last executing test programs: 6.80439892s ago: executing program 4 (id=12824): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100000000000000820000000033000000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB="fe8800000000000000000000000000010000000033000000ff"], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="eaffffff80000000001a0000f72dab84c3f7cffa", @ANYRES32=0x1, @ANYBLOB="800800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r4, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) 6.600544839s ago: executing program 0 (id=12828): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0xfffffffc) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x63aa, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x12023, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x3d, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) socket$inet6(0xa, 0x5, 0x0) (async) socket$inet6(0xa, 0x5, 0xfffffffc) (async) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x63aa, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) (async) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x12023, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x3d, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) (async) 6.341047152s ago: executing program 0 (id=12830): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) connect$unix(r1, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x2000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6.340367795s ago: executing program 1 (id=12831): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000007914c0000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2a}, 0x94) bind$x25(r0, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x10000, 0x200, 0x7, 0x100, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYRESHEX=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11}, &(0x7f0000000000), &(0x7f0000000040)=r12}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000cc0)=[{&(0x7f0000000a80)="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", 0x217}, {&(0x7f0000000d40)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b042a3105e6ff295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74f9afe55639834dc4c941dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988dbb47ee61e5be16f4c7701cc671d250000ebbef22d7f2d931c963877fead2ab06279afc4ae478a7078a7bbdac4c800a22f128ee9bc899bfd5deb66020573afccbe51503025748defb54a535ea2b58349463561392e0524203e7be632e162559fc3b538b8338b4bf1e6de9bc735612bb2fc209ba7eb2dbdd06fed65af89e8b314b5a6b309e10c4a50d56fafac82f33c79cd5b0d4326fd65e76f059f29ab898eeacc72ff0299a6c439fda16e04721b0a4b6ff9698edda863d6511e6b5a531197b508318d6ccaaac93baed37b29d42ba4f7bcec7bf73b01f307ce317774f78b245f53a1b2a746c2af0357c3adcd2c1a25e14bb3b4262c66becae48d37d8cb600200000000000000011215cd29f5844a277d9f48f3096366405f32fd866ee6a6eaaba51628919f78374a13baeb3c64efe1b36845e4ef44c545fcb86bf851289081cef3a358f10e49b5c923d729315ac0e6a7bea709e69a38f7deaad89e2ee80b5222689f6781972e7418e06b6c63015846156c9964", 0x248}, {&(0x7f0000000540)="6a5b3986af4597e55298f14c7f201f060fe29efbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf60311fd29e60958434b6f595565bc1d534aae4c0693aebccc5caa31bf5b1c194f52c9f67c71a5edf623de000071d68ab2fd000000000000000000000000003239e56a1b026ba99149", 0x90}], 0x3, 0x9) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0xfffffff9, 0x14}, 0xc) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%+9llu \x00'}, 0x20) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000300), 0x4) r19 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r18, r19, 0x2f, 0x20, 0x4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x23, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0x7d}, @alu={0x7, 0x0, 0xb, 0x7, 0xa, 0x18}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_val={0x18, 0x3, 0x2, 0x0, r5}]}, &(0x7f0000000580)='GPL\x00', 0x6, 0x3f, &(0x7f00000005c0)=""/63, 0x40f00, 0x1, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000000640)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x232d6, r1, 0x1, &(0x7f0000000900)=[r9, r10, r11, r13, r14, r15, r16, r17, r19], &(0x7f0000000940)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0x10001}, 0x94) 5.559656125s ago: executing program 1 (id=12835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r3, 0x6}, 0x8) r4 = socket(0x400000000033, 0x80000, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x3b, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x3e}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000100)={r9, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfffd}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r9, @in={{0x2, 0x4e21, @empty}}, 0x1, 0xab}, 0x90) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xc}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x800, 0x28, 0x0, 0xb, 0x3e, 0xeef6, 0x2, 0x6, 0x9, 0x5, 0x401, 0x4fa0, 0x0, 0x7ff, 0x7, 0x2, 0x1ff, 0x2, 0x92e4, 0x6, 0x561, 0x0, 0x5, 0x8, 0x8, 0xa00, 0x2, 0x8, 0xfffffff8, 0x9, 0x1000003, 0x8000, 0x80c6, 0x3, 0x6, 0x2, 0x6, 0x9, 0x2, 0x2, 0x8a0b, 0x100, 0x10001, 0x1003, 0x4, 0xf3a, 0x6, 0xf, 0x5c72, 0x9, 0x4, 0x7fff, 0x6, 0x2, 0xec89, 0x2, 0xa, 0x3, 0x80000000, 0x7fffffff, 0x5, 0x1, 0x9, 0x6, 0x293, 0x16214, 0x9, 0x1, 0x1, 0x5, 0x8, 0x5, 0x7, 0x4, 0xfffffffe, 0x437, 0x10000, 0x8001, 0x3, 0x54, 0x2, 0x2, 0x9, 0x2, 0x7, 0xe, 0x5, 0x0, 0x1, 0x0, 0x5, 0x7615154, 0xfe000000, 0x0, 0x5, 0x7, 0x7, 0xa0, 0x7, 0x0, 0x8000, 0x3, 0x3, 0x6, 0xcc8, 0x6, 0x1400000, 0x9, 0xffffffff, 0x3, 0x7, 0x0, 0x8, 0x6, 0x7ff, 0x101, 0x8001, 0x1, 0x1, 0x405, 0x7, 0x0, 0xfffffbff, 0xffff0000, 0x9, 0x7fff, 0x1, 0x0, 0x9, 0x7, 0x7ff, 0x1000, 0x6, 0x3, 0xf42e, 0xba, 0x3, 0xd24, 0x40, 0x6, 0xfffffffe, 0x9, 0x9, 0x8, 0x4, 0x1, 0xffffaa35, 0x5, 0x6104df6a, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x9, 0x8001, 0x8bb, 0x6, 0x4, 0x4, 0x2, 0x7, 0x0, 0x5, 0x4, 0x2, 0x7, 0x101, 0xc7, 0x7, 0x1, 0x6, 0x3, 0x4, 0x13d1, 0x2, 0x9d0, 0x3ff, 0x2, 0x6, 0x5, 0x726, 0x9522, 0x9, 0x9, 0x76d, 0x401, 0x5, 0x7f, 0x2, 0xe2, 0xff, 0x19, 0x1, 0x189, 0x34, 0xc, 0xff, 0xdef, 0x3, 0x401, 0x6, 0x3, 0xb, 0x8, 0xfff, 0x0, 0x5, 0x4, 0x4, 0x10, 0x2, 0x2, 0x7, 0x1, 0x4cbc, 0x7, 0x80000000, 0x40, 0xeb5, 0x7f, 0xdfb, 0x7ff, 0x8, 0x5, 0x4, 0x9, 0xffffffff, 0x7, 0x2, 0xc1d, 0x6, 0x96cc0000, 0x4, 0x3, 0x0, 0x1, 0x5, 0x0, 0x7f, 0x6, 0xd, 0x0, 0x9fd2, 0x6, 0xa0, 0x2ad, 0x8, 0x3ff, 0xbb, 0x2, 0xf9, 0x400, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e, 0x1, 0x1, 0x7, 0x0, {0x6, 0x1, 0x1, 0xeaeb, 0x5, 0x7}, {0x9, 0x3, 0x1, 0xf2, 0x1, 0x1}, 0x9, 0x4, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xc2d, 0x4, 0x80000001, 0x8, 0x0, 0x1, 0x0, 0x93, 0x3, 0x8, 0x9, 0x615d37e8, 0xe, 0x6, 0x7, 0x8, 0x0, 0x5, 0x9, 0x2, 0x568000, 0x9, 0x8, 0x5, 0x6, 0x5a, 0xc, 0x9, 0x84fe, 0xb7, 0x10001, 0x6, 0x3, 0x2000000, 0x83, 0x3, 0x4, 0xbd1, 0xffffffff, 0x9, 0x4, 0x401, 0x414b, 0x4ac5, 0xc, 0x5, 0x37, 0x2, 0x7, 0x9ee4, 0x0, 0x2, 0x81, 0x403, 0x2, 0x9, 0x9, 0x8, 0x9531, 0x1, 0x29, 0xffff0001, 0x3, 0x8000, 0xadc3, 0x10000, 0x3cf, 0x1, 0x3, 0xe, 0x7, 0x3, 0x400, 0xaa7, 0x6950, 0xfff, 0x3, 0x7, 0x6, 0x7, 0x1, 0xc0a, 0x1, 0x3, 0x70a482f2, 0xe00, 0x6, 0x1, 0x6, 0x5, 0x8, 0x7, 0x1, 0xe, 0x45, 0x10, 0x93d1, 0x10001, 0x3, 0x6, 0x3, 0x57, 0x7fff, 0x3, 0xfffffe01, 0x7b56, 0xe542, 0x7, 0x9, 0x10000, 0x4, 0x8, 0x7, 0x3, 0x685, 0x5160, 0x7, 0x3, 0xfbb, 0x8, 0xfffffff7, 0x1, 0xffffffff, 0x9, 0x80000001, 0x31, 0xc7, 0x4c, 0x400, 0x204, 0x5, 0x9, 0x1ff, 0x291, 0x4, 0xfffffff9, 0x1ff, 0x50, 0x1, 0x1, 0xfffffffb, 0x100, 0x6, 0x205, 0x7fff, 0x8, 0x9, 0xc, 0x8d3, 0x6, 0xfffffff7, 0x2, 0x9, 0x10000, 0x7a, 0x4, 0x400, 0x1, 0x6, 0x1ff, 0x200, 0xa2680000, 0xa0, 0xe6, 0x8, 0x5, 0xfffffffa, 0x2, 0x10001, 0x9, 0x66, 0x5, 0x80000001, 0xac4, 0x6, 0x6, 0x8, 0x4, 0x7f, 0x2, 0x5, 0x4, 0x9, 0x6, 0x9, 0x3, 0x4, 0x3, 0x8, 0xf, 0x8, 0x5, 0x5, 0x6, 0x5, 0x3, 0x8, 0x8, 0x1, 0x10000, 0x800, 0x2, 0x9, 0x7, 0x2, 0x1, 0x9, 0x4, 0x9, 0x4, 0x3, 0x4, 0xd3, 0x3, 0x80, 0x8, 0x9, 0xa, 0x2, 0xab, 0x5, 0x7, 0x0, 0x9, 0x2, 0x9, 0x4, 0xb, 0x7, 0x0, 0x2, 0x3ff, 0x5, 0x5, 0x2, 0x5f8, 0x3, 0xff, 0x4bf, 0x1, 0x2000ff, 0x4, 0x4f4, 0x6, 0x2, 0x4, 0x81, 0x9, 0x9, 0x0, 0x7fffffff, 0x8001, 0x6, 0x3, 0xfffffff8]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 5.301847402s ago: executing program 3 (id=12836): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in6=@mcast1, 0x4e20, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0xa0, 0x11}, {@in=@local, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x2, 0x200, 0x10000000, 0x0, 0x40000, 0xfffffffffffffffd}, {0x0, 0x200000, 0x6, 0x8b7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70}}, 0xf0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r6, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r7, &(0x7f000000b9c0), 0x0, 0x810) r8 = socket$kcm(0x21, 0x2, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x8000100, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x9}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x8024) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)={0x1c, 0x5e, 0xe25, 0x0, 0x3, "", [@typed={0x8, 0x77, 0x0, 0x0, @uid}, @nested={0xc, 0xea, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}]}, 0x24}], 0x1}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_delrule={0x30, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x30}}, 0x0) setsockopt$sock_attach_bpf(r8, 0x110, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1404}}, 0x0) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000400)="7731d194015dd0b86bfcaed4284ee442029a76519dec2a8f443fd14aa8dcbe415ec9152e09b88b9c4ae20b944a514e974fbc729cf0eb0423ac48882a8723c60012dc7e515599029ea5b226a3fca2fd703587b094d2") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x21, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) 4.095262102s ago: executing program 3 (id=12837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40002}, [@IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x28}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000002c0)={@null, 0x9, 'macvlan1\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r4, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000480)=0x80) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000500)={@empty, @rand_addr=0x64010102, 0x1, "ff1d5ae729c483addfc24589567bd929b01d18f5b03da465a85b2b7649982d66", 0x8, 0x8001, 0x9, 0x10}, 0x3c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) setsockopt(r6, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x2e) 3.621927938s ago: executing program 1 (id=12839): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c000780080012400000000505000500020000000500040001000000110003"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180000000000000001a0000000c000c400000000000000003"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) vmsplice(r4, &(0x7f0000000440)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0xf) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000040)) splice(r1, 0x0, r4, 0x0, 0xc, 0x4) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000000)) 3.529514596s ago: executing program 0 (id=12840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x1a, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) unshare(0x2a020400) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffcc6, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_TIMEOUT={0x0, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x431}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3.481663765s ago: executing program 4 (id=12841): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xc0, r1, 0x2, 0x70bd27, 0xffffffff, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x82a5d7dcdb897a7f}, 0x4000004) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.592613451s ago: executing program 0 (id=12847): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') (async) unshare(0x6a040000) (async) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000001400000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) (async) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e1e, @rand_addr=0x64010102}, 0x10) (async) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x5c3153ef303afdb3}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) 2.295452974s ago: executing program 4 (id=12851): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xa4}}, 0x40000d9) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.977558908s ago: executing program 3 (id=12854): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000e33c0001800c002e28a8f601002f0000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff010000003c0003800c00028085000100000000002c00581a000000000000000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c000280050001000000ec002c000180040003"], 0xc8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', r1}, 0x50) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000e33c0001800c002e28a8f601002f0000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff010000003c0003800c00028085000100000000002c00581a000000000000000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c000280050001000000ec002c000180040003"], 0xc8}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', r1}, 0x50) (async) 1.837536018s ago: executing program 2 (id=12855): r0 = socket$kcm(0x10, 0x2, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[], 0x128}, 0x1, 0x0, 0x0, 0x20000040}, 0x8011) (async) sendmmsg$alg(r2, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6077fd480051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e", 0x7a}, {&(0x7f0000000700)="ce2ede98d4a7e4b9a7938b050ddf51835e71aa0857d0f79d3ce502000000b5cc4397be", 0x23}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e34000000000000000d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da24c3341e27416f38e3251fe082c8f8132408cd2f7dc846c93e62a8d53d22fcabce47b5531463290c970dccfaa7da3e4ee56136f44b991100e3db7c750c3ccb3e01d6598d53d05ca7503d7430f3ff2b79ab629faa1dfb2d0899dd807d28174305bd600e50112aa4d0ec230a89b3078bb60a198e5a7169d91005cda3fc9870956d72773bd700", 0xc8}, {&(0x7f0000002dc0)="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", 0x173}], 0x4, 0x0, 0x0, 0x4004845}], 0x1, 0x48800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x209, 0x7, 0x80000001, 0x4c0, r3, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0xd}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73229c52bbea23870200000079d3c7a519afc7d2dff1cc9fe1b9bd41c5d0b4f2d04979d68cc3471637e69740313dd0f31448193bd26131968d5f790e1429b24ba01f24670353dc73659f4a40f9972fa07c53e4c92d84f3394d5ead33881c01ec616a7a5d6f7ef1c6565b655891a8d903e08c626954a616dd009a67e4f11b8f38101bccfb", 0xb1}], 0x1}, 0x20048020) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0xe, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r3], 0x0, 0x2, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2f}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@gettfilter={0x6c, 0x2e, 0x106, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x8}, {0x6, 0x10}, {0xa, 0xf}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x5ca7c692}, {0x8, 0xb, 0xaed}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x66b80}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, 0x0, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x40, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7e00, 0x7800, 0xae, 0xe}}) (async) close(r6) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100000000001400224921671e00001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x2400c0d1}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x9d}], &(0x7f0000000100)='GPL\x00', 0x0, 0x76, &(0x7f0000000140)=""/118, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x8, 0x4}, 0x10, 0x30335, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r3, r3], 0x0, 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r9, 0x4) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) 1.822067409s ago: executing program 3 (id=12856): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000004000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'virt_wifi0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc02, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r7) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000200)={@mcast2, @remote, @mcast2, 0x4, 0x4, 0x0, 0x600, 0xfc8, 0x20c300a2}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000280)="4307ed2e", 0x4}], 0x2}, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000480)={0x0, 0x0, 0x7, 0x2b, @vifc_lcl_addr=@local, @broadcast}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) 1.594168181s ago: executing program 2 (id=12857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r1, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r5}, 0xc) 1.424830622s ago: executing program 2 (id=12858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) (async) unshare(0x22020400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1}, 0x80000001}], 0x1, 0x102, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x148d5}, 0x20000004) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="ef2d4328", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c000600020000000000000044002d8008000200010000000800020001000000050001004f000000080002000200000008000200010000000500010008000000050004000000000008000200030000001c002d80050001000500000005000400000000000800030003000000"], 0x98}, 0x1, 0x0, 0x0, 0x880}, 0x202c) (async, rerun: 64) r10 = accept4$inet(r5, &(0x7f0000000b80)={0x2, 0x0, @loopback}, &(0x7f0000000bc0)=0x10, 0x80000) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, &(0x7f0000000c00), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffff00, 0xffff00, 'vxcan1\x00', 'macvtap0\x00', {}, {}, 0x33, 0x3, 0x67}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x6, 0x7ff, 0x1, 'syz0\x00', 'syz1\x00', {0x7}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x7, 0xfffffffb, 0xf79fd75, '\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r4}, 0x8) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000700)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "3bceaf9c808c0b62", "0427364fa38d47b9c29464c8c5748ff1", "eacb638c", "e39eb7d426b287a4"}, 0x28) 1.424518706s ago: executing program 4 (id=12859): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000080)={'bond_slave_1\x00', {0x2, 0x0, @multicast2}}) socket(0x27, 0xa, 0xfffffff8) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) 1.317589695s ago: executing program 2 (id=12860): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r1, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r6, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x3, 0x0, {0xa, 0x0, 0x1, @mcast1, 0x3}}}, 0x32) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, 0x0, &(0x7f0000001400)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fc0c0009000900000600150002000000140016"], 0x38}}, 0x2000a080) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0xfffffffffffffffb, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@private=0xa010100, 0x2, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r8, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xa1ffffff}, 0x0) 848.712162ms ago: executing program 4 (id=12861): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6aff71b62bbb0fe006eea66c7", 0xf) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xc5, 0x4) recvmmsg(r2, &(0x7f0000007080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005a40)=""/25, 0x19}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 761.149312ms ago: executing program 3 (id=12862): r0 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x9, 0x8}}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc40) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003f8004002280080003004700000008003e00", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 697.280663ms ago: executing program 4 (id=12863): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fcdbdf052b0000000a0001007770616e30000000e2fdec0a9e"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) ioctl$IMGETCOUNT(r1, 0x61e1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) getpid() sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x0, 0xff80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000180007800c00018003000140e000000108000800ff00000005000500020000000500010006"], 0x64}, 0x1, 0x0, 0x0, 0x4810}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0) recvmmsg(r4, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x400}], 0x3, 0x60010000, 0x0) unshare(0x40800) close(0x4) socket$nl_crypto(0x10, 0x3, 0x15) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f00000000c0)={0x8, 'vlan0\x00', {'netpci0\x00'}, 0x3ff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4480, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000040000701fefeffff00000000047c0000040842801400018006000600800a000006000c00800a0000"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 493.731209ms ago: executing program 1 (id=12864): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r3}, 0x10) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r3, 0x9}, &(0x7f00000001c0)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) (async) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x6, 0x0, 0x4, 0x0, "d4ff0c0000100700"}, 0x10}, 0x2, 0x0, 0x0, 0x801}, 0x4004851) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r5, r6}, 0xc) 397.590648ms ago: executing program 3 (id=12865): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) 345.077229ms ago: executing program 0 (id=12866): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0xb94}], 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000005000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x5e, 0x10, &(0x7f0000000000), 0x26}, 0x48) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) epoll_create1(0x3012f84903b37587) sendmmsg$inet(r1, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d7e918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac708818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5707be06bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a2e2a151d9aa4fc9", 0xb2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec9191578240878db51753dbc15f7852f7e1614e75c90c1a0440a4cb3df109e647bf01db4235", 0x7d}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07fabab61972e1be26c0cb37d32c3a771e304e6f8cc49bdbdb05c7569b6300fef45f8992df412b3f5905c23ae4503aa74d9fca9224332942529f26a5775237db47e838d478fa852f9cecd4a33d022d908d78e33f7fefaa1f92a1a2dd193e2484b2d719f288f1b036c64f6f3da5d91a8a65ed54c2ce9a8b5ca53433dfe15559c287c9951195be8025a", 0xce}, {&(0x7f0000000800)="7abbb058e758b0ce6d41587da9ccee436da0be1ffb3a9090594dc662f4160f2f648daab50485c3cccfc7adb8d813dd0a88f6b7f4f72c33896841b1cb7d608d887246e7f112b50e8c30501a3c17f6d0d19fbbffc851656c0801ec", 0x5a}], 0x3}}], 0x4, 0x2090) sendto$inet(r1, &(0x7f0000000400)="a66c5f4f64310fe8df5892308df4332396dae7be85ce194cbf43966c6eadb021d175b6731c7ab6a373289539a71074c7f6a93c6f3fbc5b6eaf583137f200fedd43be0ab7394412c20701ac8769519249f7b6c505f2b4156cdc36f83f25ba0a35048d4c78f6dc63f81ea97a7836a7b887fd7a8bdcee992882ab9a81ded1b65ceda1f66c8e46d1533a54b87df6ad38afadaf8427f938f915b548ee488fe6cb2484aef3", 0xa2, 0x80, &(0x7f0000000640)={0x2, 0x4e24, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 314.220273ms ago: executing program 1 (id=12867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x46, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 127.971934ms ago: executing program 2 (id=12868): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) close(0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r2 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xf24}, 0x1c) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 122.392596ms ago: executing program 1 (id=12869): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x4800) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x4800) (async) 42.525676ms ago: executing program 0 (id=12870): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1c000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x5, 0x20080009, 0x15c8d927, 0x2}, 0xffffffffffffff6c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x1000004, 0x0, {0x80}}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0x1e, 0x4, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r11, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040045}, 0x44050) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r12 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001400010300000000000000001e"], 0x18}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmmsg$unix(r9, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x30, 0x40400d1}}], 0x1, 0x810) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0xa85, 0xf) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, 0x0) 0s ago: executing program 2 (id=12871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="010000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0x5, 0x0, &(0x7f0000000a80)="63eced8e46dc3f913dc628f7b986b3ab4645cf9740998fc6dd6dff2ff77bfc43f9c9290737a4d90570f06e4aa00442b999b87b648e59b2822c958253085cdae3d323035cf1fe8fafd3a81ec84914d1cd10022c3f208e79d33be47e54865a91c9a78fa125f5f33ad234ab798661bb34f773899dd0259c90757e9c2ffe9ca58818be", 0x0, 0xfffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4008, r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x0, 0x16, 0x9c, &(0x7f0000000300)="b0ca6799c0d911d37eed80e41bee389f2df576ea5206", &(0x7f00000003c0)=""/156, 0x52d0ea0f, 0x0, 0x6b, 0xe8, &(0x7f0000000480)="58d18d17fb51a8166fbe1ec67643436acf9517c3b5b5fdc11ea3c05259a1c76a3e5b28ba137d4ab097785a4b04ad092cad89d57055769623f095756a03a92d39a9edd1021559d0ed6668c181a5c364d396d84d3a2182662afdf209171d5a652d1c4f30600069b034945395", &(0x7f0000000680)="8aa4755f3e302d0a711e380228ff18349ea4309d07eb9bd15f982b67bcf900f07db23df1c2fc851f9fb8dce51afb15b98e8fb9e08d219a16f29f3c0395b4057e67813eb878f7abc0aed0404719d0d5ecbfb61bc735987482f26f2e35231dff96eed9522283d325ece61adf23061f18d11c66e837c573c6d937f47bd6c71caf753c8f6806d7ab8e81092a08542ceceb04017c33351f8aa86c21cec8ce180017fdc4dc1c6dcf89dd7b1323dbeb4337f1f802094b40b1d4106f7704320e4eeeda2d5c1650a7cdee1cb8d07faee53d1c2e82f8667c08fb734a016b488a9ee1422527abca0eb120ab834b", 0x4, 0x0, 0xd171}, 0x50) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r8, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000cc0)={0x100, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x12, 0x3, &(0x7f0000000b40)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r10}, @jmp={0x5, 0x0, 0xc, 0x0, 0xa, 0xffffffffffffffc0, 0x4}], &(0x7f0000000b80)='GPL\x00', 0x0, 0x51, &(0x7f0000000bc0)=""/81, 0x41000, 0x4, '\x00', r3, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x0, 0xa, 0x2, 0xfffffffd}, 0x10, r11, r7, 0x6, &(0x7f0000000d00), &(0x7f0000000d40)=[{0x4, 0x3, 0xd, 0x5}, {0x0, 0x2, 0xe, 0x7}, {0x5, 0x4, 0xc, 0xc}, {0x1, 0x2, 0x7, 0x4}, {0x5, 0x2, 0x8, 0x1}, {0x1, 0x4, 0x7}], 0x10, 0xfffff63d}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) kernel console output (not intermixed with test programs): butes in process `syz.4.11563'. [ 1471.000027][T20461] netlink: 'syz.0.11569': attribute type 14 has an invalid length. [ 1473.870745][T20463] __nla_validate_parse: 6 callbacks suppressed [ 1473.870765][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11570'. [ 1473.914303][T20463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11570'. [ 1474.115293][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11580'. [ 1474.151961][T20502] erspan0: entered promiscuous mode [ 1474.163309][T20502] macvtap1: entered promiscuous mode [ 1474.174511][T20502] macvtap1: entered allmulticast mode [ 1474.181021][T20502] erspan0: entered allmulticast mode [ 1474.197965][T20505] Timeout policy `syz1' can only be used by L3 protocol number 1536 [ 1474.229209][T20502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11580'. [ 1474.272730][T20507] syzkaller1: tun_chr_ioctl cmd 35111 [ 1474.278591][T20507] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1474.285513][T20507] syzkaller1: linktype set to 825 [ 1474.458574][T20514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11585'. [ 1474.581999][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11588'. [ 1474.591683][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11588'. [ 1474.604863][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11588'. [ 1474.615247][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11588'. [ 1474.692304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.960474][T20533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1475.012251][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1475.020361][ C0] lec:lec_tx_timeout: lec0 [ 1475.030408][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11592'. [ 1475.663231][T20570] netlink: 'syz.1.11602': attribute type 4 has an invalid length. [ 1476.212423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.303359][T20589] batadv_slave_0: entered promiscuous mode [ 1476.621105][T20607] netlink: 'syz.2.11612': attribute type 1 has an invalid length. [ 1476.639650][T20607] NCSI netlink: No device for ifindex 0 [ 1477.258081][T20588] batadv_slave_0: left promiscuous mode [ 1477.296857][T20652] netlink: 'syz.1.11621': attribute type 1 has an invalid length. [ 1477.472840][T20652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1477.519153][T20650] bond0 (unregistering): Released all slaves [ 1477.786550][T20664] IPVS: Scheduler module ip_vs_ not found [ 1477.802378][T20665] IPVS: Unknown mcast interface: vcan0 [ 1477.963102][T20679] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1478.212318][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1478.394908][T18871] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1478.440903][T18871] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1478.484663][T18871] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1478.550483][T18871] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1478.617735][T20659] wg1 speed is unknown, defaulting to 1000 [ 1478.719775][T20714] netlink: 'syz.1.11638': attribute type 9 has an invalid length. [ 1478.731083][T20712] netlink: 'syz.3.11637': attribute type 1 has an invalid length. [ 1478.739907][T20714] netlink: 'syz.1.11638': attribute type 7 has an invalid length. [ 1478.758510][T20712] netlink: 'syz.3.11637': attribute type 1 has an invalid length. [ 1478.764892][T20714] netlink: 'syz.1.11638': attribute type 8 has an invalid length. [ 1479.021825][T20725] netlink: 'syz.4.11640': attribute type 39 has an invalid length. [ 1479.241523][T20730] __nla_validate_parse: 18 callbacks suppressed [ 1479.241543][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11643'. [ 1479.361657][T20737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11645'. [ 1479.382233][T20737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11645'. [ 1479.446634][T20728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.652681][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1479.732332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.831727][T20758] netlink: 'syz.1.11647': attribute type 1 has an invalid length. [ 1480.177259][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11651'. [ 1480.278865][T20767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11651'. [ 1480.301584][T20767] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11651'. [ 1480.328221][T20767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11651'. [ 1480.509476][T20754] wg1 speed is unknown, defaulting to 1000 [ 1480.738837][T20763] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1480.763210][T20763] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1480.799304][T20763] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1480.865263][T20763] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1481.227146][T20800] validate_nla: 1 callbacks suppressed [ 1481.227165][T20800] netlink: 'syz.4.11659': attribute type 83 has an invalid length. [ 1481.376774][T20803] x_tables: duplicate underflow at hook 1 [ 1481.825983][T20827] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11664'. [ 1481.842949][T20831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11667'. [ 1481.853338][T20831] openvswitch: netlink: Message has 2 unknown bytes. [ 1481.863731][T20831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11667'. [ 1481.972490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.033350][T20840] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1482.404840][T20855] netlink: 'syz.1.11674': attribute type 4 has an invalid length. [ 1482.983837][T20869] xt_hashlimit: size too large, truncated to 1048576 [ 1483.007373][T20855] netlink: 'syz.1.11674': attribute type 1 has an invalid length. [ 1483.050232][T20855] netlink: 'syz.1.11674': attribute type 3 has an invalid length. [ 1483.097159][T20855] NCSI netlink: No device for ifindex 813332851 [ 1483.589529][T20899] syzkaller1: entered promiscuous mode [ 1483.599052][T20899] syzkaller1: entered allmulticast mode [ 1483.627236][T20903] IPVS: set_ctl: invalid protocol: 94 172.20.20.22:20003 [ 1483.966800][T20920] netlink: 'syz.2.11693': attribute type 1 has an invalid length. [ 1483.983580][T20920] netlink: 'syz.2.11693': attribute type 2 has an invalid length. [ 1483.992525][T20920] netlink: 'syz.2.11693': attribute type 3 has an invalid length. [ 1484.553539][T20945] __nla_validate_parse: 3 callbacks suppressed [ 1484.553561][T20945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11698'. [ 1484.601931][T20945] openvswitch: netlink: Flow actions attr not present in new flow. [ 1484.616778][ T1320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.631314][ T1320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.703574][T20944] syzkaller1: entered promiscuous mode [ 1484.720674][T20944] syzkaller1: entered allmulticast mode [ 1484.772239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.846979][T20933] wg1 speed is unknown, defaulting to 1000 [ 1485.012234][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 1485.020350][ C0] lec:lec_tx_timeout: lec0 [ 1485.025491][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1485.261489][T20977] syzkaller0: entered promiscuous mode [ 1485.270101][T20980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11709'. [ 1485.288373][T20977] syzkaller0: entered allmulticast mode [ 1485.549553][T20991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11711'. [ 1485.721089][T21006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11713'. [ 1486.224986][T21029] vxcan0: entered allmulticast mode [ 1486.243637][T21030] SET target dimension over the limit! [ 1486.822292][T21055] netlink: 4764 bytes leftover after parsing attributes in process `syz.2.11728'. [ 1486.887351][T21053] syzkaller0: entered promiscuous mode [ 1486.899474][T21053] syzkaller0: entered allmulticast mode [ 1486.937847][T21053] tc action pedit offset must be on 32 bit boundaries [ 1486.969110][T21068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11729'. [ 1487.260317][T21086] netlink: 'syz.1.11736': attribute type 2 has an invalid length. [ 1487.686027][T21102] netlink: 'syz.2.11740': attribute type 4 has an invalid length. [ 1487.716729][T21102] netlink: 'syz.2.11740': attribute type 4 has an invalid length. [ 1487.732355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.780193][T21060] wg1 speed is unknown, defaulting to 1000 [ 1488.577367][T21143] netlink: 10092 bytes leftover after parsing attributes in process `syz.2.11751'. [ 1488.592267][T21143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11751'. [ 1488.647180][T21143] tipc: Started in network mode [ 1488.663247][T21143] tipc: Node identity f6b84aeffe84, cluster identity 4711 [ 1488.692855][T21143] tipc: Enabled bearer , priority 0 [ 1488.717746][T21146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11752'. [ 1488.778990][T21143] tipc: Disabling bearer [ 1489.286457][T21168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11760'. [ 1489.307783][T21169] netlink: 'syz.2.11759': attribute type 12 has an invalid length. [ 1489.541582][T21182] Cannot find del_set index 1 as target [ 1489.606058][T21184] netlink: 'syz.2.11763': attribute type 21 has an invalid length. [ 1489.642283][T21184] __nla_validate_parse: 9 callbacks suppressed [ 1489.642303][T21184] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11763'. [ 1489.812346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.963923][T21201] netlink: 'syz.4.11768': attribute type 6 has an invalid length. [ 1490.032132][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1490.040236][ C0] lec:lec_tx_timeout: lec0 [ 1490.175805][T21211] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11772'. [ 1490.198887][T21213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11769'. [ 1490.479996][T21221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11776'. [ 1490.504205][T21221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11776'. [ 1490.715392][T21240] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11780'. [ 1490.978148][T21218] wg1 speed is unknown, defaulting to 1000 [ 1491.390064][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11789'. [ 1491.423523][T21279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11789'. [ 1491.702991][T21300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11792'. [ 1492.093927][T21312] netlink: 'syz.2.11793': attribute type 4 has an invalid length. [ 1492.121538][T21312] netlink: 'syz.2.11793': attribute type 4 has an invalid length. [ 1492.351409][T21322] xt_NFQUEUE: number of queues (45768) out of range (got 94214) [ 1492.379100][T21324] xt_NFQUEUE: number of queues (45768) out of range (got 94214) [ 1492.627242][T21339] netlink: 830 bytes leftover after parsing attributes in process `syz.1.11798'. [ 1492.849920][T21344] gtp0: entered promiscuous mode [ 1492.899220][T21344] gtp0: entered allmulticast mode [ 1492.979821][T21355] netlink: 'syz.4.11800': attribute type 39 has an invalid length. [ 1493.381728][T21372] sctp: [Deprecated]: syz.2.11804 (pid 21372) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1493.381728][T21372] Use struct sctp_sack_info instead [ 1493.428414][T21372] netlink: 'syz.2.11804': attribute type 1 has an invalid length. [ 1493.446863][T21372] netlink: 'syz.2.11804': attribute type 1 has an invalid length. [ 1493.492454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.520996][T21375] netlink: 'syz.0.11805': attribute type 10 has an invalid length. [ 1493.532769][T21375] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 2e:f0:31:30:37:c8 [ 1493.565040][T21376] openvswitch: netlink: IP tunnel dst address not specified [ 1493.573719][T21378] netlink: 'syz.0.11805': attribute type 10 has an invalid length. [ 1493.626871][T21375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1493.682657][T18873] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1493.725213][T21375] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1493.778194][T21378] batadv0: entered promiscuous mode [ 1493.807486][T21378] batadv0: entered allmulticast mode [ 1493.838621][T21378] bond0: (slave batadv0): Releasing backup interface [ 1493.876492][T21378] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 1493.950866][T21378] bridge0: port 1(batadv0) entered blocking state [ 1493.961419][T21378] bridge0: port 1(batadv0) entered disabled state [ 1493.974139][T21378] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 1494.234061][T18870] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1494.243995][T18870] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1494.267657][T21409] bond0 (unregistering): (slave –): Releasing backup interface [ 1494.288068][T21409] bond0 (unregistering): Released all slaves [ 1494.413077][T21426] 0ªX¹¦À: renamed from caif0 [ 1494.435927][T21426] 0ªX¹¦À: entered allmulticast mode [ 1494.441209][T21426] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1494.567406][T21427] block nbd3: server does not support multiple connections per device. [ 1494.578487][T21427] block nbd3: shutting down sockets [ 1494.594291][T21434] mac80211_hwsim hwsim92 syzkaller0: entered promiscuous mode [ 1494.607475][T21434] mac80211_hwsim hwsim92 syzkaller0: entered allmulticast mode [ 1494.772202][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1494.852463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.986867][T21449] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1495.040002][T21449] bond7 (unregistering): Released all slaves [ 1495.096415][T21462] syzkaller1: entered promiscuous mode [ 1495.103696][T21462] syzkaller1: entered allmulticast mode [ 1495.130207][T21459] syzkaller0: entered promiscuous mode [ 1495.136882][T21459] syzkaller0: entered allmulticast mode [ 1495.287913][T21475] __nla_validate_parse: 10 callbacks suppressed [ 1495.287932][T21475] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11831'. [ 1495.629337][T21491] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11835'. [ 1495.720441][T21501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1495.838146][T21499] IPVS: set_ctl: invalid protocol: 92 10.1.1.2:20000 [ 1495.881753][T21499] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1496.266293][T21518] netlink: 'syz.2.11846': attribute type 21 has an invalid length. [ 1496.280763][T21502] wg1 speed is unknown, defaulting to 1000 [ 1496.481231][T21526] xt_hashlimit: size too large, truncated to 1048576 [ 1496.615280][ T30] audit: type=1804 audit(1777247585.214:41): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.11850" name="/newroot/562/cgroup.controllers" dev="tmpfs" ino=2907 res=1 errno=0 [ 1496.681394][ T30] audit: type=1800 audit(1777247585.254:42): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11850" name="cgroup.controllers" dev="tmpfs" ino=2907 res=0 errno=0 [ 1496.730722][ T30] audit: type=1800 audit(1777247585.324:43): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11850" name="cgroup.controllers" dev="tmpfs" ino=2907 res=0 errno=0 [ 1497.316122][T21522] batman_adv: batadv0: Interface deactivated: dummy0 [ 1497.648548][T18870] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.680346][T18870] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.710155][T18870] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.744332][T18870] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.767859][T18870] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.780482][T18870] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.811075][T18870] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.823831][T18870] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.909764][T21559] netlink: 'syz.1.11855': attribute type 8 has an invalid length. [ 1498.270536][T21565] dvmrp1: entered allmulticast mode [ 1498.581917][T21581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11860'. [ 1498.612400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.730963][T21548] wg1 speed is unknown, defaulting to 1000 [ 1499.140345][T21595] syzkaller0: entered promiscuous mode [ 1499.150640][T21595] syzkaller0: entered allmulticast mode [ 1499.170708][T21596] tipc: Enabled bearer , priority 0 [ 1499.254451][T21557] wg1 speed is unknown, defaulting to 1000 [ 1499.892246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.977945][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 1499.986139][ C0] lec:lec_tx_timeout: lec0 [ 1499.992993][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1500.247854][T21594] tipc: Resetting bearer [ 1500.473808][T21594] tipc: Disabling bearer [ 1500.780532][ T7204] tipc: Node number set to 50331648 [ 1500.951141][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11865'. [ 1501.344549][T21616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11867'. [ 1501.357820][T21616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11867'. [ 1501.495041][T21623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11869'. [ 1503.094001][T21659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11876'. [ 1503.131304][T21660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11877'. [ 1503.206315][T10791] block nbd3: Receive control failed (result -1) [ 1503.329399][T21636] wg1 speed is unknown, defaulting to 1000 [ 1503.574484][T21668] netlink: 'syz.3.11878': attribute type 11 has an invalid length. [ 1503.577910][T21670] netlink: 'syz.3.11878': attribute type 11 has an invalid length. [ 1503.732353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.839662][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11879'. [ 1503.869772][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11879'. [ 1503.955891][T21677] netlink: 'syz.1.11880': attribute type 8 has an invalid length. [ 1504.291587][T21680] xt_CT: No such helper "syz1" [ 1505.012163][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1505.020361][ C0] lec:lec_tx_timeout: lec0 [ 1505.135655][T21683] wg1 speed is unknown, defaulting to 1000 [ 1505.179550][T21730] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11893'. [ 1505.213981][T21730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1506.027135][T21744] syzkaller1: entered promiscuous mode [ 1506.041499][T21744] syzkaller1: entered allmulticast mode [ 1506.081436][T21752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11898'. [ 1506.130112][T21752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11898'. [ 1506.581462][T21763] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.11901'. [ 1506.615854][T21763] bridge_slave_1: default FDB implementation only supports local addresses [ 1506.918096][T21772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11904'. [ 1506.977061][T21772] dvmrp1: left allmulticast mode [ 1507.031180][T21776] x_tables: duplicate underflow at hook 2 [ 1507.140982][T32417] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1507.158126][T32417] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1507.171971][T32417] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1507.189675][T32417] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1507.197959][T32417] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1507.238230][T10791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1507.250349][T10791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1507.264798][T10791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1507.283007][T10791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1507.295816][T10791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1507.360108][T21775] tipc: Resetting bearer [ 1507.671944][T21792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11908'. [ 1507.696183][T21794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11908'. [ 1507.724868][T21792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11908'. [ 1508.270134][T21811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11913'. [ 1508.318349][T21775] wg1 speed is unknown, defaulting to 1000 [ 1508.506289][T21818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11915'. [ 1508.515578][T21814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11914'. [ 1508.671928][T18870] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.803324][T32578] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.828220][T21827] kthread_run failed with err -4 [ 1508.852344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.007245][T18871] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.024876][T18873] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.039161][T32585] bridge0: port 1(batadv0) entered disabled state [ 1509.075547][T32585] lo: left allmulticast mode [ 1509.081878][T32585] pimreg9: left allmulticast mode [ 1509.415912][T32417] Bluetooth: hci1: command tx timeout [ 1509.474647][T32585] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1509.486488][T32585] gretap1 (unregistering): left allmulticast mode [ 1509.625210][T32585] bond6 (unregistering): (slave gretap2): Releasing active interface [ 1510.039696][T32585] bond0 (unregistering): Released all slaves [ 1510.058063][T32585] bond1 (unregistering): Released all slaves [ 1510.083155][T32585] bond2 (unregistering): Released all slaves [ 1510.122955][T32585] bond3 (unregistering): Released all slaves [ 1510.170876][T32585] bond4 (unregistering): Released all slaves [ 1510.214860][T32585] bond5 (unregistering): Released all slaves [ 1510.254545][T32585] bond6 (unregistering): Released all slaves [ 1510.273308][T32585] bond7 (unregistering): Released all slaves [ 1510.300992][T32585] bond8 (unregistering): Released all slaves [ 1510.322773][T32585] bond9 (unregistering): Released all slaves [ 1510.343452][T32585] bond10 (unregistering): Released all slaves [ 1510.351634][T21853] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 1510.376052][T32585] bond11 (unregistering): Released all slaves [ 1510.396075][T32585] bond12 (unregistering): Released all slaves [ 1510.416983][T32585] bond13 (unregistering): Released all slaves [ 1510.439248][T32585] bond14 (unregistering): Released all slaves [ 1510.467002][T32585] bond15 (unregistering): Released all slaves [ 1510.829474][T32585] tipc: Left network mode [ 1511.106011][T21884] __nla_validate_parse: 5 callbacks suppressed [ 1511.106030][T21884] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11931'. [ 1511.375630][T21891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1511.458168][T21775] chnl_net:caif_netlink_parms(): no params data found [ 1511.487875][T21899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11935'. [ 1511.501868][T32417] Bluetooth: hci1: command tx timeout [ 1511.545612][T21899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11935'. [ 1511.909906][T21915] netlink: zone id is out of range [ 1511.948684][T21915] netlink: zone id is out of range [ 1511.986542][T21915] netlink: zone id is out of range [ 1512.046041][T21915] netlink: zone id is out of range [ 1512.080943][T21915] netlink: zone id is out of range [ 1512.101916][T21915] netlink: zone id is out of range [ 1512.125715][T21915] netlink: zone id is out of range [ 1512.168981][T21915] netlink: zone id is out of range [ 1512.213414][T21915] netlink: zone id is out of range [ 1512.264933][T21927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11941'. [ 1512.522511][T21775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.541841][T21775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.578089][T21775] bridge_slave_0: entered allmulticast mode [ 1512.595232][T21775] bridge_slave_0: entered promiscuous mode [ 1512.618395][T21775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.634669][T21775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.649939][T21775] bridge_slave_1: entered allmulticast mode [ 1512.666984][T21775] bridge_slave_1: entered promiscuous mode [ 1512.713925][ T5510] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1513.023273][T21775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1513.063477][T21775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.356291][T21775] team0: Port device team_slave_0 added [ 1513.385414][T21775] team0: Port device team_slave_1 added [ 1513.396034][T21964] tap0: tun_chr_ioctl cmd 1074025681 [ 1513.580030][T32417] Bluetooth: hci1: command tx timeout [ 1513.655658][T21968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1513.689306][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11950'. [ 1513.775887][T21775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1513.788028][T21775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.897157][T21775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.972079][T21775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1514.002396][T21775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1514.098755][T21775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1514.170120][T21988] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11951'. [ 1514.236030][T21989] netlink: 140 bytes leftover after parsing attributes in process `syz.4.11953'. [ 1514.410807][T22000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11953'. [ 1514.420730][T21996] ipvlan0: entered promiscuous mode [ 1514.428098][T21996] bridge0: port 2(ipvlan0) entered blocking state [ 1514.458231][T21996] bridge0: port 2(ipvlan0) entered disabled state [ 1514.480443][T21996] ipvlan0: entered allmulticast mode [ 1514.500826][T22004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11954'. [ 1514.513040][T21996] bridge0: entered allmulticast mode [ 1514.554066][T21996] ipvlan0: left allmulticast mode [ 1514.568514][T21996] bridge0: left allmulticast mode [ 1514.689903][T22008] veth0_vlan: left promiscuous mode [ 1514.728446][T22008] veth0_vlan: entered promiscuous mode [ 1514.800450][T21775] hsr_slave_0: entered promiscuous mode [ 1514.830083][T21775] hsr_slave_1: entered promiscuous mode [ 1514.862467][T22012] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11957'. [ 1515.126631][ T5510] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1515.652684][T32417] Bluetooth: hci1: command tx timeout [ 1515.665248][T22031] netlink: 'syz.1.11963': attribute type 13 has an invalid length. [ 1515.726449][T22031] netlink: 'syz.1.11963': attribute type 17 has an invalid length. [ 1516.318337][T22031] 0ªX¹¦À: left allmulticast mode [ 1516.328747][T18871] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1516.340426][T18871] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1516.349486][T18871] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1516.358573][T18871] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1516.443107][T32585] hsr_slave_0: left promiscuous mode [ 1516.468995][T32585] hsr_slave_1: left promiscuous mode [ 1516.505404][T32585] batman_adv: batadv0: Removing interface: dummy0 [ 1517.639678][T21775] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.761010][ T5510] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1518.186144][T21775] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.465602][T21775] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.611635][T22114] __nla_validate_parse: 2 callbacks suppressed [ 1518.611656][T22114] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11976'. [ 1518.632803][T22114] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11976'. [ 1518.667807][T22036] wg1 speed is unknown, defaulting to 1000 [ 1518.924708][T21775] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.938881][T22124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11977'. [ 1519.008464][T22129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11978'. [ 1519.054472][T32585] IPVS: stop unused estimator thread 0... [ 1519.577036][T22143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11983'. [ 1519.623306][T22137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11981'. [ 1519.666118][T22140] pimreg9: entered allmulticast mode [ 1519.732342][ C1] net_ratelimit: 21 callbacks suppressed [ 1519.732361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.793644][T22137] vlan5: entered promiscuous mode [ 1519.803871][T22137] gretap0: entered promiscuous mode [ 1519.840526][T22144] syzkaller0: entered promiscuous mode [ 1519.848525][T22144] syzkaller0: entered allmulticast mode [ 1520.228692][T21775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1520.269472][T21775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1520.306664][T21775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1520.379153][T21775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1520.554504][T21775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1520.572901][T22170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11989'. [ 1520.615152][T21775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1520.648130][T21775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1520.683510][T21775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1521.074666][T22189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11991'. [ 1521.224422][T21775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.307996][T21775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1521.367163][T18871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.374436][T18871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1521.446803][T22207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11994'. [ 1521.499028][T18868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.506259][T18868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.776814][T22220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11998'. [ 1522.197226][T22238] netlink: 'syz.4.12002': attribute type 5 has an invalid length. [ 1522.248703][T22242] openvswitch: netlink: Flow key attribute not present in set flow. [ 1522.291699][T21775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1522.477026][T21775] veth0_vlan: entered promiscuous mode [ 1522.517630][T21775] veth1_vlan: entered promiscuous mode [ 1522.628625][T22263] syzkaller1: entered promiscuous mode [ 1522.645419][T22263] syzkaller1: entered allmulticast mode [ 1522.692655][T21775] veth0_macvtap: entered promiscuous mode [ 1522.720146][T21775] veth1_macvtap: entered promiscuous mode [ 1522.761606][T21775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1522.807415][T21775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1522.854354][T12305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.873599][T12305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.890079][T12305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.923558][T12305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.051136][T22273] tipc: Enabled bearer , priority 0 [ 1523.083463][T22274] tipc: Enabling of bearer rejected, already enabled [ 1523.349428][T18873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.373386][T18873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.514394][T18871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.542649][T18871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.881823][T22273] wg1 speed is unknown, defaulting to 1000 [ 1523.950531][T22313] __nla_validate_parse: 4 callbacks suppressed [ 1523.950550][T22313] netlink: 2 bytes leftover after parsing attributes in process `syz.4.12015'. [ 1523.992101][T22313] netlink: 2 bytes leftover after parsing attributes in process `syz.4.12015'. [ 1524.024794][T22313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12015'. [ 1524.265562][T22324] netlink: 'syz.0.12018': attribute type 16 has an invalid length. [ 1524.281628][T22324] netlink: 'syz.0.12018': attribute type 17 has an invalid length. [ 1524.515365][T22330] netlink: 556 bytes leftover after parsing attributes in process `syz.0.12018'. [ 1524.716145][ T30] audit: type=1800 audit(1777247613.314:44): pid=22338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12022" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3059 res=0 errno=0 [ 1524.916095][T22344] x_tables: duplicate underflow at hook 1 [ 1524.996757][T10791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1525.011441][T10791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1525.020720][T10791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1525.033925][T10791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1525.042768][T10791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1525.054563][T22348] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12025'. [ 1525.484125][T22366] netlink: 'syz.4.12028': attribute type 13 has an invalid length. [ 1525.492447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.612481][T22346] wg1 speed is unknown, defaulting to 1000 [ 1526.008373][T22385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12031'. [ 1526.059928][T22387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12031'. [ 1526.511983][T22346] chnl_net:caif_netlink_parms(): no params data found [ 1526.637477][T22346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.644978][T22346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.653328][T22346] bridge_slave_0: entered allmulticast mode [ 1526.661408][T22346] bridge_slave_0: entered promiscuous mode [ 1526.679896][T22346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.687876][T22346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.696518][T22346] bridge_slave_1: entered allmulticast mode [ 1526.704570][T22346] bridge_slave_1: entered promiscuous mode [ 1526.771208][T22346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.785813][T22346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.831569][T22346] team0: Port device team_slave_0 added [ 1526.857085][T22346] team0: Port device team_slave_1 added [ 1526.944410][T22346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1526.951418][T22346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.983900][T22346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.997129][T22346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.004615][T22346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.053048][T22346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.079161][T22418] batadv_slave_1: entered promiscuous mode [ 1527.092782][T32417] Bluetooth: hci0: command tx timeout [ 1527.118334][T22346] hsr_slave_0: entered promiscuous mode [ 1527.125302][T22346] hsr_slave_1: entered promiscuous mode [ 1527.131426][T22346] debugfs: 'hsr0' already exists in 'hsr' [ 1527.137562][T22346] Cannot create hsr debugfs directory [ 1528.925160][T22390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1528.956301][T22346] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1528.994425][T22346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1529.003427][T22346] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1529.018037][T22346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1529.028294][T22419] batadv_slave_1: left promiscuous mode [ 1529.045091][T22346] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1529.069311][T22346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1529.086241][T22346] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1529.095717][T22423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12040'. [ 1529.104517][T22346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1529.171304][T22425] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12041'. [ 1529.172546][T32417] Bluetooth: hci0: command tx timeout [ 1529.205261][T22425] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12041'. [ 1529.270518][T22436] netlink: zone id is out of range [ 1529.283278][T22436] netlink: zone id is out of range [ 1529.299043][T22436] netlink: zone id is out of range [ 1529.306371][T22436] netlink: zone id is out of range [ 1529.316524][T22436] netlink: zone id is out of range [ 1529.331893][T22436] netlink: zone id is out of range [ 1529.353922][T22436] netlink: zone id is out of range [ 1529.373616][T22443] netlink: 'syz.1.12043': attribute type 2 has an invalid length. [ 1529.382511][T22436] netlink: zone id is out of range [ 1529.391763][T22443] netlink: 'syz.1.12043': attribute type 2 has an invalid length. [ 1529.407543][T22436] netlink: zone id is out of range [ 1529.423661][T22425] syzkaller0: entered promiscuous mode [ 1529.439404][T22425] syzkaller0: entered allmulticast mode [ 1529.440014][T22445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12045'. [ 1529.586889][T22453] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12047'. [ 1529.644690][T22456] netlink: 'syz.3.12048': attribute type 1 has an invalid length. [ 1530.614801][ C1] net_ratelimit: 863 callbacks suppressed [ 1530.614816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.252242][T32417] Bluetooth: hci0: command tx timeout [ 1532.153656][T22456] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1532.155619][T22457] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1532.236964][T22346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1532.279758][T22464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12049'. [ 1532.329660][T22467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12050'. [ 1532.333818][T22346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1532.364161][T18871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.371311][T18871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.382824][T22466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12049'. [ 1532.411115][T18871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.418365][T18871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1532.443445][T22464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12049'. [ 1532.520702][T22474] batadv_slave_0: entered promiscuous mode [ 1532.536422][T22464] ip6gretap0: entered promiscuous mode [ 1532.542070][T22464] ip6gretap0: entered allmulticast mode [ 1532.555724][T22474] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1532.586116][T22473] batadv_slave_0: left promiscuous mode [ 1532.646320][T22481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12054'. [ 1532.683044][T22481] netlink: 'syz.0.12054': attribute type 1 has an invalid length. [ 1532.844334][T22494] xt_limit: Overflow, try lower: 28676/2147483648 [ 1532.953309][T22497] 5nè‹Ò: entered promiscuous mode [ 1533.005242][T22346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1533.098765][T22346] veth0_vlan: entered promiscuous mode [ 1533.131717][T22346] veth1_vlan: entered promiscuous mode [ 1533.145113][T22507] x_tables: duplicate underflow at hook 2 [ 1533.213391][T22346] veth0_macvtap: entered promiscuous mode [ 1533.242976][T22346] veth1_macvtap: entered promiscuous mode [ 1533.309821][T22346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1533.337706][T32417] Bluetooth: hci0: command tx timeout [ 1533.364793][T22346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1533.400077][T18868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.440108][T18868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.462953][T18868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.485656][T18868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.790359][T22522] netlink: zone id is out of range [ 1533.796895][T18871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.805573][T22522] netlink: zone id is out of range [ 1533.824583][T22522] netlink: zone id is out of range [ 1533.826428][T18871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.839487][T22522] netlink: zone id is out of range [ 1533.856711][T22522] netlink: zone id is out of range [ 1533.881698][T22522] netlink: zone id is out of range [ 1533.897450][T22522] netlink: zone id is out of range [ 1533.910592][T22522] netlink: zone id is out of range [ 1533.918854][T18868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.921352][T22522] netlink: zone id is out of range [ 1533.938919][T18868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.418929][T22546] xt_hashlimit: size too large, truncated to 1048576 [ 1534.805826][T10791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1534.821406][T10791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1534.830685][T10791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1534.841536][T10791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1534.855443][T10791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1535.569912][T22589] __nla_validate_parse: 5 callbacks suppressed [ 1535.569933][T22589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12083'. [ 1535.650592][T22561] wg1 speed is unknown, defaulting to 1000 [ 1535.674947][T22594] netlink: 'syz.4.12085': attribute type 4 has an invalid length. [ 1535.687901][T22594] netlink: 'syz.4.12085': attribute type 4 has an invalid length. [ 1535.796094][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12087'. [ 1536.225274][T22561] chnl_net:caif_netlink_parms(): no params data found [ 1536.250040][T22613] netlink: 'syz.4.12091': attribute type 18 has an invalid length. [ 1536.264465][T22614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12091'. [ 1536.284568][T22612] sit1: entered promiscuous mode [ 1536.577407][T32585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.602607][T22639] netlink: 'syz.0.12095': attribute type 39 has an invalid length. [ 1536.626777][T32585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.668588][T22561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.693791][T22561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.712650][T22561] bridge_slave_0: entered allmulticast mode [ 1536.731713][T22561] bridge_slave_0: entered promiscuous mode [ 1536.770306][T22561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.798123][T22561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.812626][T22561] bridge_slave_1: entered allmulticast mode [ 1536.825178][T22561] bridge_slave_1: entered promiscuous mode [ 1536.839534][T22648] netlink: 'syz.2.12098': attribute type 2 has an invalid length. [ 1536.933073][T10791] Bluetooth: hci2: command tx timeout [ 1536.970302][T22561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1536.983701][T22561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.028365][T22561] team0: Port device team_slave_0 added [ 1537.037111][T22561] team0: Port device team_slave_1 added [ 1537.085922][T22561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1537.117988][T22561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.179693][T22561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1537.203463][T22561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1537.231582][T22561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.277412][T22561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.513429][T22677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1537.699943][T22561] hsr_slave_0: entered promiscuous mode [ 1537.713172][T22561] hsr_slave_1: entered promiscuous mode [ 1537.752228][T22561] debugfs: 'hsr0' already exists in 'hsr' [ 1537.762435][T22561] Cannot create hsr debugfs directory [ 1537.873343][T22664] wg1 speed is unknown, defaulting to 1000 [ 1537.981860][T22699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12109'. [ 1538.067834][T22703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12109'. [ 1538.123999][T18868] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1538.159860][T18868] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1538.230091][T18868] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1538.239450][T18868] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1538.309121][ T8308] lec:lec_start_xmit: lec0:No lecd attached [ 1539.012427][T10791] Bluetooth: hci2: command tx timeout [ 1539.758791][T22759] netlink: 'syz.4.12121': attribute type 39 has an invalid length. [ 1541.092361][T10791] Bluetooth: hci2: command tx timeout [ 1541.180737][T22720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1541.208549][T22561] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1541.265220][T22561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1541.291979][T22561] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1541.335501][T22561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1541.363609][T22561] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1541.395064][T22561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1541.421906][T22561] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1541.436993][T22770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12125'. [ 1541.459255][T22561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1541.608104][T22561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.657471][T22561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.695415][T32577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.702654][T32577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1541.736797][T32577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.744110][T32577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.261192][T22808] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12133'. [ 1542.351713][T22561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1542.477804][T22820] netlink: 'syz.1.12136': attribute type 3 has an invalid length. [ 1542.515496][T22822] netlink: 'syz.1.12136': attribute type 3 has an invalid length. [ 1542.527922][T22561] veth0_vlan: entered promiscuous mode [ 1542.541240][T22561] veth1_vlan: entered promiscuous mode [ 1542.604077][T22561] veth0_macvtap: entered promiscuous mode [ 1542.636462][T22561] veth1_macvtap: entered promiscuous mode [ 1542.699246][T22791] wg1 speed is unknown, defaulting to 1000 [ 1542.730660][T22561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1542.757352][T22561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1542.784853][T32585] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.804043][T32585] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.828591][T32585] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.838077][T32585] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.161605][T22790] wg1 speed is unknown, defaulting to 1000 [ 1543.173013][T10791] Bluetooth: hci2: command tx timeout [ 1543.974939][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 1543.983042][ C0] lec:lec_tx_timeout: lec0 [ 1544.503974][T22841] geneve2: entered promiscuous mode [ 1544.692310][ C1] net_ratelimit: 14 callbacks suppressed [ 1544.692332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.759476][T22843] wg1 speed is unknown, defaulting to 1000 [ 1545.281410][T22810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1545.464308][T22850] netlink: 'syz.0.12142': attribute type 13 has an invalid length. [ 1545.528692][T22850] netlink: 'syz.0.12142': attribute type 13 has an invalid length. [ 1545.550499][T32585] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1545.578148][T32585] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1545.590386][T32585] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1545.600040][T32585] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1545.610921][T18873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1545.625619][T18873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1545.635774][T22862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12144'. [ 1545.667149][T22862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12144'. [ 1545.724258][T18873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1545.736121][T18873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1545.807025][T22867] macvtap1: entered promiscuous mode [ 1545.823622][T22867] bridge0: entered promiscuous mode [ 1545.850885][T22867] bridge0: port 3(macvtap1) entered blocking state [ 1545.867381][T22869] netlink: 'syz.4.12143': attribute type 22 has an invalid length. [ 1545.880151][T22869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12143'. [ 1545.887561][T22867] bridge0: port 3(macvtap1) entered disabled state [ 1545.923920][T22867] macvtap1: entered allmulticast mode [ 1545.942116][T22867] bridge0: entered allmulticast mode [ 1545.958787][T22867] macvtap1: left allmulticast mode [ 1545.966868][T22867] bridge0: left allmulticast mode [ 1546.007276][T22877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12147'. [ 1546.046311][ T5916] bridge0: left promiscuous mode [ 1546.056210][ T1320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.066893][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1546.076917][ T1320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.656038][T22904] tipc: Started in network mode [ 1546.668331][T22904] tipc: Node identity 2e4d1decabfa, cluster identity 4711 [ 1546.688500][T22904] tipc: Enabled bearer , priority 0 [ 1546.708790][T22905] syzkaller0: entered promiscuous mode [ 1546.722279][T22905] syzkaller0: entered allmulticast mode [ 1546.818396][T22905] tipc: Resetting bearer [ 1546.902740][T32417] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1546.916860][T32417] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1546.927324][T32417] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1546.940002][T32417] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1546.948187][T32417] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1547.041045][T22905] tipc: Resetting bearer [ 1547.148999][T22905] tipc: Disabling bearer [ 1547.237684][T22914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12156'. [ 1547.294666][T22916] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1547.426346][T22909] wg1 speed is unknown, defaulting to 1000 [ 1547.565271][T22925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12159'. [ 1547.578380][T22925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12159'. [ 1547.587659][T22925] netlink: 'syz.3.12159': attribute type 18 has an invalid length. [ 1547.836458][T22935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1547.843787][T22935] IPv6: NLM_F_CREATE should be set when creating new route [ 1547.851193][T22935] IPv6: NLM_F_CREATE should be set when creating new route [ 1547.858518][T22935] IPv6: NLM_F_CREATE should be set when creating new route [ 1547.921119][T22941] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12162'. [ 1548.510078][T22963] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12166'. [ 1548.526830][T22970] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.12168'. [ 1548.537948][T22970] netlink: Conntrack attr has 4 unknown bytes [ 1548.548234][T22971] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1548.601889][T22974] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12169'. [ 1548.627743][T22974] tipc: Started in network mode [ 1548.644554][T22974] tipc: Node identity ac1414aa, cluster identity 4711 [ 1548.670667][T22974] tipc: Enabled bearer , priority 26 [ 1548.716675][T22977] netlink: 'syz.0.12170': attribute type 2 has an invalid length. [ 1548.729541][T22909] chnl_net:caif_netlink_parms(): no params data found [ 1548.791094][T22977] syzkaller0: entered promiscuous mode [ 1548.800232][T22977] syzkaller0: entered allmulticast mode [ 1548.859860][T22987] bpq0: entered promiscuous mode [ 1549.012431][T10791] Bluetooth: hci3: command tx timeout [ 1549.090878][T22909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.099517][T22909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.116539][T22909] bridge_slave_0: entered allmulticast mode [ 1549.130994][T22909] bridge_slave_0: entered promiscuous mode [ 1549.149286][T22909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.169888][T22909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.202246][T22909] bridge_slave_1: entered allmulticast mode [ 1549.232516][T22909] bridge_slave_1: entered promiscuous mode [ 1549.241924][T23008] netlink: 'syz.4.12175': attribute type 4 has an invalid length. [ 1549.283108][T23008] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12175'. [ 1549.332596][T22909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.383026][T23021] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12179'. [ 1549.416903][T22909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.454079][T23023] netlink: 332 bytes leftover after parsing attributes in process `syz.3.12179'. [ 1549.492615][T23023] netlink: 'syz.3.12179': attribute type 9 has an invalid length. [ 1549.559206][T23031] netlink: 'syz.4.12181': attribute type 1 has an invalid length. [ 1549.584118][T22909] team0: Port device team_slave_0 added [ 1549.595342][T22909] team0: Port device team_slave_1 added [ 1549.652399][T22909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.659421][T22909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.687041][T22909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.699793][T22909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1549.706810][T22909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.734563][T22909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1549.796093][ T7204] tipc: Node number set to 2886997162 [ 1549.835353][T23023] : entered promiscuous mode [ 1549.941330][T22909] hsr_slave_0: entered promiscuous mode [ 1549.954068][T22909] hsr_slave_1: entered promiscuous mode [ 1549.970668][T22909] debugfs: 'hsr0' already exists in 'hsr' [ 1549.979994][T22909] Cannot create hsr debugfs directory [ 1550.079114][T23005] wg1 speed is unknown, defaulting to 1000 [ 1550.452294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.082146][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1551.090176][ C0] lec:lec_tx_timeout: lec0 [ 1551.102628][T10791] Bluetooth: hci3: command tx timeout [ 1551.209250][T23045] macsec1: entered promiscuous mode [ 1552.366663][T23021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1552.438070][T22909] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1552.496704][T22909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1552.535214][T22909] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1552.580439][T22909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1552.606410][T22909] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1552.635125][T23061] __nla_validate_parse: 3 callbacks suppressed [ 1552.635143][T23061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12189'. [ 1552.654638][T22909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1552.663723][T22909] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1552.670518][T23061] netlink: 'syz.2.12189': attribute type 20 has an invalid length. [ 1552.681188][T23061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12189'. [ 1552.698925][T22909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1552.746321][T23070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12186'. [ 1553.044129][T22909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.102585][T22909] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.136115][T12305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.143367][T12305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.182903][T10791] Bluetooth: hci3: command tx timeout [ 1553.233489][T12305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.240636][T12305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.667613][T23108] bond9: option resend_igmp: invalid value (2878) [ 1553.699409][T23108] bond9: option resend_igmp: allowed values 0 - 255 [ 1553.718238][T23108] bond9 (unregistering): Released all slaves [ 1553.816198][T22909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1553.987966][T22909] veth0_vlan: entered promiscuous mode [ 1553.998409][T23117] netlink: 'syz.4.12199': attribute type 1 has an invalid length. [ 1554.030910][T23117] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12199'. [ 1554.090780][T22909] veth1_vlan: entered promiscuous mode [ 1554.267142][T22909] veth0_macvtap: entered promiscuous mode [ 1554.287596][T22909] veth1_macvtap: entered promiscuous mode [ 1554.370058][T23137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12205'. [ 1554.394406][T22909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.463341][T22909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1554.489078][T32578] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.564187][T32578] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.591186][T32578] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.610279][T32578] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.698073][T23150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12208'. [ 1554.973471][T12305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.000067][T12305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.107243][T32577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.116684][T32577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.252986][T10791] Bluetooth: hci3: command tx timeout [ 1555.283939][T23173] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12153'. [ 1555.574888][T23185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12217'. [ 1555.723772][T23190] netlink: 'syz.2.12218': attribute type 1 has an invalid length. [ 1555.731972][T23195] netlink: 'syz.2.12218': attribute type 1 has an invalid length. [ 1555.753504][T23190] netlink: 'syz.2.12218': attribute type 2 has an invalid length. [ 1555.771057][T23195] netlink: 'syz.2.12218': attribute type 2 has an invalid length. [ 1555.864428][T23191] bridge_slave_0: left allmulticast mode [ 1555.884633][T23191] bridge_slave_0: left promiscuous mode [ 1555.901129][T23191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.928529][T23191] bridge_slave_1: left allmulticast mode [ 1555.942264][T23191] bridge_slave_1: left promiscuous mode [ 1555.952569][T23191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.979944][T23191] bond0: (slave bond_slave_0): Releasing backup interface [ 1556.007038][T23191] bond0: (slave bond_slave_1): Releasing backup interface [ 1556.039015][T23191] team0: Port device team_slave_0 removed [ 1556.051035][T23191] team0: Port device team_slave_1 removed [ 1556.059642][T23191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1556.067607][T23191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1556.107525][T23191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1556.126117][T23191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1556.153700][T23191] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1556.212265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.393640][T23206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12221'. [ 1556.448513][T23208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12223'. [ 1557.892809][T23252] __nla_validate_parse: 1 callbacks suppressed [ 1557.892829][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12235'. [ 1557.925387][T23233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.248755][T23233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.301822][T23261] macsec2: entered allmulticast mode [ 1558.315213][T23261] dummy0: entered allmulticast mode [ 1558.331191][T23261] dummy0: entered promiscuous mode [ 1558.351305][T23261] dummy0: left allmulticast mode [ 1558.399948][ T5916] dummy0: left promiscuous mode [ 1558.481105][T23233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.538150][T23269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12240'. [ 1558.658635][T23233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.706026][T23269] batadv0: entered promiscuous mode [ 1558.723977][T23269] macvtap2: entered promiscuous mode [ 1558.729654][T23269] macvtap2: entered allmulticast mode [ 1558.737348][T23269] batadv0: entered allmulticast mode [ 1558.744673][T23269] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1558.973982][T32562] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.047430][T23282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1559.057050][T23282] team0: Port device bond1 added [ 1559.071794][T32577] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.082781][T23299] netlink: 176 bytes leftover after parsing attributes in process `syz.4.12247'. [ 1559.127825][T23302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12249'. [ 1559.166843][T23302] netlink: 'syz.0.12249': attribute type 2 has an invalid length. [ 1559.230351][T32577] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.287395][T32585] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.417823][T23313] netlink: 'syz.0.12250': attribute type 2 has an invalid length. [ 1559.441225][T23313] tipc: Started in network mode [ 1559.450423][T23313] tipc: Node identity 340008, cluster identity 4711 [ 1559.478336][T23313] tipc: Node number set to 3407880 [ 1559.508752][T23315] netlink: 320 bytes leftover after parsing attributes in process `syz.2.12251'. [ 1559.520955][T23315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12251'. [ 1559.531450][T23316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12252'. [ 1559.542645][T23315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12251'. [ 1559.561521][T23315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12251'. [ 1559.571707][T23290] wg1 speed is unknown, defaulting to 1000 [ 1559.724776][T23322] netlink: 'syz.3.12253': attribute type 4 has an invalid length. [ 1559.756117][T23322] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12253'. [ 1559.804911][T23322] .`: renamed from bond0 (while UP) [ 1560.006291][T23332] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1560.419789][T23332] erspan0: left allmulticast mode [ 1560.437080][T23332] batadv0: left allmulticast mode [ 1560.450767][T23324] wg1 speed is unknown, defaulting to 1000 [ 1560.456353][T32578] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.479229][T32578] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.498189][T32578] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.518450][T32578] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.543427][T32578] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.558117][T32578] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.578804][T32578] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.597215][T32578] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.009588][T23367] netlink: zone id is out of range [ 1561.015823][T23369] netlink: zone id is out of range [ 1561.021221][T23367] netlink: zone id is out of range [ 1561.027366][T23369] netlink: zone id is out of range [ 1561.038339][T23349] siw: device registration error -23 [ 1561.047139][T23367] netlink: zone id is out of range [ 1561.053074][T23369] netlink: zone id is out of range [ 1561.062581][T23369] netlink: zone id is out of range [ 1561.075319][T23367] netlink: zone id is out of range [ 1561.332262][ C0] net_ratelimit: 718 callbacks suppressed [ 1561.332281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.503579][T23376] netlink: 'syz.4.12264': attribute type 3 has an invalid length. [ 1562.869024][T23423] bond2: option miimon: invalid value (18446744073709551607) [ 1562.878364][T23423] bond2: option miimon: allowed values 0 - 2147483647 [ 1562.896705][T23423] bond2 (unregistering): Released all slaves [ 1562.951586][T23429] netlink: 'syz.4.12277': attribute type 3 has an invalid length. [ 1563.015446][T23423] bond2: option miimon: invalid value (18446744073709551607) [ 1563.024044][T23423] bond2: option miimon: allowed values 0 - 2147483647 [ 1563.038437][T23423] bond2 (unregistering): Released all slaves [ 1563.183271][T23423] bond2: option miimon: invalid value (18446744073709551607) [ 1563.190789][T23423] bond2: option miimon: allowed values 0 - 2147483647 [ 1563.229886][T23423] bond2 (unregistering): Released all slaves [ 1563.247555][T23442] Bluetooth: MGMT ver 1.23 [ 1563.330966][T23423] bond2: option miimon: invalid value (18446744073709551607) [ 1563.344097][T23423] bond2: option miimon: allowed values 0 - 2147483647 [ 1563.374041][T23423] bond2 (unregistering): Released all slaves [ 1563.666058][T23423] bond2: option miimon: invalid value (18446744073709551607) [ 1563.694183][T23464] __nla_validate_parse: 2 callbacks suppressed [ 1563.694206][T23464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12281'. [ 1563.718443][T23423] bond2: option miimon: allowed values 0 - 2147483647 [ 1563.798270][T23423] bond2 (unregistering): Released all slaves [ 1563.898862][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12281'. [ 1563.988474][T23475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12281'. [ 1564.005504][T23471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12283'. [ 1564.123944][T23471] smc: net device veth1_to_team applied user defined pnetid S [ 1564.167484][T23471] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 1564.198462][T23480] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12284'. [ 1564.217953][T23480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.225683][T23480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.473621][T23491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12286'. [ 1564.758284][T23501] netlink: 'syz.2.12289': attribute type 1 has an invalid length. [ 1564.954565][T32417] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1564.971942][T32417] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1565.022208][T32417] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1565.041539][T32417] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1565.056949][T32417] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1565.073944][T23461] wg1 speed is unknown, defaulting to 1000 [ 1565.319974][T23521] netlink: 'syz.2.12294': attribute type 46 has an invalid length. [ 1565.349799][T23521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12294'. [ 1565.934990][T23540] netlink: 'syz.0.12298': attribute type 1 has an invalid length. [ 1565.957050][T23509] wg1 speed is unknown, defaulting to 1000 [ 1566.244670][T23546] bond1: (slave bridge1): making interface the new active one [ 1566.263510][T23546] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1566.276534][T23553] Bluetooth: MGMT ver 1.23 [ 1566.285887][T23555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12303'. [ 1566.522568][T23558] bond2: option packets_per_slave: invalid value (1048582) [ 1566.538285][T23558] bond2: option packets_per_slave: allowed values 0 - 65535 [ 1566.605746][T23558] bond2 (unregistering): Released all slaves [ 1566.830128][T23564] bond2: option packets_per_slave: invalid value (1048582) [ 1566.859247][T23564] bond2: option packets_per_slave: allowed values 0 - 65535 [ 1566.907188][T23564] bond2 (unregistering): Released all slaves [ 1567.092377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.181781][T32417] Bluetooth: hci4: command tx timeout [ 1567.265024][T23602] bpq0: left promiscuous mode [ 1567.861088][T23595] sctp: [Deprecated]: syz.2.12311 (pid 23595) Use of int in max_burst socket option. [ 1567.861088][T23595] Use struct sctp_assoc_value instead [ 1567.908555][T23509] chnl_net:caif_netlink_parms(): no params data found [ 1568.124772][T23625] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1568.140467][T23625] IPVS: set_ctl: invalid protocol: 11822 101.116.0.0:0 [ 1568.221049][T23509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.229539][T23509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.237830][T23509] bridge_slave_0: entered allmulticast mode [ 1568.246015][T23509] bridge_slave_0: entered promiscuous mode [ 1568.259781][T23509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.284312][T23509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.303286][T23509] bridge_slave_1: entered allmulticast mode [ 1568.318902][T23509] bridge_slave_1: entered promiscuous mode [ 1568.340702][T23633] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.12317'. [ 1568.430082][T23509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1568.510399][T23509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1568.542604][T23633] syzkaller1: entered promiscuous mode [ 1568.548212][T23633] syzkaller1: entered allmulticast mode [ 1568.573538][T23633] Cannot find add_set index 0 as target [ 1568.588592][T23637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1568.660739][T23509] team0: Port device team_slave_0 added [ 1568.685861][T23509] team0: Port device team_slave_1 added [ 1568.755861][T23640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.838110][T23649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12322'. [ 1568.863683][T23509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1568.872193][T23509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1568.901628][T23509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1568.904379][T23653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12322'. [ 1568.931418][T23509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1568.945357][T23509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1568.950995][T23655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12324'. [ 1568.978576][T23509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.145951][T23509] hsr_slave_0: entered promiscuous mode [ 1569.155172][T23509] hsr_slave_1: entered promiscuous mode [ 1569.162716][T23509] debugfs: 'hsr0' already exists in 'hsr' [ 1569.168493][T23509] Cannot create hsr debugfs directory [ 1569.211048][T23667] netlink: 'syz.1.12327': attribute type 10 has an invalid length. [ 1569.232115][T23667] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12327'. [ 1569.252582][T32417] Bluetooth: hci4: command tx timeout [ 1569.265748][T23667] hsr0: entered promiscuous mode [ 1569.271621][T23667] bridge0: port 3(hsr0) entered blocking state [ 1569.279242][T23667] bridge0: port 3(hsr0) entered disabled state [ 1569.287073][T23667] hsr0: entered allmulticast mode [ 1569.292317][T23667] hsr_slave_0: entered allmulticast mode [ 1569.298010][T23667] hsr_slave_1: entered allmulticast mode [ 1569.315426][T23663] tipc: Enabled bearer , priority 0 [ 1569.342322][T23667] netlink: 'syz.1.12327': attribute type 83 has an invalid length. [ 1569.376686][T23663] syzkaller0: MTU too low for tipc bearer [ 1569.387891][T23663] tipc: Disabling bearer [ 1569.515254][T23683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1569.549246][T23686] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.12332'. [ 1569.586744][T23686] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1569.716703][T23696] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12336'. [ 1570.041558][T23723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12341'. [ 1570.119955][T23723] ip6gre1: entered promiscuous mode [ 1570.125681][T23723] ip6gre1: entered allmulticast mode [ 1570.297375][T23734] netlink: 120 bytes leftover after parsing attributes in process `syz.1.12344'. [ 1570.315283][T23734] netlink: 'syz.1.12344': attribute type 1 has an invalid length. [ 1570.324131][T23734] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12344'. [ 1570.335745][T23738] netlink: 'syz.3.12346': attribute type 1 has an invalid length. [ 1570.415768][T23740] IPv6: Can't replace route, no match found [ 1570.432759][T23740] IPv6: Can't replace route, no match found [ 1570.474115][T23738] bond0: entered promiscuous mode [ 1570.484887][T23738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.519765][T23740] bond0: (slave veth3): making interface the new active one [ 1570.529016][T23740] veth3: entered promiscuous mode [ 1570.536550][T23740] bond0: (slave veth3): Enslaving as an active interface with an up link [ 1570.557325][T23747] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12348'. [ 1570.746894][T23751] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1570.997081][T23509] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1571.088797][T23509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1571.116744][T23509] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1571.173017][T23509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1571.244527][T23771] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1571.266121][ T7202] team_slave_0: entered promiscuous mode [ 1571.271865][ T7202] team_slave_1: entered promiscuous mode [ 1571.294366][T23509] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1571.323530][T23509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1571.333703][T32417] Bluetooth: hci4: command tx timeout [ 1571.482241][T23509] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1571.513013][T23509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1571.745868][T23509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1571.824861][T23509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.869226][T18873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.876491][T18873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1571.947297][T32585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.954547][T32585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1572.638064][T23509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1572.852345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.256762][T23509] veth0_vlan: entered promiscuous mode [ 1573.293636][T23509] veth1_vlan: entered promiscuous mode [ 1573.316047][T23849] tipc: Invalid UDP bearer configuration [ 1573.316092][T23849] tipc: Enabling of bearer rejected, failed to enable media [ 1573.343902][T23845] netlink: 'syz.0.12372': attribute type 10 has an invalid length. [ 1573.366133][T23845] hsr0: entered promiscuous mode [ 1573.380337][T23845] bridge0: port 3(hsr0) entered blocking state [ 1573.398816][T23845] bridge0: port 3(hsr0) entered disabled state [ 1573.412320][T32417] Bluetooth: hci4: command tx timeout [ 1573.436705][T23845] hsr0: entered allmulticast mode [ 1573.449591][T23845] hsr_slave_0: entered allmulticast mode [ 1573.458979][T23845] hsr_slave_1: entered allmulticast mode [ 1573.469211][T23845] bridge0: port 3(hsr0) entered blocking state [ 1573.475577][T23845] bridge0: port 3(hsr0) entered forwarding state [ 1573.531419][T23509] veth0_macvtap: entered promiscuous mode [ 1573.587438][T23509] veth1_macvtap: entered promiscuous mode [ 1573.686611][T23509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1573.717344][T23509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1573.761631][T18873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.785218][T18873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.806943][T18873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.837011][T18873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.060049][T23866] syzkaller0: entered promiscuous mode [ 1574.068787][T23866] syzkaller0: entered allmulticast mode [ 1574.087552][T18871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.115418][T18871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.187073][T23861] __nla_validate_parse: 11 callbacks suppressed [ 1574.187097][T23861] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12377'. [ 1574.214343][T32577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.234397][T32577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.506557][T23888] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12385'. [ 1574.553931][T23890] macvtap1: entered promiscuous mode [ 1574.573041][T23890] macvtap1: entered allmulticast mode [ 1574.584638][T23890] veth1_vlan: entered allmulticast mode [ 1574.630489][T23893] macvtap2: entered promiscuous mode [ 1574.643478][T23893] macvtap2: entered allmulticast mode [ 1574.748733][T23900] pimreg9: entered allmulticast mode [ 1574.827309][T23902] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1574.851718][T23902] netlink: 'syz.0.12390': attribute type 17 has an invalid length. [ 1574.892779][T23902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1575.188776][T23919] netlink: 'syz.4.12392': attribute type 180 has an invalid length. [ 1575.269361][T23921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12395'. [ 1575.483264][T23916] wg1 speed is unknown, defaulting to 1000 [ 1576.692545][T10791] Bluetooth: hci4: command 0x0405 tx timeout [ 1576.705297][T11838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.219982][T23931] siw: device registration error -23 [ 1578.276899][T23934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12399'. [ 1578.319190][T23934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12399'. [ 1578.380259][T23944] xt_nfacct: accounting object `syz0' does not exist [ 1578.429038][T23944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12397'. [ 1578.456465][T23948] netlink: 27 bytes leftover after parsing attributes in process `syz.2.12403'. [ 1578.488665][T23948] openvswitch: netlink: Flow key attr not present in new flow. [ 1578.501730][T23951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12402'. [ 1578.612381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.839221][T23960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12404'. [ 1579.061145][T23982] 8021q: VLANs not supported on lo [ 1579.105265][T23982] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12409'. [ 1579.307819][T23987] openvswitch: netlink: IP tunnel TTL not specified. [ 1579.452386][T23993] bridge0: port 4(team0) entered blocking state [ 1579.485635][T23993] bridge0: port 4(team0) entered disabled state [ 1579.497567][T23993] team0: entered allmulticast mode [ 1579.531635][T23993] team_slave_0: entered allmulticast mode [ 1579.545121][T23993] team_slave_1: entered allmulticast mode [ 1579.578139][T23998] netlink: 136 bytes leftover after parsing attributes in process `syz.1.12412'. [ 1579.614394][T23993] bond1: entered allmulticast mode [ 1579.685307][T23993] team0: entered promiscuous mode [ 1579.701032][T24010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12415'. [ 1579.721892][T23993] team_slave_0: entered promiscuous mode [ 1579.755376][T23993] team_slave_1: entered promiscuous mode [ 1579.763916][T24010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12415'. [ 1579.807821][T23993] bond1: entered promiscuous mode [ 1579.965922][T24003] tipc: Enabled bearer , priority 0 [ 1579.989442][T24010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12415'. [ 1580.017340][T23997] tipc: Resetting bearer [ 1580.040474][T24010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12415'. [ 1580.100388][T24012] syzkaller0: entered promiscuous mode [ 1580.115746][T24012] syzkaller0: entered allmulticast mode [ 1580.280955][T23994] tipc: Resetting bearer [ 1580.291974][T24029] netlink: 388 bytes leftover after parsing attributes in process `syz.1.12417'. [ 1580.377970][T23994] tipc: Disabling bearer [ 1580.398636][T24034] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1580.428640][T24029] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1580.461421][T24043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12422'. [ 1580.537731][T24041] bridge_slave_0: left allmulticast mode [ 1580.559959][T24041] bridge_slave_0: left promiscuous mode [ 1580.571187][T24041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.735011][T24041] bridge_slave_1: left allmulticast mode [ 1580.740842][T24041] bridge_slave_1: left promiscuous mode [ 1580.755363][T24041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.780957][T24041] bond0: (slave bond_slave_0): Releasing backup interface [ 1580.807164][T24041] bond0: (slave bond_slave_1): Releasing backup interface [ 1580.831759][T24041] team0: Port device team_slave_0 removed [ 1580.856442][T24041] team0: Port device team_slave_1 removed [ 1580.871061][T24041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1580.879917][T24041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.897179][T24041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1580.906818][T24041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1580.925135][T24041] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1580.964304][T24043] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1581.126791][T24068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12426'. [ 1581.217053][ T30] audit: type=1804 audit(1777247669.814:45): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.12427" name="/newroot/12/memory.events" dev="tmpfs" ino=81 res=1 errno=0 [ 1581.282198][ T30] audit: type=1800 audit(1777247669.814:46): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12427" name="memory.events" dev="tmpfs" ino=81 res=0 errno=0 [ 1581.356248][T24077] sctp: [Deprecated]: syz.0.12429 (pid 24077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1581.356248][T24077] Use struct sctp_sack_info instead [ 1581.377263][T24077] xt_nfacct: accounting object `syz0' does not exist [ 1581.415198][T24071] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1581.494075][T24071] bond1 (unregistering): Released all slaves [ 1581.865158][T24039] wg1 speed is unknown, defaulting to 1000 [ 1582.150668][T24107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12435'. [ 1582.358775][T24111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12436'. [ 1583.247246][T24145] xt_hashlimit: size too large, truncated to 1048576 [ 1583.485556][T24162] openvswitch: netlink: IP tunnel dst address not specified [ 1584.202671][T24180] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1584.218364][T24180] syzkaller1: linktype set to 270 [ 1584.238124][T24184] bridge0: port 5(erspan0) entered blocking state [ 1584.257068][T24184] bridge0: port 5(erspan0) entered disabled state [ 1584.295799][T24184] erspan0: entered allmulticast mode [ 1584.320793][T24184] erspan0: entered promiscuous mode [ 1584.372394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.383111][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.397430][T24181] erspan0: left allmulticast mode [ 1584.423956][T24181] erspan0: left promiscuous mode [ 1584.433381][T24181] bridge0: port 5(erspan0) entered disabled state [ 1584.514691][T24201] netlink: 'syz.2.12453': attribute type 28 has an invalid length. [ 1584.813104][T24221] __nla_validate_parse: 3 callbacks suppressed [ 1584.813125][T24221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12461'. [ 1584.835554][T24220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12457'. [ 1584.856609][T24221] netlink: 'syz.0.12461': attribute type 25 has an invalid length. [ 1584.867650][T24221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12461'. [ 1585.080829][ T993] IPVS: starting estimator thread 0... [ 1585.088201][T24237] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1585.100865][T24237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12466'. [ 1585.144593][T24241] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1585.182605][T24238] IPVS: using max 27 ests per chain, 64800 per kthread [ 1585.310156][T24252] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12467'. [ 1585.351372][T24252] .` (unregistering): Released all slaves [ 1585.416104][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.726054][T24272] x_tables: duplicate underflow at hook 2 [ 1585.740562][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.753377][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.772958][T24266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12472'. [ 1585.782781][T24272] macvlan0: entered promiscuous mode [ 1585.939485][T24278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12476'. [ 1585.949500][T24278] netem: incorrect gi model size [ 1585.955153][T24278] netem: change failed [ 1586.178488][T24291] netlink: 'syz.4.12480': attribute type 1 has an invalid length. [ 1586.224915][T24296] gretap1: entered allmulticast mode [ 1586.299195][T24303] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12482'. [ 1586.314043][T24303] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12482'. [ 1586.454221][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.528730][T24319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12486'. [ 1586.729441][T24323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.740706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.768587][T24327] tipc: Enabled bearer , priority 0 [ 1586.803628][T24324] batadv1: entered promiscuous mode [ 1586.810985][T24324] batadv1: entered allmulticast mode [ 1586.829921][T24327] syzkaller0: entered promiscuous mode [ 1586.842399][T24327] syzkaller0: entered allmulticast mode [ 1586.959625][T24330] geneve2: entered promiscuous mode [ 1586.976856][T24327] tipc: Resetting bearer [ 1587.015201][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.034233][T24325] tipc: Resetting bearer [ 1587.109383][T24325] tipc: Disabling bearer [ 1587.193704][T24346] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1587.210749][T24346] bond2 (unregistering): Released all slaves [ 1587.375166][T24363] netlink: 'syz.4.12499': attribute type 29 has an invalid length. [ 1587.394780][T24364] netlink: 'syz.4.12499': attribute type 29 has an invalid length. [ 1587.665630][T24378] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1587.919285][T24397] netlink: 'syz.1.12508': attribute type 11 has an invalid length. [ 1588.385727][T24361] wg1 speed is unknown, defaulting to 1000 [ 1588.718237][T24437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1589.001708][T24442] netlink: 'syz.3.12519': attribute type 4 has an invalid length. [ 1589.485462][T24457] geneve3: entered promiscuous mode [ 1589.492296][ C0] net_ratelimit: 4 callbacks suppressed [ 1589.492314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.573129][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.900211][T24468] vxcan2: entered allmulticast mode [ 1590.196886][ T7211] IPVS: starting estimator thread 0... [ 1590.200169][T24477] __nla_validate_parse: 9 callbacks suppressed [ 1590.200223][T24477] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.12529'. [ 1590.210273][T24476] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:19241 [ 1590.256757][T24476] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1590.267883][T24477] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.12529'. [ 1590.332470][T24479] IPVS: using max 32 ests per chain, 76800 per kthread [ 1590.441364][T24495] IPVS: set_ctl: invalid protocol: 59 172.20.20.30:20001 [ 1590.546051][T24505] netlink: 'syz.4.12535': attribute type 1 has an invalid length. [ 1590.558494][T24505] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12535'. [ 1590.573006][T24505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12535'. [ 1590.586612][T24505] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12535'. [ 1590.600755][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12535'. [ 1590.614304][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.865208][T24520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12537'. [ 1591.333691][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.352647][T24505] wg1 speed is unknown, defaulting to 1000 [ 1591.654104][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.757928][T24552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12545'. [ 1592.086439][T24556] xt_hashlimit: size too large, truncated to 1048576 [ 1592.434852][T24545] wg1 speed is unknown, defaulting to 1000 [ 1592.692665][T24570] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes. [ 1592.702701][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.848521][T24566] wg1 speed is unknown, defaulting to 1000 [ 1592.882635][T24572] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12550'. [ 1592.961472][T24574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12552'. [ 1593.314021][T24589] Bluetooth: MGMT ver 1.23 [ 1593.736354][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.374074][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.612342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.773251][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.789648][T24611] netlink: 'syz.1.12563': attribute type 58 has an invalid length. [ 1595.047097][T24614] netlink: 'syz.1.12564': attribute type 1 has an invalid length. [ 1595.200022][T24595] wg1 speed is unknown, defaulting to 1000 [ 1595.330917][T24625] __nla_validate_parse: 7 callbacks suppressed [ 1595.330937][T24625] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12568'. [ 1595.350380][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.376188][T24627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12569'. [ 1595.566971][T24634] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1595.675035][T24638] syzkaller0: entered promiscuous mode [ 1595.693406][T24638] syzkaller0: entered allmulticast mode [ 1595.786727][T24641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12573'. [ 1595.823148][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.976017][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.078333][T24631] wg1 speed is unknown, defaulting to 1000 [ 1596.460860][T24638] siw: device registration error -23 [ 1596.843782][T24660] netlink: 'syz.1.12577': attribute type 22 has an invalid length. [ 1596.855123][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.125006][T24668] openvswitch: netlink: Flow key attr not present in new flow. [ 1597.140273][T24660] bond0: option ad_select: unable to set because the bond device is up [ 1597.421416][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.445138][T24674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12582'. [ 1597.674415][T24674] bond3: entered promiscuous mode [ 1597.823500][T24674] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1597.896530][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.939335][T24681] bond3: (slave vti0): refused to change device type [ 1598.046405][T24697] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1598.500400][T24703] xfrm0: entered promiscuous mode [ 1598.527875][T24703] xfrm0: entered allmulticast mode [ 1598.870681][T24717] syzkaller0: entered promiscuous mode [ 1598.899721][T24717] syzkaller0: entered allmulticast mode [ 1599.004645][T24723] bond2: entered promiscuous mode [ 1599.010070][T24723] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1599.042583][T24729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12591'. [ 1599.089204][T24729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12591'. [ 1599.156767][T24741] netlink: 240 bytes leftover after parsing attributes in process `syz.0.12592'. [ 1599.166379][T24741] netlink: 'syz.0.12592': attribute type 9 has an invalid length. [ 1599.988093][ T7202] net_ratelimit: 1 callbacks suppressed [ 1599.988109][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.380653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.462550][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.033924][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.104084][T21415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.734372][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.880372][T24677] wg1 speed is unknown, defaulting to 1000 [ 1602.053495][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.118739][T24756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12595'. [ 1602.178305][T24756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12595'. [ 1602.318489][T24767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.346405][T24767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.394625][T24767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.700548][T24707] wg1 speed is unknown, defaulting to 1000 [ 1603.321171][T24804] sctp: [Deprecated]: syz.0.12602 (pid 24804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1603.321171][T24804] Use struct sctp_sack_info instead [ 1603.859287][ T8308] lec:lec_start_xmit: lec0:No lecd attached [ 1604.839551][T24838] syzkaller0: entered promiscuous mode [ 1604.861079][T24838] syzkaller0: entered allmulticast mode [ 1605.175199][ T7206] net_ratelimit: 19 callbacks suppressed [ 1605.175220][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.225200][T24857] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1605.251618][T24857] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1605.429461][T24866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12614'. [ 1605.467182][T24864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12614'. [ 1605.496129][T24864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12614'. [ 1605.515195][T24864] netlink: 124 bytes leftover after parsing attributes in process `syz.0.12614'. [ 1605.538022][T24865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12614'. [ 1605.833840][T24857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.986235][T24857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.132289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.179127][T24857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.215292][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.255830][T24882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12618'. [ 1606.416383][T24857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.471531][T24901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12619'. [ 1606.735340][T32578] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.852412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.869502][T32578] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.964614][T32578] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.046394][T18868] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.055169][T24916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12625'. [ 1607.164536][T24915] netlink: 'syz.0.12625': attribute type 10 has an invalid length. [ 1607.197781][T24916] netlink: 'syz.0.12625': attribute type 10 has an invalid length. [ 1607.254745][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.337043][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.369105][T24923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12627'. [ 1607.427767][T24928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12627'. [ 1607.498177][ T1320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.512886][ T1320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.336426][T24897] wg1 speed is unknown, defaulting to 1000 [ 1608.577810][T24955] netlink: 236 bytes leftover after parsing attributes in process `syz.3.12634'. [ 1608.629369][T24955] netlink: 236 bytes leftover after parsing attributes in process `syz.3.12634'. [ 1608.879160][T24970] syzkaller0: entered promiscuous mode [ 1608.929585][T24972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1608.937980][T24970] syzkaller0: entered allmulticast mode [ 1609.012102][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms [ 1609.020219][ C0] lec:lec_tx_timeout: lec0 [ 1609.025554][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1609.303611][T24982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12642'. [ 1609.718218][T25004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12648'. [ 1609.756948][T25003] 5Ò: entered promiscuous mode [ 1609.806427][T25003] bridge1: entered promiscuous mode [ 1609.812019][T25003] bridge1: entered allmulticast mode [ 1610.366410][T25036] net_ratelimit: 3 callbacks suppressed [ 1610.366435][T25036] openvswitch: netlink: Multiple metadata blocks provided [ 1610.379734][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.387904][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.465113][T25007] wg1 speed is unknown, defaulting to 1000 [ 1610.937080][T25063] team0: left allmulticast mode [ 1610.945484][T25063] team_slave_0: left allmulticast mode [ 1610.958385][T25063] team_slave_1: left allmulticast mode [ 1610.964590][T25063] bond1: left allmulticast mode [ 1610.969698][T25063] team0: left promiscuous mode [ 1610.976151][T25068] netlink: 'syz.1.12665': attribute type 2 has an invalid length. [ 1610.976171][T25063] team_slave_0: left promiscuous mode [ 1610.989993][T25068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12665'. [ 1610.999208][T25063] team_slave_1: left promiscuous mode [ 1610.999397][T25063] bond1: left promiscuous mode [ 1611.000248][T25063] bridge0: port 4(team0) entered disabled state [ 1611.031492][T25063] bridge_slave_0: left allmulticast mode [ 1611.037235][T25063] bridge_slave_0: left promiscuous mode [ 1611.044242][T25063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.056316][T25063] bridge_slave_1: left allmulticast mode [ 1611.064358][T25063] bridge_slave_1: left promiscuous mode [ 1611.070189][T25063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.080034][T25065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12666'. [ 1611.094025][T25063] bond0: (slave bond_slave_0): Releasing backup interface [ 1611.116164][T25063] bond0: (slave bond_slave_1): Releasing backup interface [ 1611.130099][T25063] team0: Port device team_slave_0 removed [ 1611.140629][T25063] team0: Port device team_slave_1 removed [ 1611.148298][T25063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1611.156332][T25063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1611.169349][T25063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1611.178592][T25063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1611.188772][T25063] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1611.251536][T25068] bond2: option primary_reselect: invalid value (133) [ 1611.263366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.279736][T25068] bond2 (unregistering): Released all slaves [ 1611.289265][T25063] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1611.328774][T25077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12669'. [ 1611.338154][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.354700][T25065] ip6gre1: entered promiscuous mode [ 1611.360120][T25065] ip6gre1: entered allmulticast mode [ 1611.412775][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.439400][T25082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12669'. [ 1611.451704][T32562] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1611.463433][T32562] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1611.472749][ T7195] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1611.487290][T25077] IPv6: Can't replace route, no match found [ 1611.503680][T25077] IPv6: Can't replace route, no match found [ 1611.728175][T25087] openvswitch: netlink: IP tunnel dst address not specified [ 1612.152405][T25105] xt_connbytes: Forcing CT accounting to be enabled [ 1612.292427][ T7204] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1612.317835][ T7204] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1612.459046][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.483918][T25117] sctp: [Deprecated]: syz.4.12677 (pid 25117) Use of int in max_burst socket option. [ 1612.483918][T25117] Use struct sctp_assoc_value instead [ 1612.583940][T25117] __nla_validate_parse: 2 callbacks suppressed [ 1612.583959][T25117] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12677'. [ 1612.790536][T25127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12678'. [ 1612.867240][T25127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12678'. [ 1612.960946][T25133] netlink: 11 bytes leftover after parsing attributes in process `syz.1.12680'. [ 1613.107107][T25127] syz_tun: entered promiscuous mode [ 1613.152809][T25127] syz_tun: left promiscuous mode [ 1613.170566][T25139] smc: net device veth1_to_team erased user defined pnetid S [ 1613.221887][T25139] smc: ib device syz2 ibport 1 erased user defined pnetid S [ 1613.350628][T25146] batadv_slave_0: entered promiscuous mode [ 1613.361090][T25146] batadv_slave_0: entered allmulticast mode [ 1613.417417][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.593970][T25161] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12685'. [ 1613.914749][T25178] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12686'. [ 1614.032042][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1614.040298][ C0] lec:lec_tx_timeout: lec0 [ 1614.064473][T25179] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12686'. [ 1614.091677][T25178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.099427][T25178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.117889][T25182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12689'. [ 1614.184797][T25179] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12686'. [ 1614.290896][T25190] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12690'. [ 1614.323345][T25126] wg1 speed is unknown, defaulting to 1000 [ 1615.252330][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1615.265918][T25226] syzkaller0: entered promiscuous mode [ 1615.277521][T25226] syzkaller0: entered allmulticast mode [ 1615.390693][T25233] netlink: 'syz.4.12698': attribute type 1 has an invalid length. [ 1615.573078][ T7195] net_ratelimit: 3 callbacks suppressed [ 1615.573097][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.624619][T25205] wg1 speed is unknown, defaulting to 1000 [ 1615.660921][T25233] IPVS: Scheduler module ip_vs_ not found [ 1615.946306][T25263] x_tables: unsorted underflow at hook 2 [ 1616.423255][T25274] syzkaller0: entered promiscuous mode [ 1616.428788][T25274] syzkaller0: entered allmulticast mode [ 1616.615136][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.022215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.292679][T25295] block nbd8: server does not support multiple connections per device. [ 1617.301493][T25295] block nbd8: shutting down sockets [ 1617.398130][T25295] block nbd9: server does not support multiple connections per device. [ 1617.409558][T25295] block nbd9: shutting down sockets [ 1617.558601][T25295] block nbd8: server does not support multiple connections per device. [ 1617.567969][T25295] block nbd8: shutting down sockets [ 1617.585518][T21415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.670032][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.720727][T25295] block nbd9: server does not support multiple connections per device. [ 1617.729760][T25295] block nbd9: shutting down sockets [ 1617.838420][T25295] block nbd8: server does not support multiple connections per device. [ 1617.858941][T25295] block nbd8: shutting down sockets [ 1617.972392][T25295] block nbd8: server does not support multiple connections per device. [ 1617.984691][T25295] block nbd8: shutting down sockets [ 1618.108247][T25295] block nbd8: server does not support multiple connections per device. [ 1618.133688][T25295] block nbd8: shutting down sockets [ 1618.314899][T25299] netlink: 'syz.4.12711': attribute type 1 has an invalid length. [ 1618.697286][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.733983][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.349791][T25332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.369022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.576512][T25339] __nla_validate_parse: 8 callbacks suppressed [ 1620.576531][T25339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12720'. [ 1620.607922][T25343] netlink: 'syz.0.12722': attribute type 1 has an invalid length. [ 1620.616559][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.772871][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.791041][T25343] bond3: entered promiscuous mode [ 1620.804593][T25343] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1620.845940][T25348] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1620.865994][T25348] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 1620.878493][T25348] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1620.905803][T25348] bond3: (slave vcan1): making interface the new active one [ 1620.913948][T25348] vcan1: entered promiscuous mode [ 1620.921109][T25348] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 1620.951843][T21415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.983382][T25354] gre1: entered allmulticast mode [ 1621.075769][T25361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12727'. [ 1621.087170][T25362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12727'. [ 1621.097343][T25359] vlan2: entered allmulticast mode [ 1621.100545][T25359] batman_adv: batadv0: Adding interface: vlan2 [ 1621.124162][T25359] batman_adv: batadv0: The MTU of interface vlan2 is too small (320) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1621.172947][T25359] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1621.352865][T25363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1621.393819][T25363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1621.610558][T25378] nicvf0: tun_chr_ioctl cmd 1074812117 [ 1621.814199][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.271701][T25372] wg1 speed is unknown, defaulting to 1000 [ 1622.340908][T25413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.348158][T25413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.355707][T25413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.362917][T25413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1622.427178][T25418] sctp: [Deprecated]: syz.4.12743 (pid 25418) Use of int in maxseg socket option. [ 1622.427178][T25418] Use struct sctp_assoc_value instead [ 1622.772285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.852401][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1622.876486][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.995280][T25433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12747'. [ 1623.117591][T25380] wg1 speed is unknown, defaulting to 1000 [ 1623.473074][T25442] netlink: 'syz.2.12750': attribute type 2 has an invalid length. [ 1623.500397][T25442] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1623.515157][T25442] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12750'. [ 1623.657755][T21415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.856475][T25446] sctp: [Deprecated]: syz.1.12751 (pid 25446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1623.856475][T25446] Use struct sctp_sack_info instead [ 1623.903760][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.930874][T25417] wg1 speed is unknown, defaulting to 1000 [ 1624.089885][T25407] wg1 speed is unknown, defaulting to 1000 [ 1624.534071][T32417] Bluetooth: hci4: command 0x0405 tx timeout [ 1624.933162][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.073921][T25462] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 1625.973301][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.490833][T25483] dvmrp0: entered allmulticast mode [ 1626.696942][T21415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.023173][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.061265][T25498] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12765'. [ 1627.248395][T25503] syzkaller0: entered promiscuous mode [ 1627.261790][T25503] syzkaller0: entered allmulticast mode [ 1627.270345][T25504] netlink: 7 bytes leftover after parsing attributes in process `syz.1.12768'. [ 1627.285427][T25504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12768'. [ 1627.303299][T25504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12768'. [ 1627.315385][T25503] tc action pedit offset must be on 32 bit boundaries [ 1627.331960][T25508] netlink: 'syz.4.12769': attribute type 4 has an invalid length. [ 1627.372238][T25508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12769'. [ 1627.411261][T25508] veth4: entered allmulticast mode [ 1627.896609][T25527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12774'. [ 1627.920521][T25527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12774'. [ 1627.996809][T25532] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12776'. [ 1628.016040][T25512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12770'. [ 1628.038025][T25532] netlink: 43 bytes leftover after parsing attributes in process `syz.2.12776'. [ 1628.053006][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.082714][ T7202] IPVS: starting estimator thread 0... [ 1628.094881][T25532] netlink: 'syz.2.12776': attribute type 5 has an invalid length. [ 1628.193142][T25543] IPVS: using max 29 ests per chain, 69600 per kthread [ 1628.532368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.667325][T25560] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 1628.902588][T25583] netlink: 'syz.4.12789': attribute type 1 has an invalid length. [ 1629.067546][T25591] netlink: 'syz.2.12791': attribute type 1 has an invalid length. [ 1629.092713][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.292940][T25557] wg1 speed is unknown, defaulting to 1000 [ 1629.733807][T21415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.745177][T25586] wg1 speed is unknown, defaulting to 1000 [ 1630.052425][T32417] Bluetooth: hci1: command 0x0406 tx timeout [ 1630.132629][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.558832][T21415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.575743][T25623] xt_TCPMSS: Only works on TCP SYN packets [ 1630.807521][T25605] wg1 speed is unknown, defaulting to 1000 [ 1630.902320][T25635] sctp: [Deprecated]: syz.4.12802 (pid 25635) Use of int in max_burst socket option. [ 1630.902320][T25635] Use struct sctp_assoc_value instead [ 1631.172600][ T7195] net_ratelimit: 1 callbacks suppressed [ 1631.172618][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.403692][T25654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.412622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.217671][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.409815][T25672] syzkaller1: entered promiscuous mode [ 1632.424081][T25672] syzkaller1: entered allmulticast mode [ 1632.777218][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.092195][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1633.206276][T25707] __nla_validate_parse: 9 callbacks suppressed [ 1633.206294][T25707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12819'. [ 1633.254994][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.438732][T25718] pim6reg1: entered promiscuous mode [ 1633.452397][T25718] pim6reg1: entered allmulticast mode [ 1633.505964][T25722] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12824'. [ 1633.596307][T25730] syzkaller0: entered promiscuous mode [ 1633.610489][T25730] syzkaller0: entered allmulticast mode [ 1633.673801][T25735] xt_bpf: check failed: parse error [ 1633.732654][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.870122][T25750] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 1633.880362][T25750] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1634.292238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.295983][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.875480][T25777] macvtap2: entered promiscuous mode [ 1634.881098][T25777] macvtap2: entered allmulticast mode [ 1635.375596][ T7202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.965933][T25778] veth1_vlan: left allmulticast mode [ 1636.038956][T32562] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.064560][T32562] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.082520][T32562] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.091463][T32562] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.222728][ C1] net_ratelimit: 1 callbacks suppressed [ 1636.222746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.246141][T25784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12837'. [ 1636.464535][ T7194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.475526][T25734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1636.690535][T25793] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1636.715859][T25793] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1636.767145][T25798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12840'. [ 1636.771804][T25793] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1637.497211][ T6856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.520918][T25821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12846'. [ 1637.576948][T25821] veth3: entered promiscuous mode [ 1637.795757][T25833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12849'. [ 1638.092564][T25823] wg1 speed is unknown, defaulting to 1000 [ 1638.220348][T25839] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1638.223638][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.393028][T25855] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12855'. [ 1638.519140][T25860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12856'. [ 1638.533357][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.648009][T25860] nbd8: detected capacity change from 0 to 137438953472 [ 1639.576472][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.663037][T25894] netlink: 'syz.3.12862': attribute type 62 has an invalid length. [ 1639.967876][T25890] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1640.052203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.189634][T25917] [ 1640.192115][T25917] ====================================================== [ 1640.199156][T25917] WARNING: possible circular locking dependency detected [ 1640.206208][T25917] syzkaller #0 Not tainted [ 1640.210653][T25917] ------------------------------------------------------ [ 1640.217695][T25917] syz.0.12870/25917 is trying to acquire lock: [ 1640.223871][T25917] ffffffff8ea853e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 1640.233063][T25917] [ 1640.233063][T25917] but task is already holding lock: [ 1640.240445][T25917] ffff88801ae84078 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1640.249974][T25917] [ 1640.249974][T25917] which lock already depends on the new lock. [ 1640.249974][T25917] [ 1640.260399][T25917] [ 1640.260399][T25917] the existing dependency chain (in reverse order) is: [ 1640.269423][T25917] [ 1640.269423][T25917] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 1640.277021][T25917] __might_fault+0xcb/0x130 [ 1640.282090][T25917] _copy_from_user+0x28/0xb0 [ 1640.287227][T25917] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 1640.293775][T25917] ip_generic_getfrag+0x149/0x2d0 [ 1640.299372][T25917] __ip6_append_data+0x3902/0x3e90 [ 1640.305034][T25917] ip6_append_data+0x10f/0x280 [ 1640.310341][T25917] rawv6_sendmsg+0x12d3/0x18e0 [ 1640.315643][T25917] ____sys_sendmsg+0x80a/0x9f0 [ 1640.320993][T25917] ___sys_sendmsg+0x2a5/0x360 [ 1640.326205][T25917] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1640.331669][T25917] do_syscall_64+0x15f/0xf80 [ 1640.336792][T25917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.343228][T25917] [ 1640.343228][T25917] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1640.351011][T25917] lock_sock_nested+0x41/0x100 [ 1640.356318][T25917] inet_shutdown+0x6a/0x390 [ 1640.361363][T25917] nbd_mark_nsock_dead+0x2e9/0x560 [ 1640.367011][T25917] recv_work+0x1c2e/0x1d40 [ 1640.371973][T25917] process_scheduled_works+0xb5d/0x1860 [ 1640.378066][T25917] worker_thread+0xa53/0xfc0 [ 1640.383201][T25917] kthread+0x388/0x470 [ 1640.387839][T25917] ret_from_fork+0x514/0xb70 [ 1640.392978][T25917] ret_from_fork_asm+0x1a/0x30 [ 1640.398287][T25917] [ 1640.398287][T25917] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1640.406013][T25917] __mutex_lock+0x1a3/0x1550 [ 1640.411141][T25917] nbd_queue_rq+0x37b/0x1100 [ 1640.416275][T25917] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1640.422348][T25917] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1640.429229][T25917] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1640.435737][T25917] blk_mq_run_hw_queue+0x348/0x4f0 [ 1640.441376][T25917] blk_mq_dispatch_list+0xd16/0xe10 [ 1640.447113][T25917] blk_mq_flush_plug_list+0x48d/0x570 [ 1640.453039][T25917] __blk_flush_plug+0x3ed/0x4d0 [ 1640.458446][T25917] __submit_bio+0x28d/0x580 [ 1640.463506][T25917] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1640.469683][T25917] block_read_full_folio+0x7b7/0x830 [ 1640.475526][T25917] filemap_read_folio+0x137/0x3b0 [ 1640.481112][T25917] do_read_cache_folio+0x358/0x590 [ 1640.486760][T25917] read_part_sector+0xb6/0x2b0 [ 1640.492066][T25917] adfspart_check_ICS+0xb1/0x960 [ 1640.497570][T25917] bdev_disk_changed+0x817/0x1770 [ 1640.503134][T25917] blkdev_get_whole+0x380/0x510 [ 1640.508529][T25917] bdev_open+0x31e/0xd30 [ 1640.513311][T25917] blkdev_open+0x470/0x610 [ 1640.518272][T25917] do_dentry_open+0x785/0x14e0 [ 1640.523593][T25917] vfs_open+0x3b/0x340 [ 1640.528198][T25917] path_openat+0x2e08/0x3860 [ 1640.533338][T25917] do_file_open+0x23e/0x4a0 [ 1640.538387][T25917] do_sys_openat2+0x113/0x200 [ 1640.543603][T25917] __x64_sys_openat+0x138/0x170 [ 1640.548992][T25917] do_syscall_64+0x15f/0xf80 [ 1640.554131][T25917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.560564][T25917] [ 1640.560564][T25917] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1640.567801][T25917] __mutex_lock+0x1a3/0x1550 [ 1640.572927][T25917] nbd_queue_rq+0xc6/0x1100 [ 1640.577982][T25917] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1640.584079][T25917] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1640.590958][T25917] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1640.597488][T25917] blk_mq_run_hw_queue+0x348/0x4f0 [ 1640.603154][T25917] blk_mq_dispatch_list+0xd16/0xe10 [ 1640.608889][T25917] blk_mq_flush_plug_list+0x48d/0x570 [ 1640.614796][T25917] __blk_flush_plug+0x3ed/0x4d0 [ 1640.620178][T25917] __submit_bio+0x28d/0x580 [ 1640.625217][T25917] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1640.631377][T25917] block_read_full_folio+0x7b7/0x830 [ 1640.637204][T25917] filemap_read_folio+0x137/0x3b0 [ 1640.642771][T25917] do_read_cache_folio+0x358/0x590 [ 1640.648431][T25917] read_part_sector+0xb6/0x2b0 [ 1640.653731][T25917] adfspart_check_ICS+0xb1/0x960 [ 1640.659235][T25917] bdev_disk_changed+0x817/0x1770 [ 1640.664803][T25917] blkdev_get_whole+0x380/0x510 [ 1640.670181][T25917] bdev_open+0x31e/0xd30 [ 1640.674951][T25917] blkdev_open+0x470/0x610 [ 1640.679901][T25917] do_dentry_open+0x785/0x14e0 [ 1640.685204][T25917] vfs_open+0x3b/0x340 [ 1640.689800][T25917] path_openat+0x2e08/0x3860 [ 1640.694932][T25917] do_file_open+0x23e/0x4a0 [ 1640.699969][T25917] do_sys_openat2+0x113/0x200 [ 1640.705176][T25917] __x64_sys_openat+0x138/0x170 [ 1640.710554][T25917] do_syscall_64+0x15f/0xf80 [ 1640.715684][T25917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.722116][T25917] [ 1640.722116][T25917] -> #3 (set->srcu){.+.+}-{0:0}: [ 1640.729263][T25917] __synchronize_srcu+0xca/0x300 [ 1640.734736][T25917] elevator_switch+0x1e8/0x7a0 [ 1640.740034][T25917] elevator_change+0x2cc/0x450 [ 1640.745328][T25917] elevator_set_default+0x36c/0x430 [ 1640.751063][T25917] blk_register_queue+0x3e9/0x4e0 [ 1640.756624][T25917] __add_disk+0x677/0xd50 [ 1640.761503][T25917] add_disk_fwnode+0xfb/0x480 [ 1640.766725][T25917] nbd_dev_add+0x72c/0xb50 [ 1640.771688][T25917] nbd_init+0x168/0x1f0 [ 1640.776384][T25917] do_one_initcall+0x250/0x870 [ 1640.781675][T25917] do_initcall_level+0x104/0x190 [ 1640.787150][T25917] do_initcalls+0x59/0xa0 [ 1640.792024][T25917] kernel_init_freeable+0x2a6/0x3e0 [ 1640.797782][T25917] kernel_init+0x1d/0x1d0 [ 1640.802665][T25917] ret_from_fork+0x514/0xb70 [ 1640.807796][T25917] ret_from_fork_asm+0x1a/0x30 [ 1640.813130][T25917] [ 1640.813130][T25917] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1640.820975][T25917] __mutex_lock+0x1a3/0x1550 [ 1640.826114][T25917] elevator_change+0x1b3/0x450 [ 1640.831418][T25917] elevator_set_none+0xb5/0x140 [ 1640.836825][T25917] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1640.843167][T25917] nbd_start_device+0x17f/0xb10 [ 1640.848559][T25917] nbd_genl_connect+0x165b/0x1cf0 [ 1640.854121][T25917] genl_family_rcv_msg_doit+0x22a/0x330 [ 1640.860219][T25917] genl_rcv_msg+0x61c/0x7a0 [ 1640.865267][T25917] netlink_rcv_skb+0x232/0x4b0 [ 1640.870559][T25917] genl_rcv+0x28/0x40 [ 1640.875076][T25917] netlink_unicast+0x75c/0x8e0 [ 1640.880388][T25917] netlink_sendmsg+0x813/0xb40 [ 1640.885690][T25917] ____sys_sendmsg+0x972/0x9f0 [ 1640.891004][T25917] ___sys_sendmsg+0x2a5/0x360 [ 1640.896225][T25917] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1640.901720][T25917] do_syscall_64+0x15f/0xf80 [ 1640.906861][T25917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.913345][T25917] [ 1640.913345][T25917] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1640.921986][T25917] blk_alloc_queue+0x546/0x680 [ 1640.927297][T25917] __blk_mq_alloc_disk+0x197/0x390 [ 1640.932951][T25917] nbd_dev_add+0x499/0xb50 [ 1640.937914][T25917] nbd_init+0x168/0x1f0 [ 1640.942621][T25917] do_one_initcall+0x250/0x870 [ 1640.947930][T25917] do_initcall_level+0x104/0x190 [ 1640.953420][T25917] do_initcalls+0x59/0xa0 [ 1640.958299][T25917] kernel_init_freeable+0x2a6/0x3e0 [ 1640.964064][T25917] kernel_init+0x1d/0x1d0 [ 1640.968937][T25917] ret_from_fork+0x514/0xb70 [ 1640.974071][T25917] ret_from_fork_asm+0x1a/0x30 [ 1640.979375][T25917] [ 1640.979375][T25917] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1640.986607][T25917] __lock_acquire+0x15a5/0x2cf0 [ 1640.992000][T25917] lock_acquire+0x106/0x350 [ 1640.997053][T25917] fs_reclaim_acquire+0x71/0x100 [ 1641.002533][T25917] prepare_alloc_pages+0x152/0x650 [ 1641.008184][T25917] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1641.014530][T25917] alloc_pages_mpol+0x235/0x490 [ 1641.019936][T25917] folio_alloc_mpol_noprof+0x39/0x160 [ 1641.025857][T25917] shmem_alloc_and_add_folio+0x442/0xf80 [ 1641.032041][T25917] shmem_get_folio_gfp+0x5a9/0x1670 [ 1641.037791][T25917] shmem_fault+0x179/0x390 [ 1641.042755][T25917] __do_fault+0x138/0x2a0 [ 1641.047629][T25917] do_pte_missing+0x601/0x33f0 [ 1641.052931][T25917] handle_mm_fault+0x1bd7/0x3170 [ 1641.058412][T25917] do_user_addr_fault+0x75b/0x1340 [ 1641.064079][T25917] exc_page_fault+0x6a/0xc0 [ 1641.069134][T25917] asm_exc_page_fault+0x26/0x30 [ 1641.074537][T25917] __put_user_4+0xd/0x20 [ 1641.079315][T25917] bpf_obj_get_info_by_fd+0xa0f/0x32f0 [ 1641.085310][T25917] __sys_bpf+0x66e/0x950 [ 1641.090087][T25917] __x64_sys_bpf+0x7c/0x90 [ 1641.095034][T25917] do_syscall_64+0x15f/0xf80 [ 1641.100176][T25917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.106610][T25917] [ 1641.106610][T25917] other info that might help us debug this: [ 1641.106610][T25917] [ 1641.116858][T25917] Chain exists of: [ 1641.116858][T25917] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 1641.116858][T25917] [ 1641.129479][T25917] Possible unsafe locking scenario: [ 1641.129479][T25917] [ 1641.136942][T25917] CPU0 CPU1 [ 1641.142364][T25917] ---- ---- [ 1641.147784][T25917] rlock(&mm->mmap_lock); [ 1641.152216][T25917] lock(sk_lock-AF_INET6); [ 1641.159272][T25917] lock(&mm->mmap_lock); [ 1641.166138][T25917] lock(fs_reclaim); [ 1641.170140][T25917] [ 1641.170140][T25917] *** DEADLOCK *** [ 1641.170140][T25917] [ 1641.178326][T25917] 2 locks held by syz.0.12870/25917: [ 1641.183630][T25917] #0: ffff88804969d4d0 (&fp->aux->used_maps_mutex){+.+.}-{4:4}, at: bpf_obj_get_info_by_fd+0x8eb/0x32f0 [ 1641.194901][T25917] #1: ffff88801ae84078 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1641.204863][T25917] [ 1641.204863][T25917] stack backtrace: [ 1641.210762][T25917] CPU: 0 UID: 0 PID: 25917 Comm: syz.0.12870 Not tainted syzkaller #0 PREEMPT(full) [ 1641.210782][T25917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1641.210794][T25917] Call Trace: [ 1641.210801][T25917] [ 1641.210809][T25917] dump_stack_lvl+0xe8/0x150 [ 1641.210838][T25917] print_circular_bug+0x2e1/0x300 [ 1641.210860][T25917] check_noncircular+0x12e/0x150 [ 1641.210882][T25917] __lock_acquire+0x15a5/0x2cf0 [ 1641.210910][T25917] ? kernel_text_address+0xa5/0xe0 [ 1641.210932][T25917] ? __kernel_text_address+0xd/0x30 [ 1641.210952][T25917] ? unwind_get_return_address+0x4d/0x90 [ 1641.210970][T25917] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1641.210994][T25917] ? arch_stack_walk+0xfb/0x150 [ 1641.211014][T25917] ? prepare_alloc_pages+0x152/0x650 [ 1641.211035][T25917] lock_acquire+0x106/0x350 [ 1641.211059][T25917] ? prepare_alloc_pages+0x152/0x650 [ 1641.211083][T25917] ? __lock_acquire+0x6b5/0x2cf0 [ 1641.211110][T25917] fs_reclaim_acquire+0x71/0x100 [ 1641.211130][T25917] ? prepare_alloc_pages+0x152/0x650 [ 1641.211152][T25917] prepare_alloc_pages+0x152/0x650 [ 1641.211176][T25917] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1641.211201][T25917] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1641.211226][T25917] ? __pfx_policy_nodemask+0x10/0x10 [ 1641.211253][T25917] alloc_pages_mpol+0x235/0x490 [ 1641.211277][T25917] folio_alloc_mpol_noprof+0x39/0x160 [ 1641.211301][T25917] shmem_alloc_and_add_folio+0x442/0xf80 [ 1641.211320][T25917] ? filemap_get_entry+0xcd/0x3f0 [ 1641.211354][T25917] ? __pfx_filemap_get_entry+0x10/0x10 [ 1641.211371][T25917] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1641.211405][T25917] ? shmem_allowable_huge_orders+0x5ec/0x690 [ 1641.211436][T25917] shmem_get_folio_gfp+0x5a9/0x1670 [ 1641.211475][T25917] shmem_fault+0x179/0x390 [ 1641.211497][T25917] __do_fault+0x138/0x2a0 [ 1641.211519][T25917] do_pte_missing+0x601/0x33f0 [ 1641.211545][T25917] ? handle_mm_fault+0xee/0x3170 [ 1641.211563][T25917] handle_mm_fault+0x1bd7/0x3170 [ 1641.211587][T25917] ? handle_mm_fault+0xee/0x3170 [ 1641.211606][T25917] ? __pfx_handle_mm_fault+0x10/0x10 [ 1641.211628][T25917] ? __lock_acquire+0x6b5/0x2cf0 [ 1641.211655][T25917] ? lock_mm_and_find_vma+0xa7/0x340 [ 1641.211676][T25917] do_user_addr_fault+0x75b/0x1340 [ 1641.211709][T25917] exc_page_fault+0x6a/0xc0 [ 1641.211733][T25917] asm_exc_page_fault+0x26/0x30 [ 1641.211749][T25917] RIP: 0010:__put_user_4+0xd/0x20 [ 1641.211773][T25917] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1641.211788][T25917] RSP: 0018:ffffc900067b79d8 EFLAGS: 00050206 [ 1641.211803][T25917] RAX: 000000000000110d RBX: 0000000000000000 RCX: 0000200000001d00 [ 1641.211816][T25917] RDX: 0000000000000001 RSI: ffffffff8e24f3ee RDI: ffff888036619680 [ 1641.211828][T25917] RBP: ffffc900067b7d10 R08: ffffffff82188cbf R09: ffff88801ae84078 [ 1641.211841][T25917] R10: dffffc0000000000 R11: fffffbfff20670df R12: 0000200000001d00 [ 1641.211854][T25917] R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000008 [ 1641.211868][T25917] ? __might_fault+0xaf/0x130 [ 1641.211889][T25917] bpf_obj_get_info_by_fd+0xa0f/0x32f0 [ 1641.211920][T25917] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 1641.211947][T25917] ? __lock_acquire+0x6b5/0x2cf0 [ 1641.211978][T25917] ? try_to_wake_up+0x828/0x1380 [ 1641.212016][T25917] ? bpf_lsm_bpf+0x9/0x20 [ 1641.212038][T25917] ? security_bpf+0x7e/0x2d0 [ 1641.212064][T25917] __sys_bpf+0x66e/0x950 [ 1641.212087][T25917] ? __pfx___sys_bpf+0x10/0x10 [ 1641.212116][T25917] ? rcu_is_watching+0x15/0xb0 [ 1641.212136][T25917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.212153][T25917] __x64_sys_bpf+0x7c/0x90 [ 1641.212173][T25917] do_syscall_64+0x15f/0xf80 [ 1641.212195][T25917] ? trace_irq_disable+0x3b/0x140 [ 1641.212217][T25917] ? clear_bhb_loop+0x40/0x90 [ 1641.212236][T25917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.212253][T25917] RIP: 0033:0x7f782899cdd9 [ 1641.212268][T25917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1641.212282][T25917] RSP: 002b:00007f782979d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1641.212299][T25917] RAX: ffffffffffffffda RBX: 00007f7828c15fa0 RCX: 00007f782899cdd9 [ 1641.212312][T25917] RDX: 0000000000000010 RSI: 00002000000005c0 RDI: 000000000000000f [ 1641.212322][T25917] RBP: 00007f7828a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1641.212333][T25917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1641.212343][T25917] R13: 00007f7828c16038 R14: 00007f7828c15fa0 R15: 00007fff7884f538 [ 1641.212363][T25917] [ 1641.230712][ T6856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.673775][ T6856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.691506][T11838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.718698][T25914] bond2: entered promiscuous mode [ 1641.724948][T25914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1641.819637][T25893] wg1 speed is unknown, defaulting to 1000 [ 1642.142276][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.294172][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.334537][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.343502][ T6856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.374985][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.612453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.620610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.172136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.495608][ T7206] net_ratelimit: 2 callbacks suppressed [ 1647.495622][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.652229][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.454922][ T6856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.535961][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.574559][ T7206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog