last executing test programs: 6.738996014s ago: executing program 1 (id=2767): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000001e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000740)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x12, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendfile(r2, r1, 0x0, 0x1) socket(0x2, 0x80805, 0x2) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000001040)={0x8, 0x6}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001140)=0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003600)=ANY=[@ANYBLOB="34000004000007bb5d0004686df33329f3ff009ed044967eb90000001d20cd36b85a9900"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={r7, 0x1c, &(0x7f00000010c0)=[@in6={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) 5.870184441s ago: executing program 2 (id=2770): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @local}}, 0x0, 0x8}, &(0x7f0000000300)=0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, 0x1000f) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e21, 0x4, @mcast2, 0x5}}, [0x5, 0x4, 0x1fd, 0xff, 0x66, 0x7, 0x891f, 0xd, 0x97a, 0xfffffffffffffff9, 0x80000000, 0x0, 0x1ff, 0x6, 0x4]}, &(0x7f0000000440)=0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4", 0x50}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'none\x00', 0x0, 0x10002, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x200000001, 'wrr\x00', 0x9, 0x821}, 0x2c) r7 = socket$inet(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="4c0000001200ff095cab150099a283ff04b8008000f0ffff000000060040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b", 0x4c}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) close(r8) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000180)={r10, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000080)={r10, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000000540)={r10, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}}, 0x0) 5.26214659s ago: executing program 4 (id=2772): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r8, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0x7, 0x403}]}) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x800) 5.164127962s ago: executing program 0 (id=2773): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000400)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0xe8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xa, 0x0, 0xffffff6a}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {&(0x7f00000002c0)="c3", 0x1}], 0x2) 4.835152652s ago: executing program 3 (id=2774): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000), 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYBLOB="5b9c0645ddb804b28c8b4c"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r4, 0x2}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000000414010000000000000000", @ANYRES64=r6], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) socket$unix(0x1, 0x1, 0x0) 4.832229757s ago: executing program 1 (id=2784): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x211}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11503, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x80000001}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000080000009111bf000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$XFS_IOC_GET_RESBLKS(r11, 0x80105873, &(0x7f0000000040)) 4.780730498s ago: executing program 2 (id=2775): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r1], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x0, 0x0, 0x5f, 0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x21}, 0x28) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe) preadv(r4, &(0x7f0000001440)=[{0x0}, {&(0x7f0000001480)=""/15, 0xf}], 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff0000000003000000040042800c00018006000600894f0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x4060814}, 0xc000) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={'ipvlan0\x00', {0x2, 0x4e22, @rand_addr=0x64010102}}) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) close(r8) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e26, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x23, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xe2, 0x8, 0x0, 0x0}}, 0x10) 4.516182621s ago: executing program 0 (id=2776): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r0, 0xa1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x1000006, @loopback, 0x97}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000600)={r2, &(0x7f0000000380)='syztnl2\x00', 0x8000, &(0x7f0000000540)={@_ha_fsid={[0x9, 0x40]}, {0xd, 0x8, 0x1000, 0x1}}, 0x3ff, 0x0, 0x0}) sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) close(0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000200)={0xfe4, 0x6, 0x3, 0xd73b, 0x3, [0x1, 0x0, 0x800, 0x6]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7cd}, 0x1c) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x8040600) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@fallback, r6, 0x2f}, 0x20) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) getsockopt$inet6_tcp_int(r5, 0x6, 0x2, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r2, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}, 0x6}, {{&(0x7f00000044c0)=@l2tp, 0x80, &(0x7f0000004c00)=[{0x0}, {0x0}, {&(0x7f0000004a80)=""/228, 0xe4}, {&(0x7f0000004b80)=""/110, 0x6e}], 0x4, &(0x7f0000004cc0)=""/107, 0x6b}, 0x8}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x7, 0x1c}}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4.495365591s ago: executing program 3 (id=2777): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000509a0000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6ac"], 0x48}}, 0x4008004) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f6}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) 4.157108871s ago: executing program 0 (id=2778): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r0, 0xa1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x1000006, @loopback, 0x97}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000600)={r2, &(0x7f0000000380)='syztnl2\x00', 0x8000, &(0x7f0000000540)={@_ha_fsid={[0x9, 0x40]}, {0xd, 0x8, 0x1000, 0x1}}, 0x3ff, 0x0, 0x0}) sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) close(0x4) r5 = socket(0xa, 0x3, 0xff) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000200)={0xfe4, 0x6, 0x3, 0xd73b, 0x3, [0x1, 0x0, 0x800, 0x6]}) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x8040600) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@fallback, r7, 0x2f}, 0x20) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) getsockopt$inet6_tcp_int(r6, 0x6, 0x2, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r2, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}, 0x6}, {{&(0x7f00000044c0)=@l2tp, 0x80, &(0x7f0000004c00)=[{0x0}, {0x0}, {&(0x7f0000004a80)=""/228, 0xe4}, {&(0x7f0000004b80)=""/110, 0x6e}], 0x4, &(0x7f0000004cc0)=""/107, 0x6b}, 0x8}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x7, 0x1c}}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3.884452851s ago: executing program 0 (id=2779): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000002940)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', r3, 0x2f, 0x3, 0xb6, 0x3, 0x48, @dev={0xfe, 0x80, '\x00', 0x34}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x7, 0x6, 0x8}}) r8 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000028c0)={0x0, 0x0}) recvmmsg$unix(r4, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000002640)=""/223, 0xdf}, {&(0x7f0000002740)=""/144, 0x90}], 0x5}}], 0x1, 0x161, &(0x7f0000002900)={r9, r10+60000000}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r8, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) recvmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/8, 0x8}], 0x1}, 0x10022) sendmsg$nl_route(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 3.795254852s ago: executing program 1 (id=2780): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000509a0000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6ac"], 0x48}}, 0x4008004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f6}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private1, {0x0, 0x7, 0x800000000000, 0x4, 0xb5f7, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8, 0x0, 0x3}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "06ec87"}}]}, 0x140}}, 0x844) sendto$inet6(r6, 0x0, 0x0, 0x40010, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @local, 0x8}, 0x1c) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) 3.665502665s ago: executing program 2 (id=2781): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000509a0000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6ac"], 0x48}}, 0x4008004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f6}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private1, {0x0, 0x7, 0x800000000000, 0x4, 0xb5f7, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8, 0x0, 0x3}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "06ec87"}}]}, 0x140}}, 0x844) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x40010, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @local, 0x8}, 0x1c) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) 3.443843907s ago: executing program 3 (id=2782): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b6f0c38dfa523cf7c6afdc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d0c00098008000140ffffffff0800034000000110800100000b0a010400000000000000000100"], 0x218}}, 0x20050800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000faffbfff00000000400000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060011b87b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000852200008200000085000000110000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000e8ffffffb702000008000000b703000007000080850000002d00000085000000030000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', r6, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7}, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000540000000e0002006e9b8ef38a7673696d0000000f0002006e657464657673696d300000080003"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = socket$inet6(0xa, 0x3, 0x2) syz_emit_ethernet(0x5e, &(0x7f00000008c0)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x1, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0x8, [@multicast2, @empty]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @lsrr={0x83, 0xf, 0x75, [@private=0xa010100, @loopback, @loopback]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000001380)=@udp=r10}, 0x20) recvmsg(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) r11 = accept4(r9, 0x0, 0x0, 0x800) setsockopt$sock_int(r11, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r11, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_int(r8, 0x29, 0x2, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r12, 0x0, 0xf3e, 0x0) 3.437542746s ago: executing program 4 (id=2783): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000280)=0x40, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a0102000000000000000001"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) 2.883661972s ago: executing program 0 (id=2785): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f00000005c0)={&(0x7f0000000200), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="dc9e0000", @ANYRES16, @ANYBLOB="00012dbd7000ffdbdf254d0000000800030000000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000002900a800cdb955fa4b78a0bcf636858359a2e7c2aede40bd8ac653c8754731e0708a5f2f04ea816f3d000000"], 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d00200000001ef540574773755e5e48dc7edb27394d97ad76e9d5a0bfc624177363d041a1d277a0385d27eae1b70fb6"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4c854}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017d0000040042800c292d8674db4edcf5355bf4846c001f8006000600801c00007c"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000045}, 0xc000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20000043}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r8 = accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(r8, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) 2.781727288s ago: executing program 1 (id=2786): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x18, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x20, 0x7c}}, 0x5f}, 0x1, 0x0, 0x0, 0xc006}, 0xc010) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x8, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x40090) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xffffffff) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendmsg$netlink(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x29, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendto$inet(r3, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) 2.649178365s ago: executing program 2 (id=2787): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0x3, 0x8, 0x7, 0x141, 0xffffffffffffffff, 0xfca1, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f00000006c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000640)=""/11, 0xb}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000240)}}], 0x2, 0x40000000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x9, 0x20000003, 0x5, 0x3, 0x100, 0x7, 0x5, 0xdce, 0x1, 0xa, 0x1a, 0x1d, 0x0, 0xffff8004, 0x9}}]}}]}, 0x170}}, 0x24040004) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, 0xc80, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={@remote, 0x54, r3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x400c804) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xfff3, 0x5}, {0xfff2, 0xffff}, {0x1, 0xffe4}}}, 0x24}}, 0x20044800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x700, 0x7800, 0x4, 0x200, {{0x17, 0x4, 0x0, 0x3, 0x5c, 0x65, 0x0, 0x8, 0x2f, 0x0, @multicast1, @multicast2, {[@noop, @timestamp_prespec={0x44, 0x44, 0xfe, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x8}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1}, {@rand_addr=0x64010100, 0xf0b2}, {@private=0xa010100, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0xd}, {@local, 0x101}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @dev}, &(0x7f0000000300)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="44030000", @ANYRES16=0x0, @ANYBLOB="000026bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0700003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r3, @ANYBLOB="e400028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400fffeffff38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB='\b\x00', @ANYRES32=r10, @ANYBLOB="f800028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000e0000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b7570000000000000257072f84fbbb0c30000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB], 0x344}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad5600008100006c78400000e000"/25, 0x19) 2.598410731s ago: executing program 4 (id=2788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000002200000009"], 0x33) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000400)={0x29, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @ra, @jumbo={0xc2, 0x4, 0x7fffffff}]}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f1700ec3ffd0700001500000017000040006100005f2e"], 0x0, 0x37, 0x0, 0x0, 0x1000}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r1, 0x0, &(0x7f00000003c0)=""/61}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x5, 0xa, 0x0, 0x0, 0x87}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000080000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3bf45c42995560a99952bed40cf5a804000000db7e2378d5afd35f4c16827f55b3af494e39ecfb33020000030090c332b6a99a8d872b8e88a94cb519f5c17631af956a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xffffffff, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000000)=']@-^)\xbf:]($^\x00', 0x345900, &(0x7f0000000100)={@align=0x5, {0x40, 0x9, 0x2, 0x7}}, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x9}) sendmsg$sock(r6, &(0x7f0000000ac0)={&(0x7f0000000600)=@phonet={0x23, 0xa, 0x4}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)="c1d431f5a00104799b2d8d6729780765cc9c600eacc5ac4e8f0b1b573b5dfb6d6272986f355070f67711a79f593bf1019e9061662002", 0x36}, {&(0x7f00000006c0)="fcc63a7f074968aba2fd252340e32d4dbbd84042d0c343ce85ecfa01ff4d6015146ce36fa55f915ab67424d5a07615fb04b1a08139a3f3df601c752f95baffdd67b7a931cd5db79b52a4930abb94c3b8eac54ff6a3baa5b8da5af9982f954cf9eb46ccfcd8cad28241515eb8235932e49def014d93b720e315e6525d764c41ba0e9f5d5af2f741ab930cffa70f98588d804ff689ae9caa26d033ed581073e77e", 0xa0}, {&(0x7f00000007c0)="778aad66becb663d455d47bfceda1bb12082657a8eb9466625806729a1e18407bc5859aecf0ef34400ad8670a77a17fb2b1360a0da7cd1e3b998df0a59a5e9a702cd76f66a66210fd59b5ea45a7d6f5d493e09f686bd3b679f3344cdd25c0e0bfc496932058adcbf71db96d65f30d39d3fdecb7e9b499f0d2f14bec74a802c741c91733e3c1014b71d6a8f2ccf0a8d9d00d1519c10a5d063ff296c212c3fcc63c78d39c50082595d6c5e58561d2cae8439696c9075ea828aa80219532b358e14360cf30c20e0491747aa4829d8d63b5dd5899d98e0713527ab215007e559cc25a1a5c8cdca0b262f2ee056", 0xeb}, {&(0x7f00000008c0)="0b01693b6f59a4ae485f3cb5c78606a96ad487560f0e3a180dd94540843774f9f33ceeabbf985be3ac0e8cd78e5b425bcce9f0ecd408f3d668cc3234b22c17bfc0d564a85f13e6", 0x47}, {&(0x7f0000000940)="67af57bc31a36359e9cffa4c87ce40e6e71095a4638f66bdd8f86d77fae3014e9c3cc5d6abc04a0cbd57ebcea2d54c4782f66fa1c940bf80a36b7fb9a2fc01ee661134d1c760cf63fea6ffcd22eb1e9cd36a93c511b22bcf7141b4b3226a5ed0905ead5fef13d9128afbd250ea71bbe4d0e2981180be9982d7eb62da3c167d5e0f0ce091fa100c0fa1af99024b75c8e9415234e6b1e3d0e1b9ca16aea0e39934dc96a1ece47d8f15b7ce22cc2d2c6b206d771e28d2b7dc0e76ff5deb26fdefc31e302dea77862a20e7bb99e6a5e56956ff", 0xd1}], 0x5}, 0x4000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x0, 0x168, 0x10, 0x160, 0xb, 0x330, 0x250, 0x250, 0x330, 0x250, 0x3, 0x0, {[{{@ipv6={@loopback, @remote, [0xff6a], [], 'lo\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x6f}, 0x6000000, 0xf8, 0x160, 0x0, {0x0, 0x28e}, [@common=@hl={{0x28}, {0x0, 0x13}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0xfffffffe, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r6) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mkdirat$cgroup(r12, &(0x7f0000000000)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000b40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000005c0)={0x1c, r11, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x44020) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r10, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xae}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 2.389470856s ago: executing program 4 (id=2789): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r3, 0x431, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004e910}, 0x40) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x19, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8932, &(0x7f0000000900)={'batadv_slave_1\x00'}) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9, @remote, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x98}, 0x1, 0x7}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r5, &(0x7f0000000300)="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", 0xffffffffffffff67, 0x4044880, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r8, &(0x7f0000000080)=ANY=[], 0x6) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r9, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) 2.354890073s ago: executing program 2 (id=2790): r0 = socket(0x3, 0x2, 0xffc) getsockopt$bt_hci(r0, 0x84, 0x3, 0x0, &(0x7f00000003c0)=0xffffffffffffff90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4288d2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000002060108000000000000000007000006050001000700000005005e040000000000230004150300000022c6725f7ba2ffa1b22a040ba399ad327cf059e9d7245ac748b3cb8fcd41e80acc8c9b01cc520ef668cd80dd17297f9f4feff38ed147e58c391717ca4c46e79a41e845a716b18162e25706f7f881ce52fc2f25e71bfeb0149e79bbebdb405c6762b87bf689e77cefa03b32a5a6eaac6861198b534cc5484ec076a0dc18e9748ced0de3841604f26fcf55986259646cb42b79868aad8257734dfcc0cd972d055a66ba7477acd44c9ea0be67ae37544fdeda3d3e7a1049dbcff82d3e25bbe4f4f0ef6eba0f55b2bb010c2f70bf87191f9e562bfe8907f451fd7eee0168fe"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write$tun(r1, 0x0, 0xfdef) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000000)=0xfffffffb, 0x4) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x800, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r6, r6, 0x0, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0xb4}}, 0x200c4084) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2714, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x1) sendmmsg$sock(r3, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000), 0x18}}], 0x2, 0x8854) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 2.308700168s ago: executing program 3 (id=2791): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x44}, @rand_addr=' \x01\x00', 0x2, 0x6, 0x1, 0x0, 0x3, 0x2000000, r2}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000540)={0x0, 0x1, 0x6, @broadcast}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r7, 0x0, 0x18, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x0, 0x6, 0x58010a, r2}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 962.304914ms ago: executing program 4 (id=2792): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000008fc230001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, 0x0, 0x0, 0xffffffff00000000}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x3, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000940)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "20c0d1", 0x14, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1}}}}}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x184, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x134, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in6=@mcast2, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}, {@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x2, 0x0, 0x3507, 0x0, 0xa}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="030725bd7000000000001f0000001e9febd23f69cf300c4d38acb6b8ddc37c5ac4d92d129475e40873fefcc457115758083509ac53774177eb911e3d1a164c1bea94efedab05a2"], 0x14}, 0x1, 0x0, 0x0, 0x2000c094}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r5) sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x44800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x48080) 956.279484ms ago: executing program 2 (id=2793): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000509a0000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6ac"], 0x48}}, 0x4008004) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f6}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) 905.153231ms ago: executing program 0 (id=2794): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r8, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0x7, 0x403}]}) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x800) 903.910914ms ago: executing program 3 (id=2795): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @random="a214892ec085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @remote, @loopback}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newchain={0x40, 0x1e, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0x1}, {0x10, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xf4}}, @filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000820}, 0x44004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x21a701, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001e00030903000000fedbdf2507000000", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x2000c090}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010001fff28bd7000fbdbdf2500000000", @ANYRES32=0x0], 0x48}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000001c0), 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmmsg$inet(r7, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) r8 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000002240)=ANY=[], 0x6a) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 874.544829ms ago: executing program 1 (id=2796): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x5000}]}, @struct={0xe, 0x3, 0x0, 0x4, 0x0, 0x10, [{0xf, 0x1, 0x5}, {0x5, 0x0, 0x1}, {0x0, 0x2, 0x9}]}, @union={0xd, 0x1, 0x0, 0x5, 0x0, 0x9, [{0x6, 0x4, 0xfffffffe}]}]}}, &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0xb, 0x1}, 0x28) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x340040d4}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40004) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffff7, 0x7fffbffe}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="0d000000010001", 0x7) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newsa={0x140, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xffffffffffffffff}, {0x5680000000, 0xc2}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @extra_flags={0x8, 0x18, 0x4}]}, 0x140}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x24040000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x320, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x95}, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) 464.477207ms ago: executing program 1 (id=2797): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x917ba7244aaaf568, 0x4) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000000ac0)={&(0x7f0000000980)=[{0x400, 0x777, 0x100000001, 0x3}, {0x6, 0x0, 0x7, 0x9}, {0x1, 0x6, 0x6, 0x6}, {0x8, 0x26dc, 0x40, 0x8}, {0x9, 0x1, 0x3, 0x100000000}, {0x10000, 0x610a}, {0xd229, 0x7, 0x4, 0x100000000}, {0x6, 0x2, 0x6, 0x4}, {0x2, 0x101, 0x100000000, 0xad6}, {0x9, 0x1, 0x5d84, 0x7b}], 0xa, 0x20, 0x2, 0x1}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d1392a4a2719302000000030b43026c26236925000400fe7f0004002dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r4, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x0, 0xfe, 0x4, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c814) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000000202010800020000000000000a000003300002802c00018014000300fc0100000000000000000000000000001400040000000000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000806000108000604"], 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) r9 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000000040)={@private0, 0x53}) sendmmsg$inet6(r9, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000006c0)="02", 0x1}, {&(0x7f00000000c0)="bd904973777c46c547c32a8770263f41622ba00949cef4ebe7354bb4376d878a7e5aef2f471e0d6ca412", 0x2a}, {&(0x7f0000000380)="8f36efc679de6cc1ba19b15363f64f300dadfec0a2cc4fd03a8a98e76d14c56c418a9d8139c6d98212e3078a87101237ebbd421e5e5c84253c12f27fa758f116d3a3bd938920606bc1849b9143b3e3c31644ccc5fbdc56e2e398528c7ce6dd04cd913065f057ef97b05e90f95f9bd3786ef717025ada8045815a76f4a070d369fc948a15fc5b45d2defad541059de93a107d1f785a22ef4175e7687715336acefd21aed2bbaf3987bd78e3844bfaad956b52925e1e59e7a7a155451ec56403c403f4c12f02d5ab15c9ee7dcaddfea242687b386dbc53dcd79246d839d10ae29ce66fd5cece132ab9540d9ef6b1f3beed00b6", 0xf2}, {&(0x7f0000000600)="5ca2b26543479c093d9a44e0ab0adfbd8377731b94f26d5c462daaa0b267d6d3ac7beacd97b78ea829d2175b65188d2027747a8562dbdb91e74370cc6ed94145a93b27b38a3c01caf7a7ec1373d9f4bc9e1eab58e287892dd3082b58c85c1b89fd4be206b32f2ca76465b7cece1680f8506ebbf7642b32ba342910cd6c6f7d5fed0fcc16a1fdc297a09326895fae3d91b80953af946a0d77317058012104c7f1eceaba2c228a07303c5c6a97c785e0854c", 0xb1}, {&(0x7f0000000700)="0368576f87d8835cd07e6408dd5a8e0f04709bdf0f9232d8a9946ab0eabd00342f00ce643c324a8a5ad0ded0c49475e935c7acd9766b479ad853991e7ef8cda67a8d2fefeef3383882e10c0531a6a6bdb19b26180febe9efc6bc6cca212b70937d8499bb9f2314919245329e7f59527daf975dd724beabb69ae4f442c855a17a30ad97035a3b44168523a8d7949ff1c14aa99f06185769b00dd005e14ef30a1b9f72714c7e2f15739df233e3ebe53db9c48699143ec69761478fd6f9f6be06fcb807", 0xc2}, {&(0x7f0000000800)="947365cc8fb84c4721a945904c99467fa16b9a6beea944396f22af1d2c85d3aad87fe3cb7d0d9a16de4565a1131265694744fbbfb58de75258ab3fc8b3cdbb13ff72ae648c80bcdc2e886e1590e53d4d8ba6158c356ebbf7750aed9ffdcf36b3880029efacee44312f3f5aaa23a03e38a52fdf1570cd3915977270bf76cd4ac2b07bc4ba51aebb0dbf6eb50ff1a26259bdf159e7559cbc3eb9631ea136e621c6a5573c8125dac6b2c9ccc5d89c49fdbe64270952c2480849952241fa7a755c7a662726ef07a0481e9fe7e753697ea2e5f721b3eb53f1bb024df3ff60415b92c4065720b52b82628400584d623b7cafe7c30fc07d7db0", 0xf6}], 0x6}}], 0x2, 0x24000045) shutdown(r3, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x28, r11, 0x301, 0x70bd25, 0x25dfdbfe, {0x1c}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x90) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x807b5, 0x3, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) 56.16569ms ago: executing program 4 (id=2798): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(0xffffffffffffffff) r3 = accept4(r2, &(0x7f0000000180)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80, 0x80800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0xfffffffffffffe88) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x23, 0x0}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)={0xf0, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24000800}, 0x1) close(0x3) 0s ago: executing program 3 (id=2799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000f80)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000d80)=[{0x0}, {&(0x7f0000000a00)="2c65df268d3ff2036a4b814bff89804b462fcf85dcef680fe4bcd07f954bbbe3d3", 0x21}, {&(0x7f0000000bc0)="13f17912ee2f25aff24f78fdc02a8e49d075f9b92c658d343f197e6e8535e1666493eacb79427b46146aecb42c4e3a07bfa727201fbfd8de7f0757b417c5af1ddbe0dbc531539e68f12c091c7c561d0852ec54047477959aabfe15afd58b1cd18043affaf3b61db77dfa2b606b5aebe23c63458f09bdeef7be7979b1ddb86afe69df72", 0x83}, {&(0x7f0000000cc0)="b94a33f284bbc57b8d08846699ddcf014135ebb7941a7f766d9c23bc878621e96e5d30bfae18447687ab01e24f3d95b420095f4ba938c52e3500b5093d", 0x3d}, {&(0x7f0000000d00)="f4b0df2e8175f2685b0f84e2eec41c6fd7df03f24c0a7f8d9d485f11896ad9fd2ba65e4bd45201ba8c82832e92145fc452932cf2215dbaec3111a72ba6af19c87043c9b15c8805b3362b73865a71222188dcf8349505914c00c138fc67a97e923d4c2aaca0bab707495748c3eebf791961635eab4320", 0x76}], 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x168}, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delchain={0x48, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040854}, 0x4804) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x7}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x5, 0x642f, 0xa, 0xb, 0x4, 0x2, 0xc, 0x7, 0x2, 0x19, 0xc, 0x19, 0x1, 0x401, 0x81}}]}}]}, 0x178}}, 0x24008004) shutdown(0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) r7 = socket(0x2b, 0x1, 0x1) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): [T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 486.091273][T14610] block nbd1: server does not support multiple connections per device. [ 486.103687][T14610] block nbd1: shutting down sockets [ 486.398230][T14626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2194'. [ 486.607014][T14635] netlink: 'syz.3.2195': attribute type 13 has an invalid length. [ 486.615739][T14635] netlink: 'syz.3.2195': attribute type 17 has an invalid length. [ 486.745035][T14631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.758436][T14631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.986843][T14635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.006584][T14635] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.033091][T14635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.177455][T14635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.227914][T14635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.322439][T14635] veth1_macvtap: left promiscuous mode [ 487.336673][T14635] veth1_macvtap: entered promiscuous mode [ 487.395170][T14635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.419500][T14635] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.439715][T14635] net_ratelimit: 100 callbacks suppressed [ 487.439754][T14635] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 487.663909][T14653] block nbd0: reconnected socket [ 487.682813][ T5632] block nbd0: Receive control failed (result -32) [ 487.878152][T14651] lo speed is unknown, defaulting to 1000 [ 488.026562][T14657] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 488.026562][T14657] 3ìUH†5rºBnœæ [ 488.635431][T14677] netlink: 'syz.1.2202': attribute type 1 has an invalid length. [ 488.899757][T14651] lo speed is unknown, defaulting to 1000 [ 489.110639][T14690] netlink: 'syz.2.2213': attribute type 21 has an invalid length. [ 489.148329][T14690] netlink: 'syz.2.2213': attribute type 21 has an invalid length. [ 489.342927][T14699] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.352527][T14699] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.359629][T14699] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.366693][T14699] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.373705][T14699] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.380741][T14699] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.385067][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 489.388418][T14699] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.403443][T14699] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.410439][T14699] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.427108][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2213'. [ 489.507488][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2205'. [ 489.603486][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2205'. [ 489.612933][T14709] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2205'. [ 490.126478][T14690] kthread_run failed with err -4 [ 490.340226][T14694] lo speed is unknown, defaulting to 1000 [ 490.346296][ T5787] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.391845][ T5787] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.402504][ T5787] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.625999][T14725] tipc: Enabled bearer , priority 0 [ 490.642688][T14725] syzkaller0: entered promiscuous mode [ 490.651691][T14725] syzkaller0: entered allmulticast mode [ 490.859294][T14694] lo speed is unknown, defaulting to 1000 [ 491.427469][T14724] tipc: Resetting bearer [ 491.543681][T14724] tipc: Disabling bearer [ 491.855441][T14742] syz_tun: left allmulticast mode [ 491.887655][T14742] __nla_validate_parse: 5 callbacks suppressed [ 491.887681][T14742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2212'. [ 491.956705][T14742] nbd: must specify a device to reconfigure [ 492.438516][T14752] veth1_vlan: left promiscuous mode [ 492.473377][T14752] veth0_vlan: left promiscuous mode [ 492.495328][T14752] veth0_vlan: entered promiscuous mode [ 492.540138][T14752] veth1_vlan: entered promiscuous mode [ 492.741349][T14752] veth1_macvtap: left promiscuous mode [ 492.756144][T14752] veth0_macvtap: left promiscuous mode [ 492.778025][T14752] veth0_macvtap: entered promiscuous mode [ 492.794732][T14752] veth1_macvtap: entered promiscuous mode [ 492.830172][T14752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.846725][T14752] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.857766][T14752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.866777][T14752] 8021q: adding VLAN 0 to HW filter on device bond4 [ 492.879670][T14752] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.892547][T14752] 8021q: adding VLAN 0 to HW filter on device bond6 [ 492.901871][T14752] 8021q: adding VLAN 0 to HW filter on device bond7 [ 492.918074][T14752] 8021q: adding VLAN 0 to HW filter on device bond8 [ 492.933233][T14752] 8021q: adding VLAN 0 to HW filter on device bond9 [ 492.948723][T14752] 8021q: adding VLAN 0 to HW filter on device bond10 [ 492.958027][T14752] 8021q: adding VLAN 0 to HW filter on device bond11 [ 492.972958][T14752] 8021q: adding VLAN 0 to HW filter on device bond12 [ 492.984048][T14752] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 492.994338][T14752] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 493.004155][T14752] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 493.014152][T14752] batman_adv: batadv0: Interface activated: macvtap1 [ 493.029030][T14752] 8021q: adding VLAN 0 to HW filter on device eth0 [ 493.043499][T14752] 8021q: adding VLAN 0 to HW filter on device eth1 [ 493.064088][T14752] 8021q: adding VLAN 0 to HW filter on device eth2 [ 493.087346][T14752] 8021q: adding VLAN 0 to HW filter on device eth3 [ 493.096800][T14752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.111197][T14752] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 493.134148][T14752] vlan5: left promiscuous mode [ 493.237692][ T9647] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.247636][ T9647] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.264889][T14769] xt_hashlimit: size too large, truncated to 1048576 [ 493.280429][ T9647] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.304276][ T9647] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.379565][T14768] veth1: entered promiscuous mode [ 493.414087][T14768] veth1: entered allmulticast mode [ 493.668039][T14784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2224'. [ 493.830346][T14789] syzkaller0: entered promiscuous mode [ 493.842283][T14789] syzkaller0: entered allmulticast mode [ 493.884553][T14791] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 493.934923][T14791] bridge_slave_1: Caught tx_queue_len zero misconfig [ 494.090227][T14794] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2227'. [ 494.119595][T14794] net_ratelimit: 3320 callbacks suppressed [ 494.119618][T14794] openvswitch: netlink: Message has 3 unknown bytes. [ 494.621606][T14807] vxcan0: tx address claim with dest, not broadcast [ 494.660779][T14809] netlink: 'syz.1.2232': attribute type 1 has an invalid length. [ 494.690916][T14809] 8021q: adding VLAN 0 to HW filter on device bond13 [ 494.716501][T14809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.733727][T14807] lo speed is unknown, defaulting to 1000 [ 494.762649][T14809] bond13: (slave ip6gretap0): making interface the new active one [ 494.783968][T14809] bond13: (slave ip6gretap0): Enslaving as an active interface with an up link [ 495.043323][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2233'. [ 495.252326][T14807] lo speed is unknown, defaulting to 1000 [ 495.427772][T14831] netlink: 'syz.1.2238': attribute type 10 has an invalid length. [ 495.465294][T14831] syz_tun: entered promiscuous mode [ 495.737240][T14841] lo speed is unknown, defaulting to 1000 [ 496.242004][T14841] lo speed is unknown, defaulting to 1000 [ 497.525113][T14855] syzkaller0: entered promiscuous mode [ 497.530791][T14855] syzkaller0: entered allmulticast mode [ 498.163269][T14822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.554260][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 498.561232][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 498.568163][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 498.575133][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 498.582060][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 498.588936][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 498.595844][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 498.602813][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 498.634482][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2247'. [ 498.718352][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2247'. [ 498.759534][T14876] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2247'. [ 498.811513][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2247'. [ 498.853391][T14876] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2247'. [ 498.946245][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2247'. [ 499.166855][T14870] net_ratelimit: 696 callbacks suppressed [ 499.166876][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 499.179637][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 499.186573][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 499.193492][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 499.200362][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 499.207277][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 499.214230][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 499.221158][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 499.228034][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 499.234938][T14870] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 499.550824][T14905] netlink: 'syz.0.2250': attribute type 10 has an invalid length. [ 499.968979][T14894] gre0: left promiscuous mode [ 500.105661][T14894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.118282][T14894] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.137606][T14894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.198494][T14894] veth1_macvtap: left promiscuous mode [ 500.206319][T14894] veth0_macvtap: left promiscuous mode [ 500.214065][T14894] veth0_macvtap: entered promiscuous mode [ 500.224207][T14894] veth1_macvtap: entered promiscuous mode [ 500.244635][T14894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.253785][T14894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.263884][T14894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.276097][T14894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.289333][T14894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.311170][T14894] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.324270][T14894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 500.389208][T14894] 8021q: adding VLAN 0 to HW filter on device bond4 [ 500.418433][T14894] 8021q: adding VLAN 0 to HW filter on device bond5 [ 500.446940][T14894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 500.478015][T14894] 8021q: adding VLAN 0 to HW filter on device bond7 [ 500.503379][T14894] 8021q: adding VLAN 0 to HW filter on device bond8 [ 500.534165][T14894] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 500.545415][T14894] 8021q: adding VLAN 0 to HW filter on device bond9 [ 500.557622][T14894] 8021q: adding VLAN 0 to HW filter on device bond10 [ 500.570547][T14894] 8021q: adding VLAN 0 to HW filter on device bond11 [ 500.587002][T14922] netlink: 'syz.1.2252': attribute type 13 has an invalid length. [ 500.607510][T14894] 8021q: adding VLAN 0 to HW filter on device bond12 [ 500.614900][T14922] netlink: 'syz.1.2252': attribute type 17 has an invalid length. [ 500.646796][T14894] 8021q: adding VLAN 0 to HW filter on device bond13 [ 500.658920][T14894] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 500.677974][T14894] 8021q: adding VLAN 0 to HW filter on device bond14 [ 500.848277][ T5835] lo speed is unknown, defaulting to 1000 [ 500.874210][ T5835] syz2: Port: 1 Link ACTIVE [ 500.967097][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.992204][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.079267][T14918] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 501.320915][T14918] batman_adv: batadv0: Interface deactivated: macvtap1 [ 501.405455][T14922] gretap0: left promiscuous mode [ 501.442458][T14922] syz_tun: left promiscuous mode [ 501.456873][T14922] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.467751][T14922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.529286][T14922] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 501.536671][T14922] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 501.554919][T14922] veth1_vlan: left promiscuous mode [ 501.561885][T14922] veth0_vlan: left promiscuous mode [ 501.568603][T14922] veth0_vlan: entered promiscuous mode [ 501.580243][T14922] veth1_vlan: entered promiscuous mode [ 501.594695][T14922] veth1_macvtap: left promiscuous mode [ 501.602472][T14922] veth0_macvtap: left promiscuous mode [ 501.610177][T14922] veth0_macvtap: entered promiscuous mode [ 501.626785][T14922] veth1_macvtap: entered promiscuous mode [ 501.640384][T14922] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 501.658789][T14922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.669096][T14922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 501.678864][T14922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 501.687895][T14922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 501.704336][T14922] 8021q: adding VLAN 0 to HW filter on device bond5 [ 501.716111][T14922] 8021q: adding VLAN 0 to HW filter on device bond6 [ 501.725957][T14922] 8021q: adding VLAN 0 to HW filter on device bond7 [ 501.737181][T14922] 8021q: adding VLAN 0 to HW filter on device bond8 [ 501.761361][T14922] 8021q: adding VLAN 0 to HW filter on device bond9 [ 501.774654][T14922] 8021q: adding VLAN 0 to HW filter on device bond10 [ 501.784345][T14922] 8021q: adding VLAN 0 to HW filter on device bond11 [ 501.802676][T14922] 8021q: adding VLAN 0 to HW filter on device bond12 [ 501.812792][T14922] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 501.822369][T14922] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 501.833919][T14922] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 501.842348][T14922] batman_adv: batadv0: Interface activated: macvtap1 [ 501.855793][T14922] gretap0: entered promiscuous mode [ 501.866838][T14922] 8021q: adding VLAN 0 to HW filter on device eth0 [ 501.879315][T14922] 8021q: adding VLAN 0 to HW filter on device eth1 [ 501.891813][T14922] 8021q: adding VLAN 0 to HW filter on device eth2 [ 501.905965][T14922] 8021q: adding VLAN 0 to HW filter on device eth3 [ 501.919528][T14922] bond0: left allmulticast mode [ 501.925493][T14922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.940116][T14922] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 501.956609][T14922] vlan5: left allmulticast mode [ 501.962007][T14922] gretap0: left allmulticast mode [ 501.972694][T14922] 8021q: adding VLAN 0 to HW filter on device bond13 [ 502.000353][ T1038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.806623][T14951] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 502.930073][T14967] syzkaller0: entered promiscuous mode [ 502.947901][T14967] syzkaller0: entered allmulticast mode [ 503.662022][ T1693] block nbd0: Possible stuck request ffff888027c50000: control (read@0,1024B). Runtime 240 seconds [ 503.676562][ T1693] block nbd0: Dead connection, failed to find a fallback [ 504.784095][ T5728] net_ratelimit: 880 callbacks suppressed [ 504.784120][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.941713][T13133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.039851][T15002] netlink: 'syz.1.2261': attribute type 12 has an invalid length. [ 505.124966][T14939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.646676][T15018] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2264'. [ 505.739912][T15022] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2264'. [ 505.824969][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.868658][T15018] bond0 (unregistering): Released all slaves [ 506.015366][T15022] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2264'. [ 506.225309][ T8124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.568466][T15040] bridge6: entered promiscuous mode [ 506.612180][T15040] bridge6: entered allmulticast mode [ 506.767959][T15040] team0: Port device bridge6 added [ 506.862924][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.002010][T15035] bridge7: entered promiscuous mode [ 507.031654][T15035] bridge7: entered allmulticast mode [ 507.083436][T15035] team0: Port device bridge7 added [ 507.099827][T15038] bridge0: port 2(team0) entered blocking state [ 507.123803][T15038] bridge0: port 2(team0) entered disabled state [ 507.142269][T15038] team0: entered allmulticast mode [ 507.168424][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'. [ 507.188121][T15038] team0: left allmulticast mode [ 507.405210][T15063] hsr0: entered allmulticast mode [ 507.432998][T15063] hsr_slave_0: entered allmulticast mode [ 507.449716][T15063] hsr_slave_1: entered allmulticast mode [ 507.833864][T15076] tipc: Enabled bearer , priority 0 [ 507.906205][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.936850][T15076] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 507.958571][T15076] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 507.997277][T15074] netlink: 'syz.4.2271': attribute type 1 has an invalid length. [ 508.001566][T13133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.005694][T15081] syzkaller0: mtu less than device minimum [ 508.419364][T15087] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2274'. [ 508.469473][T15087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2274'. [ 508.683046][T15090] tipc: Enabled bearer , priority 0 [ 508.732066][T15095] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 508.767518][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'. [ 508.776271][T15095] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 508.860268][ T29] audit: type=1804 audit(1779419414.419:7): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2273" name="/newroot/459/cgroup.controllers" dev="tmpfs" ino=2375 res=1 errno=0 [ 508.957438][ T8142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.974198][ T29] audit: type=1800 audit(1779419414.419:8): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2273" name="cgroup.controllers" dev="tmpfs" ino=2375 res=0 errno=0 [ 509.031643][T15095] syzkaller0: mtu less than device minimum [ 509.075713][ T29] audit: type=1804 audit(1779419414.479:9): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2273" name="/newroot/459/cgroup.controllers" dev="tmpfs" ino=2375 res=1 errno=0 [ 509.954903][T15114] tipc: Failed to remove unknown binding: 66,0,0/2865334769:670674006/670674008 [ 509.985413][ T8138] net_ratelimit: 11 callbacks suppressed [ 509.985437][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.048292][T15114] tipc: Failed to remove unknown binding: 66,0,0/2865334769:670674006/670674007 [ 510.134515][T15114] tipc: Failed to remove unknown binding: 66,0,0/2865334769:670674006/670674008 [ 510.215395][T15114] tipc: Failed to remove unknown binding: 66,0,0/2865334769:670674006/670674007 [ 510.338126][ T5787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.365306][ T5787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.408735][T15121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.741910][T15130] lo speed is unknown, defaulting to 1000 [ 511.021472][T13133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.030589][T13133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.523507][T15154] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 511.545375][T15154] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 511.589526][T15151] tipc: Enabling of bearer rejected, already enabled [ 511.636471][T15145] syzkaller0: mtu less than device minimum [ 511.810168][T15161] batman_adv: batadv0: Adding interface: dummy0 [ 511.843905][T15161] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 511.935368][T15161] batman_adv: batadv0: Interface activated: dummy0 [ 512.063279][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.188679][T15152] lo speed is unknown, defaulting to 1000 [ 512.208347][T15130] lo speed is unknown, defaulting to 1000 [ 512.348160][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2287'. [ 512.365769][T15172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.380829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.646724][T15173] batadv0: mtu less than device minimum [ 512.687844][T15173] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 512.699869][T15173] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.273546][T15170] lo speed is unknown, defaulting to 1000 [ 513.419037][T15186] tipc: Enabling of bearer rejected, already enabled [ 513.998616][T15191] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2291'. [ 514.009474][T15191] 0ªX¹¦À: renamed from batadv0 (while UP) [ 514.024840][T15191] 0ªX¹¦À: entered allmulticast mode [ 514.164642][T15152] lo speed is unknown, defaulting to 1000 [ 514.249223][T15170] lo speed is unknown, defaulting to 1000 [ 515.110890][ T1038] net_ratelimit: 23 callbacks suppressed [ 515.118323][ T1038] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 515.201128][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.665340][ T5787] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 515.756096][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 515.835987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.849240][ T8124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.185697][T15228] netlink: 'syz.1.2295': attribute type 32 has an invalid length. [ 516.223451][ T8142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.251767][ T1038] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 516.644937][T15221] 8021q: adding VLAN 0 to HW filter on device  [ 516.693922][T15221] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.831949][ T9647] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 516.938210][T15221] batadv0: left promiscuous mode [ 516.953472][T15221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.976182][T15221] veth1: left promiscuous mode [ 516.989991][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2297'. [ 517.025306][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2297'. [ 517.106882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.147594][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.545442][T15221] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 517.556278][T15221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.573418][T15221] veth1_vlan: left promiscuous mode [ 517.584504][T15221] veth0_vlan: left promiscuous mode [ 517.592473][T15221] veth0_vlan: entered promiscuous mode [ 517.605201][T15221] veth1_vlan: entered promiscuous mode [ 517.618237][T15221] veth1_macvtap: left promiscuous mode [ 517.626734][T15221] veth0_macvtap: left promiscuous mode [ 517.636250][T15221] veth0_macvtap: entered promiscuous mode [ 517.649965][T15221] veth1_macvtap: entered promiscuous mode [ 517.669506][T15221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.682893][T15221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.692851][T15221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.703244][T15221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.714619][T15221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.735164][T15221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.752807][T15221] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 517.764530][T15221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 517.785719][T15221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 517.808906][T15221] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 517.819012][T15221] bond5: left promiscuous mode [ 517.828445][T15221] 8021q: adding VLAN 0 to HW filter on device bond5 [ 517.846448][T15221] 8021q: adding VLAN 0 to HW filter on device bond6 [ 517.863069][T15221] 8021q: adding VLAN 0 to HW filter on device bond7 [ 517.877002][T15221] 8021q: adding VLAN 0 to HW filter on device bond8 [ 517.887465][T15221] batadv0: entered promiscuous mode [ 517.893830][T15221] batadv0: entered allmulticast mode [ 517.900316][T15221] macvtap1: left promiscuous mode [ 517.907792][T15221] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 517.921775][T15221] 8021q: adding VLAN 0 to HW filter on device bond9 [ 517.934712][T15221] team1: left promiscuous mode [ 517.940294][T15221] 8021q: adding VLAN 0 to HW filter on device team1 [ 517.949003][T15221] team2: left promiscuous mode [ 517.955633][T15221] 8021q: adding VLAN 0 to HW filter on device team2 [ 517.976306][T15221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.008978][T15221] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 518.018296][T15221] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 518.480482][T15255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2298'. [ 518.748312][ T9649] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 518.759139][ T9649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.770011][ T9649] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 518.781857][ T9649] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 518.800581][ T9649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.811307][ T9649] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 518.917656][T15267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2300'. [ 518.978903][T15262] tipc: Enabled bearer , priority 0 [ 519.079266][ T9649] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 519.134878][ T9649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.157848][ T9649] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 519.200612][ T9649] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 519.261759][ T9649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.345841][ T9649] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 519.457517][T15258] tipc: Resetting bearer [ 519.546710][T15263] syzkaller0: entered promiscuous mode [ 519.601540][T15263] syzkaller0: entered allmulticast mode [ 519.615970][T15278] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 519.615970][T15278] Please contact the netfilter-devel mailing list or update your nftables rules. [ 519.740806][T15257] tipc: Resetting bearer [ 519.924282][T15257] tipc: Disabling bearer [ 519.952924][T15282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'. [ 520.107807][T15272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.138785][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2303'. [ 520.224185][ T5835] net_ratelimit: 10 callbacks suppressed [ 520.224223][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.381116][T15279] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 520.390065][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.448590][T15279] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 520.464771][ T36] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 520.723099][T15279] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 520.769826][T15279] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 520.862492][T15287] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 520.885952][T15279] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 520.912401][T15279] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 520.957264][T15279] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 520.980498][T15279] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 521.088732][ T1038] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 521.427622][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.651468][ T9647] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 522.172534][ T1038] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 522.461722][ T8139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.711902][ T5787] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 522.741343][T15304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.560530][ T8138] lo speed is unknown, defaulting to 1000 [ 523.578390][ T8138] syz2: Port: 1 Link DOWN [ 523.701536][ T1038] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.731841][ T1038] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.764089][T15279] tipc: Resetting bearer [ 523.795421][ T1038] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.809507][ T1038] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.830114][ T1038] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.843618][ T1038] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.856631][T15279] tipc: Resetting bearer [ 525.284443][ T76] net_ratelimit: 12 callbacks suppressed [ 525.284500][ T76] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 525.428619][ T8124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.518046][T15331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2313'. [ 525.528810][T15328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.589191][ T8142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.903739][ T35] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 526.297332][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2315'. [ 526.315478][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.491123][ T76] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 526.625447][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.081426][ T5787] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 527.628037][T15326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.641382][ T35] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 527.687023][T15326] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.739659][T15326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.134984][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2312'. [ 528.184822][ T8124] lo speed is unknown, defaulting to 1000 [ 528.225796][ T8124] syz2: Port: 1 Link ACTIVE [ 528.909215][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2316'. [ 529.117266][T15370] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2316'. [ 530.742378][ T1038] net_ratelimit: 10 callbacks suppressed [ 530.742435][ T1038] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 530.862310][ T8142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.029297][T15396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.319183][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2323'. [ 531.416334][ T5787] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 531.770798][T15415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'. [ 531.921474][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.065252][ T1038] batman_adv: 60ªX¹¦À: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 532.430636][T15401] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 532.552997][T15401] batman_adv: 60ªX¹¦À: Interface deactivated: dummy0 [ 532.579013][T15442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'. [ 532.686398][T15401] 0ªX¹¦À: left allmulticast mode [ 532.862817][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.186313][T15424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.697296][T15401] batman_adv: 60ªX¹¦À: Interface deactivated: macvtap1 [ 533.748848][T15401] bridge6: left allmulticast mode [ 533.761838][T15401] bridge7: left allmulticast mode [ 533.849174][ T5764] syz0: Port: 1 Link DOWN [ 533.849197][ T9641] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.865000][ T9641] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.884314][ T9641] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.897042][ T9641] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.919763][ T9641] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.941130][ T9641] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.027078][ T9641] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.060115][ T9641] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.298127][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.376071][T15464] syzkaller1: entered promiscuous mode [ 534.419224][T15464] syzkaller1: entered allmulticast mode [ 534.705039][T15476] block nbd1: server does not support multiple connections per device. [ 534.734954][T15476] block nbd1: shutting down sockets [ 534.835349][T15480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2331'. [ 534.923759][T15462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.964753][T15462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.142467][T15462] hsr0: left allmulticast mode [ 535.181337][T15462] hsr_slave_0: left allmulticast mode [ 535.204918][T15462] hsr_slave_1: left allmulticast mode [ 535.613461][T15462] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 535.641080][T15462] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 535.659112][T15462] syzkaller1: left promiscuous mode [ 535.670488][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2332'. [ 535.680059][T15462] syzkaller1: left allmulticast mode [ 535.692896][T15464] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 535.713681][T15495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2333'. [ 535.855331][ T36] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.884019][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.919737][ T36] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.949334][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.075808][ T36] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.105992][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.144878][ T36] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.181244][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.798378][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2333'. [ 536.859238][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2335'. [ 536.872221][T15516] netlink: 'syz.0.2336': attribute type 1 has an invalid length. [ 536.901813][T15516] netlink: 'syz.0.2336': attribute type 2 has an invalid length. [ 537.286048][T15529] netlink: 'syz.0.2338': attribute type 13 has an invalid length. [ 537.337595][T15529] netlink: 'syz.0.2338': attribute type 17 has an invalid length. [ 538.350806][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2340'. [ 538.657171][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 539.752401][T15568] block nbd1: server does not support multiple connections per device. [ 539.772833][T15568] block nbd1: shutting down sockets [ 540.527981][T15523] batadv0: left allmulticast mode [ 541.456723][T15529] 8021q: adding VLAN 0 to HW filter on device  [ 541.466301][T15529] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.479566][T15529] batadv0: left promiscuous mode [ 541.487591][T15529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.498650][T15529] veth1: left allmulticast mode [ 541.567140][T15529] veth1_vlan: left promiscuous mode [ 541.574709][T15529] veth0_vlan: left promiscuous mode [ 541.583584][T15529] veth0_vlan: entered promiscuous mode [ 541.597135][T15529] veth1_vlan: entered promiscuous mode [ 541.618566][T15529] veth1_macvtap: left promiscuous mode [ 541.626354][T15529] veth0_macvtap: left promiscuous mode [ 541.635310][T15529] veth0_macvtap: entered promiscuous mode [ 541.660799][T15529] veth1_macvtap: entered promiscuous mode [ 541.678879][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.697825][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.716312][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.733618][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 541.755368][T15529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.785223][T15529] 8021q: adding VLAN 0 to HW filter on device bond2 [ 541.802849][T15529] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 541.813305][T15529] 8021q: adding VLAN 0 to HW filter on device bond3 [ 541.834774][T15529] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check. [ 541.860687][T15544] gretap0: left promiscuous mode [ 541.898034][T15544] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.923579][T15544] batman_adv: 60ªX¹¦À: Interface activated: dummy0 [ 541.939109][T15544] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 541.973583][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.984301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.999518][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.008336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.024604][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.035875][T15423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.047315][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.059321][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.070294][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.122463][T15544] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 542.265949][T15563] netlink: 'syz.2.2342': attribute type 12 has an invalid length. [ 542.279871][ T9641] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 542.303102][ T9641] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.334110][ T9641] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 542.366904][ T9641] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.395166][ T9641] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 542.433765][ T9641] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.547416][T15533] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.584507][ T5835] syz0: Port: 1 Link ACTIVE [ 542.590039][ T9641] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 542.605813][ T9641] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.851647][T15533] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.151930][T15583] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2345'. [ 543.284269][T15533] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.730243][T15533] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.005096][T15592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2347'. [ 544.073688][ T9647] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.200173][ T35] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.237073][ T35] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.456451][ T9641] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.754074][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2350'. [ 545.065157][T15617] netlink: 'syz.3.2351': attribute type 16 has an invalid length. [ 545.100022][T15617] netlink: 'syz.3.2351': attribute type 17 has an invalid length. [ 545.356492][T15617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.421582][T15617] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.523033][T15617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.833205][T15617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.934990][T15617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.086178][T15617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 546.205996][T15617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.998368][T15636] net_ratelimit: 235 callbacks suppressed [ 546.998392][T15636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.016482][T15636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.048089][T15636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.086549][T15636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.098275][T15636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.111217][T15636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.119691][T15636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.146761][T15636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.159521][T15636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.169078][T15636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.466351][T15631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.545029][T15631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.949531][T15649] pim6reg: entered allmulticast mode [ 547.976946][T15649] pim6reg: left allmulticast mode [ 548.951856][T15676] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2362'. [ 549.011641][T15678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2362'. [ 549.379419][T15686] dvmrp0: entered allmulticast mode [ 549.416876][T15678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2362'. [ 549.564692][T15697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2365'. [ 549.594856][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 550.207158][T15712] netlink: 'syz.4.2367': attribute type 21 has an invalid length. [ 550.251521][T15712] netlink: 'syz.4.2367': attribute type 21 has an invalid length. [ 550.437709][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2367'. [ 550.468035][T15712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'. [ 550.680456][ T5787] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.695285][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2367'. [ 550.717854][ T5787] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.747481][T15712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'. [ 550.769271][ T5787] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.808236][ T5787] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.913524][T15721] vlan2: entered promiscuous mode [ 550.931784][T15721] gretap0: entered promiscuous mode [ 550.952196][T15721] vlan2: entered allmulticast mode [ 550.982207][T15721] gretap0: entered allmulticast mode [ 552.100866][T15739] tipc: Resetting bearer [ 552.146750][ C0] net_ratelimit: 1021 callbacks suppressed [ 552.146808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.166372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.755411][T15762] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2378'. [ 552.868614][ T9649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.883908][T15423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.953250][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.968220][T15446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.009265][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.024202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.115631][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.135493][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.700697][T15755] tipc: Resetting bearer [ 554.135661][T15760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.166032][T15760] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.204247][T15760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.329258][T15760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.344087][T15760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.360442][T15760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 554.371346][T15760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 554.389739][T15753] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 554.400404][T15753] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 554.415770][T15753] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 555.241413][T15427] lo speed is unknown, defaulting to 1000 [ 555.818677][T15805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2386'. [ 557.344302][ T5835] net_ratelimit: 25 callbacks suppressed [ 557.344336][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.374960][T15426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.067140][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.091898][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.101328][T15428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.116821][T15423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.216339][ T9641] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.246984][ T9641] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.429209][ T9641] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.441831][ T9641] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.474430][T15425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.702981][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.719130][T15842] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2392'. [ 558.730776][T15842] netlink: 47 bytes leftover after parsing attributes in process `syz.2.2392'. [ 558.752884][T15842] netlink: 'syz.2.2392': attribute type 6 has an invalid length. [ 558.786997][T15842] netlink: 'syz.2.2392': attribute type 6 has an invalid length. [ 558.936445][T15849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.947072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.336750][T15856] vlan2: entered promiscuous mode [ 559.384069][T15856] gretap0: entered promiscuous mode [ 559.408579][T15856] vlan2: entered allmulticast mode [ 559.434695][T15856] gretap0: entered allmulticast mode [ 559.500444][T15861] xt_hashlimit: size too large, truncated to 1048576 [ 559.702807][T15866] vlan3: entered promiscuous mode [ 559.722971][T15866] gretap0: entered promiscuous mode [ 559.774127][T15866] vlan3: entered allmulticast mode [ 559.820782][T15866] gretap0: entered allmulticast mode [ 559.932731][T15872] netlink: 'syz.1.2402': attribute type 10 has an invalid length. [ 559.956233][T15872] syz_tun: entered promiscuous mode [ 560.705409][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2405'. [ 560.733513][T15886] netlink: 'syz.3.2406': attribute type 12 has an invalid length. [ 561.309906][T15903] xt_SECMARK: invalid mode: 4 [ 561.333608][T15903] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2409'. [ 562.229018][T15911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2411'. [ 562.350981][ C1] net_ratelimit: 801 callbacks suppressed [ 562.351038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.381533][T15907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.392346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.438404][T15907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.447001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.481283][T15907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.489763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.508857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.520103][T15907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.520842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.898241][T15920] lo speed is unknown, defaulting to 1000 [ 563.113681][T15924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2415'. [ 563.270118][T15926] vlan0: entered promiscuous mode [ 563.295797][T15926] gretap0: entered promiscuous mode [ 563.321190][T15926] vlan0: entered allmulticast mode [ 563.344497][T15926] gretap0: entered allmulticast mode [ 563.448138][T15927] batman_adv: 60ªX¹¦À: Interface deactivated: dummy0 [ 563.462242][T15927] batman_adv: 60ªX¹¦À: Removing interface: dummy0 [ 563.829117][T15945] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2419'. [ 564.009311][T15932] lo speed is unknown, defaulting to 1000 [ 564.030875][T15920] lo speed is unknown, defaulting to 1000 [ 564.656394][T15944] lo speed is unknown, defaulting to 1000 [ 564.661600][T15932] lo speed is unknown, defaulting to 1000 [ 565.451553][T15963] netlink: 'syz.4.2422': attribute type 10 has an invalid length. [ 565.646365][T15944] lo speed is unknown, defaulting to 1000 [ 566.478486][T15975] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2429'. [ 566.495317][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'. [ 566.552354][T15977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2428'. [ 566.658388][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'. [ 566.698676][T15986] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 567.507054][T15443] net_ratelimit: 652 callbacks suppressed [ 567.507077][T15443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.638417][T16002] netlink: 'syz.4.2434': attribute type 58 has an invalid length. [ 567.668561][T16002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2434'. [ 567.730493][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2432'. [ 567.744173][T16004] netlink: 'syz.1.2435': attribute type 49 has an invalid length. [ 567.873206][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'. [ 567.901311][T15443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.144421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.469713][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 568.548823][T15443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.634388][T16018] netlink: 'syz.4.2438': attribute type 1 has an invalid length. [ 568.719115][T16021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2438'. [ 568.924534][T16027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2439'. [ 568.944550][T15443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.006725][T16029] netlink: 'syz.4.2438': attribute type 1 has an invalid length. [ 569.216583][T15991] tipc: Resetting bearer [ 569.459163][T16018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.501592][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.523805][T16038] netlink: 'syz.2.2440': attribute type 13 has an invalid length. [ 569.555408][T16038] netlink: 'syz.2.2440': attribute type 17 has an invalid length. [ 569.582342][ T9649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.583282][T15439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.607809][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.654704][T16020] 8021q: adding VLAN 0 to HW filter on device  [ 569.684148][T16020] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.737392][T16020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.753983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.923641][T16020] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 569.940646][T16028] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 569.965552][T16029] bond0: (slave batadv3): Opening slave failed [ 570.004815][T16043] netlink: 'syz.3.2441': attribute type 10 has an invalid length. [ 570.522960][T16055] block nbd1: server does not support multiple connections per device. [ 570.537544][T16038] gre0: left allmulticast mode [ 570.544535][T16055] block nbd1: shutting down sockets [ 570.638472][T16038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.650819][T16038] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.666770][T16038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.840565][T16038] veth1_macvtap: left promiscuous mode [ 570.847953][T16038] veth0_macvtap: left promiscuous mode [ 570.857943][T16038] veth0_macvtap: entered promiscuous mode [ 570.879929][T16038] veth1_macvtap: entered promiscuous mode [ 570.894054][T16038] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.910134][T16038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.925995][T16038] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.939584][T16038] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.952901][T16038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 570.969738][T16038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 570.985888][T16038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 571.141580][T16038] 8021q: adding VLAN 0 to HW filter on device bond4 [ 571.177712][T16038] 8021q: adding VLAN 0 to HW filter on device bond5 [ 571.189275][T16038] 8021q: adding VLAN 0 to HW filter on device bond6 [ 571.199017][T16038] 8021q: adding VLAN 0 to HW filter on device bond7 [ 571.209993][T16038] 8021q: adding VLAN 0 to HW filter on device bond8 [ 571.230697][T16038] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 571.240113][T16038] 8021q: adding VLAN 0 to HW filter on device bond9 [ 571.249417][T16038] 8021q: adding VLAN 0 to HW filter on device bond10 [ 571.262723][T16038] 8021q: adding VLAN 0 to HW filter on device bond11 [ 571.280142][T16038] 8021q: adding VLAN 0 to HW filter on device bond12 [ 571.361975][T16038] 8021q: adding VLAN 0 to HW filter on device bond13 [ 571.371354][T16038] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 571.401251][T16038] 8021q: adding VLAN 0 to HW filter on device bond14 [ 572.646737][ T8126] net_ratelimit: 20 callbacks suppressed [ 572.646760][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.784655][T15443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.794577][T15439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.105244][T15443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.267959][T16038] vlan2: left promiscuous mode [ 573.273315][T16038] gretap0: left promiscuous mode [ 573.278586][T16038] vlan2: left allmulticast mode [ 573.284704][T16038] gretap0: left allmulticast mode [ 573.338909][T16043] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 573.366442][T13135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.389043][ T5835] lo speed is unknown, defaulting to 1000 [ 573.608523][T15425] lo speed is unknown, defaulting to 1000 [ 573.625269][ T9649] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.663258][ T9649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.743225][T16072] __nla_validate_parse: 3 callbacks suppressed [ 573.743248][T16072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2447'. [ 573.821722][T15425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.141467][T15425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.182835][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2447'. [ 574.301630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.310058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.862005][T15425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.786814][ T4992] udevd[4992]: worker [6035] /devices/virtual/block/nbd0 timeout; kill it [ 576.802457][ T4992] udevd[4992]: seq 15979 '/devices/virtual/block/nbd0' killed [ 576.839931][ T9649] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.868416][ T9649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.916312][ T9649] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.936687][ T9649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.034825][T16063] lo speed is unknown, defaulting to 1000 [ 577.076681][T16088] netlink: 'syz.3.2450': attribute type 1 has an invalid length. [ 577.244706][T16091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2450'. [ 577.615569][T16105] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2452'. [ 577.751783][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2452'. [ 577.873840][T16110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2454'. [ 577.909162][T16110] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2454'. [ 577.963068][T16110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2454'. [ 577.982878][T15439] net_ratelimit: 15 callbacks suppressed [ 577.982902][T15439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.017312][T16115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2453'. [ 578.040012][T16115] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2453'. [ 578.176320][T16063] lo speed is unknown, defaulting to 1000 [ 578.301461][T15439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.335861][T16099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.432711][T16123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.461945][ T9649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.478899][ T9649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.717289][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.945221][T16135] __nla_validate_parse: 1 callbacks suppressed [ 578.945248][T16135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2458'. [ 579.021636][T15436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.208923][T13133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.362221][T15436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.433384][T13133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.841920][T16150] netlink: 'syz.3.2461': attribute type 10 has an invalid length. [ 579.853881][T15425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.103297][T15429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.383123][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.068832][T15436] lo speed is unknown, defaulting to 1000 [ 581.089411][T15436] sqz0: Port: 1 Link DOWN [ 581.120694][ T9647] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.151707][ T9647] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.183695][ T9647] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.207487][ T9647] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.246405][T15428] lo speed is unknown, defaulting to 1000 [ 581.278396][T16159] syzkaller0: entered promiscuous mode [ 581.292476][T16159] syzkaller0: entered allmulticast mode [ 581.413463][T16164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2465'. [ 581.449311][ T9647] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.490146][ T9647] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.519703][ T9647] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.547137][ T9647] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.621638][T16179] block nbd1: server does not support multiple connections per device. [ 581.640520][T16179] block nbd1: shutting down sockets [ 581.664737][T16164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2465'. [ 581.718512][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2465'. [ 582.097299][T16193] netlink: 'syz.0.2468': attribute type 13 has an invalid length. [ 582.117484][T16193] netlink: 'syz.0.2468': attribute type 17 has an invalid length. [ 582.215996][T16198] sctp: [Deprecated]: syz.1.2469 (pid 16198) Use of int in max_burst socket option. [ 582.215996][T16198] Use struct sctp_assoc_value instead [ 582.608740][T16188] tipc: Resetting bearer [ 582.778568][T16193] 8021q: adding VLAN 0 to HW filter on device  [ 582.806020][T16193] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.857542][T16193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.923406][T16193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 582.936910][T16193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.954058][T16193] veth1_vlan: left promiscuous mode [ 582.963228][T16193] veth0_vlan: left promiscuous mode [ 582.970135][T16193] veth0_vlan: entered promiscuous mode [ 582.981978][T16193] veth1_vlan: entered promiscuous mode [ 582.994381][T16193] veth1_macvtap: left promiscuous mode [ 583.002217][T16193] veth0_macvtap: left promiscuous mode [ 583.009404][T16193] veth0_macvtap: entered promiscuous mode [ 583.024608][T16193] veth1_macvtap: entered promiscuous mode [ 583.045092][T16193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 583.054431][T16193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 583.063809][T16193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 583.073057][T16193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 583.082065][T16193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.097644][T16193] 8021q: adding VLAN 0 to HW filter on device bond2 [ 583.107614][T16193] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 583.118334][T16193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 583.139096][T16193] 8021q: adding VLAN 0 to HW filter on device bond4 [ 583.166662][T16193] bond5: left allmulticast mode [ 583.172777][T16193] 8021q: adding VLAN 0 to HW filter on device bond5 [ 583.193056][T16193] 8021q: adding VLAN 0 to HW filter on device bond6 [ 583.203928][T16193] vlan2: left allmulticast mode [ 583.208972][T16193] bond6: left allmulticast mode [ 583.214880][T16193] geneve3: left allmulticast mode [ 583.229639][T16193] 8021q: adding VLAN 0 to HW filter on device bond7 [ 583.242028][T16193] 8021q: adding VLAN 0 to HW filter on device bond8 [ 583.256543][T16193] batadv0: entered promiscuous mode [ 583.262922][T16193] batadv0: entered allmulticast mode [ 583.262933][T15426] net_ratelimit: 1068 callbacks suppressed [ 583.262950][T15426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.268354][T16193] macvtap1: left allmulticast mode [ 583.291802][T16193] batadv0: left allmulticast mode [ 583.298432][T16193] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 583.392040][T16193] 8021q: adding VLAN 0 to HW filter on device bond9 [ 583.402794][T16193] team1: left allmulticast mode [ 583.408254][T16193] 8021q: adding VLAN 0 to HW filter on device team1 [ 583.417402][T16193] team2: left allmulticast mode [ 583.423648][T16193] 8021q: adding VLAN 0 to HW filter on device team2 [ 583.439896][T16193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.548113][T16193] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 583.557465][T16193] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 583.596302][T16193] vlan3: left promiscuous mode [ 583.601475][T16193] gretap0: left promiscuous mode [ 583.606717][T16193] vlan3: left allmulticast mode [ 583.612649][T16193] gretap0: left allmulticast mode [ 583.663381][T15426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.747900][T16211] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2472'. [ 583.797667][ T137] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 583.843347][ T137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.864283][ T137] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 583.879738][T16223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.892586][ T137] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 583.902215][ T137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.912100][ T137] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 583.942274][T16213] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 583.943888][T16223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.957542][T16213] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 583.959381][T16213] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 583.995744][T16223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.023365][T16213] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 584.055858][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.094501][ T137] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 584.102786][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.123127][T16223] xt_hashlimit: size too large, truncated to 1048576 [ 584.136196][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.139696][ T137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.187261][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.200812][ T137] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 584.221860][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2476'. [ 584.231566][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.460335][ T137] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 584.490190][ T137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.509006][ T137] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 584.776192][T16238] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 584.842882][T16238] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2475'. [ 585.059860][T16251] tipc: Resetting bearer [ 585.183232][T16262] netlink: 'syz.1.2480': attribute type 142 has an invalid length. [ 585.561194][T16273] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2482'. [ 585.610661][T16273] netlink: 'syz.3.2482': attribute type 11 has an invalid length. [ 585.775921][T16275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2482'. [ 586.206961][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'. [ 586.237627][T16285] smc: removing ib device sqz0 [ 586.257038][T16293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2483'. [ 586.333826][T16298] netlink: 'syz.4.2485': attribute type 13 has an invalid length. [ 586.354713][T16298] netlink: 'syz.4.2485': attribute type 17 has an invalid length. [ 586.419887][T16285] smbdirect: ib_dev[sqz0] removed [ 586.622842][T16311] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 586.764146][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2486'. [ 586.774074][T16312] unsupported nla_type 216 [ 586.796042][T16282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2483'. [ 586.872725][T16313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2486'. [ 586.969684][T16298] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.994721][T16298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.071524][T16298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 587.084365][T16298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 587.115001][T16298] veth1_macvtap: left promiscuous mode [ 587.135528][T16298] veth0_macvtap: left promiscuous mode [ 587.155062][T16298] veth0_macvtap: entered promiscuous mode [ 587.187238][T16298] veth1_macvtap: entered promiscuous mode [ 587.200277][T16298] bridge0: port 1(vlan7) entered blocking state [ 587.206994][T16298] bridge0: port 1(vlan7) entered listening state [ 587.225669][T16298] geneve0: entered promiscuous mode [ 587.247202][T16298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 587.288006][T16298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.297614][T16298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 587.314410][T16298] 8021q: adding VLAN 0 to HW filter on device bond4 [ 587.328954][T16298] 8021q: adding VLAN 0 to HW filter on device bond5 [ 587.349647][T16298] 8021q: adding VLAN 0 to HW filter on device bond6 [ 587.359423][T16298] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 587.374805][T16298] 8021q: adding VLAN 0 to HW filter on device bond7 [ 587.386730][T16298] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 587.397797][T16298] 8021q: adding VLAN 0 to HW filter on device bond8 [ 587.413812][T16298] 8021q: adding VLAN 0 to HW filter on device bond9 [ 587.427024][T16298] 8021q: adding VLAN 0 to HW filter on device bond10 [ 587.443048][T16298] 8021q: adding VLAN 0 to HW filter on device bond11 [ 587.458856][T16298] 8021q: adding VLAN 0 to HW filter on device bond12 [ 587.469708][T16298] 8021q: adding VLAN 0 to HW filter on device bond13 [ 587.479902][T16298] 8021q: adding VLAN 0 to HW filter on device bond14 [ 587.499749][T16298] 8021q: adding VLAN 0 to HW filter on device bond15 [ 587.515361][T16298] veth0: entered promiscuous mode [ 587.524535][T16298] 8021q: adding VLAN 0 to HW filter on device bond16 [ 587.545594][T16298] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 587.554510][T16298] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 587.566269][T16298] vlan6: left promiscuous mode [ 587.571278][T16298] geneve1: left promiscuous mode [ 587.576720][T16298] vlan6: left allmulticast mode [ 587.582824][T16298] geneve1: left allmulticast mode [ 587.724133][ T9649] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.735127][T16306] netlink: 'syz.1.2495': attribute type 1 has an invalid length. [ 587.747276][ T9649] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.762137][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2495'. [ 587.789803][ T9649] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.810591][ T9649] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.857639][ T137] ip6_tunnel:  xmit: Local address not yet configured! [ 588.023164][T16317] netlink: 'syz.0.2488': attribute type 1 has an invalid length. [ 588.397381][T16317] bond10: entered promiscuous mode [ 588.433856][T16317] bond10: entered allmulticast mode [ 588.451675][T16317] 8021q: adding VLAN 0 to HW filter on device bond10 [ 588.463093][T15426] net_ratelimit: 67 callbacks suppressed [ 588.463116][T15426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.481766][ T137] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 588.547083][ T8122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.662162][T16322] erspan1: entered allmulticast mode [ 588.735337][T16322] bond10: (slave erspan1): making interface the new active one [ 588.757029][T16322] erspan1: entered promiscuous mode [ 588.782077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.788111][ T8122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.799177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.827743][T16322] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 588.867694][T15443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.887616][T16342] block nbd1: server does not support multiple connections per device. [ 588.927192][T16342] block nbd1: shutting down sockets [ 588.947884][T16331] syz.0.2488 (16331) used obsolete PPPIOCDETACH ioctl [ 589.092417][ T35] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.110596][ T35] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.142622][ T35] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.171696][ T35] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.201403][ T9649] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 589.424114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.509273][T15443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.750049][T16362] netlink: 'syz.1.2497': attribute type 10 has an invalid length. [ 589.850853][T16358] lo speed is unknown, defaulting to 1000 [ 589.973088][T16367] __nla_validate_parse: 4 callbacks suppressed [ 589.973111][T16367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2498'. [ 590.056006][T16373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2499'. [ 590.253726][T16374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2498'. [ 590.384132][T16374] nbd: device at index 64 is going down [ 590.856947][ T5735] udevd[5735]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 590.986678][T16392] lo speed is unknown, defaulting to 1000 [ 591.073709][T16393] batman_adv: batadv0: Adding interface: ipvlan2 [ 591.085071][T16393] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 591.155851][T16393] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 591.328195][T16402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2505'. [ 591.617357][T16405] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 591.979961][T16411] batman_adv: batadv0: Adding interface: dummy0 [ 591.993738][T16411] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 592.104061][T16411] batman_adv: batadv0: Interface activated: dummy0 [ 592.145885][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 592.263436][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2509'. [ 592.448704][T16435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2513'. [ 592.692377][T16420] tipc: Resetting bearer [ 592.907770][T16420] bond10: left promiscuous mode [ 592.915081][T16420] erspan1: left promiscuous mode [ 592.920386][T16420] bond10: left allmulticast mode [ 592.930234][T16420] erspan1: left allmulticast mode [ 592.943397][T16421] syzkaller1: entered promiscuous mode [ 592.961028][T16421] syzkaller1: entered allmulticast mode [ 593.131949][T16435] bond13: (slave ip6gretap0): Releasing active interface [ 593.196647][ T9649] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 593.206726][ T9649] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.218836][ T9649] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 593.295749][ T9649] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 593.306886][ T9649] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.324845][ T9649] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 593.338554][ T9649] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 593.354266][ T9649] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.370466][ T9649] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 593.471823][ T76] net_ratelimit: 693 callbacks suppressed [ 593.471845][ T76] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 593.522559][ T9649] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 593.548031][ T9649] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.570016][T16455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.575547][ T9649] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 593.592922][T16445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.604640][T16453] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 593.622554][T16453] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 593.636117][T16455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.661746][T15443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.704677][T16455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.727213][T16455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.731946][ T9649] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 593.753207][T16455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.792113][T16455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.842402][T16455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.004063][ T9647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.020513][ T9647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.168542][T16464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2521'. [ 594.267537][T16471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2522'. [ 594.446481][T16484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.246647][T16489] xt_CT: No such helper "snmp" [ 595.630501][T16507] tipc: Enabling of bearer rejected, already enabled [ 595.894285][T16509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2529'. [ 595.905292][T16512] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 596.620224][T16521] tipc: Enabling of bearer rejected, already enabled [ 596.630674][T16521] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 596.645823][T16521] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 596.798010][T16526] netlink: 'syz.4.2531': attribute type 13 has an invalid length. [ 596.822230][T16526] netlink: 'syz.4.2531': attribute type 17 has an invalid length. [ 597.029810][T16525] bridge0: port 1(vlan7) entered disabled state [ 597.150030][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2535'. [ 598.580318][T16525] tipc: Resetting bearer [ 598.670692][T16526] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.684774][T16526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.693964][T16526] veth0: left promiscuous mode [ 598.705524][ T9647] net_ratelimit: 409 callbacks suppressed [ 598.705549][ T9647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.721957][ T9647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.730463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.774669][T16526] veth1_macvtap: left promiscuous mode [ 598.783366][T16526] veth0_macvtap: left promiscuous mode [ 598.792874][T16526] veth0_macvtap: entered promiscuous mode [ 598.802023][T16526] veth1_macvtap: entered promiscuous mode [ 598.810349][T16526] geneve0: left promiscuous mode [ 598.822536][T16526] bridge0: port 1(vlan7) entered blocking state [ 598.829116][T16526] bridge0: port 1(vlan7) entered listening state [ 598.837623][T16526] geneve0: entered promiscuous mode [ 598.850345][T16526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 598.861513][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.872536][T16526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 598.882169][T16526] 8021q: adding VLAN 0 to HW filter on device bond3 [ 598.895610][T16526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 598.905587][T16526] 8021q: adding VLAN 0 to HW filter on device bond5 [ 598.917815][T16526] 8021q: adding VLAN 0 to HW filter on device bond6 [ 598.927201][T16526] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 598.939456][T16526] 8021q: adding VLAN 0 to HW filter on device bond7 [ 598.949154][T16526] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 598.958414][T16526] 8021q: adding VLAN 0 to HW filter on device bond8 [ 598.969676][T16526] 8021q: adding VLAN 0 to HW filter on device bond9 [ 598.979833][T16526] 8021q: adding VLAN 0 to HW filter on device bond10 [ 598.990521][T16526] 8021q: adding VLAN 0 to HW filter on device bond11 [ 599.003090][T16526] 8021q: adding VLAN 0 to HW filter on device bond12 [ 599.012642][T16526] 8021q: adding VLAN 0 to HW filter on device bond13 [ 599.020532][T16526] 8021q: adding VLAN 0 to HW filter on device bond14 [ 599.031141][ T9647] bond14: (slave ip6gretap1): link status up again after 0 ms [ 599.039847][T16526] 8021q: adding VLAN 0 to HW filter on device bond15 [ 599.051128][T16526] veth0: entered promiscuous mode [ 599.052917][ T9647] bond14: (slave ip6gretap1): link status up again after 0 ms [ 599.062353][T16526] 8021q: adding VLAN 0 to HW filter on device bond16 [ 599.076467][T16526] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 599.084088][T16526] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 599.084128][ T9647] bond14: (slave ip6gretap1): link status up again after 0 ms [ 599.104814][T16526] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 599.112404][ T9647] bond14: (slave ip6gretap1): link status up again after 0 ms [ 599.141298][ T9647] bond14: (slave ip6gretap1): link status up again after 0 ms [ 599.224406][ T36] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.241352][ T36] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.251664][ T9647] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.323453][ T9647] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.375652][T16534] lo speed is unknown, defaulting to 1000 [ 599.447220][ T9641] ip6_tunnel:  xmit: Local address not yet configured! [ 599.875592][T16571] tipc: Enabling of bearer rejected, already enabled [ 600.369983][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2544'. [ 600.425531][T16588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2544'. [ 601.762734][T16606] lo speed is unknown, defaulting to 1000 [ 603.306142][T16634] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 603.336001][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2555'. [ 603.527979][T16647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2555'. [ 603.661602][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 603.674726][T16653] x_tables: duplicate underflow at hook 1 [ 603.689475][T16633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 603.744625][ T8122] net_ratelimit: 272 callbacks suppressed [ 603.744646][ T8122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.779083][T16649] tipc: Resetting bearer [ 603.815107][T16657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.826803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.863896][T16649] tipc: Resetting bearer [ 603.872515][T16657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.881511][T16657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.893514][T16656] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2560'. [ 603.903100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.903656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.914097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.914672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.915765][T16660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.337912][T16640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.701937][T16671] block nbd1: server does not support multiple connections per device. [ 604.741965][T16671] block nbd1: shutting down sockets [ 605.168834][T16685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2567'. [ 605.660271][T16702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2571'. [ 605.992947][ T29] audit: type=1800 audit(1779419511.549:10): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2563" name="memory.events" dev="tmpfs" ino=2711 res=0 errno=0 [ 606.935897][ T5750] syz0: Port: 1 Link DOWN [ 606.958188][T16720] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 607.080575][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2575'. [ 607.107922][T16720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2575'. [ 607.132691][T16720] netlink: 'syz.2.2575': attribute type 18 has an invalid length. [ 607.215968][T16729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2576'. [ 607.269602][T16719] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2573'. [ 607.624153][T16737] block nbd1: server does not support multiple connections per device. [ 607.649989][T16737] block nbd1: shutting down sockets [ 607.948919][T16751] syzkaller0: entered promiscuous mode [ 607.967007][T16751] syzkaller0: entered allmulticast mode [ 608.077123][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2584'. [ 608.844647][ T13] net_ratelimit: 1333 callbacks suppressed [ 608.844669][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.863555][ T9649] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 608.896802][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.991028][ T13] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 609.102022][T13133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.116158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.127060][ T9649] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 609.166010][T16774] __nla_validate_parse: 1 callbacks suppressed [ 609.166034][T16774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2586'. [ 609.261597][ T9647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.272693][ T9647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.283599][ T36] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 609.544148][T16788] netlink: 'syz.2.2590': attribute type 1 has an invalid length. [ 609.813545][T16791] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2590'. [ 609.852799][T16788] 8021q: adding VLAN 0 to HW filter on device bond16 [ 609.862788][T16788] bond15: (slave bond16): making interface the new active one [ 609.873189][T16788] bond15: (slave bond16): Enslaving as an active interface with an up link [ 609.952591][T16795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2592'. [ 610.119799][T16797] netlink: 'syz.2.2593': attribute type 4 has an invalid length. [ 610.141849][T16797] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2593'. [ 610.259560][T16799] hsr0: entered promiscuous mode [ 610.317862][T16798] hsr0: left promiscuous mode [ 610.388378][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2594'. [ 610.428372][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2594'. [ 610.451501][T16803] netlink: 'syz.4.2594': attribute type 18 has an invalid length. [ 610.549840][T16807] tipc: Enabled bearer , priority 0 [ 610.657056][T16801] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 610.733055][T16801] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 611.033966][T16822] bond0: (slave syz_tun): Releasing backup interface [ 611.146466][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2609'. [ 611.227931][T16806] tipc: Disabling bearer [ 611.270018][T16822] ip6gre2: entered allmulticast mode [ 611.286633][T16822] team0: Device ip6gre2 is of different type [ 611.579350][T16834] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 611.622103][T16834] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 611.724329][T16846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2602'. [ 611.778076][T16846] ip6gre2: entered promiscuous mode [ 611.795857][T16846] ip6gre2: entered allmulticast mode [ 611.884302][T16846] netlink: 'syz.3.2602': attribute type 6 has an invalid length. [ 611.913934][T16846] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2602'. [ 612.366034][T16852] block nbd1: server does not support multiple connections per device. [ 612.401466][T16852] block nbd1: shutting down sockets [ 612.462743][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 612.802638][T16869] netlink: 'syz.4.2612': attribute type 32 has an invalid length. [ 613.322484][T16870] batman_adv: batadv0: Interface deactivated: dummy0 [ 613.607555][T16870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.646254][T16870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.811385][T16874] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2612'. [ 613.846238][T16878] pim6reg: entered allmulticast mode [ 613.907227][T16881] pim6reg: left allmulticast mode [ 614.053975][T16888] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 614.076637][T16888] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 614.105018][T16886] net_ratelimit: 79 callbacks suppressed [ 614.105039][T16886] syzkaller0: mtu less than device minimum [ 614.141652][ T36] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 614.271027][ T9641] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 614.385104][T16900] xt_hashlimit: size too large, truncated to 1048576 [ 614.393543][ T9641] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 614.463080][ T8136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.500341][T16901] lo speed is unknown, defaulting to 1000 [ 614.521962][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.530473][ T13] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 614.546353][T16906] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2619'. [ 614.561785][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.813189][ T9641] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 614.931238][ T9649] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 614.952764][T16916] netlink: 'syz.0.2631': attribute type 13 has an invalid length. [ 614.960755][T16916] netlink: 'syz.0.2631': attribute type 17 has an invalid length. [ 615.006954][T16916] 8021q: adding VLAN 0 to HW filter on device  [ 615.016147][T16916] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.035483][T16916] batadv0: left promiscuous mode [ 615.049301][T16916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.106360][T16916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 615.119765][T16916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 615.132658][T16916] veth1_vlan: left promiscuous mode [ 615.139956][T16916] veth0_vlan: left promiscuous mode [ 615.151192][T16916] veth0_vlan: entered promiscuous mode [ 615.162419][T16916] veth1_vlan: entered promiscuous mode [ 615.173523][T16916] veth1_macvtap: left promiscuous mode [ 615.180810][T16916] veth0_macvtap: left promiscuous mode [ 615.189414][T16916] veth0_macvtap: entered promiscuous mode [ 615.221943][T16916] veth1_macvtap: entered promiscuous mode [ 615.234995][T16921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2631'. [ 615.279112][T16916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 615.286068][T16925] block nbd1: server does not support multiple connections per device. [ 615.305532][T16925] block nbd1: shutting down sockets [ 615.349612][T16916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 615.378979][T16916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 615.404139][T16916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 615.418916][T16916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 615.435836][T16916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 615.452908][T16916] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 615.466845][T16916] 8021q: adding VLAN 0 to HW filter on device bond3 [ 615.582094][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2624'. [ 615.776813][T16951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2625'. [ 615.818254][ T137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.026008][T16938] syzkaller0: entered promiscuous mode [ 616.061252][T16938] syzkaller0: entered allmulticast mode [ 616.085115][T16951] hsr_slave_0: left promiscuous mode [ 616.097589][T16951] hsr_slave_1: left promiscuous mode [ 616.147578][ T137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.201931][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.379860][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.519036][T16965] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 616.546875][T16965] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 617.043173][T16976] lo speed is unknown, defaulting to 1000 [ 617.195763][T16980] syzkaller0: entered promiscuous mode [ 617.202711][T16980] syzkaller0: entered allmulticast mode [ 617.641572][T16989] netlink: 'syz.0.2636': attribute type 10 has an invalid length. [ 618.628841][T17003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.701367][T17004] tipc: Resetting bearer [ 618.724039][T17018] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2640'. [ 618.741413][T17023] block nbd1: server does not support multiple connections per device. [ 618.750815][T17023] block nbd1: shutting down sockets [ 618.822629][ T8133] syz1: Port: 1 Link DOWN [ 618.859494][T17003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.081806][T17003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.111428][T17027] net_ratelimit: 262 callbacks suppressed [ 619.111450][T17027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.125832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.145925][T17027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.154406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.171313][T17027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.179822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.225291][T17027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.233924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.236364][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2643'. [ 619.244828][T17027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.258892][ T9641] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 619.504429][T17003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.426121][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.538441][ T9647] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.606336][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.706005][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.717467][T17067] netlink: 'syz.1.2649': attribute type 10 has an invalid length. [ 621.040361][T17075] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 621.064628][T17075] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 621.393472][T17084] netlink: 'syz.3.2654': attribute type 58 has an invalid length. [ 621.408558][T17084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2654'. [ 621.823196][T17089] block nbd1: server does not support multiple connections per device. [ 621.847767][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 621.878714][T17089] block nbd1: shutting down sockets [ 621.888636][T17097] syz_tun: left promiscuous mode [ 622.662386][ T29] audit: type=1800 audit(1779419528.229:11): pid=17116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2660" name="memory.events" dev="tmpfs" ino=2705 res=0 errno=0 [ 622.711245][T17129] block nbd1: server does not support multiple connections per device. [ 622.726826][T17129] block nbd1: shutting down sockets [ 622.883472][T17132] block nbd1: server does not support multiple connections per device. [ 622.909341][T17132] block nbd1: shutting down sockets [ 623.078051][T17141] tipc: Enabling of bearer rejected, already enabled [ 623.651937][T17148] sctp: [Deprecated]: syz.3.2667 (pid 17148) Use of int in max_burst socket option. [ 623.651937][T17148] Use struct sctp_assoc_value instead [ 623.687125][T17155] tipc: Enabling of bearer rejected, already enabled [ 624.071318][T17158] block nbd1: server does not support multiple connections per device. [ 624.093476][T17158] block nbd1: shutting down sockets [ 624.221103][ T9641] net_ratelimit: 1141 callbacks suppressed [ 624.221134][ T9641] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 624.381369][ T9647] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 624.591535][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.611262][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.627332][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.640932][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.861268][ T8136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.891652][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2673'. [ 624.905874][T17173] netlink: 'syz.2.2672': attribute type 10 has an invalid length. [ 624.965123][T17177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2673'. [ 625.040633][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2673'. [ 625.105161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.270359][T17173] syz_tun: entered promiscuous mode [ 625.290047][T17173] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 625.381270][ T35] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 625.448190][T17166] lo speed is unknown, defaulting to 1000 [ 625.506797][T17185] netlink: 'syz.1.2674': attribute type 2 has an invalid length. [ 625.752257][ T5787] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 625.781306][T17190] block nbd1: server does not support multiple connections per device. [ 625.798702][T17190] block nbd1: shutting down sockets [ 626.176374][T17205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2678'. [ 626.525795][T17209] block nbd1: server does not support multiple connections per device. [ 626.546108][T17209] block nbd1: shutting down sockets [ 626.707100][T17217] lo speed is unknown, defaulting to 1000 [ 627.243381][T17235] netlink: 'syz.3.2685': attribute type 10 has an invalid length. [ 627.275115][T17235] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 627.536933][T17247] tipc: Enabling of bearer rejected, already enabled [ 627.961542][T17249] block nbd1: server does not support multiple connections per device. [ 627.976952][T17249] block nbd1: shutting down sockets [ 628.154884][T17258] netlink: 'syz.0.2689': attribute type 10 has an invalid length. [ 628.288238][T17262] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 628.482470][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 628.765420][T17276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2703'. [ 628.808304][T17276] veth0_macvtap: left promiscuous mode [ 629.082796][T17282] lo speed is unknown, defaulting to 1000 [ 629.108728][ C1] bridge0: port 1(vlan7) entered learning state [ 629.352182][ T5787] net_ratelimit: 128 callbacks suppressed [ 629.352207][ T5787] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 629.741727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.754248][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.937840][ T5787] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 629.948052][T17298] nbd: must specify a size in bytes for the device [ 630.061914][T15428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.081463][ T5787] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 630.222724][ T9641] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 630.272972][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.284068][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.341158][ T137] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 630.754282][T17326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2705'. [ 631.186826][T17342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2709'. [ 631.380487][T17356] siw: device registration error -23 [ 631.499332][T17353] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2711'. [ 631.555282][T17361] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2712'. [ 631.596215][T17359] can: request_module (can-proto-0) failed. [ 631.628829][T17342] veth17: entered allmulticast mode [ 631.657094][T17342] bond17: (slave veth17): Enslaving as an active interface with an up link [ 631.703592][T17348] bond17 (unregistering): (slave veth17): Releasing backup interface [ 631.746246][T17348] bond17 (unregistering): Released all slaves [ 631.815391][T17366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2713'. [ 631.849418][T17351] lo speed is unknown, defaulting to 1000 [ 631.921584][T17368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 632.689936][T17381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2718'. [ 632.699420][T17381] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2718'. [ 633.247433][T17381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.487999][T17410] xt_hashlimit: size too large, truncated to 1048576 [ 633.574207][T17417] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2724'. [ 633.588325][T17418] xt_hashlimit: size too large, truncated to 1048576 [ 633.671506][T17422] netlink: 'syz.4.2725': attribute type 1 has an invalid length. [ 633.778792][T17424] __nla_validate_parse: 2 callbacks suppressed [ 633.778814][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 634.107262][T17432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2726'. [ 634.521161][ T13] net_ratelimit: 217 callbacks suppressed [ 634.521210][ T13] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 634.625359][T17449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.671098][ T13] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 634.771321][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.787218][T17449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2731'. [ 634.802965][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.101193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.307717][T17455] openvswitch: netlink: EtherType 50a is less than min 600 [ 635.921445][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.948898][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.091418][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.357472][ T8136] lo speed is unknown, defaulting to 1000 [ 637.371065][ T8136] syz2: Port: 1 Link DOWN [ 637.447042][ T36] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.487997][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.524707][ T36] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.558028][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.604012][ T36] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.654309][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.807644][T17499] netlink: 210640 bytes leftover after parsing attributes in process `syz.3.2740'. [ 637.874403][T17495] bond11: (slave bond_slave_1): Device is not our slave [ 637.891574][T17495] bond11: option active_slave: invalid value (bond_slave_1) [ 637.933006][T17495] bond11 (unregistering): Released all slaves [ 638.385912][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2741'. [ 638.517030][T17516] tap0: tun_chr_ioctl cmd 1074025681 [ 638.538485][T17523] tipc: Enabling of bearer rejected, already enabled [ 638.550160][T17488] xt_hashlimit: size too large, truncated to 1048576 [ 638.580018][T17524] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 638.604275][T17524] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 639.042312][T17538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2744'. [ 639.113478][T17538] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2744'. [ 639.583055][ T137] net_ratelimit: 16 callbacks suppressed [ 639.583079][ T137] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 639.761186][ T36] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 639.919962][T17561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2748'. [ 640.134445][T17558] tipc: Resetting bearer [ 640.156823][ T137] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.180333][ T137] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.267482][ T137] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.294359][ T137] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.461441][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.477928][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.661280][ T137] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 640.737392][T17577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.791263][ T137] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 640.942374][ T9649] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 641.101292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.167304][T17596] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2749'. [ 641.241411][ T9649] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 641.865417][T17615] sctp: [Deprecated]: syz.3.2755 (pid 17615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 641.865417][T17615] Use struct sctp_sack_info instead [ 642.081755][T17624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'. [ 642.782209][T17573] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 645.102891][ C1] net_ratelimit: 9 callbacks suppressed [ 645.102907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.117562][ T9647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.127885][ T9647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.272375][ T9647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.281174][ T9647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.082968][T17634] vlan0: entered promiscuous mode [ 647.088194][T17634] : entered promiscuous mode [ 647.101221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.201250][ T9647] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 647.234340][T17634] netlink: 'syz.0.2757': attribute type 1 has an invalid length. [ 647.331092][ T36] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 647.403222][ T9647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.413821][T17646] xt_hashlimit: size too large, truncated to 1048576 [ 647.434347][ T9647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.802534][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'. [ 647.812943][T17661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2763'. [ 648.152813][T17672] syzkaller1: entered promiscuous mode [ 648.162013][T17672] syzkaller1: entered allmulticast mode [ 648.357906][T17680] tipc: Resetting bearer [ 648.399014][T17680] netlink: 'syz.0.2768': attribute type 13 has an invalid length. [ 648.422038][T17680] netlink: 'syz.0.2768': attribute type 17 has an invalid length. [ 648.422553][T17682] GUP no longer grows the stack in syz.4.2769 (17682): 200000003000-20000000a000 (200000001000) [ 648.441883][T17682] CPU: 1 UID: 0 PID: 17682 Comm: syz.4.2769 Not tainted syzkaller #0 PREEMPT(full) [ 648.441913][T17682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 648.441943][T17682] Call Trace: [ 648.441957][T17682] [ 648.441966][T17682] dump_stack_lvl+0xe8/0x150 [ 648.441999][T17682] __get_user_pages+0x2378/0x2720 [ 648.442031][T17682] ? __gup_longterm_locked+0xc4e/0x1630 [ 648.442077][T17682] ? __gup_longterm_locked+0xc4e/0x1630 [ 648.442103][T17682] ? down_read_killable+0x1bb/0x340 [ 648.442135][T17682] __gup_longterm_locked+0xdcf/0x1630 [ 648.442167][T17682] ? lock_acquire+0x106/0x350 [ 648.442213][T17682] gup_fast_fallback+0x1d84/0x20d0 [ 648.442276][T17682] ? __pfx_gup_fast_fallback+0x10/0x10 [ 648.442300][T17682] ? futex_unqueue+0x22/0x240 [ 648.442323][T17682] ? futex_unqueue+0x22/0x240 [ 648.442344][T17682] ? futex_unqueue+0x22/0x240 [ 648.442367][T17682] ? is_valid_gup_args+0x11f/0x200 [ 648.442395][T17682] ? get_user_pages_fast+0x4d/0xb0 [ 648.442423][T17682] __iov_iter_get_pages_alloc+0x370/0xa10 [ 648.442467][T17682] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 648.442506][T17682] iov_iter_get_pages2+0x5e/0xa0 [ 648.442543][T17682] __se_sys_vmsplice+0x7c7/0x1620 [ 648.442596][T17682] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 648.442636][T17682] ? __pfx_futex_wait+0x10/0x10 [ 648.442680][T17682] ? fdget+0x148/0x1e0 [ 648.442725][T17682] ? put_files_struct+0x256/0x350 [ 648.442749][T17682] ? 0xffffffffff600000 [ 648.442806][T17682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.442832][T17682] do_syscall_64+0x15f/0xf80 [ 648.442855][T17682] ? clear_bhb_loop+0x40/0x90 [ 648.442884][T17682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.442906][T17682] RIP: 0033:0x7fd79ad9ce59 [ 648.442925][T17682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.442953][T17682] RSP: 002b:00007fd798fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 648.442977][T17682] RAX: ffffffffffffffda RBX: 00007fd79b015fa0 RCX: 00007fd79ad9ce59 [ 648.442993][T17682] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 648.443007][T17682] RBP: 00007fd79ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 648.443022][T17682] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 648.443035][T17682] R13: 00007fd79b016038 R14: 00007fd79b015fa0 R15: 00007fff9bd80508 [ 648.443073][T17682] [ 648.728583][T17680] 8021q: adding VLAN 0 to HW filter on device  [ 648.742886][T17680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.810463][T17680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 648.821242][T17680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 648.833518][T17680] veth1_macvtap: left promiscuous mode [ 648.841908][T17680] veth1_macvtap: entered promiscuous mode [ 648.854598][T17680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 648.870970][T17680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 648.882867][T17680] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 648.904330][T17680] 8021q: adding VLAN 0 to HW filter on device bond3 [ 648.963153][T17680] 8021q: adding VLAN 0 to HW filter on device bond4 [ 649.023537][T17680] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 649.045252][T17680] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 649.066780][T17680] 8021q: adding VLAN 0 to HW filter on device bond5 [ 649.096235][T17680] 8021q: adding VLAN 0 to HW filter on device bond6 [ 649.116607][T17680] 8021q: adding VLAN 0 to HW filter on device bond7 [ 649.135844][T17680] 8021q: adding VLAN 0 to HW filter on device bond8 [ 649.153492][T17680] batadv0: entered promiscuous mode [ 649.163995][T17680] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 649.183835][T17680] 8021q: adding VLAN 0 to HW filter on device bond9 [ 649.193671][T17680] 8021q: adding VLAN 0 to HW filter on device team1 [ 649.210537][T17680] 8021q: adding VLAN 0 to HW filter on device team2 [ 649.252701][T17680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.363314][T17680] 8021q: adding VLAN 0 to HW filter on device bond10 [ 649.378079][T17680] batman_adv: batadv0: Interface activated: ipvlan2 [ 649.390093][T17680] 8021q: adding VLAN 0 to HW filter on device eth0 [ 649.406367][T17680] 8021q: adding VLAN 0 to HW filter on device eth1 [ 649.419942][T17680] 8021q: adding VLAN 0 to HW filter on device eth2 [ 649.440173][T17680] 8021q: adding VLAN 0 to HW filter on device eth3 [ 649.606117][ T9649] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 4352 - 0 [ 649.623275][ T9649] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.642630][ T9649] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 649.675375][ T9649] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 4352 - 0 [ 649.710956][ T9649] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.722072][T17702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2772'. [ 649.732182][ T9649] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 649.757677][T17691] netlink: 'syz.2.2770': attribute type 29 has an invalid length. [ 649.768754][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2770'. [ 649.823483][ T9649] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 4352 - 0 [ 649.862797][ T9649] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.893508][ T9649] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 649.922190][ T9649] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 4352 - 0 [ 649.956469][ T9649] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.998407][ T9649] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 650.134081][T17723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2774'. [ 650.310617][T17721] netlink: 'syz.1.2784': attribute type 10 has an invalid length. [ 650.322868][ T9647] net_ratelimit: 16 callbacks suppressed [ 650.322892][ T9647] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 650.363326][T17725] netlink: 41 bytes leftover after parsing attributes in process `syz.1.2784'. [ 650.376021][T17721] syz_tun: entered promiscuous mode [ 650.402645][T17725] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2784'. [ 650.465193][T17725] netlink: 41 bytes leftover after parsing attributes in process `syz.1.2784'. [ 650.541504][ T137] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 650.681152][ T137] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 650.821108][ T137] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 650.892893][ T9647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.919331][ T9647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.941130][ T35] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 651.061231][ T137] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 651.101227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.191024][ T137] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 651.384743][T17753] netlink: 364 bytes leftover after parsing attributes in process `syz.3.2782'. [ 651.487138][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2783'. [ 652.113373][T17763] tipc: Resetting bearer [ 652.228413][T17772] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 652.252857][T17770] xt_CT: You must specify a L4 protocol and not use inversions on it [ 652.303869][T17763] tipc: Resetting bearer [ 652.900046][T17781] bridge0: port 1(vlan7) entered disabled state [ 653.674672][ T9649] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.712535][ T9649] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.735147][ T9649] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.759112][ T9649] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.053791][T17806] __nla_validate_parse: 2 callbacks suppressed [ 654.053813][T17806] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2796'. [ 654.130358][T17809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2795'. [ 654.254810][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2794'. [ 654.344927][T17818] netlink: 'syz.1.2797': attribute type 4 has an invalid length. [ 654.362852][T17818] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2797'. [ 654.704259][ T30] INFO: task kworker/0:1H:1693 blocked for more than 143 seconds. [ 654.730671][ T30] Not tainted syzkaller #0 [ 654.751914][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 654.772974][ T30] task:kworker/0:1H state:D stack:26504 pid:1693 tgid:1693 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 654.822452][ T30] Workqueue: kblockd blk_mq_requeue_work [ 654.843281][ T30] Call Trace: [ 654.853081][ T30] [ 654.857648][ T30] __schedule+0x1821/0x5740 [ 654.866107][ T30] ? irqentry_exit+0x218/0x760 [ 654.873107][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 654.882719][ T30] ? __pfx___schedule+0x10/0x10 [ 654.899492][ T30] ? schedule+0x90/0x360 [ 654.908053][ T30] schedule+0x164/0x360 [ 654.916153][ T30] schedule_timeout+0x158/0x2c0 [ 654.921502][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 654.927422][ T30] ? __pfx_process_timeout+0x10/0x10 [ 654.933263][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 654.939675][ T30] ? prepare_to_wait_event+0x436/0x480 [ 654.946111][ T30] nbd_queue_rq+0x857/0x1100 [ 654.951577][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 654.958088][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 654.964262][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 654.973388][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 654.979309][ T30] ? sbitmap_get+0x229/0x390 [ 654.984540][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 654.991937][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 654.997858][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 655.005440][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 655.012792][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 655.018883][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 655.026082][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 655.032715][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 655.039185][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 655.045542][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 655.051465][ T30] blk_mq_run_hw_queues+0x26c/0x3f0 [ 655.057013][ T30] blk_mq_requeue_work+0x71c/0x780 [ 655.071854][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 655.079839][ T30] ? process_scheduled_works+0xa70/0x1860 [ 655.086139][ T30] ? process_scheduled_works+0xa70/0x1860 [ 655.092650][ T30] process_scheduled_works+0xb5d/0x1860 [ 655.098341][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 655.105530][ T30] ? assign_work+0x3d5/0x5e0 [ 655.110229][ T30] worker_thread+0xa53/0xfc0 [ 655.116245][ T30] kthread+0x389/0x470 [ 655.120434][ T30] ? __pfx_worker_thread+0x10/0x10 [ 655.126324][ T30] ? __pfx_kthread+0x10/0x10 [ 655.133314][ T30] ret_from_fork+0x514/0xb70 [ 655.138247][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 655.144655][ T30] ? __switch_to+0xc79/0x1410 [ 655.149701][ T30] ? __pfx_kthread+0x10/0x10 [ 655.154929][ T30] ret_from_fork_asm+0x1a/0x30 [ 655.160106][ T30] [ 655.164105][ T30] [ 655.164105][ T30] Showing all locks held in the system: [ 655.172874][ T30] 2 locks held by ksoftirqd/0/15: [ 655.178047][ T30] 1 lock held by khungtaskd/30: [ 655.186569][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 655.198051][ T30] 4 locks held by kworker/0:1H/1693: [ 655.203848][ T30] #0: ffff888020284940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 655.225615][ T30] #1: ffffc90006c27c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 655.256002][ T30] #2: ffff888026a3f898 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 655.269971][ T30] #3: ffff888027c50178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 655.279799][ T30] 2 locks held by getty/5381: [ 655.285078][ T30] #0: ffff888036ddc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 655.296008][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 655.307066][ T30] 2 locks held by kworker/u8:8/5787: [ 655.312968][ T30] #0: ffff88801ae84940 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 655.325894][ T30] #1: ffffc900048c7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 655.348039][ T30] 1 lock held by udevd/6035: [ 655.359122][ T30] #0: ffff888027c1b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 655.379921][ T30] 3 locks held by kworker/u8:14/9649: [ 655.389081][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 655.401498][ T30] #1: ffffc90003537c40 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 655.413552][ T30] #2: ffffffff8e962e78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 655.424218][ T30] 3 locks held by kworker/0:18/13135: [ 655.429727][ T30] #0: ffff88813fe47140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 655.441276][ T30] #1: ffffc90005cefc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 655.454195][ T30] #2: ffff88802d4e5250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 655.466860][ T30] 3 locks held by kworker/1:2/15425: [ 655.472429][ T30] #0: ffff88801aeb2d40 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 655.483918][ T30] #1: ffffc90004807c40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 655.497516][ T30] #2: ffffffff8e95db88 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6e/0x1650 [ 655.508810][ T30] 3 locks held by syz.2.2793/17795: [ 655.514739][ T30] #0: ffff888086713240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 655.525630][ T30] #1: ffff88807ce7f260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1cd/0x940 [ 655.535196][ T30] #2: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 655.546529][ T30] 1 lock held by syz.0.2794/17813: [ 655.551919][ T30] 1 lock held by syz.3.2799/17831: [ 655.557225][ T30] #0: ffff88802d1a59e0 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xbd/0xd90 [ 655.567113][ T30] 1 lock held by syz.3.2799/17832: [ 655.574715][ T30] #0: ffff88802d1a59e0 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_setsockopt+0x41f/0xad0 [ 655.586844][ T30] [ 655.590038][ T30] ============================================= [ 655.590038][ T30] [ 655.624394][ T30] NMI backtrace for cpu 0 [ 655.624418][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 655.624442][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 655.624455][ T30] Call Trace: [ 655.624464][ T30] [ 655.624473][ T30] dump_stack_lvl+0xe8/0x150 [ 655.624503][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 655.624532][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 655.624558][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 655.624589][ T30] sys_info+0x135/0x170 [ 655.624612][ T30] watchdog+0xfd3/0x1030 [ 655.624653][ T30] ? watchdog+0x1c9/0x1030 [ 655.624691][ T30] kthread+0x389/0x470 [ 655.624719][ T30] ? __pfx_watchdog+0x10/0x10 [ 655.624748][ T30] ? __pfx_kthread+0x10/0x10 [ 655.624777][ T30] ret_from_fork+0x514/0xb70 [ 655.624804][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 655.624826][ T30] ? __switch_to+0xc79/0x1410 [ 655.624868][ T30] ? __pfx_kthread+0x10/0x10 [ 655.624898][ T30] ret_from_fork_asm+0x1a/0x30 [ 655.624942][ T30] [ 655.624950][ T30] Sending NMI from CPU 0 to CPUs 1: [ 655.736619][ C1] NMI backtrace for cpu 1 [ 655.736639][ C1] CPU: 1 UID: 0 PID: 17807 Comm: syz.2.2793 Not tainted syzkaller #0 PREEMPT(full) [ 655.736661][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 655.736673][ C1] RIP: 0010:__kasan_check_byte+0x2d/0x40 [ 655.736708][ C1] Code: d6 41 56 53 48 89 f3 49 89 fe e8 3e 15 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 f6 04 00 00 89 d8 5b <41> 5e e9 bc 0d 7d 09 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 655.736724][ C1] RSP: 0018:ffffc90005147268 EFLAGS: 00000202 [ 655.736741][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000003 [ 655.736753][ C1] RDX: 0000000000000000 RSI: ffffffff823cac36 RDI: 1ffffffff1d2b9ac [ 655.736766][ C1] RBP: ffffffff823cac1a R08: 0000000000000000 R09: 0000000000000000 [ 655.736778][ C1] R10: dffffc0000000000 R11: fffff940003382b9 R12: 0000000000000002 [ 655.736791][ C1] R13: ffffffff8e95cd60 R14: ffffffff8e95cd60 R15: 0000000000000000 [ 655.736804][ C1] FS: 0000000000000000(0000) GS:ffff888125376000(0000) knlGS:0000000000000000 [ 655.736819][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 655.736832][ C1] CR2: 00002000002a5030 CR3: 000000007b860000 CR4: 00000000003526f0 [ 655.736851][ C1] Call Trace: [ 655.736858][ C1] [ 655.736866][ C1] lock_acquire+0x84/0x350 [ 655.736887][ C1] ? lock_acquire+0x106/0x350 [ 655.736908][ C1] ? folio_mark_accessed+0x442/0x8c0 [ 655.736936][ C1] ? pfn_valid+0xba/0x480 [ 655.736963][ C1] pfn_valid+0xd6/0x480 [ 655.736987][ C1] ? pfn_valid+0xba/0x480 [ 655.737014][ C1] page_table_check_clear+0x21/0x4f0 [ 655.737039][ C1] ? vm_normal_page+0x12c/0x280 [ 655.737069][ C1] __zap_vma_range+0x3650/0x4b50 [ 655.737127][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 655.737162][ C1] ? mas_find+0xb0e/0xd30 [ 655.737179][ C1] ? unmap_vmas+0x1bd/0x530 [ 655.737209][ C1] unmap_vmas+0x379/0x530 [ 655.737242][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 655.737285][ C1] exit_mmap+0x280/0x9e0 [ 655.737311][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 655.737341][ C1] ? uprobe_clear_state+0x53/0x3f0 [ 655.737381][ C1] ? __pfx_exit_aio+0x10/0x10 [ 655.737412][ C1] ? uprobe_clear_state+0x2bc/0x3f0 [ 655.737441][ C1] __mmput+0x118/0x430 [ 655.737461][ C1] exit_mm+0x1f6/0x2d0 [ 655.737488][ C1] do_exit+0x6a2/0x22c0 [ 655.737517][ C1] ? __pfx_do_exit+0x10/0x10 [ 655.737542][ C1] ? cgroup1_freezing+0x20/0x350 [ 655.737566][ C1] ? cgroup1_freezing+0x20/0x350 [ 655.737594][ C1] do_group_exit+0x21b/0x2d0 [ 655.737619][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 655.737648][ C1] get_signal+0x1284/0x1330 [ 655.737678][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 655.737709][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 655.737750][ C1] exit_to_user_mode_loop+0x8c/0x4d0 [ 655.737768][ C1] ? rcu_is_watching+0x15/0xb0 [ 655.737791][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.737811][ C1] do_syscall_64+0x33e/0xf80 [ 655.737828][ C1] ? trace_irq_disable+0x3b/0x140 [ 655.737858][ C1] ? clear_bhb_loop+0x40/0x90 [ 655.737879][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.737898][ C1] RIP: 0033:0x7f478719ce59 [ 655.737912][ C1] Code: Unable to access opcode bytes at 0x7f478719ce2f. [ 655.737922][ C1] RSP: 002b:00007f47880c20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 655.737940][ C1] RAX: fffffffffffffe00 RBX: 00007f4787416098 RCX: 00007f478719ce59 [ 655.737953][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4787416098 [ 655.737965][ C1] RBP: 00007f4787416090 R08: 0000000000000000 R09: 0000000000000000 [ 655.737977][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.737988][ C1] R13: 00007f4787416128 R14: 00007ffd6898b280 R15: 00007ffd6898b368 [ 655.738012][ C1] [ 656.138084][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 656.145040][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 656.154196][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 656.164290][ T30] Call Trace: [ 656.167605][ T30] [ 656.170571][ T30] vpanic+0x56c/0xa60 [ 656.174607][ T30] ? __pfx___schedule+0x10/0x10 [ 656.179522][ T30] ? __pfx_vpanic+0x10/0x10 [ 656.184080][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 656.190302][ T30] panic+0xc5/0xd0 [ 656.194081][ T30] ? __pfx_panic+0x10/0x10 [ 656.198555][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 656.203993][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 656.210215][ T30] watchdog+0x102c/0x1030 [ 656.214623][ T30] ? watchdog+0x1c9/0x1030 [ 656.219118][ T30] kthread+0x389/0x470 [ 656.223243][ T30] ? __pfx_watchdog+0x10/0x10 [ 656.227982][ T30] ? __pfx_kthread+0x10/0x10 [ 656.232716][ T30] ret_from_fork+0x514/0xb70 [ 656.237353][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 656.242493][ T30] ? __switch_to+0xc79/0x1410 [ 656.247210][ T30] ? __pfx_kthread+0x10/0x10 [ 656.251831][ T30] ret_from_fork_asm+0x1a/0x30 [ 656.256637][ T30] [ 656.260140][ T30] Kernel Offset: disabled [ 656.264485][ T30] Rebooting in 86400 seconds..