last executing test programs: 4.03432127s ago: executing program 1 (id=1566): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = getuid() r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newsa={0x114, 0x10, 0x1, 0xfefffffe, 0x100, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a, 0x0, r3}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010100, {0x0, 0x192, 0x8, 0xffff, 0x8251c, 0x100000005, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x4000000000000, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffb, 0xffffffff}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd28, 0x70bd28, 0x70bd27, 0x70bd27, 0x2, [0x2, 0x8]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8805}, 0x0) r5 = socket(0x28, 0x80801, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x11, 0xa, 0x300) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000200), 0x4) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x73) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=r1], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$kcm(r7, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600894f0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x11e, 0xd2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r10], 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 3.800854094s ago: executing program 1 (id=1570): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) unshare(0x28000600) getsockopt$sock_buf(r0, 0x1, 0x37, 0xffffffffffffffff, &(0x7f0000000000)) 3.68959665s ago: executing program 1 (id=1572): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) unshare(0x20000400) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) (async) connect$bt_sco(r1, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x4855}, 0x24000052) 3.4742846s ago: executing program 1 (id=1574): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) 3.077089747s ago: executing program 1 (id=1576): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@mpls_getnetconf={0x5c, 0x52, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}]}, 0x5c}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0), 0x0, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.889468678s ago: executing program 0 (id=1579): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000079500000000000000b7020000000000007b9af8ff00000000ae09020000000000dbaaf8ff50000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.353042527s ago: executing program 0 (id=1584): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc014}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000200)=@newtaction={0x5c, 0x32, 0x12f, 0x0, 0x25dfdbfe, {}, [{0x48, 0x1, [@m_police={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xa877eff75f460b3, 0x6, "44f4bb71c0ac0ca9cf3b732a9359d8df71"}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4020804}, 0x10040000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000f80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000001140)={0x88, 0x0, 0x8, 0x3, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff2c9d}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x10040080}, 0x10) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4804) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xc, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x48, 0x0, 0xb, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x12, 0x1, './cgroup/syz1\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0xc0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000fc0)) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x31, 0x0, &(0x7f0000001840)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, &(0x7f0000000100)) 2.050647293s ago: executing program 3 (id=1585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) listen(r3, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r4, 0x3) r5 = socket$inet(0x2, 0x6, 0x7) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r4, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10) listen(r3, 0x3) r6 = socket$unix(0x1, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000500)="b820080000000000000000d1786d", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xf, 0x8}, {}, {0x5, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x8, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'vlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.651519487s ago: executing program 0 (id=1588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000001380)=0xe, 0x4) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000000c0)={0x0, 0x400}) 1.502857809s ago: executing program 3 (id=1589): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) (fail_nth: 1) 1.499115123s ago: executing program 0 (id=1590): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000006f67594ad993ac102bbb0af7e0b2a309000000edff00007582b34de2f3d6902211a572c789f3ee3710df70fff5ace4c01fc0b2bbe30d752f2c5cf0ce86688eb3fe8dedd739dcfe04fa7d8264f3466e2e0b46d8dde4f0bce3bb2d1bf60f80e24ad1ccf33adedbaafe79e9dae4ddcb8fbf0ff656259b96423995878217f0e7363b728e7e83021d7fc362cde39725"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001000000000008000740000000000800"], 0x80}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001000000000008000740000000000800"], 0x80}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000080)={0x0, 'netdevsim0\x00', {}, 0x7}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000080)={0x0, 'netdevsim0\x00', {}, 0x7}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x50}, 0x1, 0x0, 0x0, 0x20008005}, 0x24000000) 1.462836968s ago: executing program 2 (id=1591): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000800000008", @ANYRESOCT=r0, @ANYRES16=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000380)="ff", &(0x7f0000000480)=@udp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e98021422576e1f8f1d2ac6dd60fa7599eba67979a399e581581834335637dd5d84389402a09f581c09118cfd9d9c3310605ef0e1a48220cccc8f2366439a2c1b7086783e30fcbb6e7ef1659a765c75048da95556bf0484f00ce396330554e7680612e8d000224f9429bef58ae26f530809fe159a354b382c3870ba3d056636b917ddb64a17ce707d6e3d017c2c5b50be3d55b3946d88069d3f5ba0d55e9952438ceb8c8a48f538dfcd418933c05357f1190dd3fad1172497484b9ac2379c44ab5df980aaaff65746ad782358fa1e415a85a3afbde8e2d0ad", 0xd9}, {&(0x7f00000002c0)="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", 0x3e9}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.parent_freezing\x00', 0x275a, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)={0x58, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x8800) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r7) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r8, &(0x7f0000009c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f00000004c0)=""/226, 0xe2}], 0x2}}], 0x1, 0x0, 0x0) 1.43950463s ago: executing program 4 (id=1592): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x60, 0x1, [@m_bpf={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0xadaf, 0x10000000, 0x7ff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$rfkill(r1, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x1, 0xff}, 0x8) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, 0x0, 0x404c051) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4c, '\x00', 0x0, r4, 0x0, 0x3}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000001080), 0x0, 0x10022, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.095131484s ago: executing program 2 (id=1593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) close(0xffffffffffffffff) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000540)={r4, @in6={{0xa, 0x4e23, 0x4, @empty, 0x40}}, 0x2, 0x19}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002ebd700002000000140000000c00018008000100", @ANYRESHEX=r0, @ANYBLOB="0e0003682c3fd3138632050000000f27f3a114000000119560abc692a05d6f58dad1de2a93d782abab77ecda648f8a2b17bbad06a365"], 0x30}, 0x1, 0x0, 0x0, 0x144}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d00)=ANY=[], 0x30}, 0x1, 0xff07}, 0x2000041) (async) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0x21, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) (async) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r9, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x9, 0x4, @remote, 0x9}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c00)="8000e8beec9dbc13670f156c7f1621a5c64fb206dd36c0378806eff252e94ec309d440e87c914fb5d0c154c0633f68d317939bdf0bc5456d5bb044f5d9b44fdebf0cd7d328afe6ddfcbdb2a47b8f140559773d54a88c17abc201e3f4262b48cd8e490812731139a244b69d9153901123984cc868db00d067cf2c61b18daba382f400ff610b241037597de7b10000000000000000007fe91218af8f2e084f", 0x9e}, {&(0x7f0000000f40)="2a3f402730658d3195eb10b4c14d7ae2e7b10bf19d0f6dd333a8dad01e2cac8eb9d5ce2ff723886291b356397db1ba3c899867831fb1d3052ae8225ae10cbc235500518f1c91296c79970d75e2335fa95f8bb4c113084d49cc66be8af49c3226432ffd029695a64d3241e14232f8a6b51c45ccfb460c9665ff77045f3f949625e6adb64ef406833da19177fc6d2df3c4a80d33cfc6ec8a26c4f74e289dbfbac41ce06be9287e3cd4e10682d49456615fbf57607fb17e6699ca6eeb58d5dec1ce339dfbeab4b3a5ff6086ce174bb436e3af2cd86e9e80d8b5da11723a3f75a6807c4b86df4ee7ae89f4eb0000000000000000001332650bc8ae8bb69b03fd4553082a781729aa1576b7a89c2384bf4664ee0df5549be4a878f09d1c337c", 0x11d}], 0x2, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], 0x18}, 0x4044000) (async) setsockopt$inet6_int(r8, 0x29, 0x11, &(0x7f0000000040)=0x3, 0x4) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000020100800c0001"], 0x114}], 0x1}, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f0000000240)={0x0, 0x20000007, 0x0, 0x1}) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f0000000640)={r11, 0x732c, 0xd, 0x1}) 1.089650173s ago: executing program 4 (id=1594): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000350901000000000a9500000000000000b7020000000000007b9af8ff00000000ae09020000000000dbaaf8ff50000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.045061728s ago: executing program 2 (id=1595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000800)=@sco={0x1f, @none}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r4, 0x83a0}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.035071856s ago: executing program 0 (id=1596): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000d00000093bc002b320909309495f8667a4b27f80ed493969a6fcced202a2d0f3b2a4863451566bf9307739cde07fc4863346299b91ad610b8eab291812f2031ecb72b"], 0x0, 0x26}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3ff}]}, 0x60}}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x6, 0x28, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x60}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x4a, &(0x7f00000003c0)=""/74, 0x40f00, 0x3, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x1, 0x18c9d50b, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa1c}, 0x94) 962.604712ms ago: executing program 3 (id=1597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 956.778132ms ago: executing program 0 (id=1598): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="ff00000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000bb2f4d2ba9da2c1623445bff783362a58c37e432de1ca6dda6e1cb0f6765b96eaa03536d1748800cbe8bf99d"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x2, 0x0, 0x0, 0xfffe}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x840000000002, 0x3, 0x100) socket(0x80000000000000a, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 918.301908ms ago: executing program 4 (id=1599): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000000c0)={0x3}) (async) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000000c0)={0x3}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x8001, 0x7}, &(0x7f0000000200)=0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)=@deltfilter={0x2d0, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x9, 0xfff2}, {0xa, 0xfff6}, {0x8, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x298, 0x2, [@TCA_CGROUP_ACT={0x294, 0x1, [@m_simple={0x11c, 0x9, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x67b, 0x2bc7, 0x10000000, 0x0, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4b0, 0xf36, 0x6, 0xffffff48, 0xe}}, @TCA_DEF_DATA={0x6, 0x3, '^\x00'}, @TCA_DEF_DATA={0x9, 0x3, '*(@%\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xa2, 0x6, "bffd8eaf81ca119430b6f12f987c75ef8cb21f9386a79abe77a29ea15787588fb38ced3804c748f58b5e36ff67f1edd5a217968851766214a44a3f83e062118b49fe19bcefea56d76a9859a2c823eef744fb2e160112d93a489b2a419a23c504af31bf8828dbae6620904b1f7a6dfca9202500e43e50c7cd4fc9993e9b30955a790e7ee1ab960a05b7db69a24d2efd4fc93d57a7a330e9cf2ee3df7d1d8c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x174, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x7, 0x10000000, 0x5c, 0x401}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xe812}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x0, 0x20000000, 0x6}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x735}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0xf8, 0x6, "710d1e15cb64a8fd45e627ce24ea6b90f5e501efd1f4238c773b5efda090172166a3cd8d7b663d9c40001b43770c78405bd8c15f7a4acb74d05d2d4086c51f639ff1f89d8bcea7081549985216cb8536a562ef29c1d08671efe2599b3b0ba4740625ab7939add277907ffbd50c6500f93cd1a2457c32eea6567387858bf6843ee85dc0c1e76b2e82a6aca465ef71d7eaf8c43c696b8c20485d5879c39a76a2f3a7cb382882a1751df0e3ad36134a96ff27db2f04996862034dd74679f80ed0fbe4e31c1cc69817d48da626e9638572aef3b3a9a6c8ae95da74b05b9509d40b5b75a8ce72d4e2699f4f5df88534e922a65e8a5b02"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}]}, 0x2d0}}, 0x4) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)=@deltfilter={0x2d0, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x9, 0xfff2}, {0xa, 0xfff6}, {0x8, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x298, 0x2, [@TCA_CGROUP_ACT={0x294, 0x1, [@m_simple={0x11c, 0x9, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x67b, 0x2bc7, 0x10000000, 0x0, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4b0, 0xf36, 0x6, 0xffffff48, 0xe}}, @TCA_DEF_DATA={0x6, 0x3, '^\x00'}, @TCA_DEF_DATA={0x9, 0x3, '*(@%\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xa2, 0x6, "bffd8eaf81ca119430b6f12f987c75ef8cb21f9386a79abe77a29ea15787588fb38ced3804c748f58b5e36ff67f1edd5a217968851766214a44a3f83e062118b49fe19bcefea56d76a9859a2c823eef744fb2e160112d93a489b2a419a23c504af31bf8828dbae6620904b1f7a6dfca9202500e43e50c7cd4fc9993e9b30955a790e7ee1ab960a05b7db69a24d2efd4fc93d57a7a330e9cf2ee3df7d1d8c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x174, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x7, 0x10000000, 0x5c, 0x401}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xe812}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x0, 0x20000000, 0x6}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x735}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0xf8, 0x6, "710d1e15cb64a8fd45e627ce24ea6b90f5e501efd1f4238c773b5efda090172166a3cd8d7b663d9c40001b43770c78405bd8c15f7a4acb74d05d2d4086c51f639ff1f89d8bcea7081549985216cb8536a562ef29c1d08671efe2599b3b0ba4740625ab7939add277907ffbd50c6500f93cd1a2457c32eea6567387858bf6843ee85dc0c1e76b2e82a6aca465ef71d7eaf8c43c696b8c20485d5879c39a76a2f3a7cb382882a1751df0e3ad36134a96ff27db2f04996862034dd74679f80ed0fbe4e31c1cc69817d48da626e9638572aef3b3a9a6c8ae95da74b05b9509d40b5b75a8ce72d4e2699f4f5df88534e922a65e8a5b02"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}]}, 0x2d0}}, 0x4) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000640)="fe1ca153cd6011b92ebfc9e7ab947c57d48a3699f5ebebb0e99e1cfb99ba06396944b0e9827a2c58b4f7fa8ecbdd9043d3db76f56587c4f703236712d2771a3e70bdcd126c5a22b945141e5fec4e7d510d06e59b7f4fccca66d4af28b2c5130502aa2751") getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000006c0)=@assoc_value, &(0x7f0000000700)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000006c0)=@assoc_value={0x0}, &(0x7f0000000700)=0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x1a, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='GPL\x00', 0xab, 0xd8, &(0x7f00000008c0)=""/216, 0x41000, 0x2, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[0x1, r1], 0x0, 0x10, 0x401}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r1}, &(0x7f0000000740), &(0x7f0000000b00)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r1}, &(0x7f0000000740), &(0x7f0000000b00)=r6}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000f00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000bc0)={0x2cc, 0x10, 0x100, 0x70bd25, 0x25dfdbff, {0x19}, [@nested={0x8, 0x99, 0x0, 0x1, [@nested={0x4, 0x10c}]}, @generic="ea94d795883c329e709a9ba97f6577bd50e4ec081fb40efbe418a2e395eb0b548aa2efd5d6881b173337530c93e7f0295ea826bbc2649c7f241515b9518eb42b988b3d8645d2bddc62f3846a43ab562c9bd05ef01449f9eb35f4c06e9f4ef0e3b8095054b7d3e8fd56b502cba20e3819547efb8af7ceaa214a07e23012028e0d3504ef78f86fc842e89852875f3701eff05fdc19b7ff072a19b20cd6493ff3fb8b1a9cd800a26433864fa06d1800647156a37ee2db330d72b79697b66fdc4096f71ca2", @nested={0x1e4, 0x146, 0x0, 0x1, [@generic="c892267c640fd4259259e5f358bd9869e471d63d90d4997baf317dae36e2ef9a03fd746bea27813192293d203c041bfaaf4c5b051ceab6a8ca89e7824f2d46979c3ddd3af8d5b12a9000fe8154ca68484d2352cd3cc193564d04e7cfc88c82b1e7a40e91dc581986719d915f8f08048d75bb07eeecf997385a0207e80c18dcb8a186a3b3c9ae4413e42a3785", @nested={0x4, 0x6d}, @typed={0x5, 0x13b, 0x0, 0x0, @str='\x00'}, @generic="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", @nested={0x4, 0x17}, @generic="98a1e5db1af558fd0934d02c38eda5deed9354f24c6697da76b044ff9f2c610342c65da54d5ac128c4322925f6cf0fe1ebe91c4089e8bd4a460780d1cd17ebca32c9fc2160"]}, @typed={0x7, 0xbf, 0x0, 0x0, @str='].\x00'}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x800}, 0x20000090) bind$bt_hci(r1, &(0x7f0000000f40)={0x1f, 0x4, 0x1}, 0x6) bind$l2tp(r6, &(0x7f0000000f80)={0x2, 0x0, @local, 0x4}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x60, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x5f}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfbc}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb1a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9f5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c8e1}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000001100)={0x2, 'veth1_to_bridge\x00', {0x8}, 0x7f7f}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000001140)=0x80000000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x24}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4c401) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001300), r1) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x840) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000001400)={r5, 0x4}, &(0x7f0000001440)=0x8) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x24008000) r10 = syz_genetlink_get_family_id$team(&(0x7f00000015c0), r1) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001880)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000001840)={&(0x7f0000001600)={0x228, r10, 0x300, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfff7, 0xe, 0x6, 0x89}, {0xd93, 0x6, 0x0, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xbed}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x228}, 0x1, 0x0, 0x0, 0x4080}, 0x1) connect$l2tp(r1, &(0x7f00000018c0)={0x2, 0x0, @broadcast, 0x1}, 0x10) 747.905816ms ago: executing program 4 (id=1600): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) 689.931898ms ago: executing program 3 (id=1601): r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @default, 0x0, [@bcast, @netrom, @netrom, @remote, @default, @null]}, &(0x7f0000000040)=0x40, 0x80800) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10, 0x80000) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x5, 0x6, 0xa, 0x0, 0x0, [{{r0}, 0x8000000000000001}, {{r0}, 0x48}, {{r0}, 0xad0390c}, {{r1}, 0x59db}, {{r0}, 0xdd42}, {{r2}, 0x8}, {{r0}, 0x7fffffffffffffff}, {{r0}, 0x8000000000000000}, {{r0}, 0x80000000}, {{r3}, 0x1149}]}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000380), 0x2, 0x0) r5 = accept4$inet(r4, &(0x7f00000003c0)={0x2, 0x0, @multicast2}, &(0x7f0000000400)=0x10, 0x80000) getsockopt$inet_buf(r5, 0x0, 0x23, &(0x7f0000000440)=""/73, &(0x7f00000004c0)=0x49) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000001580)={'filter\x00', 0x0, 0x4, 0x1000, [0x5, 0xa, 0x3, 0x400, 0x3, 0xa6], 0x7, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000580)=""/4096}, &(0x7f0000001600)=0x78) r6 = accept$unix(r4, 0x0, &(0x7f0000001640)) sendto$unix(r6, &(0x7f0000001680)="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", 0xff, 0x41, &(0x7f0000001780)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001800)={{{@in6=@private1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000001900)=0xe8) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000001940)={'wlan1\x00', @local}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001980), r4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000019c0)={@map=r2, r4, 0x35, 0x4, 0x0, @void, @value=r4}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000001a00)=[@mss={0x2, 0x8}], 0x1) r10 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r10, 0x80044943, &(0x7f0000001a40)) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000001a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000001cc0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x10}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000001d00)={'veth0_vlan\x00', {0x2, 0x4e20, @multicast1}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001dc0)={{r2, 0xffffffffffffffff}, &(0x7f0000001d40), &(0x7f0000001d80)='%-5lx \x00'}, 0x20) ioctl$EXT4_IOC_GROUP_EXTEND(r12, 0x40086607, &(0x7f0000001e00)=0x8) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000002280)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002240)={&(0x7f0000001e80)={0x384, 0x12, 0x10, 0x70bd2a, 0x25dfdbfc, {0xb, 0xbc, 0x67, 0x4, {0x4e20, 0x4e21, [0x3, 0x100, 0x0, 0x1], [0x7, 0x81, 0x9, 0x2], r7, [0x7, 0x9]}, 0x4, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "38e8588380d8d8bd105da918d6ac23e1448b54aec2fdc2457cc984a37cc4cabd24c254d4308b02f8a67b15d77a24251dba712dcb97b6df0cb9941bc59bafa47e0ee0c3f2b696060bca1292c160a9255582dbc2539706ac78af3268df2a0c91d382ce17d720759f3ca2db45a22f1b830b00c3a56ae1d8b61724497c3a6412300d576c08394b40e4476bd519d9a63e2c825eb9a95d02e2c6ac36e063b8603de810c6a491e92b29e98b69c6747b9ff084d2806ea00d242d8c540d9196b00bc0ba38559c721fb1baae1defe798c6d435666e7392a3075861d1a45f"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "a3262b8cc9b7b0516a31392d59dd333184baa891c3985b9278154aba27eed3fa231d7982f30d1aa90dea38b11d9beed1cd884f9355a171606e8c1d8cce0499506bcc15c918e1c89b8a0a1df22ab5ce1f81eb4014e612f92db131dca6ab59edeeabaa8e3cfae1223a21567ac376e2e019c214c024a616d859dd125290d1f10e9a416108e68fa37efdcb52bc0e864ce2593a430c69f602021ce296502d340d60f36645bd49c894170e0a4296a4c2ec2cae3825d53dd38488f99fc10be83c9998b6e251acc41187b35f328d7f4c579893fe3fb4a1667ace91db875cc85244fb92"}, @INET_DIAG_REQ_BYTECODE={0xec, 0x1, "08bd1187e9ca4eb9bb6a88320f194ad71b87a2c28c8f76770f335a94e16172fdfa992532fef9d33197c1fcc3964856973b453e9628468e0e5b2a79ef180ee0cdb88243214e57ca1a72062c0bd80b48d32524ad9e21aebce0fa8ed86e7a96f767af5801dc2d9890063fd8b10131e936541463f9d88ae2ab314807598fd6e0b870421f118ff91f051204d6ef4dacb0165ae4f1c3d35eeb6dea7cc9ba52ab6c44a47eef966a3bbc6a677e15f0deccb6b7a98d65c47a94d75f8b4a16a07dfd98e09a8204fbc25dac28a759337dadd87288e07f7323c89e5d5c407191aabc18e9c8f3698a93c3b153cc49"}, @INET_DIAG_REQ_BYTECODE={0x17, 0x1, "005b18332c0f64f65f77642966810dcb7987ef"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "825f7f9d4f7e39eebfc1bed436d16504b3cbec77e09e1852961800cf0e98a5681db63bb5b84d8bbe74e0c0465c1362b1346e7fd2c368273281c125d1a75d9cc12dffdffdfa5db91c05fa45d751b3e408d6da2d3f82a84b2af98ed3429c85b974901660fc4b001d9d50c981"}]}, 0x384}, 0x1, 0x0, 0x0, 0x40810}, 0x4000084) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000023c0)={@fallback=r8, 0xf9b3d3f00bb81d22, 0x1, 0x3, &(0x7f00000022c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000002300)=[0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0], &(0x7f0000002380)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002400)={@cgroup=r4, r10, 0xb, 0x20, 0x0, @void, @void, @void, @value, r13}, 0x20) 644.428648ms ago: executing program 2 (id=1602): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x64}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) 476.521215ms ago: executing program 2 (id=1603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010f80)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="010000002100000000000000000000008580000075220000a500000023000000a9"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x3d, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet(0xa, 0x801, 0x0) sendmsg$sock(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[], 0x68}}, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100000000e0a01010001000000000000010000020900021073797a32000000000900010073797a3012e44fd6a6e5080ad749000000140000001100010000000000000000000084000a00000000000000000000000000001700f6aea8da18fef2526365fa40cef8d9a47de0ad0e1d693a47c7d1380f9bbc"], 0x54}}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000002000000000000000500000018450000fdffffff000000000000000018110000634624f3f2b8c90f738071f99f80a5c99b6ef83946273b98ba57bb6ca4b4b0eccadf", @ANYRES32=r6, @ANYRES16=r1], &(0x7f0000000140)='GPL\x00', 0x5, 0xc, &(0x7f0000000500)=""/12, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000400)=[0x1], &(0x7f0000000680)=[{0x4, 0x2, 0x3, 0x8}, {0x4, 0x1, 0xc, 0x3}, {0x1, 0x1, 0x2e, 0x3468c2186a0793f2}, {0x5, 0x3, 0x8, 0xb}, {0x5, 0x3, 0x5, 0xb}, {0x4, 0x3, 0x0, 0xb}, {0x0, 0x40003, 0x4, 0x6}, {0x0, 0x2, 0xc, 0x3}, {0x0, 0x1, 0x2, 0x8}], 0x10, 0x2}, 0x94) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r8, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x400013b, 0x20046054) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r8) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@o_path={&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7}, 0x18) socket(0x1e, 0x5, 0x0) 394.699605ms ago: executing program 3 (id=1604): r0 = socket(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x8, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x10}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000002c0), &(0x7f0000000300)=@tcp=r1}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)={0x14, 0x14, 0xa01, 0x70bd2d, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000240)=0x8003, 0x4) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x2, 0x8003b) sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x20000, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r6, 0x100000000) close(0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) 255.294295ms ago: executing program 1 (id=1605): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000071109600000000009500000000000000b22a7ce456bbbb66cba726860f716b6317085cd6a9ea4523f1c8d5e9b13cbb6f2682db7561b4f6324539dce5a6a0d84eaed29bddab61b7b0362ad25a5ffbc5fc88"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000200)=""/185, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000974000/0x2000)=nil, 0x2000, 0xdfdddf82b84cc70e, 0x28011, r3, 0x59e1d000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000000c0)='console\x00', r6}, 0x18) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)="59cd2b9a", 0x4}, 0x1, 0x0, 0x0, 0x4000}, 0x24008046) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 243.274496ms ago: executing program 4 (id=1606): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) 166.570638ms ago: executing program 3 (id=1607): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0x43, 0x7f, 0x1, 0x1, 0x3b}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0xe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000a20000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000100"/28], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009400000000588000880"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc06410}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x58, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x3a71680f64d50cf6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x89, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x4f, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1, @private2, [], "9f26a206417821e15efc5e939d07cf5132b591bd5fc2d053c1d443fe935769"}}}}}}}, 0x0) unshare(0x20400) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r10, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x20, r11, 0x4}, 0x38) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf25000000ff", @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 129.865185ms ago: executing program 2 (id=1608): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) (fail_nth: 2) 0s ago: executing program 4 (id=1609): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000350901000000000c9500000000000000b7020000000000007b9af8ff00000000ae09020000000000dbaaf8ff50000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): type 13 has an invalid length. [ 83.739415][ T6000] netlink: 'syz.2.11': attribute type 17 has an invalid length. [ 83.779286][ T5835] Bluetooth: hci4: command tx timeout [ 83.797339][ T5988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.192980][ T6000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.206875][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 84.228881][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 84.294438][ T5988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.525566][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.568375][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.656978][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.679377][ T6023] Bluetooth: MGMT ver 1.23 [ 84.685231][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.707712][ T6023] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.760845][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.853584][ T2956] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.007416][ T60] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.097058][ T6031] tap0: tun_chr_ioctl cmd 1074025677 [ 85.125863][ T6031] tap0: linktype set to 776 [ 85.139523][ T60] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.514650][ T6044] veth1_macvtap: left promiscuous mode [ 85.629489][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 85.658389][ T6054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19'. [ 85.749305][ T6044] veth0_virt_wifi: renamed from macsec0 [ 85.813365][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 85.823828][ T6056] warning: `syz.1.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.881579][ T6058] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 86.417800][ T6076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24'. [ 86.743444][ T9] cfg80211: failed to load regulatory.db [ 87.820056][ T6131] netlink: 'syz.2.35': attribute type 4 has an invalid length. [ 87.851822][ T6131] netlink: 17 bytes leftover after parsing attributes in process `syz.2.35'. [ 88.166524][ T6149] tc_dump_action: action bad kind [ 88.413538][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 88.825470][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.44'. [ 88.835147][ T6173] syz.4.43 uses obsolete (PF_INET,SOCK_PACKET) [ 88.929456][ T6173] Illegal XDP return value 514 on prog (id 25) dev syzkaller1, expect packet loss! [ 89.294276][ T6188] netlink: 'syz.1.48': attribute type 29 has an invalid length. [ 89.534734][ T6187] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.216128][ T5500] veth1_macvtap: entered promiscuous mode [ 90.264443][ T6224] netlink: 64 bytes leftover after parsing attributes in process `syz.0.46'. [ 90.931833][ T6252] netlink: 32 bytes leftover after parsing attributes in process `syz.1.59'. [ 91.093698][ T6257] netlink: 'syz.2.61': attribute type 2 has an invalid length. [ 91.188030][ T6265] netlink: 36 bytes leftover after parsing attributes in process `syz.0.62'. [ 91.593320][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 91.671282][ T6282] veth2: entered promiscuous mode [ 91.835067][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 91.873056][ T6294] netlink: 'syz.2.68': attribute type 11 has an invalid length. [ 91.894348][ T6298] netlink: 'syz.1.69': attribute type 1 has an invalid length. [ 91.944235][ T6294] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.68'. [ 92.100696][ T6308] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 92.137060][ T6308] netlink: 240 bytes leftover after parsing attributes in process `syz.3.71'. [ 92.175495][ T6301] erspan1: entered allmulticast mode [ 92.891923][ T6333] __nla_validate_parse: 4 callbacks suppressed [ 92.891943][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 92.920768][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 93.561036][ T6350] syzkaller0: entered promiscuous mode [ 93.582375][ T6350] syzkaller0: entered allmulticast mode [ 93.681981][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 93.854157][ T6364] sctp: [Deprecated]: syz.2.83 (pid 6364) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.854157][ T6364] Use struct sctp_sack_info instead [ 93.943513][ T6369] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.85'. [ 94.404410][ T6375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.571921][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 94.647572][ T6375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.684853][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.88'. [ 94.796495][ T6375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.995792][ T6375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.119847][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.91'. [ 95.145460][ T9] IPVS: starting estimator thread 0... [ 95.223328][ T3424] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.238693][ T6397] IPVS: using max 31 ests per chain, 74400 per kthread [ 95.337252][ T3424] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.445311][ T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.448483][ T6414] IPv6: Can't replace route, no match found [ 95.469075][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.522908][ T6414] netlink: 48 bytes leftover after parsing attributes in process `syz.3.98'. [ 95.571814][ T6417] netlink: 'syz.0.99': attribute type 1 has an invalid length. [ 95.664947][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 95.674921][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 95.839212][ T6428] Cannot find set identified by id 0 to match [ 97.519874][ T6496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.558835][ T6496] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 97.585730][ T6496] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 98.215611][ T6522] __nla_validate_parse: 2 callbacks suppressed [ 98.215631][ T6522] netlink: 152 bytes leftover after parsing attributes in process `syz.2.122'. [ 98.397953][ T6531] netlink: 32 bytes leftover after parsing attributes in process `syz.1.125'. [ 98.421697][ T6525] batadv1: entered promiscuous mode [ 98.427763][ T6530] netlink: 'syz.4.126': attribute type 2 has an invalid length. [ 98.517261][ T6533] netlink: 'syz.4.126': attribute type 2 has an invalid length. [ 98.677484][ T6530] !: entered promiscuous mode [ 98.688696][ T6533] !: left promiscuous mode [ 99.157189][ T6554] netlink: 'syz.3.130': attribute type 3 has an invalid length. [ 100.375448][ T6593] openvswitch: netlink: IP tunnel dst address not specified [ 100.416151][ T6588] vxlan0: entered promiscuous mode [ 100.458486][ T6588] vxlan0: entered allmulticast mode [ 100.469282][ T2956] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.509307][ T2956] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.514041][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.542187][ T2956] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.580928][ T2956] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.724367][ T6600] netlink: 'syz.4.139': attribute type 3 has an invalid length. [ 101.264512][ T6615] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 101.545575][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.300224][ T6640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.603422][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.149'. [ 102.623669][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.733001][ T6651] netlink: 52 bytes leftover after parsing attributes in process `syz.4.149'. [ 102.831697][ T6647] netlink: 'syz.4.149': attribute type 1 has an invalid length. [ 102.899215][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.939944][ T6647] netlink: 224 bytes leftover after parsing attributes in process `syz.4.149'. [ 103.742499][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.019148][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.609348][ T6697] trusted_key: syz.1.157 sent an empty control message without MSG_MORE. [ 104.823410][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.300203][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.558866][ T6737] syzkaller0: entered promiscuous mode [ 105.608300][ T6737] syzkaller0: entered allmulticast mode [ 105.864200][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.939291][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.654358][ T6758] xt_TCPMSS: Only works on TCP SYN packets [ 106.891023][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 106.935827][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.060938][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.272263][ T795] IPVS: starting estimator thread 0... [ 107.378434][ T6785] IPVS: using max 33 ests per chain, 79200 per kthread [ 107.569891][ T6797] geneve2: entered promiscuous mode [ 107.693349][ T6802] netlink: 'syz.3.176': attribute type 10 has an invalid length. [ 107.761441][ T6802] team0: Port device dummy0 added [ 107.761555][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 107.949484][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.468829][ T6799] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 108.529205][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.676123][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 108.707731][ T6840] netlink: 'syz.1.184': attribute type 39 has an invalid length. [ 108.803421][ T6842] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 108.989540][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.079015][ T6857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.187'. [ 109.232758][ T6862] netlink: 27 bytes leftover after parsing attributes in process `syz.3.188'. [ 109.571710][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 109.595280][ T6873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.190'. [ 109.799078][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.813742][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 109.828419][ T6873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.190'. [ 110.026295][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.072592][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.333877][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.343748][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.392709][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.450534][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.528100][ T6917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.198'. [ 111.551025][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.606992][ T6919] netlink: 'syz.2.200': attribute type 6 has an invalid length. [ 111.625851][ T6917] ip6gre1: entered promiscuous mode [ 111.641842][ T6917] ip6gre1: entered allmulticast mode [ 111.695624][ T6927] netlink: 'syz.2.200': attribute type 6 has an invalid length. [ 111.948582][ T6942] netlink: 'syz.4.202': attribute type 61 has an invalid length. [ 112.104001][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.314046][ T6957] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 112.800460][ T6973] tipc: Started in network mode [ 112.805922][ T6973] tipc: Node identity a697e9dc68bc, cluster identity 4711 [ 112.834984][ T6973] tipc: Enabled bearer , priority 0 [ 112.864883][ T6973] veth0_to_bond: entered allmulticast mode [ 112.990654][ T6971] tipc: Disabling bearer [ 113.002912][ T6982] Bluetooth: MGMT ver 1.23 [ 113.013756][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.161807][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.312731][ T6996] netlink: 48 bytes leftover after parsing attributes in process `syz.1.214'. [ 113.452344][ T6992] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 113.637447][ T7006] syzkaller0: entered promiscuous mode [ 113.668507][ T7006] syzkaller0: entered allmulticast mode [ 113.771228][ T7007] syzkaller0: mtu greater than device maximum [ 114.197862][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.578596][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.658646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.739803][ T7018] kthread_run failed with err -4 [ 114.961918][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 115.164777][ T7043] tipc: Started in network mode [ 115.198726][ T7043] tipc: Node identity 2edb4294d287, cluster identity 4711 [ 115.207496][ T7043] tipc: Enabled bearer , priority 0 [ 115.233478][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.382879][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 115.439702][ T7066] netlink: 548 bytes leftover after parsing attributes in process `syz.3.221'. [ 115.474103][ T7068] netlink: 64 bytes leftover after parsing attributes in process `syz.4.224'. [ 115.487795][ T7068] netlink: 84 bytes leftover after parsing attributes in process `syz.4.224'. [ 115.906252][ T7043] netlink: 'syz.3.221': attribute type 29 has an invalid length. [ 115.956840][ T7052] veth5: entered allmulticast mode [ 116.023867][ T7039] tipc: Disabling bearer [ 116.086268][ T7044] netlink: 'syz.3.221': attribute type 29 has an invalid length. [ 116.110680][ T7076] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.229'. [ 116.264115][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.425995][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 116.472189][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 116.680456][ T7099] hsr_slave_1 (unregistering): left promiscuous mode [ 116.818585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.840952][ T7107] syzkaller0: entered promiscuous mode [ 116.868724][ T7107] syzkaller0: entered allmulticast mode [ 117.980491][ T7141] syz.3.244 (7141) used greatest stack depth: 16352 bytes left [ 118.099138][ C0] net_ratelimit: 3 callbacks suppressed [ 118.099155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.175564][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 118.212595][ T7163] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 118.355482][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.374494][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.249'. [ 118.427423][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 118.739640][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.053875][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 119.183133][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 119.384529][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.752854][ T7227] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 119.809102][ T7232] xt_ecn: cannot match TCP bits for non-tcp packets [ 120.250284][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 120.381720][ T7251] netlink: 7 bytes leftover after parsing attributes in process `syz.3.271'. [ 120.430970][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.937937][ T7268] netlink: 236 bytes leftover after parsing attributes in process `syz.3.276'. [ 120.973773][ T7271] netlink: 64 bytes leftover after parsing attributes in process `syz.2.275'. [ 121.083010][ T7280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'. [ 121.175522][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.464086][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.788866][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.857002][ T7312] Cannot find add_set index 2 as target [ 121.880980][ T7314] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.289'. [ 122.236969][ T7328] No such timeout policy "syz0" [ 122.504585][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.805232][ T7317] infiniband syû: set active [ 122.838428][ T7317] infiniband syû: added bond_slave_0 [ 122.847315][ T7317] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 122.905144][ T7317] infiniband syû: Couldn't open port 1 [ 123.027973][ T7317] RDS/IB: syû: added [ 123.035497][ T7317] smc: adding ib device syû with port count 1 [ 123.070886][ T7317] smc: ib device syû port 1 has no pnetid [ 123.219304][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.277805][ T7351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.568283][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.882359][ T7370] __nla_validate_parse: 1 callbacks suppressed [ 123.882381][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 124.244261][ T7377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.252887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.279523][ T7377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.289445][ T1332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.298035][ T1332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.308684][ T7377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.584008][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.847287][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 125.390780][ T7398] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 125.468580][ T7398] bond1 (unregistering): Released all slaves [ 125.833795][ T7414] netlink: 48 bytes leftover after parsing attributes in process `syz.0.313'. [ 125.979460][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 126.182915][ T7421] lo: entered allmulticast mode [ 126.222659][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 126.254519][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 126.256858][ T7424] : entered promiscuous mode [ 126.295563][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 126.310731][ T7424] netlink: 'syz.0.317': attribute type 1 has an invalid length. [ 126.389798][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 126.413212][ T7424] bond1: entered promiscuous mode [ 126.458902][ T7424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.475938][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 126.498490][ T7420] lo: left allmulticast mode [ 126.546746][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 126.774981][ T7412] wg1 speed is unknown, defaulting to 1000 [ 126.782478][ T7412] wg1 speed is unknown, defaulting to 1000 [ 126.822722][ T7412] wg1 speed is unknown, defaulting to 1000 [ 126.861109][ T7412] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.987693][ T7412] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 127.101220][ T7412] wg1 speed is unknown, defaulting to 1000 [ 127.120286][ T7412] wg1 speed is unknown, defaulting to 1000 [ 127.128068][ T7412] wg1 speed is unknown, defaulting to 1000 [ 127.211352][ T7412] wg1 speed is unknown, defaulting to 1000 [ 127.284971][ T7412] wg1 speed is unknown, defaulting to 1000 [ 127.574449][ T7445] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 128.191499][ T7462] netlink: 'syz.0.328': attribute type 39 has an invalid length. [ 128.361591][ T7469] net_ratelimit: 6 callbacks suppressed [ 128.361612][ T7469] openvswitch: netlink: Missing valid actions attribute. [ 128.407150][ T7469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.744260][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.906150][ T7491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.915109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.939880][ T7491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.948498][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.961132][ T7491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.969648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.979231][ T7496] __nla_validate_parse: 4 callbacks suppressed [ 128.979248][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.338'. [ 129.346694][ T7489] netlink: 48 bytes leftover after parsing attributes in process `syz.0.335'. [ 129.389297][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.597884][ T7512] x_tables: unsorted entry at hook 2 [ 129.665286][ T7515] ip6gretap1: entered allmulticast mode [ 129.724858][ T7522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.343'. [ 129.857596][ T7531] xt_time: unknown flags 0xf4 [ 130.083635][ T7536] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 130.098560][ T7536] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 130.140313][ T7536] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 130.193106][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 130.483865][ T7540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'. [ 130.654146][ T7567] netlink: 68 bytes leftover after parsing attributes in process `syz.0.356'. [ 130.675153][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 130.720679][ T7568] macsec1: entered promiscuous mode [ 130.749349][ T7568] macsec1: entered allmulticast mode [ 130.930754][ T7577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.357'. [ 131.027366][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 131.415198][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 132.728639][ T7642] netlink: 'syz.4.376': attribute type 33 has an invalid length. [ 132.824219][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.459299][ T7636] wg1 speed is unknown, defaulting to 1000 [ 133.470671][ T5896] net_ratelimit: 25 callbacks suppressed [ 133.470689][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.938936][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.024641][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.138041][ T7681] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 134.178810][ T7681] bond2: entered promiscuous mode [ 134.184471][ T7681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.385268][ T7647] wg1 speed is unknown, defaulting to 1000 [ 134.489354][ T7659] wg1 speed is unknown, defaulting to 1000 [ 134.518855][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.582713][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.648003][ T7678] wg1 speed is unknown, defaulting to 1000 [ 134.881414][ T7698] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 135.078292][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.521212][ T7712] netlink: 'syz.1.392': attribute type 4 has an invalid length. [ 135.528818][ T7713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.537569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.551627][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.558629][ T7713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.694711][ T7718] __nla_validate_parse: 6 callbacks suppressed [ 135.694729][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 135.712889][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 135.722270][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 135.731889][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 135.741488][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 135.752356][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 135.790972][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 135.807689][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 135.817485][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 135.827496][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 137.174159][ T7729] wg1 speed is unknown, defaulting to 1000 [ 137.262921][ T7768] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 137.312692][ T7769] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 137.459485][ T7767] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.468960][ T7767] bond2: (slave bond3): making interface the new active one [ 137.477835][ T7767] bond2: (slave bond3): Enslaving as an active interface with an up link [ 137.507722][ T7768] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.516787][ T7768] bond2: (slave bond4): Enslaving as a backup interface with an up link [ 137.540540][ T7775] ip6gre1: left promiscuous mode [ 137.558085][ T7769] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 137.567741][ T7773] syzkaller0: entered promiscuous mode [ 137.577891][ T7773] syzkaller0: entered allmulticast mode [ 137.643121][ T7742] wg1 speed is unknown, defaulting to 1000 [ 138.189676][ T7796] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 138.242886][ T7796] batman_adv: batadv0: Adding interface: gretap2 [ 138.257471][ T7796] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.291777][ T7796] batman_adv: batadv0: Interface activated: gretap2 [ 138.668700][ T5896] net_ratelimit: 11 callbacks suppressed [ 138.668719][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.106336][ T7801] wg1 speed is unknown, defaulting to 1000 [ 139.219283][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.245925][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.434564][ T7828] netlink: 'syz.1.422': attribute type 11 has an invalid length. [ 139.704600][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.789691][ T7847] netlink: 'syz.2.427': attribute type 16 has an invalid length. [ 140.146518][ T7851] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.174488][ T7851] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.201335][ T7853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.210257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.261920][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.357372][ T7853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.367795][ T2980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.457938][ T7853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.542152][ T7863] No such timeout policy "syz0" [ 140.585057][ T7851] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.609738][ T7851] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.714604][ T7851] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.750413][ T7851] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.961592][ T7851] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.998916][ T7851] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.202288][ T73] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.229265][ T73] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.279538][ T73] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.366531][ T73] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.393959][ T73] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.403263][ T73] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.436078][ T73] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.445288][ T73] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.479880][ T7856] wg1 speed is unknown, defaulting to 1000 [ 141.624329][ T7887] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 141.915445][ T7893] team0 (unregistering): Port device team_slave_0 removed [ 141.949658][ T7893] team0 (unregistering): Port device team_slave_1 removed [ 141.983071][ T7893] team0 (unregistering): Port device dummy0 removed [ 142.005473][ T7860] wg1 speed is unknown, defaulting to 1000 [ 142.290378][ T7912] netlink: 'syz.0.443': attribute type 1 has an invalid length. [ 142.643761][ T7925] tipc: Started in network mode [ 142.658643][ T7925] tipc: Node identity a2363a9f5329, cluster identity 4711 [ 142.685877][ T7925] tipc: Enabled bearer , priority 0 [ 142.794160][ T7926] syzkaller0: entered promiscuous mode [ 142.805068][ T7926] syzkaller0: entered allmulticast mode [ 142.811460][ T7926] tipc: Resetting bearer [ 143.017297][ T7924] tipc: Resetting bearer [ 143.238679][ T7946] __nla_validate_parse: 32 callbacks suppressed [ 143.238698][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 143.523417][ T7957] No such timeout policy "syz0" [ 143.574532][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 143.700324][ T795] net_ratelimit: 11 callbacks suppressed [ 143.700344][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.862761][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.434523][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.809412][ T7924] tipc: Disabling bearer [ 144.820165][ T10] tipc: Node number set to 4045355679 [ 144.835215][ T7930] wg1 speed is unknown, defaulting to 1000 [ 144.898428][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 144.905947][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.979547][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.989233][ T7972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.998401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.299025][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.330328][ T7928] wg1 speed is unknown, defaulting to 1000 [ 145.475334][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.612257][ T7988] netlink: 'syz.1.461': attribute type 16 has an invalid length. [ 145.621336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.074934][ T7992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.463'. [ 146.165891][ T7980] wg1 speed is unknown, defaulting to 1000 [ 146.986893][ T8010] tipc: Enabled bearer , priority 0 [ 147.014746][ T8009] netlink: 44 bytes leftover after parsing attributes in process `syz.4.469'. [ 147.016044][ T8013] syzkaller0: entered promiscuous mode [ 147.057671][ T8013] syzkaller0: entered allmulticast mode [ 147.111432][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'. [ 147.259584][ T8009] tipc: Resetting bearer [ 147.282345][ T8008] tipc: Resetting bearer [ 147.471661][ T8008] tipc: Disabling bearer [ 147.494296][ T8020] netlink: 48 bytes leftover after parsing attributes in process `syz.3.472'. [ 147.544192][ T8001] wg1 speed is unknown, defaulting to 1000 [ 148.793595][ T8062] syzkaller0: entered promiscuous mode [ 148.803136][ T8062] syzkaller0: entered allmulticast mode [ 148.937235][ T5896] IPVS: starting estimator thread 0... [ 148.960734][ T8067] net_ratelimit: 10 callbacks suppressed [ 148.960753][ T8067] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 148.996053][ T8067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.022037][ T8048] wg1 speed is unknown, defaulting to 1000 [ 149.038291][ T8072] IPVS: using max 40 ests per chain, 96000 per kthread [ 149.061133][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.143111][ T8076] netlink: 'syz.0.485': attribute type 5 has an invalid length. [ 149.161839][ T8076] netlink: 'syz.0.485': attribute type 39 has an invalid length. [ 149.345083][ T8078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.486'. [ 149.415873][ T8056] wg1 speed is unknown, defaulting to 1000 [ 149.459006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.470322][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.632051][ T8089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.489'. [ 149.633248][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.643541][ T8089] netlink: 'syz.1.489': attribute type 4 has an invalid length. [ 149.658150][ T8089] netlink: 64 bytes leftover after parsing attributes in process `syz.1.489'. [ 149.678819][ T8089] block nbd0: not configured, cannot reconfigure [ 149.708826][ T8089] netlink: 68 bytes leftover after parsing attributes in process `syz.1.489'. [ 150.102785][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.131661][ T8093] netlink: 'syz.2.491': attribute type 1 has an invalid length. [ 150.675266][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.139946][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.695495][ T8093] wg1 speed is unknown, defaulting to 1000 [ 151.703480][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.121304][ T8132] netlink: 48 bytes leftover after parsing attributes in process `syz.3.499'. [ 152.367353][ T8126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.486239][ T8126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.603849][ T8126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.733918][ T8126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.768478][ T8116] wg1 speed is unknown, defaulting to 1000 [ 152.993031][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 153.017435][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.073186][ T8154] bridge_slave_1: left allmulticast mode [ 153.087026][ T8154] bridge_slave_1: left promiscuous mode [ 153.096878][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.125501][ T8154] bridge_slave_0: left allmulticast mode [ 153.141797][ T8154] bridge_slave_0: left promiscuous mode [ 153.155777][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.359940][ T8139] wg1 speed is unknown, defaulting to 1000 [ 153.360093][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.480472][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'. [ 153.588827][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.708938][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.015385][ T8180] netlink: 'syz.0.508': attribute type 142 has an invalid length. [ 154.112924][ T8182] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 154.173618][ T8182] bond1 (unregistering): Released all slaves [ 154.276071][ T979] net_ratelimit: 8 callbacks suppressed [ 154.276089][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.374964][ T8169] wg1 speed is unknown, defaulting to 1000 [ 154.749563][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.860873][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.930542][ T8214] netlink: 'syz.2.513': attribute type 16 has an invalid length. [ 154.949551][ T8201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.514'. [ 154.952019][ T8214] netlink: 'syz.2.513': attribute type 17 has an invalid length. [ 155.004433][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.013171][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.078361][ T8214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.133991][ T8216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.515'. [ 155.209969][ T8221] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.517'. [ 155.222583][ T8221] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 155.302206][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.538580][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.867405][ T8241] tipc: Enabling of bearer rejected, failed to enable media [ 155.878543][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.910464][ T8246] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 155.934822][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 155.951549][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.012988][ T8246] nbd: couldn't find device at index 536870912 [ 156.068583][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 156.155929][ T8232] wg1 speed is unknown, defaulting to 1000 [ 156.172462][ T8257] netlink: 'syz.2.525': attribute type 1 has an invalid length. [ 156.347538][ T8262] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 156.358393][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.390270][ T8262] netlink: 224 bytes leftover after parsing attributes in process `syz.0.527'. [ 156.527419][ T8268] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 156.778111][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 157.012557][ T8280] netlink: 'syz.0.533': attribute type 1 has an invalid length. [ 157.098700][ T8280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.193108][ T8281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.200441][ T8281] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.212134][ T8281] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 157.254411][ T8266] wg1 speed is unknown, defaulting to 1000 [ 157.255816][ T8269] netlink: 'syz.1.528': attribute type 23 has an invalid length. [ 157.479529][ T8299] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 157.562449][ T8299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.599352][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 157.600984][ T8305] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.759264][ T8305] vlan2: entered allmulticast mode [ 157.774630][ T8305] ip6gretap0: entered allmulticast mode [ 157.781948][ T8305] bond4: (slave vlan2): Error -34 calling dev_set_mtu [ 157.913195][ T8317] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 157.921145][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'. [ 158.122464][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 158.160495][ T8299] bond1 (unregistering): Released all slaves [ 158.173951][ T8328] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 158.686281][ T8349] pimreg: entered allmulticast mode [ 158.755640][ T8353] pimreg: left allmulticast mode [ 158.904115][ T8359] batman_adv: batadv0: Adding interface: dummy0 [ 158.928598][ T8359] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.039289][ T8359] batman_adv: batadv0: Interface activated: dummy0 [ 159.258360][ T8380] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 159.309293][ T8380] nbd: couldn't find device at index 536870912 [ 159.394123][ T8390] netlink: 'syz.4.558': attribute type 1 has an invalid length. [ 159.460195][ T979] net_ratelimit: 10 callbacks suppressed [ 159.460214][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.526631][ T8392] netlink: 'syz.3.561': attribute type 1 has an invalid length. [ 159.561458][ T8396] netlink: 'syz.1.560': attribute type 61 has an invalid length. [ 159.572971][ T8396] veth0: entered promiscuous mode [ 159.746898][ T8404] bond5: Unable to set down delay as MII monitoring is disabled [ 159.760329][ T8404] bond5 (unregistering): Released all slaves [ 160.101896][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.315907][ T8403] wg1 speed is unknown, defaulting to 1000 [ 160.383218][ T8395] veth0: left promiscuous mode [ 160.519439][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.031345][ T8458] __nla_validate_parse: 7 callbacks suppressed [ 161.031364][ T8458] netlink: 48 bytes leftover after parsing attributes in process `syz.0.574'. [ 161.140595][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.245919][ T8462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.267061][ T8462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.276317][ T8462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.322249][ T8462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.378458][ T8462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.418150][ T8462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.812997][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 162.796662][ T8559] netlink: 'syz.0.594': attribute type 11 has an invalid length. [ 162.945073][ T8566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.597'. [ 162.973738][ T8568] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 162.991510][ T8570] netlink: 'syz.4.598': attribute type 2 has an invalid length. [ 163.062505][ T8570] : entered promiscuous mode [ 163.271622][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 163.505795][ T8590] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 163.531418][ T8590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'. [ 163.769434][ T8600] netlink: 'syz.4.607': attribute type 39 has an invalid length. [ 163.811828][ T8574] wg1 speed is unknown, defaulting to 1000 [ 163.996435][ T8607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.609'. [ 164.167300][ T8614] netlink: 'syz.2.612': attribute type 4 has an invalid length. [ 164.181925][ T8612] IPVS: set_ctl: invalid protocol: 45 172.20.20.38:20001 [ 164.353288][ T8577] wg1 speed is unknown, defaulting to 1000 [ 164.658817][ T979] net_ratelimit: 11 callbacks suppressed [ 164.658834][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.678597][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.775429][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 164.983721][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.259771][ T8635] nbd3: detected capacity change from 0 to 63 [ 165.279041][ T8641] block nbd3: NBD_DISCONNECT [ 165.286180][ T8641] block nbd3: Disconnected due to user request. [ 165.300071][ T8641] block nbd3: shutting down sockets [ 165.349873][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.359689][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 165.387575][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.388562][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.405350][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 165.414763][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.424462][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 165.432467][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.441989][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 165.458540][ T5839] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.519277][ T5839] Buffer I/O error on dev nbd3, logical block 0, async page read [ 165.527166][ T5839] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.574923][ T5839] Buffer I/O error on dev nbd3, logical block 1, async page read [ 165.599338][ T5839] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.629768][ T5839] Buffer I/O error on dev nbd3, logical block 2, async page read [ 165.637628][ T5839] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.677901][ T5839] Buffer I/O error on dev nbd3, logical block 3, async page read [ 165.688583][ T5839] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.698769][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.718228][ T5839] Buffer I/O error on dev nbd3, logical block 0, async page read [ 165.736254][ T5839] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.749609][ T5839] Buffer I/O error on dev nbd3, logical block 1, async page read [ 165.761753][ T5839] ldm_validate_partition_table(): Disk read failed. [ 165.774694][ T5839] Dev nbd3: unable to read RDB block 0 [ 165.809899][ T5839] nbd3: unable to read partition table [ 165.836126][ T5839] ldm_validate_partition_table(): Disk read failed. [ 165.843939][ T5839] Dev nbd3: unable to read RDB block 0 [ 165.856818][ T5839] nbd3: unable to read partition table [ 165.990063][ T8675] netlink: 200 bytes leftover after parsing attributes in process `syz.2.625'. [ 166.165146][ T8693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.227658][ T8696] netlink: 48 bytes leftover after parsing attributes in process `syz.3.630'. [ 166.282655][ T8696] netlink: 68 bytes leftover after parsing attributes in process `syz.3.630'. [ 166.331530][ T8700] syzkaller0: entered promiscuous mode [ 166.336206][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 166.343387][ T8700] syzkaller0: entered allmulticast mode [ 166.430459][ T8696] hsr_slave_0: left promiscuous mode [ 166.433094][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.444146][ T8696] hsr_slave_1: left promiscuous mode [ 166.476980][ T8700] tipc: Started in network mode [ 166.488011][ T8700] tipc: Node identity 8ed97c9164ed, cluster identity 4711 [ 166.507586][ T8700] tipc: Enabled bearer , priority 0 [ 166.696213][ T8717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.733425][ T8698] tipc: Resetting bearer [ 166.739919][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.819623][ T8698] tipc: Disabling bearer [ 167.040533][ T8732] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 167.084588][ T8732] netlink: 44 bytes leftover after parsing attributes in process `syz.1.642'. [ 167.102332][ T8732] netlink: 60 bytes leftover after parsing attributes in process `syz.1.642'. [ 167.160450][ T8738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.384131][ T8745] netem: incorrect ge model size [ 167.413303][ T8745] netem: change failed [ 167.630780][ T8729] wg1 speed is unknown, defaulting to 1000 [ 167.754980][ T8766] syzkaller0: entered promiscuous mode [ 167.810304][ T8766] syzkaller0: entered allmulticast mode [ 168.043099][ T8779] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.652'. [ 168.675906][ T8801] netlink: 11 bytes leftover after parsing attributes in process `syz.1.658'. [ 169.332467][ T8778] m1Ie5nè‹Ò: entered promiscuous mode [ 169.465596][ T8805] netlink: 52 bytes leftover after parsing attributes in process `syz.1.661'. [ 169.472030][ T8803] netlink: 'syz.3.660': attribute type 5 has an invalid length. [ 169.505200][ T8807] netlink: 17 bytes leftover after parsing attributes in process `syz.0.659'. [ 169.705285][ T5923] IPVS: starting estimator thread 0... [ 169.711671][ T8815] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20003 [ 169.818353][ T8818] IPVS: using max 36 ests per chain, 86400 per kthread [ 169.859195][ T48] net_ratelimit: 10 callbacks suppressed [ 169.859215][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.332340][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.666'. [ 170.599742][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.675439][ T8805] wg1 speed is unknown, defaulting to 1000 [ 170.755694][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.898684][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.973308][ T8852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.000236][ T8851] netlink: 'syz.0.670': attribute type 39 has an invalid length. [ 171.058553][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.080906][ T8852] batadv_slave_0: entered promiscuous mode [ 171.087374][ T8852] macvtap1: entered allmulticast mode [ 171.097681][ T8852] batadv_slave_0: entered allmulticast mode [ 171.130109][ T8852] batadv_slave_0: left allmulticast mode [ 171.136913][ T8863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.147280][ T8852] batadv_slave_0: left promiscuous mode [ 171.157920][ T8863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.204918][ T8858] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 171.217097][ T8858] syzkaller1: linktype set to 768 [ 171.338661][ T8865] __nla_validate_parse: 3 callbacks suppressed [ 171.338680][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 171.643568][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.855646][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 171.897806][ T8883] tipc: Enabled bearer , priority 0 [ 171.926097][ T8883] syzkaller0: entered promiscuous mode [ 171.939804][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.988427][ T8883] syzkaller0: entered allmulticast mode [ 172.084110][ T8883] tipc: Resetting bearer [ 172.141095][ T8883] tipc: Disabling bearer [ 172.236839][ T8871] wg1 speed is unknown, defaulting to 1000 [ 172.389594][ T8909] netlink: 48 bytes leftover after parsing attributes in process `syz.3.685'. [ 172.665856][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.883004][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 172.991923][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.198359][ T8936] x_tables: duplicate underflow at hook 1 [ 173.240740][ T8944] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 173.489685][ T8960] netlink: 92 bytes leftover after parsing attributes in process `syz.0.699'. [ 173.657981][ T8964] netlink: 48 bytes leftover after parsing attributes in process `syz.2.700'. [ 173.692439][ T8939] wg1 speed is unknown, defaulting to 1000 [ 174.157342][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'. [ 174.363398][ T8973] wg1 speed is unknown, defaulting to 1000 [ 174.363416][ T8995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.709'. [ 174.620065][ T9006] netlink: 45 bytes leftover after parsing attributes in process `syz.1.712'. [ 174.646682][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 174.780659][ T9018] x_tables: duplicate underflow at hook 1 [ 175.060726][ T979] net_ratelimit: 63 callbacks suppressed [ 175.060746][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.109909][ T9021] syzkaller0: entered promiscuous mode [ 175.115406][ T9021] syzkaller0: entered allmulticast mode [ 175.156386][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.166891][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.472979][ T9017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.653524][ T9038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.706613][ T9047] batadv0: entered promiscuous mode [ 175.726123][ T9047] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.765454][ T9047] bond1: (slave macvlan2): making interface the new active one [ 175.786543][ T9047] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 175.866998][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.109133][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.355552][ T9066] __nla_validate_parse: 4 callbacks suppressed [ 176.355578][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.727'. [ 176.821205][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.914075][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.144261][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.153341][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.477387][ T9073] netlink: 64 bytes leftover after parsing attributes in process `syz.4.730'. [ 177.563748][ T9075] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.579534][ T9045] wg1 speed is unknown, defaulting to 1000 [ 177.630700][ T9075] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.741118][ T9075] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.906923][ T9075] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.945656][ T9043] wg1 speed is unknown, defaulting to 1000 [ 177.963288][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.021012][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 178.086939][ T9094] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 178.149716][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 178.183422][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.183694][ T9094] bond2: entered promiscuous mode [ 178.207386][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 178.210642][ T9094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.224275][ T1138] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.261152][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.736'. [ 178.276611][ T1138] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.386314][ T9055] wg1 speed is unknown, defaulting to 1000 [ 178.412195][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.441509][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 178.574294][ T3424] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.607796][ T9111] netlink: 'syz.3.738': attribute type 1 has an invalid length. [ 178.880585][ T9111] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.922902][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 179.042420][ T9124] netlink: 'syz.1.741': attribute type 3 has an invalid length. [ 179.136059][ T9107] wg1 speed is unknown, defaulting to 1000 [ 179.946911][ T9144] netlink: 'syz.0.746': attribute type 2 has an invalid length. [ 180.010229][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.746'. [ 180.056959][ T9146] netlink: 404 bytes leftover after parsing attributes in process `syz.4.747'. [ 180.178703][ T5840] net_ratelimit: 5 callbacks suppressed [ 180.178721][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.274149][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.405797][ T9136] wg1 speed is unknown, defaulting to 1000 [ 181.063685][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.291528][ T9188] ipip0: entered promiscuous mode [ 181.297064][ T9188] ipip0: entered allmulticast mode [ 181.304513][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.459901][ T9195] netlink: 'syz.4.760': attribute type 13 has an invalid length. [ 181.488163][ T9195] netlink: 'syz.4.760': attribute type 17 has an invalid length. [ 181.694184][ T9201] __nla_validate_parse: 5 callbacks suppressed [ 181.694203][ T9201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.761'. [ 181.791702][ T9195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.892695][ T9202] syzkaller1: entered promiscuous mode [ 181.898473][ T9202] syzkaller1: entered allmulticast mode [ 181.917094][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.762'. [ 181.933015][ T9207] netlink: 348 bytes leftover after parsing attributes in process `syz.4.762'. [ 181.942279][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.762'. [ 181.951333][ T9207] netlink: 348 bytes leftover after parsing attributes in process `syz.4.762'. [ 181.960670][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.762'. [ 181.970385][ T9171] wg1 speed is unknown, defaulting to 1000 [ 181.979161][ T9166] wg1 speed is unknown, defaulting to 1000 [ 182.117124][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.277307][ T9212] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 182.293213][ T9212] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 182.335270][ T9210] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.347300][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.361752][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 182.468288][ T9210] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.533541][ T9218] netlink: 'syz.4.766': attribute type 5 has an invalid length. [ 182.561078][ T9218] netlink: 211920 bytes leftover after parsing attributes in process `syz.4.766'. [ 182.572115][ T9218] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 182.574162][ T9210] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.740415][ T9210] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.882051][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'. [ 182.903783][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.935552][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.768'. [ 183.050958][ T9223] syzkaller0: entered promiscuous mode [ 183.056480][ T9223] syzkaller0: entered allmulticast mode [ 183.144786][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.221077][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.253804][ T9231] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.265785][ T9231] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.287371][ T4268] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.320686][ T1332] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.343274][ T1332] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.371831][ T1332] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.450115][ T9231] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.472697][ T9231] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.647118][ T9231] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.664723][ T9231] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.811548][ T9231] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.833607][ T9231] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.954991][ T1332] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.969923][ T1332] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.026178][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.035059][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.043734][ T9254] wg1 speed is unknown, defaulting to 1000 [ 185.091937][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.101304][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.125908][ T1332] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.145760][ T1332] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.224640][ T5896] net_ratelimit: 4 callbacks suppressed [ 185.224665][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.464073][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.694460][ T9290] xt_socket: unknown flags 0x50 [ 185.761163][ T9292] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 185.793470][ T9292] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.813751][ T9292] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.820800][ T9292] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 185.831735][ T9292] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 185.939478][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.182125][ T9303] netlink: 'syz.3.790': attribute type 5 has an invalid length. [ 186.221676][ T9275] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 186.263935][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.264309][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.459132][ T9311] block nbd0: shutting down sockets [ 186.510024][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.567861][ T9317] tc_dump_action: action bad kind [ 186.647346][ T9309] wg1 speed is unknown, defaulting to 1000 [ 186.709136][ T9327] __nla_validate_parse: 17 callbacks suppressed [ 186.709152][ T9327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 186.766819][ T9331] netlink: 'syz.1.799': attribute type 2 has an invalid length. [ 186.774827][ T9331] netlink: 'syz.1.799': attribute type 8 has an invalid length. [ 186.783475][ T9331] netlink: 132 bytes leftover after parsing attributes in process `syz.1.799'. [ 186.907172][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.800'. [ 186.994618][ T9333] bond7: entered promiscuous mode [ 187.000529][ T9333] 8021q: adding VLAN 0 to HW filter on device bond7 [ 187.002889][ T9344] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.803'. [ 187.018484][ T9344] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 187.141537][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 187.158689][ T9345] 8021q: adding VLAN 0 to HW filter on device bond8 [ 187.166667][ T9345] bond8: entered promiscuous mode [ 187.174155][ T9345] bond7: (slave bond8): Enslaving as an active interface with an up link [ 187.222464][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 187.320359][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.393999][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 187.539041][ T6035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.603434][ T9372] netlink: 'syz.2.808': attribute type 1 has an invalid length. [ 187.698449][ T9372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.813676][ T9368] wg1 speed is unknown, defaulting to 1000 [ 187.913794][ T9383] xt_TPROXY: Can be used only with -p tcp or -p udp [ 187.935200][ T9380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.809'. [ 187.945365][ T9380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.809'. [ 187.961408][ T9384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.809'. [ 188.237867][ T9393] tipc: Enabled bearer , priority 0 [ 188.245933][ T9393] syzkaller0: entered promiscuous mode [ 188.255156][ T9393] syzkaller0: entered allmulticast mode [ 188.302339][ T9393] tipc: Resetting bearer [ 188.321773][ T9392] tipc: Resetting bearer [ 188.350494][ T6035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.360782][ T9392] tipc: Disabling bearer [ 188.408462][ T9381] wg1 speed is unknown, defaulting to 1000 [ 188.947581][ T9423] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 189.116260][ T9432] netlink: 'syz.0.822': attribute type 16 has an invalid length. [ 189.124753][ T9432] netlink: 'syz.0.822': attribute type 17 has an invalid length. [ 189.273609][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.415604][ T9432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.440097][ T9432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.517873][ T9424] wg1 speed is unknown, defaulting to 1000 [ 189.524316][ T9442] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 189.539397][ T9442] tipc: Enabled bearer , priority 10 [ 189.545872][ T3424] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.587095][ T3424] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.616608][ T3424] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.665458][ T3424] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.709473][ T9451] netlink: 'syz.3.825': attribute type 1 has an invalid length. [ 189.969353][ T9451] bond9: (slave bridge0): making interface the new active one [ 189.990925][ T9451] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 190.238523][ C0] net_ratelimit: 11 callbacks suppressed [ 190.238541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.251460][ T9479] tipc: Enabled bearer , priority 0 [ 190.294558][ T9479] syzkaller0: entered promiscuous mode [ 190.317818][ T9479] syzkaller0: entered allmulticast mode [ 190.378481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.395107][ T9482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.403991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.493334][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.497272][ T9479] tipc: Resetting bearer [ 190.518538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.643367][ T9477] tipc: Resetting bearer [ 190.658576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.663074][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.682619][ T9477] tipc: Disabling bearer [ 190.798470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.938529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.305013][ T9488] wg1 speed is unknown, defaulting to 1000 [ 191.359013][ T5840] tipc: Node number set to 4233904788 [ 191.436469][ T9523] netlink: 'syz.1.842': attribute type 1 has an invalid length. [ 191.595259][ T9528] bond3: (slave geneve2): making interface the new active one [ 191.621114][ T9528] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 191.633878][ T9524] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.669570][ T1332] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 191.677906][ T1332] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 191.713558][ T1332] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 191.733216][ T1332] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 191.964673][ T9540] __nla_validate_parse: 9 callbacks suppressed [ 191.964759][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 192.012377][ T9501] wg1 speed is unknown, defaulting to 1000 [ 192.197657][ T9546] tipc: Enabling of bearer rejected, failed to enable media [ 192.221781][ T9551] veth0: entered promiscuous mode [ 192.246513][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 192.435117][ T9546] syzkaller0: entered promiscuous mode [ 192.441226][ T9546] syzkaller0: entered allmulticast mode [ 192.521384][ T9560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.848'. [ 192.534449][ T9560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.848'. [ 192.655965][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.848'. [ 192.688024][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.848'. [ 193.086766][ T9575] netlink: 'syz.2.850': attribute type 10 has an invalid length. [ 193.782457][ T9574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.850'. [ 193.808368][ T9574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.850'. [ 194.078950][ T9587] netlink: 7 bytes leftover after parsing attributes in process `syz.3.856'. [ 194.103675][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'. [ 194.264056][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.452603][ T9605] syzkaller0: entered promiscuous mode [ 194.458105][ T9605] syzkaller0: entered allmulticast mode [ 194.632093][ T9597] wg1 speed is unknown, defaulting to 1000 [ 194.827912][ T9619] tipc: Enabled bearer , priority 0 [ 194.835317][ T9624] syzkaller0: entered promiscuous mode [ 194.841010][ T9624] syzkaller0: entered allmulticast mode [ 194.864138][ T9614] tipc: Resetting bearer [ 194.878735][ T9613] tipc: Resetting bearer [ 194.910682][ T9613] tipc: Disabling bearer [ 194.927045][ T9625] netem: change failed [ 195.010422][ T9626] xt_CT: No such helper "netbios-ns" [ 195.013430][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.022892][ T4268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.387034][ T10] net_ratelimit: 30 callbacks suppressed [ 195.387053][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.458601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.540742][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.704875][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.747353][ T9621] wg1 speed is unknown, defaulting to 1000 [ 195.859611][ T6035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.989104][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.347277][ T9633] wg1 speed is unknown, defaulting to 1000 [ 196.367310][ T9646] wg1 speed is unknown, defaulting to 1000 [ 196.499210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.745817][ T6035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.898790][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.091844][ T9680] __nla_validate_parse: 4 callbacks suppressed [ 197.091861][ T9680] netlink: 48 bytes leftover after parsing attributes in process `syz.3.879'. [ 197.118708][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.593763][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 197.703231][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'. [ 197.819371][ T9701] netlink: 'syz.2.886': attribute type 39 has an invalid length. [ 197.983787][ T9706] netlink: 48 bytes leftover after parsing attributes in process `syz.3.889'. [ 198.310095][ T9723] netlink: 240 bytes leftover after parsing attributes in process `syz.4.893'. [ 198.603926][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 198.864713][ T9741] 8021q: VLANs not supported on sit0 [ 198.882909][ T9735] wg1 speed is unknown, defaulting to 1000 [ 199.007767][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 199.613792][ T9766] netlink: 224 bytes leftover after parsing attributes in process `syz.3.905'. [ 199.640319][ T9766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.905'. [ 199.726654][ T9756] wg1 speed is unknown, defaulting to 1000 [ 200.100702][ T9789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.911'. [ 200.462185][ T9807] syzkaller0: entered promiscuous mode [ 200.468419][ T4268] net_ratelimit: 9 callbacks suppressed [ 200.468443][ T4268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.478372][ T9807] syzkaller0: entered allmulticast mode [ 201.140765][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.461892][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 201.461944][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 201.467965][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 201.481358][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.599216][ T1138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.178856][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.222583][ T9874] netlink: 'syz.2.938': attribute type 9 has an invalid length. [ 202.285604][ T9871] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.316429][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 202.330362][ T9877] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.334089][ T9871] batman_adv: batadv0: Interface deactivated: dummy0 [ 202.360004][ T9877] __nla_validate_parse: 5 callbacks suppressed [ 202.360020][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'. [ 202.459521][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'. [ 202.471428][ T9871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.487772][ T9871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.525275][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 202.742785][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.752683][ T9892] netlink: 'syz.0.943': attribute type 13 has an invalid length. [ 202.805330][ T155] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.817863][ T155] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.835313][ T9891] netlink: 48 bytes leftover after parsing attributes in process `syz.1.942'. [ 202.938653][ T155] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.963612][ T155] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.012354][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 203.013398][ T9899] tipc: Enabled bearer , priority 0 [ 203.115140][ T9899] tipc: Disabling bearer [ 203.218817][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.672944][ T9941] netlink: 27 bytes leftover after parsing attributes in process `syz.0.956'. [ 203.695997][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 203.822750][ T9949] netlink: 136 bytes leftover after parsing attributes in process `syz.4.957'. [ 203.848250][ T9949] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 203.979766][ T9955] tap0: tun_chr_ioctl cmd 2148553947 [ 204.000825][ T9955] tap0: tun_chr_ioctl cmd 2147767521 [ 204.189052][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 204.650926][ T9993] bridge0: Device is already in use. [ 204.670514][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 204.767041][ T9998] bond1: option mode: unable to set because the bond device has slaves [ 205.086057][ T9978] wg1 speed is unknown, defaulting to 1000 [ 205.260349][T10013] tls_set_device_offload_rx: netdev not found [ 205.330027][T10021] x_tables: duplicate underflow at hook 2 [ 205.510610][T10026] net_ratelimit: 14 callbacks suppressed [ 205.510628][T10026] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 205.882175][T10041] syzkaller0: entered promiscuous mode [ 205.889729][T10041] syzkaller0: entered allmulticast mode [ 205.942983][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.951453][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.179729][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.309881][T10052] wg1 speed is unknown, defaulting to 1000 [ 206.339357][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.418596][T10060] bond4 (unregistering): Released all slaves [ 206.565331][T10051] wg1 speed is unknown, defaulting to 1000 [ 207.086864][T10058] wg1 speed is unknown, defaulting to 1000 [ 207.104468][T10079] netlink: 'syz.1.999': attribute type 4 has an invalid length. [ 207.160064][T10080] block nbd0: not configured, cannot reconfigure [ 207.571812][T10097] netlink: 'syz.3.1003': attribute type 9 has an invalid length. [ 207.601651][T10097] __nla_validate_parse: 9 callbacks suppressed [ 207.601670][T10097] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1003'. [ 208.238094][T10126] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1008'. [ 208.443066][T10127] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1012'. [ 208.522275][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 208.663706][T10143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1016'. [ 208.678678][T10145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1016'. [ 208.806078][T10116] wg1 speed is unknown, defaulting to 1000 [ 209.050253][T10166] IPv6: Can't replace route, no match found [ 209.244520][T10130] wg1 speed is unknown, defaulting to 1000 [ 209.527233][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 209.804460][T10200] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1030'. [ 210.349747][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 210.458914][T10220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1043'. [ 211.544761][T10269] team0 (unregistering): Port device team_slave_0 removed [ 211.558753][T10269] team0 (unregistering): Port device team_slave_1 removed [ 211.626106][T10242] wg1 speed is unknown, defaulting to 1000 [ 211.682031][T10277] tipc: Started in network mode [ 211.687050][T10277] tipc: Node identity 063b49a92db2, cluster identity 4711 [ 211.694465][T10277] tipc: Enabled bearer , priority 0 [ 211.784417][T10277] syzkaller0: entered promiscuous mode [ 211.790104][T10277] syzkaller0: entered allmulticast mode [ 211.797266][T10277] tipc: Resetting bearer [ 211.910812][T10276] tipc: Resetting bearer [ 213.333232][T10276] tipc: Disabling bearer [ 213.356500][ T10] tipc: Node number set to 730417577 [ 213.358283][T10249] wg1 speed is unknown, defaulting to 1000 [ 213.728516][T10335] __nla_validate_parse: 6 callbacks suppressed [ 213.728534][T10335] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1071'. [ 213.757323][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 214.626455][T10383] bond0: (slave bond_slave_0): Releasing backup interface [ 214.647980][T10383] bond0: (slave bond_slave_1): Releasing backup interface [ 214.669074][T10383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.676979][T10383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.686249][T10383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.694240][T10383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.709944][T10383] bond2: (slave bond3): Releasing backup interface [ 214.716530][T10383] bond2: (slave bond3): the permanent HWaddr of slave - 46:97:40:d3:b8:20 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 214.741419][T10383] bond2: (slave bond4): making interface the new active one [ 214.754497][T10383] bond2: (slave bond4): Releasing backup interface [ 214.761464][T10383] bond2: (slave gretap1): making interface the new active one [ 214.772862][T10383] bond2: (slave gretap1): Releasing backup interface [ 214.787809][T10383] bond7: (slave bond8): Releasing backup interface [ 214.796333][T10383] bond8: left promiscuous mode [ 214.804526][T10383] bond9: (slave bridge0): Releasing active interface [ 214.817985][ T5896] wg1 speed is unknown, defaulting to 1000 [ 214.848080][T10363] wg1 speed is unknown, defaulting to 1000 [ 215.354191][T10408] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1089'. [ 215.397464][T10407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1090'. [ 215.461541][T10367] wg1 speed is unknown, defaulting to 1000 [ 215.528713][T10413] netlink: 'syz.0.1092': attribute type 3 has an invalid length. [ 215.741099][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1095'. [ 215.765250][T10424] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1096'. [ 216.181601][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1101'. [ 216.239485][T10444] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 217.003841][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1107'. [ 217.031481][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1107'. [ 217.085225][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1107'. [ 217.197143][T10476] veth1_to_bridge: mtu greater than device maximum [ 217.283046][T10480] netlink: 'syz.2.1113': attribute type 21 has an invalid length. [ 217.930750][T10498] netlink: 'syz.2.1117': attribute type 1 has an invalid length. [ 218.441270][T10530] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 218.778943][T10525] wg1 speed is unknown, defaulting to 1000 [ 219.079364][T10559] __nla_validate_parse: 4 callbacks suppressed [ 219.079382][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1131'. [ 219.158140][T10554] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1132'. [ 219.249814][T10549] tunl0: Caught tx_queue_len zero misconfig [ 219.275411][T10561] netlink: 'syz.3.1133': attribute type 1 has an invalid length. [ 219.797583][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 221.491682][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1144'. [ 221.528637][T10607] netlink: 'syz.1.1144': attribute type 5 has an invalid length. [ 221.798692][T10623] netlink: 'syz.4.1149': attribute type 1 has an invalid length. [ 221.876107][T10625] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1151'. [ 222.054474][T10638] Bluetooth: MGMT ver 1.23 [ 222.161666][T10640] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 222.184142][T10639] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 222.436636][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'. [ 222.453580][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1162'. [ 222.487860][T10658] vlan0: entered allmulticast mode [ 222.521293][T10658] veth1: entered allmulticast mode [ 222.715915][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'. [ 222.761357][T10680] netlink: 4276 bytes leftover after parsing attributes in process `syz.3.1171'. [ 222.894609][T10691] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1175'. [ 222.918417][T10693] veth0_to_team: mtu less than device minimum [ 222.935147][T10689] vlan0: entered promiscuous mode [ 222.944900][T10689] geneve1: entered promiscuous mode [ 222.952328][T10689] vlan0: entered allmulticast mode [ 222.957472][T10689] geneve1: entered allmulticast mode [ 222.980421][T10698] netlink: 'syz.3.1175': attribute type 83 has an invalid length. [ 223.114646][T10703] bond4: Unable to set down delay as MII monitoring is disabled [ 223.202489][T10703] bond4 (unregistering): Released all slaves [ 223.474237][T10693] wg1 speed is unknown, defaulting to 1000 [ 224.104087][T10753] xfrm1: entered allmulticast mode [ 224.256712][T10756] netlink: 'syz.1.1194': attribute type 10 has an invalid length. [ 224.521526][T10776] sit0: entered promiscuous mode [ 224.576188][T10776] __nla_validate_parse: 3 callbacks suppressed [ 224.576205][T10776] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1199'. [ 224.619486][T10757] wg1 speed is unknown, defaulting to 1000 [ 224.781580][T10793] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1205'. [ 225.310678][T10808] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1208'. [ 225.334877][T10762] wg1 speed is unknown, defaulting to 1000 [ 225.413476][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'. [ 225.424298][T10814] netlink: 39 bytes leftover after parsing attributes in process `syz.3.1209'. [ 225.609164][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 225.632051][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 225.657450][T10823] netlink: 'syz.3.1214': attribute type 39 has an invalid length. [ 225.676717][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 225.824462][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 225.963690][T10837] netlink: 'syz.0.1217': attribute type 1 has an invalid length. [ 226.027839][T10837] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 226.157633][T10847] netlink: 'syz.2.1221': attribute type 3 has an invalid length. [ 226.314575][T10853] dvmrp1: entered allmulticast mode [ 226.322256][T10853] dvmrp1: left allmulticast mode [ 226.401519][T10854] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1222'. [ 226.640668][T10859] netlink: 'syz.4.1225': attribute type 13 has an invalid length. [ 226.707847][T10867] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 226.739731][T10859] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.747332][T10859] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.945093][T10859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.973023][T10859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.318469][ T3507] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.326855][ T3507] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.360713][ T3507] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.395067][ T3507] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.426963][ T3507] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.465708][ T3507] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.492351][ T3507] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.520300][ T3507] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.128379][T10939] bridge_slave_0: left allmulticast mode [ 228.134574][T10939] bridge_slave_0: left promiscuous mode [ 228.140827][T10939] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.151919][T10939] bridge_slave_1: left allmulticast mode [ 228.157703][T10939] bridge_slave_1: left promiscuous mode [ 228.164022][T10939] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.179902][T10939] bond0: (slave bond_slave_0): Releasing backup interface [ 228.194964][T10939] bond0: (slave bond_slave_1): Releasing backup interface [ 228.209240][T10939] team0: Port device team_slave_0 removed [ 228.217308][T10939] team0: Port device team_slave_1 removed [ 228.239497][T10939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.249176][T10939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.257173][T10939] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 228.273596][T10945] tipc: Enabling of bearer rejected, failed to enable media [ 228.284374][T10944] tipc: Enabled bearer , priority 0 [ 228.292418][T10944] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 228.300610][T10944] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 228.315157][T10944] tipc: Resetting bearer [ 228.334468][ T4268] tipc: Resetting bearer [ 229.522798][T11013] pimreg: tun_chr_ioctl cmd 1074025680 [ 229.626112][T10999] wg1 speed is unknown, defaulting to 1000 [ 229.723776][T11020] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 230.231671][T11044] __nla_validate_parse: 6 callbacks suppressed [ 230.231688][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1279'. [ 230.306554][T10998] wg1 speed is unknown, defaulting to 1000 [ 230.450082][T11054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1281'. [ 231.309784][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 231.809381][T11094] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1296'. [ 231.900078][T11096] netlink: 'syz.0.1296': attribute type 5 has an invalid length. [ 232.074269][T11087] wg1 speed is unknown, defaulting to 1000 [ 232.299224][T11098] veth5: entered promiscuous mode [ 232.505285][T11104] netlink: 'syz.2.1298': attribute type 13 has an invalid length. [ 232.695112][T11105] netlink: 'syz.1.1299': attribute type 1 has an invalid length. [ 232.856401][T11105] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.905599][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1299'. [ 232.940873][T11110] veth1: entered promiscuous mode [ 232.951058][T11110] bond4: (slave veth1): Enslaving as an active interface with a down link [ 233.091589][T11123] tipc: Enabled bearer , priority 0 [ 233.121080][T11118] netlink: 'syz.2.1301': attribute type 1 has an invalid length. [ 233.155293][T11123] tipc: Disabling bearer [ 233.360778][T11128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1303'. [ 233.425435][T11138] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.617115][T11144] netlink: 'syz.2.1307': attribute type 13 has an invalid length. [ 233.758506][T11138] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.822844][T11148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1309'. [ 233.854425][T11148] syzkaller0: entered promiscuous mode [ 233.866829][T11148] syzkaller0: entered allmulticast mode [ 234.099276][T11138] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 234.273524][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 234.279401][T11163] netlink: 'syz.4.1314': attribute type 1 has an invalid length. [ 234.292220][T11138] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 234.370212][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 234.419662][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 234.459815][T11168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.298678][T11203] __nla_validate_parse: 2 callbacks suppressed [ 235.298696][T11203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1328'. [ 235.441277][T11210] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1330'. [ 235.533248][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'. [ 236.070351][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 236.099471][T11234] netlink: 'syz.1.1338': attribute type 3 has an invalid length. [ 236.113851][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 236.277622][T11218] wg1 speed is unknown, defaulting to 1000 [ 236.287139][T11239] SET target dimension over the limit! [ 236.381793][T11245] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1342'. [ 236.543272][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1343'. [ 236.942968][T11258] batadv1: entered promiscuous mode [ 237.001360][T11242] wg1 speed is unknown, defaulting to 1000 [ 237.095964][T11261] netlink: 'syz.1.1349': attribute type 21 has an invalid length. [ 237.157404][T11261] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1349'. [ 237.185186][T11264] tipc: Enabled bearer , priority 0 [ 237.295325][T11261] syzkaller0: entered promiscuous mode [ 237.304217][T11261] syzkaller0: entered allmulticast mode [ 237.424184][T11272] netlink: 'syz.3.1353': attribute type 66 has an invalid length. [ 237.439516][T11261] tipc: Resetting bearer [ 237.479872][T11260] tipc: Resetting bearer [ 237.546826][T11260] tipc: Disabling bearer [ 237.751193][T11283] netlink: 'syz.1.1356': attribute type 5 has an invalid length. [ 237.763765][T11284] netlink: 'syz.2.1355': attribute type 12 has an invalid length. [ 237.817272][T11277] ÿÿÿÿ: entered allmulticast mode [ 238.150622][T11296] vlan0: entered promiscuous mode [ 238.167718][T11296] ip6gretap0: entered promiscuous mode [ 238.177974][T11296] vlan0: entered allmulticast mode [ 238.193741][T11296] ip6gretap0: entered allmulticast mode [ 238.260957][T11302] vxcan2: entered allmulticast mode [ 238.775234][T11329] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 239.051455][T11328] wg1 speed is unknown, defaulting to 1000 [ 239.147746][T11350] pimreg: entered allmulticast mode [ 239.158684][T11347] syzkaller0: entered promiscuous mode [ 239.164180][T11347] syzkaller0: entered allmulticast mode [ 239.250704][T11345] netlink: 'syz.3.1377': attribute type 1 has an invalid length. [ 239.252760][T11357] tipc: Enabling of bearer rejected, failed to enable media [ 239.585864][T11371] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.616275][T11371] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 239.705931][T11377] tipc: Resetting bearer [ 239.815102][T11386] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1390'. [ 239.858507][T11371] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.880872][T11371] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 239.934812][T11380] netlink: 'syz.4.1387': attribute type 39 has an invalid length. [ 240.027065][T11371] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.068417][T11371] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 240.104404][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1392'. [ 240.177882][T11371] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.218648][T11371] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 240.330734][T11399] netlink: 'syz.0.1394': attribute type 1 has an invalid length. [ 240.390363][ T3875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.417640][ T3875] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 240.429754][T11405] lo: entered allmulticast mode [ 240.482961][ T4268] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.494043][ T4268] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 240.507581][T11402] lo: left allmulticast mode [ 240.514666][ T4268] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.536963][ T4268] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 240.597801][ T2980] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.599021][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 240.615833][ T2980] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 240.786649][T11416] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1402'. [ 240.877186][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'. [ 240.940941][T11426] netlink: 'syz.1.1401': attribute type 12 has an invalid length. [ 240.941707][T11424] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1404'. [ 240.959903][T11426] netlink: 'syz.1.1401': attribute type 29 has an invalid length. [ 240.967726][T11426] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1401'. [ 241.007584][T11426] netlink: 'syz.1.1401': attribute type 2 has an invalid length. [ 241.076680][T11426] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1401'. [ 241.419726][T11452] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1411'. [ 241.969468][T11418] wg1 speed is unknown, defaulting to 1000 [ 242.101589][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1431'. [ 242.119216][T11485] validate_nla: 4 callbacks suppressed [ 242.119235][T11485] netlink: 'syz.2.1420': attribute type 1 has an invalid length. [ 242.119553][T11493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1431'. [ 242.302984][T11475] wg1 speed is unknown, defaulting to 1000 [ 242.974209][T11510] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1426'. [ 243.053551][T11489] wg1 speed is unknown, defaulting to 1000 [ 244.246407][T11538] netlink: 'syz.2.1433': attribute type 1 has an invalid length. [ 244.363037][T11547] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 244.584492][T11556] bridge_slave_1: left allmulticast mode [ 244.590787][T11556] bridge_slave_1: left promiscuous mode [ 244.596553][T11556] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.645185][T11556] bridge_slave_0: left allmulticast mode [ 244.655449][T11556] bridge_slave_0: left promiscuous mode [ 244.681977][T11556] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.851264][T11587] syzkaller1: entered promiscuous mode [ 244.856829][T11587] syzkaller1: entered allmulticast mode [ 245.147254][T11603] veth3: entered promiscuous mode [ 245.175455][ T30] audit: type=1800 audit(1768490395.970:2): pid=11612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1453" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1577 res=0 errno=0 [ 245.214843][T11615] syzkaller0: entered promiscuous mode [ 245.221408][ T30] audit: type=1800 audit(1768490395.970:3): pid=11614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1453" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1577 res=0 errno=0 [ 245.250245][T11615] syzkaller0: entered allmulticast mode [ 245.430719][T11627] netlink: 'syz.3.1455': attribute type 4 has an invalid length. [ 245.520144][T11629] netlink: 'syz.0.1457': attribute type 39 has an invalid length. [ 245.664698][T11625] wg1 speed is unknown, defaulting to 1000 [ 245.680154][T11637] __nla_validate_parse: 6 callbacks suppressed [ 245.680172][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 245.861769][ T5155] Bluetooth: hci4: command 0x0405 tx timeout [ 245.980854][T11654] tipc: Enabling of bearer rejected, already enabled [ 246.075774][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'. [ 246.086576][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1469'. [ 246.134871][T11672] batadv_slave_0: entered promiscuous mode [ 246.150657][T11672] netlink: 'syz.3.1471': attribute type 2 has an invalid length. [ 246.385407][T11679] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 246.416275][T11689] netlink: 'syz.0.1476': attribute type 2 has an invalid length. [ 246.421290][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1473'. [ 246.452589][T11689] hmac(sha224: entered promiscuous mode [ 246.459093][T11691] tipc: Enabled bearer , priority 0 [ 246.472871][T11692] syzkaller0: entered promiscuous mode [ 246.480897][T11692] syzkaller0: entered allmulticast mode [ 246.516830][T11692] tipc: Resetting bearer [ 246.554462][T11692] tipc: Disabling bearer [ 246.659027][T11703] netlink: 'syz.4.1477': attribute type 1 has an invalid length. [ 246.691583][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 246.712596][T11709] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1482'. [ 246.714383][T11710] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1482'. [ 246.734155][T11708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.859795][T11714] syzkaller0: entered promiscuous mode [ 246.873590][T11714] syzkaller0: entered allmulticast mode [ 246.915728][T11700] wg1 speed is unknown, defaulting to 1000 [ 246.935850][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 247.078679][T11723] netlink: 'syz.3.1485': attribute type 2 has an invalid length. [ 247.212440][T11739] tipc: Enabling of bearer rejected, already enabled [ 247.736708][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'. [ 247.761260][T11771] netlink: 'syz.1.1495': attribute type 1 has an invalid length. [ 248.313831][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1504'. [ 248.441065][T11801] pim6reg1: entered promiscuous mode [ 248.446393][T11801] pim6reg1: entered allmulticast mode [ 248.620072][T11787] wg1 speed is unknown, defaulting to 1000 [ 249.143752][T11786] wg1 speed is unknown, defaulting to 1000 [ 249.161536][T11800] wg1 speed is unknown, defaulting to 1000 [ 249.378673][T11824] netlink: 'syz.3.1512': attribute type 1 has an invalid length. [ 249.453721][T11830] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 249.465112][T11830] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.555780][T11830] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 249.579067][T11830] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.703842][T11830] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 249.765943][T11830] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.893052][T11830] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 249.908401][T11830] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 250.087097][ T1332] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 250.117623][ T1332] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.157782][ T4268] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 250.170207][ T4268] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.194719][T11851] netlink: 'syz.3.1518': attribute type 1 has an invalid length. [ 250.222694][ T4268] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 250.241373][ T4268] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.309420][ T4268] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 250.338012][ T4268] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.560866][T11861] netlink: 'syz.1.1524': attribute type 1 has an invalid length. [ 250.711805][T11845] wg1 speed is unknown, defaulting to 1000 [ 250.733945][T11878] __nla_validate_parse: 3 callbacks suppressed [ 250.733963][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'. [ 251.098257][T11884] xt_ecn: cannot match TCP bits for non-tcp packets [ 251.105065][T11887] xt_ecn: cannot match TCP bits for non-tcp packets [ 251.594776][T11909] FAULT_INJECTION: forcing a failure. [ 251.594776][T11909] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 251.625066][T11909] CPU: 0 UID: 0 PID: 11909 Comm: syz.2.1538 Not tainted syzkaller #0 PREEMPT(full) [ 251.625095][T11909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.625114][T11909] Call Trace: [ 251.625122][T11909] [ 251.625132][T11909] dump_stack_lvl+0xe8/0x150 [ 251.625163][T11909] should_fail_ex+0x414/0x560 [ 251.625198][T11909] _copy_from_user+0x2d/0xb0 [ 251.625223][T11909] __sys_bpf+0x1e3/0x860 [ 251.625252][T11909] ? __pfx___sys_bpf+0x10/0x10 [ 251.625293][T11909] ? ksys_write+0x22a/0x250 [ 251.625322][T11909] ? __pfx_ksys_write+0x10/0x10 [ 251.625348][T11909] __x64_sys_bpf+0x7c/0x90 [ 251.625372][T11909] do_syscall_64+0xec/0xf80 [ 251.625396][T11909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.625414][T11909] ? trace_irq_disable+0x37/0x100 [ 251.625439][T11909] ? clear_bhb_loop+0x60/0xb0 [ 251.625462][T11909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.625481][T11909] RIP: 0033:0x7f6e0cb8f749 [ 251.625499][T11909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.625516][T11909] RSP: 002b:00007f6e0d9ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.625541][T11909] RAX: ffffffffffffffda RBX: 00007f6e0cde5fa0 RCX: 00007f6e0cb8f749 [ 251.625556][T11909] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 251.625569][T11909] RBP: 00007f6e0d9ac090 R08: 0000000000000000 R09: 0000000000000000 [ 251.625581][T11909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.625593][T11909] R13: 00007f6e0cde6038 R14: 00007f6e0cde5fa0 R15: 00007fff68808508 [ 251.625625][T11909] [ 251.948813][T11914] netlink: 'syz.2.1540': attribute type 1 has an invalid length. [ 252.057301][T11917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1536'. [ 252.100517][T11917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1536'. [ 252.239717][T11917] bond5: option arp_interval: invalid value (18446744073709551615) [ 252.301319][T11917] bond5: option arp_interval: allowed values 0 - 2147483647 [ 252.471753][T11917] bond5 (unregistering): Released all slaves [ 252.513824][T11935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.532488][T11931] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1545'. [ 252.631667][T11938] openvswitch: netlink: Multiple metadata blocks provided [ 252.763433][T11949] FAULT_INJECTION: forcing a failure. [ 252.763433][T11949] name failslab, interval 1, probability 0, space 0, times 1 [ 252.794547][T11949] CPU: 0 UID: 0 PID: 11949 Comm: syz.4.1551 Not tainted syzkaller #0 PREEMPT(full) [ 252.794575][T11949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.794586][T11949] Call Trace: [ 252.794594][T11949] [ 252.794602][T11949] dump_stack_lvl+0xe8/0x150 [ 252.794630][T11949] should_fail_ex+0x414/0x560 [ 252.794663][T11949] should_failslab+0xa8/0x100 [ 252.794687][T11949] __kmalloc_cache_node_noprof+0x88/0x700 [ 252.794708][T11949] ? __get_vm_area_node+0x13f/0x300 [ 252.794741][T11949] __get_vm_area_node+0x13f/0x300 [ 252.794773][T11949] __vmalloc_node_range_noprof+0x371/0x16a0 [ 252.794792][T11949] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 252.794848][T11949] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 252.794870][T11949] ? __lock_acquire+0x6b6/0x2cf0 [ 252.794897][T11949] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 252.794922][T11949] __vmalloc_noprof+0xd2/0x120 [ 252.794939][T11949] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 252.794968][T11949] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 252.795009][T11949] bpf_prog_alloc+0x3c/0x1a0 [ 252.795038][T11949] bpf_prog_load+0x735/0x1a10 [ 252.795072][T11949] ? get_pid_task+0x20/0x1f0 [ 252.795098][T11949] ? __pfx_bpf_prog_load+0x10/0x10 [ 252.795123][T11949] ? __might_fault+0xb0/0x130 [ 252.795169][T11949] ? bpf_lsm_bpf+0x9/0x20 [ 252.795195][T11949] ? security_bpf+0x7e/0x300 [ 252.795219][T11949] __sys_bpf+0x507/0x860 [ 252.795246][T11949] ? __pfx___sys_bpf+0x10/0x10 [ 252.795287][T11949] ? ksys_write+0x22a/0x250 [ 252.795308][T11949] ? __pfx_ksys_write+0x10/0x10 [ 252.795333][T11949] __x64_sys_bpf+0x7c/0x90 [ 252.795358][T11949] do_syscall_64+0xec/0xf80 [ 252.795380][T11949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.795398][T11949] ? trace_irq_disable+0x37/0x100 [ 252.795421][T11949] ? clear_bhb_loop+0x60/0xb0 [ 252.795444][T11949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.795463][T11949] RIP: 0033:0x7f242db8f749 [ 252.795480][T11949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.795497][T11949] RSP: 002b:00007f242eaec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.795518][T11949] RAX: ffffffffffffffda RBX: 00007f242dde5fa0 RCX: 00007f242db8f749 [ 252.795532][T11949] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 252.795545][T11949] RBP: 00007f242eaec090 R08: 0000000000000000 R09: 0000000000000000 [ 252.795557][T11949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.795569][T11949] R13: 00007f242dde6038 R14: 00007f242dde5fa0 R15: 00007ffe53b767f8 [ 252.795600][T11949] [ 252.796968][T11949] syz.4.1551: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 253.081037][T11949] CPU: 0 UID: 0 PID: 11949 Comm: syz.4.1551 Not tainted syzkaller #0 PREEMPT(full) [ 253.081062][T11949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.081074][T11949] Call Trace: [ 253.081082][T11949] [ 253.081090][T11949] dump_stack_lvl+0xe8/0x150 [ 253.081119][T11949] warn_alloc+0x214/0x310 [ 253.081146][T11949] ? __pfx_warn_alloc+0x10/0x10 [ 253.081167][T11949] ? __get_vm_area_node+0x13f/0x300 [ 253.081201][T11949] ? __get_vm_area_node+0x2b5/0x300 [ 253.081233][T11949] __vmalloc_node_range_noprof+0x396/0x16a0 [ 253.081282][T11949] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 253.081305][T11949] ? __lock_acquire+0x6b6/0x2cf0 [ 253.081333][T11949] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 253.081359][T11949] __vmalloc_noprof+0xd2/0x120 [ 253.081377][T11949] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 253.081407][T11949] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 253.081439][T11949] bpf_prog_alloc+0x3c/0x1a0 [ 253.081468][T11949] bpf_prog_load+0x735/0x1a10 [ 253.081502][T11949] ? get_pid_task+0x20/0x1f0 [ 253.081528][T11949] ? __pfx_bpf_prog_load+0x10/0x10 [ 253.081555][T11949] ? __might_fault+0xb0/0x130 [ 253.081602][T11949] ? bpf_lsm_bpf+0x9/0x20 [ 253.081622][T11949] ? security_bpf+0x7e/0x300 [ 253.081645][T11949] __sys_bpf+0x507/0x860 [ 253.081673][T11949] ? __pfx___sys_bpf+0x10/0x10 [ 253.081714][T11949] ? ksys_write+0x22a/0x250 [ 253.081735][T11949] ? __pfx_ksys_write+0x10/0x10 [ 253.081760][T11949] __x64_sys_bpf+0x7c/0x90 [ 253.081783][T11949] do_syscall_64+0xec/0xf80 [ 253.081804][T11949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.081821][T11949] ? trace_irq_disable+0x37/0x100 [ 253.081845][T11949] ? clear_bhb_loop+0x60/0xb0 [ 253.081869][T11949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.081887][T11949] RIP: 0033:0x7f242db8f749 [ 253.081904][T11949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.081921][T11949] RSP: 002b:00007f242eaec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.081942][T11949] RAX: ffffffffffffffda RBX: 00007f242dde5fa0 RCX: 00007f242db8f749 [ 253.081963][T11949] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 253.081976][T11949] RBP: 00007f242eaec090 R08: 0000000000000000 R09: 0000000000000000 [ 253.081988][T11949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.082001][T11949] R13: 00007f242dde6038 R14: 00007f242dde5fa0 R15: 00007ffe53b767f8 [ 253.082032][T11949] [ 253.082048][T11949] Mem-Info: [ 253.140757][T11963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.146868][T11949] active_anon:4826 inactive_anon:7 isolated_anon:0 [ 253.146868][T11949] active_file:2974 inactive_file:40219 isolated_file:0 [ 253.146868][T11949] unevictable:768 dirty:339 writeback:0 [ 253.146868][T11949] slab_reclaimable:12455 slab_unreclaimable:138759 [ 253.146868][T11949] mapped:29311 shmem:1367 pagetables:1215 [ 253.146868][T11949] sec_pagetables:0 bounce:0 [ 253.146868][T11949] kernel_misc_reclaimable:0 [ 253.146868][T11949] free:1285831 free_pcp:15114 free_cma:0 [ 253.396676][T11949] Node 0 active_anon:19304kB inactive_anon:28kB active_file:11896kB inactive_file:160672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117244kB dirty:1352kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12704kB pagetables:4728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 253.433335][T11949] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 253.465091][T11949] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 253.504823][T11949] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 253.514934][T11949] Node 0 DMA32 free:1238712kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19104kB inactive_anon:28kB active_file:11896kB inactive_file:160672kB unevictable:1536kB writepending:1352kB zspages:0kB present:3129332kB managed:2559480kB mlocked:0kB bounce:0kB free_pcp:46400kB local_pcp:23824kB free_cma:0kB [ 253.550167][T11949] lowmem_reserve[]: 0 0 1 1 1 [ 253.555011][T11949] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 253.586428][T11949] lowmem_reserve[]: 0 0 0 0 0 [ 253.596107][T11949] Node 1 Normal free:3889252kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14532kB local_pcp:9920kB free_cma:0kB [ 253.634633][T11949] lowmem_reserve[]: 0 0 0 0 0 [ 253.644751][T11949] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 253.660824][T11973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1560'. [ 253.670230][T11973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1560'. [ 253.684454][T11973] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1560'. [ 253.716176][T11949] Node 0 DMA32: 3873*4kB (UM) 2435*8kB (UME) 1128*16kB (UME) 1121*32kB (UM) 356*64kB (UME) 252*128kB (UM) 176*256kB (UME) 150*512kB (UME) 96*1024kB (UM) 49*2048kB (UE) 189*4096kB (UM) = 1238588kB [ 253.741450][T11949] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 253.796229][T11949] Node 1 Normal: 151*4kB (UME) 47*8kB (UME) 43*16kB (UME) 117*32kB (UME) 43*64kB (UME) 11*128kB (UME) 5*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 945*4096kB (M) = 3889252kB [ 253.829594][T11949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 253.849113][T11949] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 253.859263][T11949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 253.915038][T11949] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 253.924494][T11949] 44621 total pagecache pages [ 253.948507][T11949] 0 pages in swap cache [ 253.952686][T11949] Free swap = 124996kB [ 253.956843][T11949] Total swap = 124996kB [ 253.980596][T11991] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 253.991378][T11993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1567'. [ 254.022412][T11991] vlan2: entered promiscuous mode [ 254.027664][T11991] vlan2: entered allmulticast mode [ 254.033523][T11949] 2097051 pages RAM [ 254.037339][T11949] 0 pages HighMem/MovableOnly [ 254.046607][T11949] 425091 pages reserved [ 254.051208][T11991] hsr_slave_1: entered allmulticast mode [ 254.057027][T11949] 0 pages cma reserved [ 254.355825][T11983] wg1 speed is unknown, defaulting to 1000 [ 254.736993][T12031] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1575'. [ 254.797856][T12018] wg1 speed is unknown, defaulting to 1000 [ 255.002568][T12039] tipc: Enabling of bearer rejected, already enabled [ 255.205049][T12038] bond4: option arp_validate: invalid value (18446744073491447809) [ 255.215865][T12038] bond4 (unregistering): Released all slaves [ 255.235490][T12050] netlink: 344 bytes leftover after parsing attributes in process `syz.2.1580'. [ 255.420044][T12053] openvswitch: netlink: EtherType 0 is less than min 600 [ 255.702471][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.712144][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.945485][T12069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1584'. [ 255.964233][T12042] wg1 speed is unknown, defaulting to 1000 [ 256.490705][T12090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1590'. [ 256.557671][T12094] FAULT_INJECTION: forcing a failure. [ 256.557671][T12094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.608765][T12094] CPU: 0 UID: 0 PID: 12094 Comm: syz.3.1589 Not tainted syzkaller #0 PREEMPT(full) [ 256.608794][T12094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.608805][T12094] Call Trace: [ 256.608813][T12094] [ 256.608822][T12094] dump_stack_lvl+0xe8/0x150 [ 256.608850][T12094] should_fail_ex+0x414/0x560 [ 256.608885][T12094] _copy_from_user+0x2d/0xb0 [ 256.608917][T12094] __sys_bind+0x199/0x3e0 [ 256.608938][T12094] ? __pfx___sys_bind+0x10/0x10 [ 256.608964][T12094] ? __pfx_ksys_write+0x10/0x10 [ 256.608986][T12094] __x64_sys_bind+0x7a/0x90 [ 256.609005][T12094] do_syscall_64+0xec/0xf80 [ 256.609027][T12094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.609044][T12094] ? trace_irq_disable+0x37/0x100 [ 256.609068][T12094] ? clear_bhb_loop+0x60/0xb0 [ 256.609091][T12094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.609108][T12094] RIP: 0033:0x7f4f81d8f749 [ 256.609126][T12094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.609142][T12094] RSP: 002b:00007f4f82b91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 256.609163][T12094] RAX: ffffffffffffffda RBX: 00007f4f81fe6090 RCX: 00007f4f81d8f749 [ 256.609177][T12094] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 256.609190][T12094] RBP: 00007f4f82b91090 R08: 0000000000000000 R09: 0000000000000000 [ 256.609202][T12094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.609213][T12094] R13: 00007f4f81fe6128 R14: 00007f4f81fe6090 R15: 00007ffc13bbc328 [ 256.609242][T12094] [ 257.139213][T12115] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 257.184199][T12111] netlink: 'syz.2.1595': attribute type 1 has an invalid length. [ 257.883230][T12144] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.916636][T12148] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1607'. [ 257.959910][T12148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1607'. [ 258.021562][T12151] FAULT_INJECTION: forcing a failure. [ 258.021562][T12151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.022717][T12151] [ 258.022725][T12151] ====================================================== [ 258.022739][T12151] WARNING: possible circular locking dependency detected [ 258.022753][T12151] syzkaller #0 Not tainted [ 258.022763][T12151] ------------------------------------------------------ [ 258.022771][T12151] syz.2.1608/12151 is trying to acquire lock: [ 258.022781][T12151] ffffffff8df35920 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x11a/0xb00 [ 258.022834][T12151] [ 258.022834][T12151] but task is already holding lock: [ 258.022840][T12151] ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 258.022880][T12151] [ 258.022880][T12151] which lock already depends on the new lock. [ 258.022880][T12151] [ 258.022887][T12151] [ 258.022887][T12151] the existing dependency chain (in reverse order) is: [ 258.022895][T12151] [ 258.022895][T12151] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 258.022916][T12151] _raw_spin_lock_nested+0x32/0x50 [ 258.022935][T12151] raw_spin_rq_lock_nested+0x2a/0x140 [ 258.022951][T12151] task_rq_lock+0xbc/0x470 [ 258.022965][T12151] cgroup_move_task+0x92/0x2a0 [ 258.022985][T12151] css_set_move_task+0x658/0x9e0 [ 258.023002][T12151] cgroup_post_fork+0x1ef/0x7a0 [ 258.023018][T12151] copy_process+0x3614/0x3950 [ 258.023035][T12151] kernel_clone+0x21e/0x820 [ 258.023051][T12151] user_mode_thread+0xdd/0x140 [ 258.023068][T12151] rest_init+0x23/0x300 [ 258.023089][T12151] start_kernel+0x381/0x3d0 [ 258.023107][T12151] x86_64_start_reservations+0x24/0x30 [ 258.023132][T12151] x86_64_start_kernel+0x143/0x1c0 [ 258.023156][T12151] common_startup_64+0x13e/0x147 [ 258.023175][T12151] [ 258.023175][T12151] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 258.023193][T12151] _raw_spin_lock_irqsave+0x40/0x60 [ 258.023206][T12151] try_to_wake_up+0x67/0x12b0 [ 258.023222][T12151] __wake_up_common_lock+0x137/0x1f0 [ 258.023240][T12151] tty_port_default_wakeup+0xfb/0x170 [ 258.023255][T12151] serial8250_tx_chars+0x72e/0x970 [ 258.023275][T12151] serial8250_handle_irq+0x633/0xbb0 [ 258.023287][T12151] serial8250_default_handle_irq+0xbf/0x200 [ 258.023302][T12151] serial8250_interrupt+0x8d/0x180 [ 258.023319][T12151] __handle_irq_event_percpu+0x217/0x970 [ 258.023338][T12151] handle_irq_event+0x8b/0x1e0 [ 258.023355][T12151] handle_edge_irq+0x23b/0xa10 [ 258.023371][T12151] __common_interrupt+0x141/0x1f0 [ 258.023390][T12151] common_interrupt+0xb6/0xe0 [ 258.023408][T12151] asm_common_interrupt+0x26/0x40 [ 258.023421][T12151] tomoyo_init_request_info+0x19d/0x340 [ 258.023435][T12151] tomoyo_path_number_perm+0x180/0x5a0 [ 258.023449][T12151] security_file_ioctl+0xcb/0x2d0 [ 258.023461][T12151] __se_sys_ioctl+0x47/0x170 [ 258.023482][T12151] do_syscall_64+0xec/0xf80 [ 258.023497][T12151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.023509][T12151] [ 258.023509][T12151] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 258.023527][T12151] _raw_spin_lock_irqsave+0x40/0x60 [ 258.023540][T12151] __wake_up_common_lock+0x2f/0x1f0 [ 258.023558][T12151] tty_port_default_wakeup+0xfb/0x170 [ 258.023571][T12151] serial8250_tx_chars+0x72e/0x970 [ 258.023591][T12151] serial8250_handle_irq+0x633/0xbb0 [ 258.023602][T12151] serial8250_default_handle_irq+0xbf/0x200 [ 258.023617][T12151] serial8250_interrupt+0x8d/0x180 [ 258.023634][T12151] __handle_irq_event_percpu+0x217/0x970 [ 258.023652][T12151] handle_irq_event+0x8b/0x1e0 [ 258.023670][T12151] handle_edge_irq+0x23b/0xa10 [ 258.023685][T12151] __common_interrupt+0x141/0x1f0 [ 258.023704][T12151] common_interrupt+0xb6/0xe0 [ 258.023722][T12151] asm_common_interrupt+0x26/0x40 [ 258.023739][T12151] pv_native_safe_halt+0x13/0x20 [ 258.023753][T12151] default_idle+0x13/0x20 [ 258.023769][T12151] default_idle_call+0x73/0xb0 [ 258.023786][T12151] do_idle+0x1be/0x4d0 [ 258.023799][T12151] cpu_startup_entry+0x44/0x60 [ 258.023813][T12151] rest_init+0x2de/0x300 [ 258.023830][T12151] start_kernel+0x381/0x3d0 [ 258.023847][T12151] x86_64_start_reservations+0x24/0x30 [ 258.023867][T12151] x86_64_start_kernel+0x143/0x1c0 [ 258.023887][T12151] common_startup_64+0x13e/0x147 [ 258.023903][T12151] [ 258.023903][T12151] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 258.023920][T12151] _raw_spin_lock_irqsave+0x40/0x60 [ 258.023933][T12151] serial8250_console_write+0x155/0x1b60 [ 258.023946][T12151] console_flush_all+0x713/0xb00 [ 258.023963][T12151] console_unlock+0xbb/0x190 [ 258.023978][T12151] vprintk_emit+0x47b/0x550 [ 258.023993][T12151] _printk+0xcf/0x120 [ 258.024011][T12151] register_console+0xa8b/0xf90 [ 258.024028][T12151] univ8250_console_init+0x3a/0x70 [ 258.024041][T12151] console_init+0xfc/0x3f0 [ 258.024061][T12151] start_kernel+0x227/0x3d0 [ 258.024074][T12151] x86_64_start_reservations+0x24/0x30 [ 258.024094][T12151] x86_64_start_kernel+0x143/0x1c0 [ 258.024113][T12151] common_startup_64+0x13e/0x147 [ 258.024129][T12151] [ 258.024129][T12151] -> #0 (console_owner){-.-.}-{0:0}: [ 258.024146][T12151] __lock_acquire+0x15a6/0x2cf0 [ 258.024159][T12151] lock_acquire+0x107/0x340 [ 258.024170][T12151] console_flush_all+0x6bc/0xb00 [ 258.024187][T12151] console_unlock+0xbb/0x190 [ 258.024202][T12151] vprintk_emit+0x47b/0x550 [ 258.024217][T12151] _printk+0xcf/0x120 [ 258.024234][T12151] should_fail_ex+0x3f5/0x560 [ 258.024253][T12151] strncpy_from_user+0x36/0x2c0 [ 258.024272][T12151] strncpy_from_user_nofault+0x72/0x150 [ 258.024286][T12151] bpf_probe_read_user_str+0x2a/0x70 [ 258.024300][T12151] bpf_prog_0d6d5ccd463007db+0x64/0x6c [ 258.024310][T12151] bpf_trace_run2+0x284/0x4c0 [ 258.024326][T12151] __bpf_trace_tlb_flush+0xf5/0x150 [ 258.024344][T12151] trace_tlb_flush+0xff/0x120 [ 258.024361][T12151] switch_mm_irqs_off+0x4cc/0x700 [ 258.024379][T12151] __schedule+0xfdb/0x4fd0 [ 258.024391][T12151] schedule+0x165/0x360 [ 258.024404][T12151] __lock_sock+0x14e/0x2b0 [ 258.024421][T12151] lock_sock_nested+0x9f/0x100 [ 258.024432][T12151] l2tp_ip_bind+0x9e/0x800 [ 258.024449][T12151] __sys_bind+0x2c6/0x3e0 [ 258.024461][T12151] __x64_sys_bind+0x7a/0x90 [ 258.024472][T12151] do_syscall_64+0xec/0xf80 [ 258.024488][T12151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.024500][T12151] [ 258.024500][T12151] other info that might help us debug this: [ 258.024500][T12151] [ 258.024506][T12151] Chain exists of: [ 258.024506][T12151] console_owner --> &p->pi_lock --> &rq->__lock [ 258.024506][T12151] [ 258.024527][T12151] Possible unsafe locking scenario: [ 258.024527][T12151] [ 258.024531][T12151] CPU0 CPU1 [ 258.024536][T12151] ---- ---- [ 258.024541][T12151] lock(&rq->__lock); [ 258.024549][T12151] lock(&p->pi_lock); [ 258.024559][T12151] lock(&rq->__lock); [ 258.024569][T12151] lock(console_owner); [ 258.024578][T12151] [ 258.024578][T12151] *** DEADLOCK *** [ 258.024578][T12151] [ 258.024582][T12151] 5 locks held by syz.2.1608/12151: [ 258.024590][T12151] #0: ffff88807a8bdd60 (sk_lock-AF_INET){+.+.}-{0:0}, at: l2tp_ip_bind+0x9e/0x800 [ 258.024627][T12151] #1: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 258.024659][T12151] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4c0 [ 258.024694][T12151] #3: ffffffff8df35980 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 258.024735][T12151] #4: ffffffff8de1d238 (console_srcu){....}-{0:0}, at: console_flush_all+0x11a/0xb00 [ 258.024771][T12151] [ 258.024771][T12151] stack backtrace: [ 258.024778][T12151] CPU: 1 UID: 0 PID: 12151 Comm: syz.2.1608 Not tainted syzkaller #0 PREEMPT(full) [ 258.024794][T12151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.024804][T12151] Call Trace: [ 258.024809][T12151] [ 258.024815][T12151] dump_stack_lvl+0xe8/0x150 [ 258.024833][T12151] print_circular_bug+0x2e2/0x300 [ 258.024851][T12151] check_noncircular+0x12e/0x150 [ 258.024870][T12151] __lock_acquire+0x15a6/0x2cf0 [ 258.024892][T12151] ? console_flush_all+0x11a/0xb00 [ 258.024909][T12151] lock_acquire+0x107/0x340 [ 258.024922][T12151] ? console_flush_all+0x11a/0xb00 [ 258.024943][T12151] ? do_raw_spin_unlock+0x122/0x240 [ 258.024962][T12151] ? console_flush_all+0x11a/0xb00 [ 258.024980][T12151] console_flush_all+0x6bc/0xb00 [ 258.024998][T12151] ? console_flush_all+0x11a/0xb00 [ 258.025017][T12151] ? console_flush_all+0x11a/0xb00 [ 258.025037][T12151] ? __pfx_console_flush_all+0x10/0x10 [ 258.025057][T12151] ? is_printk_cpu_sync_owner+0x32/0x40 [ 258.025079][T12151] console_unlock+0xbb/0x190 [ 258.025096][T12151] ? __pfx_console_unlock+0x10/0x10 [ 258.025112][T12151] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 258.025127][T12151] ? _printk+0xcf/0x120 [ 258.025148][T12151] vprintk_emit+0x47b/0x550 [ 258.025165][T12151] ? __pfx_vprintk_emit+0x10/0x10 [ 258.025184][T12151] _printk+0xcf/0x120 [ 258.025205][T12151] ? __pfx__printk+0x10/0x10 [ 258.025229][T12151] should_fail_ex+0x3f5/0x560 [ 258.025251][T12151] strncpy_from_user+0x36/0x2c0 [ 258.025272][T12151] strncpy_from_user_nofault+0x72/0x150 [ 258.025289][T12151] bpf_probe_read_user_str+0x2a/0x70 [ 258.025303][T12151] bpf_prog_0d6d5ccd463007db+0x64/0x6c [ 258.025315][T12151] bpf_trace_run2+0x284/0x4c0 [ 258.025333][T12151] ? bpf_trace_run2+0x186/0x4c0 [ 258.025351][T12151] ? __pfx_bpf_trace_run2+0x10/0x10 [ 258.025369][T12151] ? update_load_avg+0x572/0x1870 [ 258.025390][T12151] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 258.025410][T12151] __bpf_trace_tlb_flush+0xf5/0x150 [ 258.025429][T12151] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 258.025448][T12151] ? psi_group_change+0xab8/0x1050 [ 258.025467][T12151] ? __schedule+0x249b/0x4fd0 [ 258.025483][T12151] trace_tlb_flush+0xff/0x120 [ 258.025502][T12151] switch_mm_irqs_off+0x4cc/0x700 [ 258.025523][T12151] __schedule+0xfdb/0x4fd0 [ 258.025537][T12151] ? __lock_acquire+0x6b6/0x2cf0 [ 258.025554][T12151] ? aa_label_sk_perm+0x4c4/0x610 [ 258.025574][T12151] ? __pfx___schedule+0x10/0x10 [ 258.025591][T12151] ? schedule+0x91/0x360 [ 258.025605][T12151] schedule+0x165/0x360 [ 258.025620][T12151] __lock_sock+0x14e/0x2b0 [ 258.025638][T12151] ? __pfx___lock_sock+0x10/0x10 [ 258.025656][T12151] ? do_raw_spin_lock+0x121/0x290 [ 258.025674][T12151] ? __pfx_autoremove_wake_function+0x10/0x10 [ 258.025693][T12151] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 258.025714][T12151] ? lock_sock_nested+0x6a/0x100 [ 258.025730][T12151] lock_sock_nested+0x9f/0x100 [ 258.025743][T12151] l2tp_ip_bind+0x9e/0x800 [ 258.025761][T12151] ? apparmor_socket_bind+0xff/0x1d0 [ 258.025777][T12151] ? bpf_lsm_socket_bind+0x9/0x20 [ 258.025799][T12151] __sys_bind+0x2c6/0x3e0 [ 258.025813][T12151] ? __pfx___sys_bind+0x10/0x10 [ 258.025830][T12151] ? __pfx_ksys_write+0x10/0x10 [ 258.025846][T12151] __x64_sys_bind+0x7a/0x90 [ 258.025859][T12151] do_syscall_64+0xec/0xf80 [ 258.025875][T12151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.025889][T12151] ? trace_irq_disable+0x37/0x100 [ 258.025906][T12151] ? clear_bhb_loop+0x60/0xb0 [ 258.025922][T12151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.025935][T12151] RIP: 0033:0x7f6e0cb8f749 [ 258.025946][T12151] Code: Unable to access opcode bytes at 0x7f6e0cb8f71f. [ 258.025954][T12151] RSP: 002b:00007f6e0d98b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 258.025968][T12151] RAX: ffffffffffffffda RBX: 00007f6e0cde6090 RCX: 00007f6e0cb8f749 [ 258.025979][T12151] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 258.025988][T12151] RBP: 00007f6e0d98b090 R08: 0000000000000000 R09: 0000000000000000 [ 258.025997][T12151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.026006][T12151] R13: 00007f6e0cde6128 R14: 00007f6e0cde6090 R15: 00007fff68808508 [ 258.026022][T12151] [ 259.187973][T12151] CPU: 1 UID: 0 PID: 12151 Comm: syz.2.1608 Not tainted syzkaller #0 PREEMPT(full) [ 259.187993][T12151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.188003][T12151] Call Trace: [ 259.188011][T12151] [ 259.188019][T12151] dump_stack_lvl+0xe8/0x150 [ 259.188040][T12151] should_fail_ex+0x414/0x560 [ 259.188065][T12151] strncpy_from_user+0x36/0x2c0 [ 259.188087][T12151] strncpy_from_user_nofault+0x72/0x150 [ 259.188104][T12151] bpf_probe_read_user_str+0x2a/0x70 [ 259.188120][T12151] bpf_prog_0d6d5ccd463007db+0x64/0x6c [ 259.188133][T12151] bpf_trace_run2+0x284/0x4c0 [ 259.188151][T12151] ? bpf_trace_run2+0x186/0x4c0 [ 259.188169][T12151] ? __pfx_bpf_trace_run2+0x10/0x10 [ 259.188188][T12151] ? update_load_avg+0x572/0x1870 [ 259.188209][T12151] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 259.188230][T12151] __bpf_trace_tlb_flush+0xf5/0x150 [ 259.188251][T12151] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 259.188269][T12151] ? psi_group_change+0xab8/0x1050 [ 259.188289][T12151] ? __schedule+0x249b/0x4fd0 [ 259.188305][T12151] trace_tlb_flush+0xff/0x120 [ 259.188325][T12151] switch_mm_irqs_off+0x4cc/0x700 [ 259.188351][T12151] __schedule+0xfdb/0x4fd0 [ 259.188365][T12151] ? __lock_acquire+0x6b6/0x2cf0 [ 259.188383][T12151] ? aa_label_sk_perm+0x4c4/0x610 [ 259.188403][T12151] ? __pfx___schedule+0x10/0x10 [ 259.188420][T12151] ? schedule+0x91/0x360 [ 259.188435][T12151] schedule+0x165/0x360 [ 259.188450][T12151] __lock_sock+0x14e/0x2b0 [ 259.188471][T12151] ? __pfx___lock_sock+0x10/0x10 [ 259.188489][T12151] ? do_raw_spin_lock+0x121/0x290 [ 259.188508][T12151] ? __pfx_autoremove_wake_function+0x10/0x10 [ 259.188527][T12151] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 259.188547][T12151] ? lock_sock_nested+0x6a/0x100 [ 259.188560][T12151] lock_sock_nested+0x9f/0x100 [ 259.188573][T12151] l2tp_ip_bind+0x9e/0x800 [ 259.188593][T12151] ? apparmor_socket_bind+0xff/0x1d0 [ 259.188609][T12151] ? bpf_lsm_socket_bind+0x9/0x20 [ 259.188632][T12151] __sys_bind+0x2c6/0x3e0 [ 259.188646][T12151] ? __pfx___sys_bind+0x10/0x10 [ 259.188663][T12151] ? __pfx_ksys_write+0x10/0x10 [ 259.188679][T12151] __x64_sys_bind+0x7a/0x90 [ 259.188692][T12151] do_syscall_64+0xec/0xf80 [ 259.188709][T12151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.188723][T12151] ? trace_irq_disable+0x37/0x100 [ 259.188741][T12151] ? clear_bhb_loop+0x60/0xb0 [ 259.188756][T12151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.188770][T12151] RIP: 0033:0x7f6e0cb8f749 [ 259.188782][T12151] Code: Unable to access opcode bytes at 0x7f6e0cb8f71f. [ 259.188790][T12151] RSP: 002b:00007f6e0d98b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 259.188805][T12151] RAX: ffffffffffffffda RBX: 00007f6e0cde6090 RCX: 00007f6e0cb8f749 [ 259.188816][T12151] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 259.188826][T12151] RBP: 00007f6e0d98b090 R08: 0000000000000000 R09: 0000000000000000 [ 259.188835][T12151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.188843][T12151] R13: 00007f6e0cde6128 R14: 00007f6e0cde6090 R15: 00007fff68808508 [ 259.188859][T12151]