008kB inactive_anon:0kB active_file:84kB inactive_file:173208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118760kB dirty:684kB writeback:0kB shmem:9592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17368kB pagetables:6476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1056.116236][ T1718] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1056.116287][ T1718] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1056.116344][ T1718] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1056.116380][ T1718] Node 0 DMA32 free:1183988kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:44008kB inactive_anon:0kB active_file:84kB inactive_file:173208kB unevictable:0kB writepending:684kB zspages:0kB present:3129332kB managed:2547096kB mlocked:0kB bounce:0kB free_pcp:43988kB local_pcp:16692kB free_cma:0kB [ 1056.116440][ T1718] lowmem_reserve[]: 0 0 0 0 0 [ 1056.116487][ T1718] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1056.116542][ T1718] lowmem_reserve[]: 0 0 0 0 0 [ 1056.124406][ T1718] Node 1 Normal free:3951972kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1056.124464][ T1718] lowmem_reserve[]: 0 0 0 0 0 [ 1056.124498][ T1718] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1056.124608][ T1718] Node 0 DMA32: 1*4kB (E) 0*8kB 3*16kB (UME) 2492*32kB (UM) 1387*64kB (UM) 623*128kB (UM) 399*256kB (UM) 268*512kB (UME) 166*1024kB (UM) 13*2048kB (UM) 122*4096kB (UM) = 1183988kB [ 1056.124767][ T1718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1056.124860][ T1718] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 5*16kB (UM) 2*32kB (UM) 3*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (U) 963*4096kB (M) = 3951972kB [ 1056.125006][ T1718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1056.125023][ T1718] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1056.125039][ T1718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1056.125055][ T1718] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1056.125071][ T1718] 45717 total pagecache pages [ 1056.125080][ T1718] 0 pages in swap cache [ 1056.125087][ T1718] Free swap = 124996kB [ 1056.125095][ T1718] Total swap = 124996kB [ 1056.125103][ T1718] 2097051 pages RAM [ 1056.125110][ T1718] 0 pages HighMem/MovableOnly [ 1056.125118][ T1718] 428661 pages reserved [ 1056.125125][ T1718] 0 pages cma reserved [ 1056.597660][T25240] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.597696][T25240] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.708010][ T5623] Bluetooth: hci1: command tx timeout [ 1056.859575][ T1713] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6304'. [ 1057.108809][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.145024][T25240] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.145067][T25240] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.411969][T25240] bond0: (slave netdevsim1): Releasing backup interface [ 1057.413271][T25240] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 1057.413300][T25240] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 1057.416682][T25240] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.416714][T25240] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.549171][ T1767] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6313'. [ 1057.619312][ T1734] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1057.619336][ T1734] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1057.813333][ T1785] netlink: 'syz.4.6317': attribute type 1 has an invalid length. [ 1057.813369][ T1785] netlink: 'syz.4.6317': attribute type 1 has an invalid length. [ 1057.866847][ T1789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6315'. [ 1057.991631][T25240] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.991668][T25240] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.183777][ T1790] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1058.208645][ T1734] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1058.208668][ T1734] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1058.288611][ T1734] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1058.288633][ T1734] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1058.456840][ T1734] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1058.457233][ T1734] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1058.609528][T25240] bond0: left allmulticast mode [ 1058.609552][T25240] ÿÿÿ: left allmulticast mode [ 1058.609569][T25240] ¬0Ù: left allmulticast mode [ 1058.631227][T25240] bond0: left promiscuous mode [ 1058.631248][T25240] ÿÿÿ: left promiscuous mode [ 1058.631448][T25240] ¬0Ù: left promiscuous mode [ 1058.631870][T25240] bridge0: port 3(bond0) entered disabled state [ 1058.661197][T25240] bridge_slave_1: left allmulticast mode [ 1058.661222][T25240] bridge_slave_1: left promiscuous mode [ 1058.661431][T25240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.691432][T25240] bridge_slave_0: left allmulticast mode [ 1058.691458][T25240] bridge_slave_0: left promiscuous mode [ 1058.691647][T25240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.898271][ T1813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6321'. [ 1059.020318][T25241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.265824][T25240] dvmrp0: left allmulticast mode [ 1059.326551][T25240] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 1059.590604][T25240] bond7 (unregistering): (slave geneve0): Releasing active interface [ 1059.708181][T25240] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 1059.708205][T25240] bond6 (unregistering): (slave bridge2): the permanent HWaddr of slave - e6:24:05:8e:7b:60 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1059.708237][T25240] bond6 (unregistering): (slave bridge3): making interface the new active one [ 1059.757123][T25240] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 1059.812435][T25240] bond0 (unregistering): (slave 17ÿÿÿ): Releasing backup interface [ 1059.814220][T25240] bond0 (unregistering): (slave 5¬0Ù): Releasing backup interface [ 1059.815349][T25240] bond0 (unregistering): Released all slaves [ 1059.819560][T25240] bond1 (unregistering): Released all slaves [ 1059.857434][T25240] bond2 (unregistering): Released all slaves [ 1059.871808][T25240] team0: Port device bond3 removed [ 1059.872700][T25240] bond3 (unregistering): Released all slaves [ 1059.899801][T25240] bond4 (unregistering): Released all slaves [ 1059.917324][T25240] bond5 (unregistering): Released all slaves [ 1059.931201][T25240] bond6 (unregistering): Released all slaves [ 1059.938636][T25240] bond7 (unregistering): Released all slaves [ 1059.958032][T25240] bond8 (unregistering): Released all slaves [ 1059.984729][T25240] bond9 (unregistering): Released all slaves [ 1059.998385][T25240] bond10 (unregistering): Released all slaves [ 1060.018212][T25240] bond11 (unregistering): Released all slaves [ 1060.302858][ T1824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6324'. [ 1060.306857][T25243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.395333][ T1830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6325'. [ 1060.421010][ T1662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.421114][ T1662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.421332][ T1662] bridge_slave_0: entered allmulticast mode [ 1060.423312][ T1662] bridge_slave_0: entered promiscuous mode [ 1060.436760][ T1662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.436873][ T1662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.436993][ T1662] bridge_slave_1: entered allmulticast mode [ 1060.442729][ T1662] bridge_slave_1: entered promiscuous mode [ 1060.498699][T25240] ovs-dp0: left promiscuous mode [ 1060.630497][T25240] ´: left promiscuous mode [ 1060.649076][ T1839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6329'. [ 1060.785645][ T1662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.808939][T25240] tipc: Disabling bearer [ 1060.809072][T25240] tipc: Left network mode [ 1060.824640][ T1662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.905088][ T1662] team0: Port device team_slave_0 added [ 1060.908089][ T1662] team0: Port device team_slave_1 added [ 1060.987419][T25240] IPVS: stopping master sync thread 1102 ... [ 1061.118798][ T1846] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6330'. [ 1061.201264][ T1662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.201281][ T1662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.201304][ T1662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.745809][ T1858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.746233][ T1858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.011602][ T1858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.037559][ T1858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.731137][ T1858] bond0: left promiscuous mode [ 1062.731155][ T1858] bond_slave_0: left promiscuous mode [ 1062.731304][ T1858] bond_slave_1: left promiscuous mode [ 1062.827117][ T1662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.827135][ T1662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.827171][ T1662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.868703][T30835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.868896][ T1863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6333'. [ 1062.885478][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1062.890069][T30846] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1062.890102][T30846] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.890498][T30846] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1062.890525][T30846] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.890561][T30846] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1062.890586][T30846] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.890619][T30846] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1062.890644][T30846] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.893702][ T1887] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6336'. [ 1062.910292][T23923] syz2: Port: 1 Link DOWN [ 1063.082115][ T1662] hsr_slave_0: entered promiscuous mode [ 1063.083061][ T1662] hsr_slave_1: entered promiscuous mode [ 1063.083713][ T1662] debugfs: 'hsr0' already exists in 'hsr' [ 1063.083731][ T1662] Cannot create hsr debugfs directory [ 1064.056545][T25240] veth0_macvtap: left promiscuous mode [ 1064.367964][T25240] team0 (unregistering): Port device team_slave_1 removed [ 1064.379299][T25240] team0 (unregistering): Port device team_slave_0 removed [ 1064.542760][ T1874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1064.559403][ T1662] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1064.639503][ T1662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1064.647594][ T1662] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1064.682054][ T1662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1064.686606][ T1662] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1064.715975][ T1662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1064.716825][ T1662] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1064.738136][ T1662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1064.802379][T30835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.076102][ T1662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.144554][ T1662] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.162079][T25241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.162200][T25241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.249192][T25249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.249284][T25249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.268256][T25240] IPVS: stop unused estimator thread 0... [ 1065.430280][T25241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.478364][ T1662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1065.478389][ T1662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1065.534911][ T1960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6347'. [ 1065.647621][ T1960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6347'. [ 1065.647645][ T1960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6347'. [ 1065.674323][ T1960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6347'. [ 1065.929449][ T1961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.692083][ T1662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.892781][ T2021] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6356'. [ 1066.892808][ T2021] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6356'. [ 1066.892825][ T2021] netlink: 'syz.4.6356': attribute type 6 has an invalid length. [ 1066.892838][ T2021] netlink: 'syz.4.6356': attribute type 5 has an invalid length. [ 1066.892851][ T2021] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6356'. [ 1066.979315][ T2023] netlink: 'syz.0.6357': attribute type 12 has an invalid length. [ 1066.980416][ T1662] veth0_vlan: entered promiscuous mode [ 1067.003672][ T2023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6357'. [ 1067.056927][ T1662] veth1_vlan: entered promiscuous mode [ 1067.265504][ T2035] macsec1: entered allmulticast mode [ 1067.265534][ T2035] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1067.313715][ T2035] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1067.485477][ T1662] veth0_macvtap: entered promiscuous mode [ 1067.522019][ T1662] veth1_macvtap: entered promiscuous mode [ 1067.584514][ T1662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.666672][ T1662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.850604][T25240] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.850647][T25240] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.850681][T25240] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.850715][T25240] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.116324][T30835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.116347][T30835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.144877][ T2077] syz_tun: entered allmulticast mode [ 1068.265807][T25240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.265829][T25240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.333256][ T2081] x_tables: duplicate underflow at hook 2 [ 1068.621436][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.662351][ T2097] ip_tables: iptables: counters copy to user failed while replacing table [ 1068.808289][ T2108] syzkaller1: entered promiscuous mode [ 1068.808313][ T2108] syzkaller1: entered allmulticast mode [ 1068.815964][ T2108] Bluetooth: MGMT ver 1.23 [ 1068.816369][ T2108] Bluetooth: MGMT ver 1.23 [ 1068.816856][ T2108] Bluetooth: MGMT ver 1.23 [ 1070.052660][ T2165] netlink: 'syz.0.6378': attribute type 1 has an invalid length. [ 1070.075920][ T2170] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1070.313744][ T2182] tipc: Started in network mode [ 1070.313787][ T2182] tipc: Node identity ac14142f, cluster identity 4711 [ 1070.314010][ T2182] tipc: New replicast peer: 172.20.20.170 [ 1070.316451][ T2182] tipc: Enabled bearer , priority 10 [ 1070.317858][ T2182] tipc: New replicast peer: 0.0.0.0 [ 1070.326052][ T2182] __nla_validate_parse: 33 callbacks suppressed [ 1070.326069][ T2182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6382'. [ 1070.326084][ T2182] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6382'. [ 1070.535808][ T2189] netlink: 'syz.3.6383': attribute type 2 has an invalid length. [ 1070.548961][T25249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.558235][ T2189] : entered promiscuous mode [ 1070.597929][ T2191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6384'. [ 1070.599015][ T2191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.124342][ T2227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6391'. [ 1071.181915][T25240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.224428][ T2235] hsr0: entered allmulticast mode [ 1071.224452][ T2235] hsr_slave_0: entered allmulticast mode [ 1071.225848][ T2232] syzkaller0: entered promiscuous mode [ 1071.225867][ T2232] syzkaller0: entered allmulticast mode [ 1071.226717][ T2235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6391'. [ 1071.261746][ T2235] hsr_slave_0: left promiscuous mode [ 1071.264347][ T2235] hsr0 (unregistering): left allmulticast mode [ 1071.295267][ T2240] 0: reclassify loop, rule prio 0, protocol 800 [ 1071.397746][ T2247] 0: reclassify loop, rule prio 0, protocol 800 [ 1071.440904][ T320] tipc: Node number set to 2886997039 [ 1071.445583][ T2239] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6394'. [ 1071.580975][ T2257] netlink: 'syz.4.6396': attribute type 1 has an invalid length. [ 1071.689893][ T2264] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6398'. [ 1071.818951][ T2279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6402'. [ 1071.819520][ T2262] siw: device registration error -23 [ 1071.874430][ T2279] gre0: left allmulticast mode [ 1071.874838][ T2279] sit0: left promiscuous mode [ 1071.893342][ T2283] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 1071.893379][ T2283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1071.893723][ T2283] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 1071.893753][ T2283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1071.894112][ T2283] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 1071.894138][ T2283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1071.899607][T25240] tipc: Subscription rejected, illegal request [ 1071.917720][ T2279] ip6gre1: left allmulticast mode [ 1071.936666][ T2279] vlan3: left promiscuous mode [ 1071.936687][ T2279] macvlan0: left promiscuous mode [ 1071.941068][ T2279] bond10: left promiscuous mode [ 1071.941087][ T2279] wireguard0: left promiscuous mode [ 1071.944107][ T2279] vlan4: left allmulticast mode [ 1071.944124][ T2279] bond0: left allmulticast mode [ 1071.944136][ T2279] bond_slave_0: left allmulticast mode [ 1071.944151][ T2279] bond_slave_1: left allmulticast mode [ 1071.947387][ T2279] ip6erspan0: left allmulticast mode [ 1071.947911][ T2279] macvlan2: left promiscuous mode [ 1071.948149][ T2279] bond12: left promiscuous mode [ 1071.948162][ T2279] gre3: left promiscuous mode [ 1072.016683][ T2286] batadv_slave_1: entered promiscuous mode [ 1072.085966][ T2271] xt_policy: output policy not valid in PREROUTING and INPUT [ 1072.341085][ T2302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.342001][ T2302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.342176][ T2302] bridge_slave_0: entered allmulticast mode [ 1072.353828][ T2302] bridge_slave_0: entered promiscuous mode [ 1072.376557][ T2302] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.405742][ T2302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.493671][ T2310] xt_bpf: check failed: parse error [ 1072.505976][ T2302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1072.506003][ T2302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1072.513280][ T2302] veth1_vlan: left promiscuous mode [ 1072.514463][ T2302] veth0_vlan: left promiscuous mode [ 1072.516178][ T2302] veth0_vlan: entered promiscuous mode [ 1072.518555][ T2302] veth1_vlan: entered promiscuous mode [ 1072.527412][ T2302] veth1_macvtap: left promiscuous mode [ 1072.528599][ T2302] veth0_macvtap: left promiscuous mode [ 1072.532522][ T2302] veth0_macvtap: entered promiscuous mode [ 1072.535631][ T2302] veth1_macvtap: entered promiscuous mode [ 1072.571734][ T2302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1072.583594][ T2302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1072.586750][ T2302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1072.645979][ T2302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1072.661658][ T2302] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1072.669284][ T2302] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1072.698453][T25241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.698513][T25241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.798532][ T2321] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6410'. [ 1072.961010][ T2313] syzkaller0: entered promiscuous mode [ 1072.961033][ T2313] syzkaller0: entered allmulticast mode [ 1072.970385][ T2330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6414'. [ 1074.120981][T28915] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1074.145021][T28915] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1074.150057][T28915] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1074.168020][T28915] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1074.168642][T28915] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1075.670486][T25243] net_ratelimit: 567 callbacks suppressed [ 1075.670509][T25243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.239890][ T5623] Bluetooth: hci4: command tx timeout [ 1076.405549][ T2340] ip6gre1: entered promiscuous mode [ 1076.405566][ T2340] ip6gre1: entered allmulticast mode [ 1076.406949][ T2341] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1076.421132][T25243] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.421186][T25243] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.430739][T25243] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.620224][ T2368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6420'. [ 1076.784119][ T2382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6424'. [ 1076.784184][ T2382] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 1076.796700][ T2372] syzkaller0: entered promiscuous mode [ 1076.796724][ T2372] syzkaller0: entered allmulticast mode [ 1076.944719][T25241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.178455][ T2394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6427'. [ 1077.178477][ T2394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6427'. [ 1078.300185][ T5623] Bluetooth: hci4: command tx timeout [ 1079.507819][T25241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.323322][ T2402] x_tables: duplicate underflow at hook 1 [ 1080.390159][ T5623] Bluetooth: hci4: command tx timeout [ 1080.412235][ T2411] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6430'. [ 1080.527820][ T2420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6433'. [ 1080.527913][ T2420] bridge_slave_1: left allmulticast mode [ 1080.527932][ T2420] bridge_slave_1: left promiscuous mode [ 1080.528108][ T2420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.565051][ T2420] bridge_slave_0: left allmulticast mode [ 1080.565077][ T2420] bridge_slave_0: left promiscuous mode [ 1080.566533][ T2420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.603838][ T2432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6433'. [ 1080.653634][ T2415] syzkaller1: entered promiscuous mode [ 1080.653659][ T2415] syzkaller1: entered allmulticast mode [ 1080.702573][T30835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.797567][ T2428] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1080.967652][ T2442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6435'. [ 1081.501764][ T2478] netlink: 'syz.2.6442': attribute type 16 has an invalid length. [ 1081.501783][ T2478] netlink: 'syz.2.6442': attribute type 17 has an invalid length. [ 1081.616812][ T2492] ip_tables: iptables: counters copy to user failed while replacing table [ 1081.787764][T25252] bridge_slave_1: left allmulticast mode [ 1081.787790][T25252] bridge_slave_1: left promiscuous mode [ 1081.787986][T25252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.803186][T25252] bridge_slave_0: left allmulticast mode [ 1081.803212][T25252] bridge_slave_0: left promiscuous mode [ 1081.803399][T25252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.061902][T30833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.135778][ T2518] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6448'. [ 1082.308637][ T2525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6450'. [ 1082.308918][ T2524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6450'. [ 1082.359002][T25252] bond12 (unregistering): (slave gre3): Releasing backup interface [ 1082.387766][ T2527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6449'. [ 1082.400123][T25252] bond6 (unregistering): (slave gre1): Releasing backup interface [ 1082.421916][ T2532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6451'. [ 1082.423047][ T2532] netlink: 'syz.3.6451': attribute type 1 has an invalid length. [ 1082.460166][ T5623] Bluetooth: hci4: command tx timeout [ 1082.664431][T25252] bond2 (unregistering): (slave macvlan2): Releasing active interface [ 1082.718569][T25252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.727982][T25252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.729654][T25252] bond0 (unregistering): Released all slaves [ 1082.754723][ T31] audit: type=1804 audit(1791052883.195:38): pid=2540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6454" name="/newroot/38/memory.events" dev="tmpfs" ino=211 res=1 errno=0 [ 1082.754768][ T31] audit: type=1800 audit(1791052883.195:39): pid=2540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6454" name="memory.events" dev="tmpfs" ino=211 res=0 errno=0 [ 1082.793905][T25252] bond1 (unregistering): (slave veth3): Releasing active interface [ 1082.823276][T25252] bond1 (unregistering): Released all slaves [ 1082.867984][T25252] bond3 (unregistering): (slave veth7): Releasing active interface [ 1082.876228][T25252] bond3 (unregistering): (slave macvlan0): Releasing active interface [ 1082.898244][T25252] bond3 (unregistering): Released all slaves [ 1082.931885][T25252] bond4 (unregistering): Released all slaves [ 1082.960157][T25252] bond5 (unregistering): Released all slaves [ 1082.977610][T25252] bond6 (unregistering): Released all slaves [ 1082.991531][T25252] bond7 (unregistering): Released all slaves [ 1083.023516][T25252] bond8 (unregistering): (slave veth11): Releasing active interface [ 1083.024752][T25252] bond8 (unregistering): (slave veth0_to_team): Releasing active interface [ 1083.025392][T25252] bond8 (unregistering): Released all slaves [ 1083.038444][T25252] bond9 (unregistering): Released all slaves [ 1083.062515][T25252] bond10 (unregistering): (slave wireguard0): Releasing backup interface [ 1083.063006][T25252] bond10 (unregistering): Released all slaves [ 1083.096213][T25252] bond11 (unregistering): Released all slaves [ 1083.125171][T25252] bond2 (unregistering): Released all slaves [ 1083.143418][T25252] bond12 (unregistering): Released all slaves [ 1083.175110][ T2515] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1083.175162][ T2515] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1083.175183][ T2515] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1083.191365][ T2519] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6447'. [ 1083.519093][ T2556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6457'. [ 1083.592130][T25252] ovs-dp0: left promiscuous mode [ 1083.655418][ T2563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6458'. [ 1083.707984][ T2555] bond1: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 1083.708711][ T2555] bond1: (slave ip6tnl2): Error -95 calling set_mac_address [ 1083.744824][T25252] tipc: Disabling bearer [ 1083.744853][ T2556] netlink: 'syz.2.6457': attribute type 1 has an invalid length. [ 1083.744871][ T2556] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6457'. [ 1083.744968][T25252] tipc: Left network mode [ 1083.756979][T25249] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1083.757203][T25249] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1083.780223][ T318] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1083.805322][ T2563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6458'. [ 1083.987015][ T2574] tipc: Enabling of bearer rejected, failed to enable media [ 1084.176430][ T2360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.176608][ T2360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.176759][ T2360] bridge_slave_0: entered allmulticast mode [ 1084.204815][ T2360] bridge_slave_0: entered promiscuous mode [ 1084.233130][ T320] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1084.245675][ T2582] tipc: Enabling of bearer rejected, failed to enable media [ 1084.246686][ T2360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.248392][ T2360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.248544][ T2360] bridge_slave_1: entered allmulticast mode [ 1084.286541][ T2360] bridge_slave_1: entered promiscuous mode [ 1084.295058][T25252] IPVS: stopping master sync thread 21591 ... [ 1084.372597][ T317] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1084.551135][T25249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.686128][ T2597] bond4: option all_slaves_active: invalid value (255) [ 1084.688322][ T2597] bond4 (unregistering): Released all slaves [ 1084.718972][ T2620] sctp: [Deprecated]: syz.2.6465 (pid 2620) Use of int in max_burst socket option. [ 1084.718972][ T2620] Use struct sctp_assoc_value instead [ 1084.772755][ T2360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.864130][ T2360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.028503][ T2360] team0: Port device team_slave_0 added [ 1085.091570][ T2360] team0: Port device team_slave_1 added [ 1085.224981][ T2360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.225000][ T2360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.225026][ T2360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.236700][ T2360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.236718][ T2360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.236745][ T2360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.435473][ T2662] xt_TCPMSS: Only works on TCP SYN packets [ 1085.493298][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1085.575489][ T2360] hsr_slave_0: entered promiscuous mode [ 1085.585002][ T2360] hsr_slave_1: entered promiscuous mode [ 1085.886193][ T2671] syzkaller0: entered promiscuous mode [ 1085.886214][ T2671] syzkaller0: entered allmulticast mode [ 1085.968151][ T2681] ovs-system: entered promiscuous mode [ 1086.398198][ T2707] openvswitch: ovs-system: Dropping previously announced user features [ 1086.492107][ T2728] x_tables: duplicate underflow at hook 2 [ 1086.542164][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.587152][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1086.721436][ T2740] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1087.258546][ T2764] __nla_validate_parse: 10 callbacks suppressed [ 1087.258565][ T2764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6486'. [ 1087.332581][ T2764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6486'. [ 1087.332816][ T2772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6486'. [ 1087.420768][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1087.668119][T25252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.683662][T25252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.716702][ T2782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6488'. [ 1087.716731][ T2782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6488'. [ 1087.822659][T25249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.143827][T25240] smc: removing ib device syz2 [ 1088.164738][ T2798] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6491'. [ 1088.578031][T25240] smbdirect: ib_dev[syz2] removed [ 1088.927658][ T2805] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6492'. [ 1089.389924][T25243] IPVS: starting estimator thread 0... [ 1089.411683][ T2827] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6496'. [ 1089.500260][ T2841] IPVS: using max 37 ests per chain, 88800 per kthread [ 1089.672624][ T2863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6499'. [ 1089.672647][ T2863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6499'. [ 1089.864117][ T2881] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1089.868980][ T2844] tipc: Enabling of bearer rejected, failed to enable media [ 1090.239293][ T2360] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1090.306084][ T2360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1090.314707][ T2360] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1090.354173][ T2360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1090.382884][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.522101][ T2360] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1090.587158][ T2360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1090.588039][ T2360] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1090.644206][ T2360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1090.686434][ T2897] syz_tun: entered allmulticast mode [ 1092.182423][ T2943] syzkaller0: entered promiscuous mode [ 1092.182455][ T2943] syzkaller0: entered allmulticast mode [ 1092.301754][T25243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.593954][ T2978] netlink: 'syz.0.6513': attribute type 1 has an invalid length. [ 1092.875183][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.503812][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1095.525887][T30835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.366983][ T2972] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1096.370484][ T2978] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1096.407433][ T2360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.482061][ T2360] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.525644][T25249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.525782][T25249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.544951][T30846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.545072][T30846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.628283][ T3000] __nla_validate_parse: 5 callbacks suppressed [ 1096.628304][ T3000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6517'. [ 1096.666862][ T3000] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1096.707862][ T3013] sctp: [Deprecated]: syz.0.6515 (pid 3013) Use of int in max_burst socket option. [ 1096.707862][ T3013] Use struct sctp_assoc_value instead [ 1096.798538][T25252] IPVS: stop unused estimator thread 0... [ 1097.070285][ T3026] ip6t_rt: address list match requested but addrnr is 0 [ 1097.070890][ T3025] ip6t_rt: address list match requested but addrnr is 0 [ 1097.342268][T25240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.794428][ T3047] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.863439][ T2360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.938911][ T3054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6525'. [ 1098.061785][T25249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.312680][ T3069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6528'. [ 1098.610586][ T3086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6529'. [ 1098.616034][ T2360] veth0_vlan: entered promiscuous mode [ 1098.637772][ T3086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6529'. [ 1098.753260][ T3094] netlink: 'syz.1.6533': attribute type 1 has an invalid length. [ 1098.828417][ T2360] veth1_vlan: entered promiscuous mode [ 1098.902245][ T3096] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1098.905301][ T3096] bond1: (slave bond2): making interface the new active one [ 1098.905843][ T3096] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1098.924588][ T3102] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1098.947203][ T2360] veth0_macvtap: entered promiscuous mode [ 1098.964263][ T2360] veth1_macvtap: entered promiscuous mode [ 1098.987431][ T2360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.996746][ T2360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.063184][T30835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.063229][T30835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.063263][T30835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.063297][T30835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.241851][ T3096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6533'. [ 1099.262123][ T3096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1099.309635][T25252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.309658][T25252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.363806][T25252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.363828][T25252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.461253][ T3116] netlink: 'syz.1.6537': attribute type 1 has an invalid length. [ 1099.544428][ T3116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1099.603482][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1099.622611][ T3129] netlink: zone id is out of range [ 1099.622628][ T3129] netlink: zone id is out of range [ 1099.622637][ T3129] netlink: zone id is out of range [ 1099.622646][ T3129] netlink: zone id is out of range [ 1099.622655][ T3129] netlink: zone id is out of range [ 1099.622663][ T3129] netlink: zone id is out of range [ 1099.622672][ T3129] netlink: zone id is out of range [ 1099.622681][ T3129] netlink: zone id is out of range [ 1099.626805][ T3118] bond3: (slave geneve2): making interface the new active one [ 1099.672555][ T3118] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1099.684601][ T3131] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6419'. [ 1099.684624][ T3131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6419'. [ 1099.808259][ T3135] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6540'. [ 1099.841087][ T3135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6540'. [ 1099.860072][ T3132] syzkaller0: entered promiscuous mode [ 1099.860098][ T3132] syzkaller0: entered allmulticast mode [ 1099.932901][ T3140] tipc: Started in network mode [ 1099.932922][ T3140] tipc: Node identity 4, cluster identity 4711 [ 1099.932935][ T3140] tipc: Node number set to 4 [ 1099.972477][ T3138] veth7: entered allmulticast mode [ 1100.079341][ T3144] netlink: 'syz.0.6545': attribute type 361 has an invalid length. [ 1100.079595][ T3144] netlink: 'syz.0.6545': attribute type 361 has an invalid length. [ 1100.095001][ T3144] netlink: 'syz.0.6545': attribute type 361 has an invalid length. [ 1100.095251][ T3144] netlink: 'syz.0.6545': attribute type 361 has an invalid length. [ 1100.095494][ T3144] netlink: 'syz.0.6545': attribute type 361 has an invalid length. [ 1100.095734][ T3144] netlink: 'syz.0.6545': attribute type 361 has an invalid length. [ 1100.095972][ T3144] netlink: 'syz.0.6545': attribute type 361 has an invalid length. [ 1100.096204][ T3144] netlink: 'syz.0.6545': attribute type 361 has an invalid length. [ 1100.157104][ T3151] sctp: [Deprecated]: syz.2.6544 (pid 3151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1100.157104][ T3151] Use struct sctp_sack_info instead [ 1100.368664][ T3168] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 1100.857721][ T3192] syzkaller1: entered promiscuous mode [ 1100.857744][ T3192] syzkaller1: entered allmulticast mode [ 1101.722731][ T3240] bond1 (unregistering): Released all slaves [ 1101.895812][ T3247] syz.0.6568: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1101.895884][ T3247] CPU: 1 UID: 0 PID: 3247 Comm: syz.0.6568 Not tainted syzkaller #0 PREEMPT(full) [ 1101.895908][ T3247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1101.895921][ T3247] Call Trace: [ 1101.895930][ T3247] [ 1101.895940][ T3247] dump_stack_lvl+0xe8/0x150 [ 1101.895977][ T3247] warn_alloc+0x24d/0x270 [ 1101.896003][ T3247] ? kasan_save_track+0x4f/0x80 [ 1101.896026][ T3247] ? kasan_save_track+0x3e/0x80 [ 1101.896052][ T3247] ? __pfx_warn_alloc+0x10/0x10 [ 1101.896071][ T3247] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1101.896100][ T3247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.896139][ T3247] __vmalloc_node_range_noprof+0x127/0x1540 [ 1101.896203][ T3247] ? rcu_is_watching+0x16/0xb0 [ 1101.896235][ T3247] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1101.896266][ T3247] ? __kmalloc_cache_noprof+0x321/0x600 [ 1101.896288][ T3247] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1101.896309][ T3247] ? xskq_create+0x56/0x220 [ 1101.896342][ T3247] xskq_create+0x148/0x220 [ 1101.896369][ T3247] ? xsk_init_queue+0x8a/0xe0 [ 1101.896398][ T3247] xsk_init_queue+0x8a/0xe0 [ 1101.896424][ T3247] xsk_setsockopt+0x52a/0x960 [ 1101.896451][ T3247] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1101.896473][ T3247] ? __pfx_aa_sk_perm+0x10/0x10 [ 1101.896510][ T3247] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1101.896535][ T3247] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1101.896563][ T3247] do_sock_setsockopt+0x17c/0x1b0 [ 1101.896597][ T3247] __x64_sys_setsockopt+0x13d/0x1b0 [ 1101.896633][ T3247] do_syscall_64+0x166/0x520 [ 1101.896663][ T3247] ? trace_irq_disable+0x3b/0x140 [ 1101.896683][ T3247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.896704][ T3247] ? clear_bhb_loop+0x70/0xc0 [ 1101.896730][ T3247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.896751][ T3247] RIP: 0033:0x7f3e0199e159 [ 1101.896770][ T3247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.896789][ T3247] RSP: 002b:00007f3e028c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1101.896812][ T3247] RAX: ffffffffffffffda RBX: 00007f3e01c25fa0 RCX: 00007f3e0199e159 [ 1101.896828][ T3247] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1101.896841][ T3247] RBP: 00007f3e01a3506b R08: 0000000000000004 R09: 0000000000000000 [ 1101.896854][ T3247] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.896868][ T3247] R13: 00007f3e01c26038 R14: 00007f3e01c25fa0 R15: 00007ffd8dbde7c8 [ 1101.896901][ T3247] [ 1101.896923][ T3247] Mem-Info: [ 1101.896933][ T3247] active_anon:8968 inactive_anon:0 isolated_anon:0 [ 1101.896933][ T3247] active_file:21 inactive_file:43372 isolated_file:0 [ 1101.896933][ T3247] unevictable:0 dirty:168 writeback:0 [ 1101.896933][ T3247] slab_reclaimable:12349 slab_unreclaimable:114641 [ 1101.896933][ T3247] mapped:29764 shmem:532 pagetables:1661 [ 1101.896933][ T3247] sec_pagetables:0 bounce:0 [ 1101.896933][ T3247] kernel_misc_reclaimable:0 [ 1101.896933][ T3247] free:1301142 free_pcp:9153 free_cma:0 [ 1101.896988][ T3247] Node 0 active_anon:35872kB inactive_anon:0kB active_file:84kB inactive_file:173288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119056kB dirty:672kB writeback:0kB shmem:2128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16912kB pagetables:6492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1101.900244][ T3247] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1101.900305][ T3247] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1101.900364][ T3247] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1101.900402][ T3247] Node 0 DMA32 free:1237236kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35972kB inactive_anon:0kB active_file:84kB inactive_file:173288kB unevictable:0kB writepending:672kB zspages:0kB present:3129332kB managed:2547096kB mlocked:0kB bounce:0kB free_pcp:36504kB local_pcp:14892kB free_cma:0kB [ 1101.900466][ T3247] lowmem_reserve[]: 0 0 0 0 0 [ 1101.900500][ T3247] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1101.900557][ T3247] lowmem_reserve[]: 0 0 0 0 0 [ 1101.900589][ T3247] Node 1 Normal free:3951972kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1101.900647][ T3247] lowmem_reserve[]: 0 0 0 0 0 [ 1101.900680][ T3247] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1101.900799][ T3247] Node 0 DMA32: 3143*4kB (UME) 1762*8kB (UME) 483*16kB (UME) 2685*32kB (UME) 1483*64kB (UME) 664*128kB (UME) 414*256kB (UM) 279*512kB (UME) 168*1024kB (UM) 6*2048kB (UM) 123*4096kB (UM) = 1237180kB [ 1101.900959][ T3247] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1101.901063][ T3247] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 5*16kB (UM) 2*32kB (UM) 3*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (U) 963*4096kB (M) = 3951972kB [ 1101.901232][ T3247] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1101.901250][ T3247] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1101.901268][ T3247] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1101.901286][ T3247] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1101.901303][ T3247] 43946 total pagecache pages [ 1101.901312][ T3247] 0 pages in swap cache [ 1101.901319][ T3247] Free swap = 124996kB [ 1101.901328][ T3247] Total swap = 124996kB [ 1101.901337][ T3247] 2097051 pages RAM [ 1101.901344][ T3247] 0 pages HighMem/MovableOnly [ 1101.901352][ T3247] 428661 pages reserved [ 1101.901359][ T3247] 0 pages cma reserved [ 1102.126528][ T3247] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1102.406208][ T3260] __nla_validate_parse: 14 callbacks suppressed [ 1102.406228][ T3260] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6571'. [ 1102.551324][T25249] net_ratelimit: 4 callbacks suppressed [ 1102.551344][T25249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.636386][ T3265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6573'. [ 1102.843565][ T3280] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1102.843605][ T3280] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1102.843647][ T3280] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1102.950210][ T3281] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20002 [ 1103.012664][T25240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.012699][T25240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.067064][ T3281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6577'. [ 1103.087733][ T3281] netlink: 29 bytes leftover after parsing attributes in process `syz.4.6577'. [ 1103.159376][ T3288] syzkaller0: entered promiscuous mode [ 1103.159401][ T3288] syzkaller0: entered allmulticast mode [ 1103.174197][ T3288] tipc: Started in network mode [ 1103.174244][ T3288] tipc: Node identity 32ce7092fed3, cluster identity 4711 [ 1103.177329][ T3288] tipc: Enabled bearer , priority 0 [ 1103.182098][T25240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.193844][ T3288] syzkaller0: mtu less than device minimum [ 1103.253857][ T3294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6581'. [ 1103.285672][ T3289] syzkaller0: entered promiscuous mode [ 1103.285688][ T3289] syzkaller0: entered allmulticast mode [ 1103.287064][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.287469][ T3286] tipc: Resetting bearer [ 1103.317300][ T3289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.344401][ T3286] tipc: Disabling bearer [ 1103.404014][ T3299] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6581'. [ 1103.650898][ T3315] syzkaller0: entered promiscuous mode [ 1103.650917][ T3315] syzkaller0: entered allmulticast mode [ 1104.096465][ T3324] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6587'. [ 1104.522222][T30846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.640231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.640341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.653475][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.944387][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.342680][ T3329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6589'. [ 1105.342712][ T3329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6589'. [ 1105.563637][ T3338] validate_nla: 29 callbacks suppressed [ 1105.563657][ T3338] netlink: 'syz.0.6591': attribute type 19 has an invalid length. [ 1105.563672][ T3338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6591'. [ 1106.240952][ T3293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1106.608931][ T3355] netlink: 'syz.3.6595': attribute type 1 has an invalid length. [ 1106.681938][ T3362] netlink: 'syz.4.6593': attribute type 1 has an invalid length. [ 1107.684755][ T319] net_ratelimit: 17 callbacks suppressed [ 1107.684771][ T319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.759918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.760052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.760418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.940654][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.994658][ T319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.069061][T27239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.270395][ T3338] netlink: 'syz.0.6591': attribute type 19 has an invalid length. [ 1108.270417][ T3338] __nla_validate_parse: 2 callbacks suppressed [ 1108.270433][ T3338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6591'. [ 1108.283268][ T3355] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1108.310201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.310439][T30835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.419887][T25242] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.419931][T25242] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.515952][ T3369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6598'. [ 1108.680945][ T3385] netlink: 'syz.4.6601': attribute type 1 has an invalid length. [ 1108.779864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.870920][ T3388] batman_adv: batadv0: Adding interface: syzkaller0 [ 1108.870939][ T3388] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.870971][ T3388] batman_adv: batadv0: Interface activated: syzkaller0 [ 1108.872380][ T3388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1108.961793][ T3395] netlink: 'syz.1.6604': attribute type 1 has an invalid length. [ 1108.993696][ T3395] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1109.009132][ T3395] bond4: entered allmulticast mode [ 1109.015698][ T3395] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6604'. [ 1109.018980][ T3395] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6604'. [ 1109.026242][ T3401] ovs-s: entered promiscuous mode [ 1109.097072][ T3404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6607'. [ 1109.118230][ T3404] vlan2: entered allmulticast mode [ 1109.118258][ T3404] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1109.119210][ T3404] batman_adv: batadv0: Adding interface: vlan2 [ 1109.119225][ T3404] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.119254][ T3404] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1109.265620][ T3408] netlink: 'syz.1.6608': attribute type 23 has an invalid length. [ 1109.372742][ T3417] netlink: 'syz.1.6610': attribute type 5 has an invalid length. [ 1109.374592][ T3417] netlink: 'syz.1.6610': attribute type 5 has an invalid length. [ 1109.375592][ T3417] netlink: 'syz.1.6610': attribute type 5 has an invalid length. [ 1109.414116][ T3387] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1109.459194][ T3387] batman_adv: batadv0: Removing interface: syzkaller0 [ 1109.766017][ T3427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6614'. [ 1109.810756][ T3429] xt_CT: No such helper "snmp" [ 1109.818316][ T3429] syzkaller1: entered promiscuous mode [ 1109.818338][ T3429] syzkaller1: entered allmulticast mode [ 1109.938675][ T3440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6618'. [ 1110.189102][ T3454] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6622'. [ 1110.189127][ T3454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6622'. [ 1110.414754][ T3472] tipc: Enabled bearer , priority 0 [ 1110.418597][ T3472] tipc: Resetting bearer [ 1110.779324][ T3482] sit0: entered promiscuous mode [ 1110.808376][ T3482] validate_nla: 64 callbacks suppressed [ 1110.808399][ T3482] netlink: 'syz.0.6631': attribute type 1 has an invalid length. [ 1110.870348][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1111.205529][ T3466] tipc: Disabling bearer [ 1111.484760][ T3510] syzkaller0: entered promiscuous mode [ 1111.484783][ T3510] syzkaller0: entered allmulticast mode [ 1111.500493][ T3510] tc action pedit 'at' offset 5 out of bounds [ 1112.052993][ T3550] netlink: 'syz.0.6648': attribute type 1 has an invalid length. [ 1112.223470][ T3562] syzkaller0: entered promiscuous mode [ 1112.223492][ T3562] syzkaller0: entered allmulticast mode [ 1112.225971][ T3557] tc_dump_action: action bad kind [ 1112.237599][ T3563] syzkaller1: entered promiscuous mode [ 1112.237620][ T3563] syzkaller1: entered allmulticast mode [ 1112.556947][ T3577] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1112.604834][ T3577] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1112.622441][ T3576] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1112.637421][ T3576] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 1112.687586][ T3577] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 1112.720721][ T3577] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 1112.746062][ T3576] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 1112.762300][ T3576] 8021q: adding VLAN 0 to HW filter on device ipvlan9 [ 1112.797619][ T3576] 8021q: adding VLAN 0 to HW filter on device ipvlan10 [ 1112.834198][ T3577] 8021q: adding VLAN 0 to HW filter on device ipvlan11 [ 1112.862733][ T3576] 8021q: adding VLAN 0 to HW filter on device ipvlan12 [ 1112.884663][ T3576] 8021q: adding VLAN 0 to HW filter on device ipvlan13 [ 1112.928032][ T3589] netlink: 'syz.4.6656': attribute type 2 has an invalid length. [ 1112.940035][ C1] net_ratelimit: 1749 callbacks suppressed [ 1112.940054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.940272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.941136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.954442][ T3577] 8021q: adding VLAN 0 to HW filter on device ipvlan14 [ 1112.996846][ T3576] 8021q: adding VLAN 0 to HW filter on device ipvlan15 [ 1113.016992][ T3576] 8021q: adding VLAN 0 to HW filter on device ipvlan16 [ 1113.057906][ T3576] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 1113.088026][ T3577] 8021q: adding VLAN 0 to HW filter on device ipvlan18 [ 1113.088761][ T3607] gre0: entered promiscuous mode [ 1113.088815][ T3607] gre0: entered allmulticast mode [ 1113.156962][ T3576] 8021q: adding VLAN 0 to HW filter on device ipvlan19 [ 1113.165916][ T3577] 8021q: adding VLAN 0 to HW filter on device ipvlan20 [ 1113.260147][T23928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.282541][ T3618] __nla_validate_parse: 13 callbacks suppressed [ 1113.282555][ T3618] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6664'. [ 1113.282571][ T3618] netlink: 239 bytes leftover after parsing attributes in process `syz.2.6664'. [ 1113.335380][ T3618] netlink: zone id is out of range [ 1113.335397][ T3618] netlink: zone id is out of range [ 1113.335405][ T3618] netlink: zone id is out of range [ 1113.335414][ T3618] netlink: zone id is out of range [ 1113.335422][ T3618] netlink: zone id is out of range [ 1113.335430][ T3618] netlink: zone id is out of range [ 1113.542108][ T3630] macsec1: entered promiscuous mode [ 1113.636603][ T3630] macsec1: entered promiscuous mode [ 1113.714945][ T3630] macsec1: entered promiscuous mode [ 1113.785274][ T3641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6669'. [ 1113.785310][ T3641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6669'. [ 1113.819275][ T3630] macsec1: entered promiscuous mode [ 1113.899482][ T3630] macsec1: entered promiscuous mode [ 1113.962338][ T3630] macsec1: entered promiscuous mode [ 1114.154164][ T3630] macsec1: entered promiscuous mode [ 1114.331112][ T3630] macsec1: entered promiscuous mode [ 1114.388592][ T3657] block nbd0: reconnected socket [ 1114.388613][ T3657] nbd: socks must be embedded in a SOCK_ITEM attr [ 1114.498160][ T5623] block nbd0: Receive control failed (result -32) [ 1114.504548][ T3661] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6675'. [ 1114.506666][ T3661] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6675'. [ 1114.506690][ T3661] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6675'. [ 1114.583834][ T3666] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6676'. [ 1115.329990][ T3682] xt_l2tp: invalid flags combination: 8 [ 1115.463759][T25604] [ 1115.466125][T25604] ====================================================== [ 1115.473155][T25604] WARNING: possible circular locking dependency detected [ 1115.480293][T25604] syzkaller #0 Not tainted [ 1115.484721][T25604] ------------------------------------------------------ [ 1115.491790][T25604] kworker/0:13/25604 is trying to acquire lock: [ 1115.498101][T25604] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 1115.508651][T25604] [ 1115.508651][T25604] but task is already holding lock: [ 1115.516024][T25604] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 1115.525445][T25604] [ 1115.525445][T25604] which lock already depends on the new lock. [ 1115.525445][T25604] [ 1115.535856][T25604] [ 1115.535856][T25604] the existing dependency chain (in reverse order) is: [ 1115.544916][T25604] [ 1115.544916][T25604] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1115.553114][T25604] down_write+0x96/0x200 [ 1115.558024][T25604] kernfs_add_one+0x41/0x6f0 [ 1115.563156][T25604] kernfs_create_dir_ns+0x1a1/0x230 [ 1115.568894][T25604] internal_create_group+0x440/0x1180 [ 1115.574802][T25604] cpuhp_invoke_callback+0x434/0x810 [ 1115.580667][T25604] cpuhp_issue_call+0x3f0/0x750 [ 1115.586063][T25604] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1115.592676][T25604] __cpuhp_setup_state+0x3f/0x60 [ 1115.598165][T25604] do_one_initcall+0x250/0x870 [ 1115.603471][T25604] do_initcall_level+0x10a/0x1a0 [ 1115.608962][T25604] do_initcalls+0x59/0xa0 [ 1115.613829][T25604] kernel_init_freeable+0x29d/0x3e0 [ 1115.619573][T25604] kernel_init+0x22/0x1d0 [ 1115.624449][T25604] ret_from_fork+0x514/0xb70 [ 1115.629651][T25604] ret_from_fork_asm+0x1a/0x30 [ 1115.634969][T25604] [ 1115.634969][T25604] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1115.642821][T25604] [ 1115.642821][T25604] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1115.650585][T25604] cpus_read_lock+0x42/0x160 [ 1115.655754][T25604] static_key_slow_inc+0x12/0x30 [ 1115.661300][T25604] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1115.667695][T25604] nbd_genl_foreach_sock+0x265/0x450 [ 1115.673609][T25604] nbd_genl_reconfigure+0xbbb/0x1040 [ 1115.679433][T25604] genl_family_rcv_msg_doit+0x233/0x340 [ 1115.685516][T25604] genl_rcv_msg+0x614/0x7a0 [ 1115.690551][T25604] netlink_rcv_skb+0x226/0x4a0 [ 1115.695841][T25604] genl_rcv+0x28/0x40 [ 1115.700359][T25604] netlink_unicast+0x7bd/0x940 [ 1115.705651][T25604] netlink_sendmsg+0x813/0xb40 [ 1115.710934][T25604] sock_sendmsg_nosec+0x14e/0x190 [ 1115.716472][T25604] ____sys_sendmsg+0x54e/0x850 [ 1115.721748][T25604] ___sys_sendmsg+0x2a5/0x360 [ 1115.726941][T25604] __x64_sys_sendmsg+0x1b1/0x290 [ 1115.732481][T25604] do_syscall_64+0x166/0x520 [ 1115.737589][T25604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.743996][T25604] [ 1115.743996][T25604] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1115.751632][T25604] __mutex_lock+0x19d/0x1550 [ 1115.756737][T25604] nbd_queue_rq+0x373/0xff0 [ 1115.761749][T25604] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1115.767915][T25604] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1115.774783][T25604] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1115.781282][T25604] blk_mq_run_work_fn+0x16c/0x300 [ 1115.786823][T25604] process_scheduled_works+0xc3d/0x1630 [ 1115.792905][T25604] worker_thread+0xa47/0xfb0 [ 1115.798013][T25604] kthread+0x38b/0x480 [ 1115.802587][T25604] ret_from_fork+0x514/0xb70 [ 1115.807698][T25604] ret_from_fork_asm+0x1a/0x30 [ 1115.812976][T25604] [ 1115.812976][T25604] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1115.820182][T25604] __mutex_lock+0x19d/0x1550 [ 1115.825290][T25604] nbd_queue_rq+0xc1/0xff0 [ 1115.830214][T25604] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1115.836280][T25604] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1115.843117][T25604] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1115.849608][T25604] blk_mq_run_work_fn+0x16c/0x300 [ 1115.855144][T25604] process_scheduled_works+0xc3d/0x1630 [ 1115.861235][T25604] worker_thread+0xa47/0xfb0 [ 1115.866333][T25604] kthread+0x38b/0x480 [ 1115.870906][T25604] ret_from_fork+0x514/0xb70 [ 1115.876011][T25604] ret_from_fork_asm+0x1a/0x30 [ 1115.881292][T25604] [ 1115.881292][T25604] -> #4 (set->srcu){.+.+}-{0:0}: [ 1115.888458][T25604] __synchronize_srcu+0xc9/0x2f0 [ 1115.893907][T25604] elevator_switch+0x1e8/0x7b0 [ 1115.899234][T25604] elevator_change+0x2fa/0x480 [ 1115.904505][T25604] elevator_set_default+0x375/0x440 [ 1115.910219][T25604] blk_register_queue+0x3f3/0x4e0 [ 1115.915814][T25604] __add_disk+0x6b8/0xdb0 [ 1115.920661][T25604] add_disk_fwnode+0x100/0x3a0 [ 1115.925943][T25604] nbd_dev_add+0x733/0xb60 [ 1115.930876][T25604] nbd_init+0x168/0x1f0 [ 1115.935665][T25604] do_one_initcall+0x250/0x870 [ 1115.940949][T25604] do_initcall_level+0x10a/0x1a0 [ 1115.946408][T25604] do_initcalls+0x59/0xa0 [ 1115.951259][T25604] kernel_init_freeable+0x29d/0x3e0 [ 1115.956974][T25604] kernel_init+0x22/0x1d0 [ 1115.961811][T25604] ret_from_fork+0x514/0xb70 [ 1115.966913][T25604] ret_from_fork_asm+0x1a/0x30 [ 1115.972191][T25604] [ 1115.972191][T25604] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1115.980023][T25604] __mutex_lock+0x19d/0x1550 [ 1115.985144][T25604] elevator_change+0x1af/0x480 [ 1115.990421][T25604] elevator_set_none+0xb5/0x140 [ 1115.995797][T25604] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1116.002142][T25604] nbd_start_device+0x189/0xb30 [ 1116.007512][T25604] nbd_genl_connect+0x167d/0x1cd0 [ 1116.013048][T25604] genl_family_rcv_msg_doit+0x233/0x340 [ 1116.019108][T25604] genl_rcv_msg+0x614/0x7a0 [ 1116.019928][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1116.031559][T25604] netlink_rcv_skb+0x226/0x4a0 [ 1116.036844][T25604] genl_rcv+0x28/0x40 [ 1116.041370][T25604] netlink_unicast+0x7bd/0x940 [ 1116.046675][T25604] netlink_sendmsg+0x813/0xb40 [ 1116.051952][T25604] sock_sendmsg_nosec+0x14e/0x190 [ 1116.057486][T25604] ____sys_sendmsg+0x54e/0x850 [ 1116.062763][T25604] ___sys_sendmsg+0x2a5/0x360 [ 1116.067949][T25604] __x64_sys_sendmsg+0x1b1/0x290 [ 1116.073402][T25604] do_syscall_64+0x166/0x520 [ 1116.078513][T25604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.084921][T25604] [ 1116.084921][T25604] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1116.093883][T25604] blk_alloc_queue+0x544/0x690 [ 1116.099162][T25604] __blk_mq_alloc_disk+0x194/0x390 [ 1116.104789][T25604] nbd_dev_add+0x494/0xb60 [ 1116.109822][T25604] nbd_init+0x168/0x1f0 [ 1116.114603][T25604] do_one_initcall+0x250/0x870 [ 1116.119906][T25604] do_initcall_level+0x10a/0x1a0 [ 1116.125365][T25604] do_initcalls+0x59/0xa0 [ 1116.130211][T25604] kernel_init_freeable+0x29d/0x3e0 [ 1116.135922][T25604] kernel_init+0x22/0x1d0 [ 1116.140762][T25604] ret_from_fork+0x514/0xb70 [ 1116.145871][T25604] ret_from_fork_asm+0x1a/0x30 [ 1116.151240][T25604] [ 1116.151240][T25604] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1116.158441][T25604] fs_reclaim_acquire+0x71/0x100 [ 1116.163888][T25604] kmem_cache_alloc_noprof+0x5f/0x600 [ 1116.169782][T25604] __kernfs_iattrs+0xdd/0x380 [ 1116.174989][T25604] kernfs_iop_setattr+0xe6/0x3f0 [ 1116.180446][T25604] notify_change+0xbba/0xea0 [ 1116.185549][T25604] do_truncate+0x1c2/0x250 [ 1116.190482][T25604] path_openat+0x15b5/0x1d60 [ 1116.195578][T25604] do_file_open+0x23e/0x4a0 [ 1116.200588][T25604] do_sys_openat2+0x115/0x200 [ 1116.205782][T25604] __x64_sys_openat+0x138/0x170 [ 1116.211146][T25604] do_syscall_64+0x166/0x520 [ 1116.216254][T25604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.222655][T25604] [ 1116.222655][T25604] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1116.231157][T25604] __lock_acquire+0x164c/0x2de0 [ 1116.236521][T25604] lock_acquire+0x115/0x350 [ 1116.241532][T25604] down_write+0x96/0x200 [ 1116.246283][T25604] kernfs_link_sibling+0x4c7/0x5a0 [ 1116.251902][T25604] kernfs_add_one+0x2db/0x6f0 [ 1116.257085][T25604] kernfs_create_dir_ns+0x1a1/0x230 [ 1116.262801][T25604] sysfs_create_dir_ns+0x12f/0x2a0 [ 1116.268427][T25604] kobject_add_internal+0x622/0xcd0 [ 1116.274317][T25604] kobject_add+0x163/0x240 [ 1116.279259][T25604] device_add+0x3fa/0xb80 [ 1116.284271][T25604] hid_add_device+0x272/0x3e0 [ 1116.289709][T25604] hidp_session_dev_work+0x45/0x160 [ 1116.295516][T25604] process_scheduled_works+0xc3d/0x1630 [ 1116.301572][T25604] worker_thread+0xa47/0xfb0 [ 1116.306676][T25604] kthread+0x38b/0x480 [ 1116.311251][T25604] ret_from_fork+0x514/0xb70 [ 1116.316394][T25604] ret_from_fork_asm+0x1a/0x30 [ 1116.321674][T25604] [ 1116.321674][T25604] other info that might help us debug this: [ 1116.321674][T25604] [ 1116.331886][T25604] Chain exists of: [ 1116.331886][T25604] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1116.331886][T25604] [ 1116.346373][T25604] Possible unsafe locking scenario: [ 1116.346373][T25604] [ 1116.353827][T25604] CPU0 CPU1 [ 1116.359240][T25604] ---- ---- [ 1116.364589][T25604] lock(&root->kernfs_rwsem); [ 1116.369341][T25604] lock(cpuhp_state_mutex); [ 1116.376441][T25604] lock(&root->kernfs_rwsem); [ 1116.383721][T25604] lock(&root->kernfs_iattr_rwsem); [ 1116.389009][T25604] [ 1116.389009][T25604] *** DEADLOCK *** [ 1116.389009][T25604] [ 1116.397147][T25604] locks held by kworker/0:13/25604: 3, last CPU#0: [ 1116.403724][T25604] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1116.414727][T25604] #1: ffffc9000e54fc40 ((work_completion)(&session->dev_init)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1116.427082][T25604] #2: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 1116.436908][T25604] [ 1116.436908][T25604] stack backtrace: [ 1116.442783][T25604] CPU: 0 UID: 0 PID: 25604 Comm: kworker/0:13 Not tainted syzkaller #0 PREEMPT(full) [ 1116.452310][T25604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1116.462351][T25604] Workqueue: events hidp_session_dev_work [ 1116.468073][T25604] Call Trace: [ 1116.471343][T25604] [ 1116.474265][T25604] dump_stack_lvl+0xe8/0x150 [ 1116.478855][T25604] print_circular_bug+0x2e2/0x300 [ 1116.483878][T25604] check_noncircular+0x12f/0x150 [ 1116.488810][T25604] __lock_acquire+0x164c/0x2de0 [ 1116.493655][T25604] ? __lock_acquire+0x747/0x2de0 [ 1116.498591][T25604] lock_acquire+0x115/0x350 [ 1116.503079][T25604] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1116.508365][T25604] down_write+0x96/0x200 [ 1116.512623][T25604] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1116.517902][T25604] ? __pfx_down_write+0x10/0x10 [ 1116.522744][T25604] ? kernfs_root+0x1c/0x230 [ 1116.527237][T25604] ? kernfs_root+0x1c/0x230 [ 1116.531747][T25604] ? kernfs_root+0x1c/0x230 [ 1116.536236][T25604] ? kernfs_root+0x1ea/0x230 [ 1116.540814][T25604] kernfs_link_sibling+0x4c7/0x5a0 [ 1116.545923][T25604] kernfs_add_one+0x2db/0x6f0 [ 1116.550591][T25604] kernfs_create_dir_ns+0x1a1/0x230 [ 1116.555782][T25604] sysfs_create_dir_ns+0x12f/0x2a0 [ 1116.560892][T25604] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1116.566523][T25604] ? do_raw_spin_unlock+0xf5/0x200 [ 1116.571633][T25604] kobject_add_internal+0x622/0xcd0 [ 1116.576831][T25604] kobject_add+0x163/0x240 [ 1116.581237][T25604] ? rcu_is_watching+0x16/0xb0 [ 1116.585996][T25604] ? __pfx_kobject_add+0x10/0x10 [ 1116.590919][T25604] ? __kasan_kmalloc+0x93/0xb0 [ 1116.595676][T25604] ? class_to_subsys+0xb6/0x120 [ 1116.600521][T25604] ? get_device_parent+0xbc/0x3a0 [ 1116.605533][T25604] device_add+0x3fa/0xb80 [ 1116.609863][T25604] hid_add_device+0x272/0x3e0 [ 1116.614552][T25604] ? hidp_session_dev_work+0x1e/0x160 [ 1116.620016][T25604] ? process_scheduled_works+0x97a/0x1630 [ 1116.625738][T25604] hidp_session_dev_work+0x45/0x160 [ 1116.630936][T25604] process_scheduled_works+0xc3d/0x1630 [ 1116.636487][T25604] ? __pfx_process_scheduled_works+0x10/0x10 [ 1116.642474][T25604] ? assign_work+0x3cf/0x5d0 [ 1116.647057][T25604] worker_thread+0xa47/0xfb0 [ 1116.651646][T25604] ? __kthread_parkme+0x71/0x1f0 [ 1116.656589][T25604] kthread+0x38b/0x480 [ 1116.660664][T25604] ? __pfx_worker_thread+0x10/0x10 [ 1116.665767][T25604] ? __pfx_kthread+0x10/0x10 [ 1116.670347][T25604] ret_from_fork+0x514/0xb70 [ 1116.674939][T25604] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.680046][T25604] ? __switch_to+0xc89/0x1420 [ 1116.684750][T25604] ? __pfx_kthread+0x10/0x10 [ 1116.689327][T25604] ret_from_fork_asm+0x1a/0x30 [ 1116.694094][T25604] [ 1116.708673][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.727801][ T3699] rdma_rxe: rxe_newlink: failed to add lo [ 1116.751847][ T3706] tls_set_device_offload: netdev not found [ 1116.795279][T25604] hid-generic 0005:0008:0009.0001: item fetching failed at offset 2/3 [ 1116.795790][T25604] hid-generic 0005:0008:0009.0001: probe with driver hid-generic failed with error -22 [ 1118.139836][ C1] net_ratelimit: 404 callbacks suppressed [ 1118.139852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.139887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.140051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.782862][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.039958][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.180005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.180072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.180669][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.180843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.181342][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.339818][ C1] net_ratelimit: 19 callbacks suppressed [ 1123.339841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.339900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.340099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.460173][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.660573][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.981618][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.379856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.379955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.380172][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.560254][T25240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog