last executing test programs: 5m44.406782483s ago: executing program 4 (id=8504): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x20000400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000c40)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) close(r2) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000cc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000dc0)={'syzkaller0\x00', @random="0100003600"}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x85, &(0x7f0000000140)={r7, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2e2e49f89843a5318d5ba093aa761132b512e8c4eb4ec42ea38be0721115142ca827429fec4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c05263064d730ae3e410e7b9faaa273a33c58412b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f9"}, &(0x7f0000000200)=0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0x10, 0xd}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb130, 0x5, 0x0, 0xea}, 0x3c}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004891}, 0x2) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000f80), 0x56) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a80)={r10, &(0x7f0000000ac0)}, 0x20) close(r0) r11 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r12, &(0x7f00000008c0)=[{&(0x7f0000000ac0)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000b40)="1c", 0x1}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="34000000000000008400001fc7ff0f0800c4000000000000"], 0x18, 0x48060}], 0x1, 0x200000d0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r12, 0x84, 0x4, 0x0, &(0x7f0000000bc0)) 5m35.895566038s ago: executing program 4 (id=8519): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 5m35.383548715s ago: executing program 4 (id=8522): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x44, 0xfffffffe}]}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) socket$rds(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f00000008c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000200"/28], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r4, @ANYBLOB="1400018008000100000001000500030003"], 0x2c}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000440)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x8}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1a, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000800)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8ad4, r7, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r3, &(0x7f0000000a00)={0x8}) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x3e, &(0x7f0000001000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x32, 0x0, @private, @empty}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x1, 0x4c, &(0x7f0000000a80), 0x4) sendmsg$inet(r12, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r13, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 5m35.246160364s ago: executing program 2 (id=8524): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x840) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'ip6gre0\x00', @remote}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)='`', 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, 0x4, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x8015) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x6c, &(0x7f0000000900)=""/4095, &(0x7f0000001900)=0xfff) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}]}, 0x28}], 0x1}, 0x0) sendto(r6, &(0x7f0000000500)="76b0b7ae21b8507875bc8179acd2b0cd028fce789bf548b982975c6163b012fdb290663d46521e098d1052872b3faf75bf674f78d6841e7b18135fb3caaf4099609541238d3b4e575fb0942fcc6400fe8a79033b6240ab683caf9c9108ae0738775d80131c248e4a62ef6dacfadf66657531c8bc806b770231db3aad2988b273e1f787fbd4c6817ea9f3b50193474bec2afda71617a4cd63f3db0d684673970d", 0xa0, 0x20008000, 0x0, 0x0) 5m34.818864165s ago: executing program 4 (id=8528): r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) (async) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000001200)=0x400000d2, 0x4) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x30000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x30000000}) r3 = epoll_create1(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[], 0x28}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000d00)={0x3, {{0xa, 0x4e24, 0x0, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @empty, 0x4f1}}}, 0x108) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xd, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYRESOCT=r2], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xd, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYRESOCT=r2], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001400)={r7}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001400)={r7}, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb010018000002000000401000000000000e000000000100000000000000000000070b00000000000000000000090000000000000003000000090000000007000000000000"], 0x0, 0x5a}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000180)=ANY=[@ANYRESOCT], 0x0, 0x26, 0x0, 0x1, 0x9}, 0x28) writev(r5, &(0x7f0000002940)=[{0x0}, {&(0x7f0000001740)="5916b6cd8395a14860e6298c9328ab9e4b6d7af73df25dccc6e824b0012e1f15982078534316096edbd3be9b3d33f8a42fca4f85511519a5a6c9785938d6be3684e0e6881a92a1f6c455c1b71b173b03b2e7e460af90c8555f350f235c873c46498db49a66896ae8dc4aed423d1420a909c9d79294b3349a86fe9ccb324280c50cf2d0af22bd1ab28104b4e2f057330317d68a02ed9dcf6b2e5a04b600ade500388ad6953c32bbac99c83f815a0b71671a9bb6a9aa406385b51d70ea213d8c365d84ef8f832630c988846c9e64c64a9865978ccdce0d4e26d40fda45601f9de27f82217b7ad107b2cc78a0dd69b2c050551c52351d469a", 0xf7}, {&(0x7f0000001840)="029e506c08cb442510ffe19b7e5179bfb3eda3f3", 0x14}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="1f0a75a61d1805c90dd90f0af39b4669eba427d635030071097f66bc2a68065cda64205ee965132932890403105d222af594d09ba2a4af2bc8826c475106f19723475756f597afcdd7f899b4bc323f9acb9693002e85246492d148ce498f2c3381bbcb4dd65d0451d5aecc0f928b4d061059c9954630a4a0acbfe62058951db0f4c916cbb323e26de350cf165f866d8656020cc9ebdda58d1173f00a303d96d8c7a34442aeee8ca6e67835f3df1d85eb9a2a0c0b", 0xb4}], 0x5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1400000004060303000000005ede7a7a03000008"], 0x14}}, 0x20004000) (async) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1400000004060303000000005ede7a7a03000008"], 0x14}}, 0x20004000) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x2010, 0xffffffffffffffff, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000af0000df51800cb2142725721c46a734553016bd11ef176d3ff7a42c07e4d76e92a74e6ebdb60597a4898bccad30c736f06145efae329599229184ca91a69c5dd05cc3518296777eeae0b128b243533d24591db5b2b7e4cc016ffcb7daa1eaf0f49a90b89a2da81af4d6740f4b42f5618b7a5c4b0bfa9fc337106b9c7a79a7f00d8a71e5", @ANYRESHEX=r0, @ANYRES32, @ANYRES8=r3], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(0x3) (async) close(0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff080045000017ffff0000081d907800000000e0000001110fec457002907800000006"], 0x0) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01e92a", @ANYRES32=r10, @ANYBLOB="0c009900090000001c00000008005700df040000"], 0x30}, 0x1, 0x0, 0x0, 0x40049d0}, 0x20000000) (async) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01e92a", @ANYRES32=r10, @ANYBLOB="0c009900090000001c00000008005700df040000"], 0x30}, 0x1, 0x0, 0x0, 0x40049d0}, 0x20000000) 5m32.899649456s ago: executing program 2 (id=8535): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000063d82600010000010100005566778899aabb0800450000140000000001ea0000010203040506070800000c00020006000600894f00000c0003"], 0x58}}, 0x0) (async) unshare(0x60600) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001400)={0x0, 0x68}, 0x1, 0x0, 0xa000000}, 0x0) 5m32.571556762s ago: executing program 1 (id=8537): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x16, 0x0, 0xb4, 0x7f}, 0x50) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x1398, 0x0, 0xc8, 0x8, 0x11b8, 0x5803, 0x12c8, 0x2e8, 0x2e8, 0x12c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfd8f80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f8) close(r1) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000079005816000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) 5m32.570694678s ago: executing program 0 (id=8538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r3, 0x20, &(0x7f00000006c0)={&(0x7f00000004c0)=""/161, 0xa1, 0x0, &(0x7f0000000600)=""/185, 0xb9}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x8041) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37306a) 5m32.465787303s ago: executing program 2 (id=8539): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0xc0, 0x380, 0x380, 0x0, 0x2e8, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x50}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@private=0xa010101, @local, 0x0, 0x0, 'sit0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x2}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@ttl={{0x28}, {0x0, 0x10}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x10, 0x7, 0x1100, 0x3]}, {0x0, [0x2, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x1, 0x8, 0x2, {0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 0x140, 0xd, [0xd, 0x40, 0x6, 0x31, 0x19, 0x36, 0x24, 0x2f, 0x1b, 0x23, 0x5, 0x2, 0x21, 0xc, 0x21, 0x23], 0x1, 0x10, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) close(r4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f00000001c0)=0x6, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x8000}, &(0x7f0000000180)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000010000004200000040000000c2000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)="cb423a11b33192d673ba4c831a9adca48ca7eb0d2f073f36dfc3a94144bfd9d81639fd65ac4e557e12e7b0d2dfea051a7b440ade19d879e209596bf44477ecf6370e0133e541ef9f9e3631dde33dabf7842deb7a72c3ffe0f611062628683e3db2c685af", &(0x7f0000000380), 0x1003, r6}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)="af", 0x0, 0x2, r6}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) (async) accept4(r1, 0x0, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0xc0, 0x380, 0x380, 0x0, 0x2e8, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x50}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@private=0xa010101, @local, 0x0, 0x0, 'sit0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x2}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@ttl={{0x28}, {0x0, 0x10}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x10, 0x7, 0x1100, 0x3]}, {0x0, [0x2, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x1, 0x8, 0x2, {0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 0x140, 0xd, [0xd, 0x40, 0x6, 0x31, 0x19, 0x36, 0x24, 0x2f, 0x1b, 0x23, 0x5, 0x2, 0x21, 0xc, 0x21, 0x23], 0x1, 0x10, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) (async) close(r4) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f00000001c0)=0x6, 0x4) (async) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, 0x0, &(0x7f0000000200)) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x8000}, &(0x7f0000000180)=0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000010000004200000040000000c2000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)="cb423a11b33192d673ba4c831a9adca48ca7eb0d2f073f36dfc3a94144bfd9d81639fd65ac4e557e12e7b0d2dfea051a7b440ade19d879e209596bf44477ecf6370e0133e541ef9f9e3631dde33dabf7842deb7a72c3ffe0f611062628683e3db2c685af", &(0x7f0000000380), 0x1003, r6}, 0x38) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)="af", 0x0, 0x2, r6}, 0x38) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) (async) 5m32.17948108s ago: executing program 0 (id=8541): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100060808004149014006040800", 0x58}], 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000200)) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000240)={@dev, @local, @broadcast}, &(0x7f0000000280)=0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$tcp_congestion(r3, &(0x7f0000000480)='illinois\x00', 0x9) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000b37e1cfb5b5f7532e9f65a8faefb6600"/35, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r2, @ANYBLOB="0000000002000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m32.091386999s ago: executing program 1 (id=8542): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000280)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000500)=0x1967, 0x4) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000a40)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x104, 0x26, 0x29, 0x70bd2f, 0x0, {0x3}, [@typed={0xf0, 0x15b, 0x0, 0x0, @str='\xf8}@\x00JX#\xaa\xfe\v\xd0d\xdd:\x99e\xe7\xf9z\xe7U\xbe\xc33X,*\xc1\x81t+\x17w\xf1&\x14\xe7\x88\x95\xf8$v\xd6o\xb9vb\xb5\xde\xf0\x9e\x06\x18\x93Nz\xfeM6+\x9c\xa5\xce\x86\xa7o\x89\xd6\xfcx\xd7\x81\xc4\xcb$ \x9d\xcc~j\x9a\xd4\xebA\xc8\xba\x01\xcf\xcf}]\x97!6}QGh\xeb\xcd\xf1\xfe\xc6\x97(\x13NzB\x98/\"V\xfag\x85:\xceh\xef\x83|\a\x81x/*ZH\t\xb7\xe5\x16L\xc3*(^\xce\xc9\x9e\xd8\xe3\xdb\xa30#s\x05H\x99\xe12\xc3\xe6\xe5\xd0Z\x87\x9c\x80\xb32\xbf\xa8@\xc3p6A^\\\xee\x90u\x86VaH\xb7\xc0J\xdaN\xe94\xb0\x15\x0657\xc7Db4\xe1o\xc1:\xd8\x11\xcbv%\xe4z\xc7\xd6\x19\xd3\a\xc6\x9d\xfd\x93\x1a%\xe6\t\xca\x1f\x00'/236}]}, 0x104}, 0x1, 0x0, 0x0, 0x2408c811}, 0x20040014) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000a80)={'bond0\x00', {0x2, 0x4e21, @private=0xa010102}}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000ac0)={@multicast2, @loopback}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000b00)=[{&(0x7f0000000b40)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) r6 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000cc0), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000d00)={0x8, {0x2, 0x8, 0x0, 0x7, 0x100}}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000c00)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000c40)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000c80)={@multicast2, @loopback, @empty}, 0xc) r7 = socket(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x13, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@generic={0x66, 0x8, 0x0, 0xfffd}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x24, &(0x7f0000000400)=""/229, 0x41000, 0x8}, 0x94) setsockopt$inet6_int(r7, 0x29, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x488, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x5, 0x3, 0x4, 0xfffffff7, 0x1ff, 0x0, 0x8, 0x8, 0x1, 0x5, 0x43, 0x4, 0x5, 0x7ff, 0xc, 0x8, 0x0, 0x4, 0x6cf, 0xfffffff8, 0x57, 0x4, 0x5, 0xb781, 0x124, 0x8, 0x8, 0x4a, 0x3, 0x5, 0x3, 0x401, 0x6, 0xc37e, 0x7, 0x9d, 0xe5, 0x3, 0x6, 0xfffffbff, 0xffff4863, 0x3, 0x5, 0x1, 0x1, 0x1, 0x8, 0x5, 0x1, 0x3, 0x81, 0x9, 0x8001, 0x100, 0x400, 0x200, 0x0, 0x0, 0x9, 0x5, 0x917c, 0x6, 0xc, 0x9, 0x80000001, 0x1, 0xb, 0x4, 0x8a, 0x9, 0x5, 0x2, 0x0, 0x8000, 0x3, 0x52, 0x4, 0x0, 0xfadb, 0x0, 0x5, 0xfffeffff, 0x9, 0x8, 0xf, 0x5, 0x8, 0x200, 0x2, 0x9, 0x1, 0x200, 0x7, 0xf, 0xfffffd97, 0x6, 0x40, 0x5, 0xc000000, 0x70c5daea, 0x5, 0x7, 0x8, 0x6, 0x800, 0x4, 0x5b, 0x2, 0x91b, 0xd4, 0xd6, 0xa8, 0x0, 0x6, 0x61, 0x55, 0x7, 0x9, 0xfffffffe, 0x10, 0x6, 0xba, 0x9, 0x81, 0x5, 0x4, 0x4, 0x4, 0x800, 0x72d, 0xb2, 0x8, 0x4, 0x10000, 0x9, 0x1, 0x1, 0x5, 0x5, 0x4, 0xd, 0xffffffff, 0x800, 0x2, 0xe, 0x3, 0x7, 0x0, 0x200, 0xfffffff9, 0x3, 0x6, 0xf, 0x7, 0x8, 0x40, 0xe1, 0x3, 0xf, 0x8, 0x9, 0x7, 0xffffffff, 0x4a0e6426, 0x6, 0xffffffff, 0xc0000000, 0x1, 0x3d505a8, 0x4, 0xfcf, 0xe2, 0x7fff, 0xa, 0x7, 0x0, 0x4, 0x4, 0x6, 0x59, 0x32, 0x3, 0x1, 0xff, 0x40, 0x3, 0x80000001, 0x7, 0x5, 0xc, 0x4, 0xfffffffc, 0x9, 0x2, 0xfffffff8, 0x3, 0x2, 0xfffffff7, 0x0, 0x8, 0x3, 0x100, 0x0, 0x7, 0x6, 0x0, 0x0, 0x40, 0x9, 0x7, 0x101, 0x60000000, 0x1, 0x3, 0x8, 0x101, 0x7fff, 0x0, 0x679900, 0x3, 0xbe, 0x1, 0x80000000, 0x7, 0x6, 0x40800, 0x4, 0xfa9, 0x10, 0x5, 0x63, 0x7, 0x9, 0x8000, 0x82, 0x6, 0x2, 0x0, 0x101, 0x9, 0xf85b, 0x7fffffff, 0x600000, 0x5, 0x0, 0x80, 0x8000, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x4, 0xfffffffc, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x2, 0x3, 0x8, {0xb0, 0x0, 0xfeb4, 0x7, 0x100, 0x6}, {0x0, 0x2, 0xb, 0x8001, 0x4, 0x200}, 0xb, 0x7, 0x5}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x488}}, 0x0) 5m32.068271874s ago: executing program 4 (id=8543): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x3, 0x1, 0x7fffffff}, {0x1, 0x10005, 0x5}]}]}, {0x0, [0x61, 0x5f, 0x5f]}}, &(0x7f00000008c0)=""/4089, 0x41, 0xff9, 0x1}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b500000095"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xc0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x3, 0x1, 0x7fffffff}, {0x1, 0x10005, 0x5}]}]}, {0x0, [0x61, 0x5f, 0x5f]}}, &(0x7f00000008c0)=""/4089, 0x41, 0xff9, 0x1}, 0x28) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) socket(0x400000000010, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b500000095"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xc0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) 5m31.863372357s ago: executing program 3 (id=8544): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0xc}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x1, 0x700, 0x6, 0x7fffffff, {{0x3b, 0x4, 0x0, 0x3, 0xec, 0x68, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @local, {[@timestamp={0x44, 0x10, 0x34, 0x0, 0x7, [0x1, 0x1c0, 0x9]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0xf, [{@empty, 0x5}]}, @timestamp_addr={0x44, 0x14, 0x2d, 0x1, 0x3, [{@empty, 0x1}, {@multicast1, 0x6000000}]}, @ssrr={0x89, 0x13, 0xfe, [@broadcast, @rand_addr=0x64010100, @remote, @remote]}, @timestamp_addr={0x44, 0x1c, 0x53, 0x1, 0x0, [{@multicast2, 0x8}, {@multicast2, 0x12}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff7}]}, @noop, @rr={0x7, 0x27, 0xb4, [@private=0xa010102, @private=0xa010102, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010102, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x44, 0xd9, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@private=0xa010101, 0x453e}, {@multicast1, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0x2}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xf3ae}]}, @timestamp_addr={0x44, 0xc, 0xc5, 0x1, 0x2, [{@multicast1, 0x7}]}, @noop]}}}}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@getsa={0xd8, 0x12, 0x200, 0x70bd2a, 0x25dfdbfd, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4d5, 0x2, 0x3c}, [@policy={0xac, 0x7, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x20, 0x2f, r2, r4}, {0x3e94ed1a, 0x0, 0xfffffffffffffffc, 0xffffffffffffff81, 0x3, 0x1000, 0x1e9, 0xfffffffffffff655}, {0x1, 0x8001, 0x6, 0x46d7}, 0x3, 0x6e6bb9, 0x1, 0x0, 0x0, 0x3}}, @iptfs_dont_frag={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x14}, 0x4040) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000500)={'syztnl0\x00', r3, 0x7, 0x700, 0x20000, 0x5, {{0x1f, 0x4, 0x3, 0x38, 0x7c, 0x64, 0x0, 0xda, 0x2f, 0x0, @multicast1, @loopback, {[@end, @rr={0x7, 0xb, 0x38, [@empty, @rand_addr=0x64010102]}, @rr={0x7, 0x13, 0xe2, [@loopback, @rand_addr=0x64010101, @remote, @private=0xa010100]}, @timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0xc4, 0x1, 0x3, [{@loopback, 0x8}, {@loopback, 0x82a7}, {@empty, 0x7}, {@local, 0xfbcd}, {@remote, 0x4}]}, @timestamp={0x44, 0x10, 0xd5, 0x0, 0x3, [0x3, 0x7, 0x0]}]}}}}}) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0xe6ed196cde2ab655, &(0x7f0000000600), &(0x7f0000000640)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000680)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000700)={0x2, 0x2}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r7, 0x84, 0x85, &(0x7f0000000780)={r8, @in6={{0xa, 0x4e21, 0x3, @mcast1, 0xd5}}, 0x6}, 0x90) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800000, 0x100010, r0, 0x429000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r9, 0x29, 0x2d, &(0x7f0000000840)={0x9a4, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}}, 0x88) connect$inet(r7, &(0x7f0000000900)={0x2, 0x4e24, @remote}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r7, 0x84, 0x25, &(0x7f0000000940)={r8, @in={{0x2, 0x4e22, @multicast2}}, 0xd918, 0x0, 0x8}, &(0x7f0000000a00)=0x90) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r11, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9a3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000b40)={r10, @in={{0x2, 0x4e24, @broadcast}}, 0x8001, 0x9}, &(0x7f0000000c00)=0x90) ioctl$XFS_IOC_FSGROWFSRT(r5, 0x40105870, &(0x7f0000000c40)={0x5}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000001e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000cc0)={0x113c, 0x10, 0x400, 0x70bd2d, 0x25dfdbfb, {0xc}, [@nested={0xc, 0x27, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @uid=r4}]}, @nested={0x4, 0x8b}, @generic="1d020aa9eb350b1ad7ffccd2374b22fc862e0e94dd5958", @generic="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", @nested={0x100, 0x103, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @fd=r5}, @generic="97453b4ded86d25881a002635b45a6976f8872c294ff823a93516eb2dc227ea1c079bc8a12716d957f44f15a060691488ae99da7c6b8ecd5905e0b5ddae83ff75d7e300eccba628d548233f882627a8e81726b16e55b8dacb2c2e5a49d5b59fe017fcb328f219dd265cffd46f532702ff5848b93d20ad7e9c23221c4dd908d702c9505c21efcef9f563fe6b8e7496ee58707f826a8eb90175d52505a38fdb397823d70c968caed2e4fa4250b3c9dc17240ac6d067a35681f92705fd153b7ef5d7ec3eba0494ceeca80d34138d0aae8675b8edee6b08d717b580f35b243a235f73316eea27c74b0cf", @generic="f61e6ec93abcfe1d04fcf963"]}]}, 0x113c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000001e80)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x80000000, 0x9, 0x0, 0x2, 0x2]}, &(0x7f0000001f00)=0x78) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001f40)={{{@in=@loopback, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x80, 0x0, 0x3a, r6, r4}, {0x1af, 0x9, 0x3, 0x1, 0x81, 0x2, 0x9cae, 0xba}, {0x7, 0x5, 0x7, 0x6}, 0x0, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@empty, 0x4d5, 0x6c}, 0x1e, @in=@multicast2, 0x3507, 0x3, 0x0, 0x2, 0x8, 0x400, 0x9}}, 0xe8) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002040)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x3ff, '\x00', r6, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002140)={{r12, 0xffffffffffffffff}, &(0x7f00000020c0), &(0x7f0000002100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002200)={{0x1, 0xffffffffffffffff}, &(0x7f0000002180), &(0x7f00000021c0)=r0}, 0x20) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002380), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002480)={0x6, 0x1d, &(0x7f0000002240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@ldst={0x3, 0x0, 0x2, 0x7, 0x0, 0x18, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r14}}, @jmp={0x5, 0x0, 0x4, 0x0, 0x9, 0xfffffffffffffff0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xb9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, r16, 0x8, &(0x7f00000023c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000002400)={0x4, 0xb, 0x6, 0xa}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440), 0x10, 0x2}, 0x94) setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000002540)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r3}, 0xc) 5m31.503509916s ago: executing program 0 (id=8545): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010026"], &(0x7f0000000240)=""/212, 0x26, 0xd4, 0xa}, 0x28) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000500)='\b\x00', 0x2}, {&(0x7f0000000540)="2d0000008058", 0x6}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e000000000000000000000007000000830b040a1c01027f00000100000000001c000000000000000000000008000000", @ANYRESOCT=r0], 0x40}, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0xf8, 0x67, 0x0, 0x5, 0x84, 0x0, @private=0xa010101, @remote}, "c8e81fa33af9a85dccbe277c82d27598706635a8ed36956fbbf665af5c0d12cef0bb4be001e9c1ec65f5548d653902957d50a83377a94b5dbe6390bb38a197281865b7e86e270ac541aafa4bbe7b5e290dea38f4db89662070d85fb0bbc9411a78a4402d3749b417afd1ef1d0705283c6e5be544ab622ba2c36b69a8ab7b8a89e3e3b6bbf3ed21d8a69c70241645af9f28e5e0bdfcfcb9b66d81c1f5042aac99413328f43d7f70215ae7b30004114954edff6db508e885009a7f0273768f97a44ecfd9e6ab3488552280b02176b0b82a4147503719a615e0daf6828d2beefd9d9c26a0d2"}}}}, 0x0) r1 = socket(0x11, 0x3, 0x5) sendmmsg(r1, &(0x7f0000000480)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000140)=@qipcrtr={0x2a, 0x4, 0x4000}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x10}}], 0x2, 0x0) 5m31.356742048s ago: executing program 3 (id=8546): r0 = socket(0x1e, 0x5, 0x0) listen(r0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket(0x1e, 0x805, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5m31.314837049s ago: executing program 2 (id=8547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000050000000700000004"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x1b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xa5, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x10, &(0x7f0000000840)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000840)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000880)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000008c0)={0x1, 0x400, 0x10, 0x2, 0x1}, &(0x7f0000000900)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000940)={r8, 0xff}, &(0x7f0000000980)=0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r6, 0x4) sendmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000050) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069114e0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) 5m31.183339728s ago: executing program 1 (id=8548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x6, 0x3, &(0x7f0000001400)=@framed, &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="09000000050000000800000040"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000014c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r3}, 0x38) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001500)=0x0, &(0x7f0000001540)=0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf8, 0xf8, 0x3, [@enum={0xc, 0x3, 0x0, 0x6, 0x4, [{0x8, 0x3}, {0x2, 0x8}, {0x9, 0x7}]}, @const={0x7}, @enum={0xa, 0xa, 0x0, 0x6, 0x4, [{0x10, 0x8}, {0x4, 0xffffff01}, {0x10, 0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x6}, {0xb, 0x7}, {0x2, 0x6}, {0x2}, {0x0, 0x3}]}, @fwd={0xa}, @struct={0xe, 0x7, 0x0, 0x4, 0x0, 0xffff, [{0x1, 0x2, 0x8}, {0x8, 0x1, 0xffff8f64}, {0x1, 0x5, 0x800}, {0xd, 0x5, 0x8}, {0x7, 0x1, 0x76a}, {0xd, 0x7, 0x10001}, {0xd, 0x2, 0xb}]}]}, {0x0, [0x61]}}, &(0x7f0000001700)=""/4096, 0x113, 0xfffffffffffffd67, 0x0, 0x5, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002700)={0xffffffffffffffff, 0x20, &(0x7f0000002740)={&(0x7f0000002780)=""/66, 0x42, 0x0, &(0x7f0000002800)=""/52, 0x34}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002840)=@base={0x19, 0x7, 0xd, 0x2, 0x4, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) pipe(&(0x7f00000028c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x3000, 0x100000000000000d) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0x1a, 0x19, &(0x7f00000029c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x4, 0x1, 0xc, 0x7, 0x0, 0x4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6c89}, @ldst={0x1, 0x1, 0x3, 0x3, 0x2, 0x50, 0xfffffffffffffffc}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002ac0)='GPL\x00', 0x10000, 0x7d, &(0x7f0000002b00)=""/125, 0x41000, 0x4, '\x00', r4, @fallback=0x12, r5, 0x8, &(0x7f0000002b80)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, r1, 0x0, &(0x7f0000002bc0)=[r0, r0, r7, r0, r8, r2, 0xffffffffffffffff, r0, r0, r0], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x1f, 0x14, &(0x7f0000002cc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000002d40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xe, &(0x7f0000002d80)=ANY=[@ANYBLOB="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"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r10, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000001280)="5aee41dea4633004000011c708855e50", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f00008b8000/0x1000)=nil, 0x1000, 0x0, 0x6011, r13, 0x743bb000) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r14, 0xf1e92000) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r15, 0xe6905000) mmap(&(0x7f00008ba000/0x2000)=nil, 0x2000, 0x0, 0x12, r11, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r12, 0x40f1c000) 5m31.129719977s ago: executing program 0 (id=8549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0xfffffffffffffe28, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000600)=""/91, 0x5b}, {&(0x7f0000002180)=""/4087, 0xff7}, {&(0x7f0000003180)=""/27, 0x1b}, {&(0x7f00000031c0)=""/81, 0x51}, {&(0x7f0000003240)=""/209, 0xd3}, {&(0x7f0000003340)=""/176, 0xb0}, {&(0x7f0000003400)=""/181, 0xb2}], 0x8}, 0x9}], 0x400000000000272, 0x400100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003500)={&(0x7f0000003540)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003580), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000035c0)={'wlan1\x00', 0x0}) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r5, 0x8919, &(0x7f0000003600)) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003680)={&(0x7f00000036c0)={0x38, r2, 0x2d3f7732086afff, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x50}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffff9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x815}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x880) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003680)={&(0x7f00000036c0)={0x38, r2, 0x2d3f7732086afff, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x50}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffff9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x815}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000003700), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000037c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYBLOB="06001100259b"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000037c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYBLOB="06001100259b"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) openat$nci(0xffffffffffffff9c, &(0x7f0000003800), 0x2, 0x0) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000003800), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000003840), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000003880)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000003880)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f00000038c0)={0x0, 0xfde7, &(0x7f0000003900)={&(0x7f0000003940)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000003980), 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000039c0), r14) (async) r15 = syz_genetlink_get_family_id$nfc(&(0x7f00000039c0), r14) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f0000003a00)=0x0) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYRES64=r12, @ANYRES32=r16], 0x1c}}, 0x4008054) syz_init_net_socket$nfc_raw(0x27, 0x3a7c85b683fe175c, 0x0) (async) r17 = syz_init_net_socket$nfc_raw(0x27, 0x3a7c85b683fe175c, 0x0) connect$nfc_raw(r17, &(0x7f0000003b00)={0x27, r16, 0x0, 0x6}, 0x10) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000003b40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x1001101c}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003c00)=ANY=[@ANYBLOB="20fcbf34", @ANYRES16=r7, @ANYBLOB="000825bd7000fedbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x20008040) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000003c40)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000003c40)={'gre0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000003c80), 0xffffffffffffffff) (async) r18 = syz_genetlink_get_family_id$tipc(&(0x7f0000003c80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000003cc0)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003d40)={0x68, r18, 0x1, 0xffffffff, 0x0, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000880) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000003dc0)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e80)={0x1c, r18, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x24000000) 5m31.054767088s ago: executing program 3 (id=8550): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f00000004c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000600)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0x11e, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x6, 0x0) close(r6) write(r4, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@getlink={0xe4, 0x12, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x1000, 0xd20}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5e750}, @IFLA_PROP_LIST={0xa4, 0x34, 0x0, 0x1, [{0x14, 0x35, 'gretap0\x00'}, {0x14, 0x35, 'veth1_to_bridge\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'pim6reg0\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'veth1_to_bridge\x00'}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8, 0x1b, 0x2}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20060094}, 0x0) sendto$packet(r0, &(0x7f0000000280)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x404c891, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000040)={0xe, 0x0, 0x40, 0x5, 0xc2, 0x0, 0x9, "565b9040b4721bd6197668bad8ec45269c564c96", "49908101b2bf9e6b653e95e7dba578265c98ccd1"}) recvfrom$packet(r1, &(0x7f00000000c0)=""/99, 0x63, 0x40010020, &(0x7f0000000180)={0x11, 0xc, r2, 0x1, 0x40}, 0x14) 5m30.862291887s ago: executing program 4 (id=8551): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newchain={0x30, 0x1e, 0x1, 0x1000, 0x7ffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x6, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x20044810) (async, rerun: 64) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0xa8, 0xd0, 0x0, {0x0, 0x28e}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) (async) bind$inet6(r3, &(0x7f00000006c0)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000b40)=ANY=[@ANYRES64=r0, @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4850}, 0x0) (async) listen(r3, 0xc) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000840)={0x2, 0x4e22, @local}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) unshare(0x22020400) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) write(r9, &(0x7f0000000a80)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="280000001c00010029bd700001dcdf250700000098f110fb285da16addc0999aefe35cea3a413a13a4cfce93ff6b8f028a6c89341b", @ANYRES32=r10, @ANYBLOB="80006e010a0002000180c20000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4008840}, 0x4040000) (async) unshare(0x22020600) r11 = socket(0x1d, 0x2, 0x6) bind$inet6(r11, &(0x7f0000000340)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8d}, 0x1c) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), 0xffffffffffffffff) accept4$inet6(r3, &(0x7f00000008c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000900)=0x1c, 0x80000) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async, rerun: 32) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1) 5m30.787631765s ago: executing program 2 (id=8552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) (async) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000002c0)=0x6, 0x4) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xfff2, 0xf}, {0xa, 0xc}}}, 0x24}}, 0x0) 5m30.786095568s ago: executing program 1 (id=8553): socket$packet(0x11, 0x2, 0x300) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r0, 0x100, 0x70bd23, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008855}, 0x4008080) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x7fffffff}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000180)={0x11, 0x0, r8}, 0x14) unshare(0x22020400) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@o_path={0x0, r10, 0x4000, r10}, 0x18) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) 5m19.519057423s ago: executing program 2 (id=8554): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x80000}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001e80)={0xffffffffffffffff, 0x20, &(0x7f0000001e40)={&(0x7f0000000740)=""/204, 0xcc, 0x0, &(0x7f0000000e40)=""/4096, 0x1000}}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000008c0)={r0, &(0x7f0000000000)='GPL\x00', 0x200, &(0x7f0000000480)={@_ha_fsid={[0x8d31, 0x10001]}, {0x3, 0x6a, 0x800, 0x1c}}, 0xb, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000880)=0x4}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x5, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1], &(0x7f0000000640)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="dd94", 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000240)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x0, 0x8, 0x5, 0x1, 0x30, 0x1}], &(0x7f0000000900)='GPL\x00', 0x2, 0x38, &(0x7f00000002c0)=""/56, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x8, 0x10000, 0x8001}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000380)=[r0, r1, r0], &(0x7f00000003c0)=[{0x1, 0x2, 0x3, 0x8}, {0x1, 0x4, 0x10, 0xb}, {0x4, 0x5, 0x10, 0x4}, {0x2, 0x1, 0xa, 0x3}, {0x0, 0x3, 0xa, 0x7}, {0x1, 0x1, 0x3, 0x5}, {0x3, 0x1, 0xf, 0x8}, {0x5, 0x3, 0x4, 0x2}, {0x0, 0x1, 0xffffffff, 0x5}], 0x10, 0xffffff00}, 0x94) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r5) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf2a1b0000000700010063199293a6a1f0899499c9434cec831f938ba9c7a3295b025f374101b0b526f4dea3ed8af09a08c983d0fb1c194c2eec581279f65b5163fa10763e7401651684a5e1d148bbf8", @ANYRES32=0x0, @ANYBLOB="080015000100000004001900"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5m19.009960259s ago: executing program 3 (id=8555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe1a, 0x4, {{{0x0, 0x0, 0x9}, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @multicast2, 0x1, "f071daa5c69aacc8992848cf97a5f96b719eb3267eab5b280cdf06f058c4364c", 0x1, 0x2, 0x5, 0x5}, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x8080, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x6, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x9, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x12, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00 \x00'}]}}]}, 0x170}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x104, 0x8}, {0x10, 0x84, 0x1}], 0x20}, 0x41) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x2, 0x4) 5m17.446888231s ago: executing program 0 (id=8556): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000024c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000002500)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6(0xa, 0x1, 0x7) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002540)={0x1, &(0x7f0000002580)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000025c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000002600)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002700)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd86", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002840)="3db2c5df06000000e1df44248424f7d7c157be36797b8dc68dcad3a1be90c10f7b36b3c5f8616fed7c240fa05ef1cbe839855bd165fd0264f104b776a9594760fb45c32805efeab2ab78ebc8afb9030830b6452cd9184f05a3a8857f3c6f1e0cf9", 0x61}, {&(0x7f00000028c0)="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", 0x125}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000002a00)=0xdf8, 0x4) sendto$inet(r2, &(0x7f0000002a40)="17", 0x59a, 0x10008095, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000240), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000002c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000002440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000014000000020a030700000000000000000000000514000000020a05"], 0x70}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x45}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x6a022d5ddc2547c8}, 0x20000001) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000002400)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000023c0)={&(0x7f0000002a80)=ANY=[@ANYBLOB="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"], 0x158c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20004090) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000308797d221a00000000000000000020140004800800014002000000000000000000000705000300ff"], 0x30}}, 0x4000800) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000b40)=0x489, 0x4) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x34) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x421}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x14, 0x13, 0x7, 0x301, 0x70bd27, 0x25dfdbfb, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x5) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)) 5m16.299530665s ago: executing program 1 (id=8557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000300)={0x3, 0x28, [0x9, 0x35, 0xf7, 0x9], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000003c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000400)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000500), 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r4) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r6) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r7, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r7, @ANYBLOB="0800020001000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000540)=@gcm_256={{0x304, 0x36}, "00257059cb008000", "8b3de2aabceef22f419e59f30000000004000000000200", "07350080", "000000d900"}, 0x38) setsockopt$inet6_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000580)=@ccm_128={{0x304, 0x36}, "b398a992143a240d", "d036788c4aaf9c6ef96dda7201d2d2a5", "1a13ecde", "0597b7f1463f0f33"}, 0x28) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x6040850}, 0x20040040) close(0x3) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x0, 0x5, "0100ca"}]}}}], 0x18}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f00000001c0)="051a00000e80006558f2878f02002000000000206e16ad2a638da1c6f5", 0x1d}], 0x2) 5m14.020599093s ago: executing program 32 (id=8551): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newchain={0x30, 0x1e, 0x1, 0x1000, 0x7ffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x6, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x20044810) (async, rerun: 64) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0xa8, 0xd0, 0x0, {0x0, 0x28e}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) (async) bind$inet6(r3, &(0x7f00000006c0)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000b40)=ANY=[@ANYRES64=r0, @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4850}, 0x0) (async) listen(r3, 0xc) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000840)={0x2, 0x4e22, @local}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) unshare(0x22020400) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) write(r9, &(0x7f0000000a80)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="280000001c00010029bd700001dcdf250700000098f110fb285da16addc0999aefe35cea3a413a13a4cfce93ff6b8f028a6c89341b", @ANYRES32=r10, @ANYBLOB="80006e010a0002000180c20000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4008840}, 0x4040000) (async) unshare(0x22020600) r11 = socket(0x1d, 0x2, 0x6) bind$inet6(r11, &(0x7f0000000340)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8d}, 0x1c) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), 0xffffffffffffffff) accept4$inet6(r3, &(0x7f00000008c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000900)=0x1c, 0x80000) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async, rerun: 32) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1) 5m7.22812585s ago: executing program 3 (id=8559): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x4, 0x4, 0xffffffffffffffff, 0x800000000000004, 0xda, 0x2b5, 0x282f, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x1e, 0xf6, &(0x7f0000000100)="88ccc4bb25a0e05f236dd2651c4184636a146156780a295b165aa4854a05", &(0x7f0000000240)=""/246, 0x1ff, 0x0, 0x4b, 0x1e, &(0x7f0000000340)="1628bfa7e4b8cf68b607d39b2591759fdbb485f505e9d3536812af28efc21f142d22e3f61747e4d13fdcc9b691528d62fb0dceb8020436cb62f9b241ac0c52af6e2b998c130a14de1537b2", &(0x7f00000003c0)="62fabd153853679f4ec4698ec9b108f364f4d273942204009343a95614bb", 0x2, 0x0, 0x3}, 0x50) 5m6.266733326s ago: executing program 1 (id=8560): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000080)=""/105, &(0x7f0000000100)=0x69) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x101, @local, 0x5}, 0x1c) 5m4.99830092s ago: executing program 0 (id=8561): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, &(0x7f0000000140)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x4076cbba9945d516, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x390c, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={0x1, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYBLOB="ff0606d302"], 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201}) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r9], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r9, &(0x7f0000000640)={0x2, 0x4e20, @empty}, 0x10) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03e57e518e4d08"}}}}, 0x3f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r7}, &(0x7f0000000740), &(0x7f0000000780)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r12, 0xc0709411, &(0x7f00000008c0)={{0x0, 0x51305cbb, 0x9, 0x581e, 0x256, 0x2, 0x3, 0x4, 0x8, 0xce, 0x7ff, 0x22, 0xfa000000, 0x0, 0x7fff}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r13, 0xd0009412, &(0x7f0000000980)={r14, 0x5746}) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000001980)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 5m2.673212318s ago: executing program 33 (id=8554): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x80000}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001e80)={0xffffffffffffffff, 0x20, &(0x7f0000001e40)={&(0x7f0000000740)=""/204, 0xcc, 0x0, &(0x7f0000000e40)=""/4096, 0x1000}}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000008c0)={r0, &(0x7f0000000000)='GPL\x00', 0x200, &(0x7f0000000480)={@_ha_fsid={[0x8d31, 0x10001]}, {0x3, 0x6a, 0x800, 0x1c}}, 0xb, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000880)=0x4}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x5, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1], &(0x7f0000000640)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="dd94", 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000240)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x0, 0x8, 0x5, 0x1, 0x30, 0x1}], &(0x7f0000000900)='GPL\x00', 0x2, 0x38, &(0x7f00000002c0)=""/56, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x8, 0x10000, 0x8001}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000380)=[r0, r1, r0], &(0x7f00000003c0)=[{0x1, 0x2, 0x3, 0x8}, {0x1, 0x4, 0x10, 0xb}, {0x4, 0x5, 0x10, 0x4}, {0x2, 0x1, 0xa, 0x3}, {0x0, 0x3, 0xa, 0x7}, {0x1, 0x1, 0x3, 0x5}, {0x3, 0x1, 0xf, 0x8}, {0x5, 0x3, 0x4, 0x2}, {0x0, 0x1, 0xffffffff, 0x5}], 0x10, 0xffffff00}, 0x94) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r5) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf2a1b0000000700010063199293a6a1f0899499c9434cec831f938ba9c7a3295b025f374101b0b526f4dea3ed8af09a08c983d0fb1c194c2eec581279f65b5163fa10763e7401651684a5e1d148bbf8", @ANYRES32=0x0, @ANYBLOB="080015000100000004001900"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4m57.238152353s ago: executing program 3 (id=8563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002820207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x8c0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 4m45.993353416s ago: executing program 34 (id=8560): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000080)=""/105, &(0x7f0000000100)=0x69) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x101, @local, 0x5}, 0x1c) 4m43.323645338s ago: executing program 35 (id=8561): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, &(0x7f0000000140)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x4076cbba9945d516, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x390c, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={0x1, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYBLOB="ff0606d302"], 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201}) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r9], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r9, &(0x7f0000000640)={0x2, 0x4e20, @empty}, 0x10) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03e57e518e4d08"}}}}, 0x3f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r7}, &(0x7f0000000740), &(0x7f0000000780)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r12, 0xc0709411, &(0x7f00000008c0)={{0x0, 0x51305cbb, 0x9, 0x581e, 0x256, 0x2, 0x3, 0x4, 0x8, 0xce, 0x7ff, 0x22, 0xfa000000, 0x0, 0x7fff}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r13, 0xd0009412, &(0x7f0000000980)={r14, 0x5746}) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000001980)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 4m36.84627001s ago: executing program 36 (id=8563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002820207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x8c0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 0s ago: executing program 8 (id=8565): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x1}, 0x94) syz_emit_ethernet(0x287, &(0x7f0000000b00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x251, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000001c00000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0x6, "38baf6e04dcbac310e408b704367128023629e6d212ed62be104e3353bc8ea09357e3a5dc385b90ee1f5680a7fb874"}]}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1a, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x93}}]}, &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x29f5, '\x00', 0x0, 0x0, 0x1, 0x4}, 0x50) syz_emit_ethernet(0x93, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0xfffe, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, "4f46b51f"}, @sack={0x5, 0xe, [0x394, 0x6, 0x6]}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x1a, [0x5, 0x95, 0x5, 0xfffffff8, 0x8000, 0x3]}, @mss={0x2, 0x4, 0x6}, @fastopen={0x22, 0xf, "ef4c01040000e2f6ab0f2147ad"}]}}, {"1fa6aca4a5a9cc33aba9eae2029a5d3916"}}}}}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000240), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000280), 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000640)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000680)={0x1, 0x5}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000780)={0x0, 0xfffffffffffffcee, &(0x7f00000007c0)={&(0x7f00000009c0)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x0, 0x6, "7116e315f1d2269ebf05ed42769483d2df8c5f8e71ca4f3f97228d25eb1d25b00f267f4b51cd2f66b21f31a2e0310885a11a4cfa363ff0460ca8a51172aa71d3ea761eebfbba7d7f60c4caac0d7025452b607fdffa48daf956c17b465fcce2cff6babb0a5f765a87e7941319564297c0282da3fbb580276d8ea09ade7a641ca51b52a78129f627891365fd7dc42e9d15ed9f3426e91f6b0ba7cdd005819102d68c6cbc464e676ed51071d6e324b88bbe8e2c7810ddeeb6be36751ef1d4767fef0103ec2554cdf58c489f9c08ef1f4d98ee8455cf19fef59a188243d6002bcf9f820222cb79b6259f009a8970142e61f2"}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x5}]}, 0x20}}, 0x24040000) sendmmsg(r5, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): dto+0x10/0x10 [ 1295.853681][ T5888] ? do_user_addr_fault+0xc4c/0x1340 [ 1295.853706][ T5888] __x64_sys_sendto+0xde/0x100 [ 1295.853737][ T5888] do_syscall_64+0x166/0x520 [ 1295.853760][ T5888] ? trace_irq_disable+0x3b/0x140 [ 1295.853781][ T5888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.853801][ T5888] ? clear_bhb_loop+0x70/0xc0 [ 1295.853825][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.853844][ T5888] RIP: 0033:0x7fc29f35ea0e [ 1295.853861][ T5888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1295.853878][ T5888] RSP: 002b:00007fc2a0246e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1295.853899][ T5888] RAX: ffffffffffffffda RBX: 00007fc2a02486c0 RCX: 00007fc29f35ea0e [ 1295.853912][ T5888] RDX: 0000000000000020 RSI: 00007fc2a0247000 RDI: 0000000000000003 [ 1295.853924][ T5888] RBP: 0000000000000000 R08: 00007fc2a0246f04 R09: 000000000000000c [ 1295.853937][ T5888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1295.853948][ T5888] R13: 00007fc2a0246f58 R14: 00007fc2a0247000 R15: 0000000000000000 [ 1295.853978][ T5888] [ 1296.004959][ T5893] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 1296.422434][ T5895] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1296.448156][ T5899] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1296.523452][ T5908] netlink: 'syz.4.7780': attribute type 2 has an invalid length. [ 1296.571314][ T5908] : entered promiscuous mode [ 1296.623118][ T5908] net_ratelimit: 9 callbacks suppressed [ 1296.623140][ T5908] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1296.666315][ T5916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7784'. [ 1296.667859][ T5916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1296.748822][ T5918] netlink: 960 bytes leftover after parsing attributes in process `syz.3.7784'. [ 1297.099394][ T9128] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1297.101193][ T9128] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1297.174501][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7785'. [ 1297.177909][ T5933] netlink: 'syz.4.7787': attribute type 29 has an invalid length. [ 1297.250045][ T9128] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1297.277817][ T5938] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7790'. [ 1297.294743][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7790'. [ 1297.304887][ T9111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.305400][ T5938] tipc: Resetting bearer [ 1297.305436][ T5938] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1297.388859][ T5938] tipc: Disabling bearer [ 1297.404196][ T5938] batman_adv: batadv0: Removing interface: syzkaller0 [ 1297.439288][ T9128] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1297.721021][ T5956] lo: Caught tx_queue_len zero misconfig [ 1297.879387][ T9111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.987154][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7793'. [ 1298.230914][ T5977] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1299.089723][ T6001] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7807'. [ 1299.186833][ T6000] can: request_module (can-proto-0) failed. [ 1299.218871][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7807'. [ 1299.218902][ T6005] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1299.343854][ T6000] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7803'. [ 1299.430807][ T6021] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7803'. [ 1299.661004][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7808'. [ 1299.756981][ T6015] can: request_module (can-proto-0) failed. [ 1299.983517][ T6001] syzkaller0: entered promiscuous mode [ 1299.983545][ T6001] syzkaller0: entered allmulticast mode [ 1300.078353][ T6030] : left promiscuous mode [ 1300.386919][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7812'. [ 1300.696073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.696316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.735609][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7816'. [ 1300.741202][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7816'. [ 1302.207546][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7822'. [ 1305.867899][ T6066] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1306.102005][ T6087] netlink: 'syz.3.7825': attribute type 2 has an invalid length. [ 1306.102028][ T6087] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7825'. [ 1306.102702][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1306.210318][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.222764][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7827'. [ 1306.331015][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7827'. [ 1306.449383][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.449597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.525296][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7828'. [ 1306.811917][ T6117] ip_tables: iptables: counters copy to user failed while replacing table [ 1306.891111][ T6121] netlink: zone id is out of range [ 1306.891128][ T6121] netlink: zone id is out of range [ 1306.891136][ T6121] netlink: zone id is out of range [ 1306.990101][ T6130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.018892][ T6130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.030594][ T6130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.054978][ T6130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.079676][ T6128] 8021q: VLANs not supported on gre0 [ 1307.111710][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7837'. [ 1307.172125][ T6136] netlink: 'syz.4.7838': attribute type 4 has an invalid length. [ 1307.172147][ T6136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7838'. [ 1307.538269][ T6145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1307.587026][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7842'. [ 1307.670606][ T6147] xt_CT: No such helper "netbios-ns" [ 1308.095861][ T6169] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1308.603225][ T6186] sctp: [Deprecated]: syz.0.7853 (pid 6186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1308.603225][ T6186] Use struct sctp_sack_info instead [ 1308.628142][ T6186] sctp: [Deprecated]: syz.0.7853 (pid 6186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1308.628142][ T6186] Use struct sctp_sack_info instead [ 1308.787726][ T6201] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 1308.878456][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7859'. [ 1308.899486][ T6204] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1308.971103][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7859'. [ 1309.014173][ T6204] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1309.253721][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7859'. [ 1309.586858][ T6219] netlink: 'syz.3.7861': attribute type 11 has an invalid length. [ 1310.688905][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.569239][ C0] net_ratelimit: 9 callbacks suppressed [ 1311.569263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.569509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.569721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.612769][ T6216] veth1_vlan: left allmulticast mode [ 1312.311511][ T6216] batman_adv: batadv0: Interface deactivated: ipvlan10 [ 1312.710076][ T6204] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1312.760095][T11951] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.761033][ T6226] vcan0: Caught tx_queue_len zero misconfig [ 1312.780045][T21875] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.786513][T11944] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.786573][T11944] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.834966][ T6250] __nla_validate_parse: 2 callbacks suppressed [ 1312.834987][ T6250] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7868'. [ 1312.835002][ T6250] netlink: 7800 bytes leftover after parsing attributes in process `syz.0.7868'. [ 1313.022554][ T6261] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.7870'. [ 1313.161435][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7872'. [ 1313.981704][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1313.981730][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1313.984979][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1313.985000][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1314.342113][ T6298] x_tables: duplicate entry at hook 1 [ 1314.628975][ T6319] bridge0: port 3(bond0) entered blocking state [ 1314.631098][ T6319] bridge0: port 3(bond0) entered disabled state [ 1314.631418][ T6319] bond0: entered allmulticast mode [ 1314.631437][ T6319] bond_slave_0: entered allmulticast mode [ 1314.631764][ T6319] bond_slave_1: entered allmulticast mode [ 1314.662349][ T6319] bond0: entered promiscuous mode [ 1314.662372][ T6319] bond_slave_0: entered promiscuous mode [ 1314.663180][ T6319] bond_slave_1: entered promiscuous mode [ 1314.677832][ T6319] bridge0: port 3(bond0) entered blocking state [ 1314.677926][ T6319] bridge0: port 3(bond0) entered forwarding state [ 1314.794535][ T6326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7885'. [ 1314.797107][ T6311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7885'. [ 1315.416439][ T6345] x_tables: duplicate underflow at hook 2 [ 1316.163281][ T6374] netlink: 'syz.1.7896': attribute type 10 has an invalid length. [ 1316.298076][ T6358] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7895'. [ 1316.477158][ T6381] netlink: 'syz.4.7900': attribute type 322 has an invalid length. [ 1316.914847][ T6399] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 1317.329242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.329475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.329803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.714016][ T6403] ip6gre2: entered promiscuous mode [ 1317.787465][ T6424] IPVS: stopping master sync thread 1435 ... [ 1318.092412][ T6435] block nbd2: server does not support multiple connections per device. [ 1318.169125][ T6435] block nbd2: shutting down sockets [ 1318.883201][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7917'. [ 1318.936879][ T6453] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7917'. [ 1320.062783][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7918'. [ 1320.146780][ T6457] ±ÿ: renamed from lo (while UP) [ 1320.318329][ T6463] xt_cgroup: invalid path, errno=-2 [ 1321.249252][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1321.283050][ T6439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1321.474790][ T6475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7922'. [ 1321.614225][ T6480] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1321.746516][ T6491] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7927'. [ 1321.950179][ T6494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7928'. [ 1321.950215][ T6494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7928'. [ 1322.423875][ T6506] netlink: 'syz.0.7931': attribute type 1 has an invalid length. [ 1322.426120][ T6507] netlink: 'syz.0.7931': attribute type 1 has an invalid length. [ 1323.089368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.089597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.089805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.300112][ T6520] macvtap0: entered promiscuous mode [ 1323.816882][ T6546] netlink: 'syz.3.7940': attribute type 1 has an invalid length. [ 1323.865577][ T6546] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1324.026634][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7940'. [ 1324.096195][ T6546] bond9: (slave veth9): Enslaving as an active interface with a down link [ 1324.141239][ T6561] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1324.165064][ T6561] bond9: (slave batadv1): making interface the new active one [ 1324.167631][ T6561] batadv1: entered promiscuous mode [ 1324.214288][ T6561] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 1324.488948][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7941'. [ 1325.045576][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7946'. [ 1325.086396][ T6586] ip_tables: iptables: counters copy to user failed while replacing table [ 1325.216577][ T6584] €Â0: renamed from batadv_slave_1 (while UP) [ 1325.251305][ T6584] xt_socket: unknown flags 0x4 [ 1325.637216][ T6598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1325.713289][ T6598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1325.947202][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7953'. [ 1325.947225][ T6605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7953'. [ 1326.093044][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7954'. [ 1326.351822][ T6610] FAULT_INJECTION: forcing a failure. [ 1326.351822][ T6610] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.351860][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz.1.7955 Not tainted syzkaller #0 PREEMPT(full) [ 1326.351883][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1326.351897][ T6610] Call Trace: [ 1326.351905][ T6610] [ 1326.351914][ T6610] dump_stack_lvl+0xe8/0x150 [ 1326.351946][ T6610] should_fail_ex+0x410/0x560 [ 1326.351976][ T6610] should_failslab+0xa8/0x100 [ 1326.352002][ T6610] ? ptlock_alloc+0x20/0x70 [ 1326.352030][ T6610] kmem_cache_alloc_noprof+0xa1/0x600 [ 1326.352053][ T6610] ? ptlock_alloc+0x20/0x70 [ 1326.352094][ T6610] ptlock_alloc+0x20/0x70 [ 1326.352121][ T6610] pte_alloc_one+0x7a/0x370 [ 1326.352146][ T6610] __pte_alloc+0x25/0x1a0 [ 1326.352172][ T6610] do_pte_missing+0x2db7/0x34b0 [ 1326.352192][ T6610] ? __lock_acquire+0x747/0x2de0 [ 1326.352229][ T6610] handle_mm_fault+0x1a53/0x3750 [ 1326.352267][ T6610] ? handle_mm_fault+0xf1/0x3750 [ 1326.352305][ T6610] ? __pfx_handle_mm_fault+0x10/0x10 [ 1326.352330][ T6610] ? lock_vma_under_rcu+0x45a/0x500 [ 1326.352375][ T6610] do_user_addr_fault+0xa4f/0x1340 [ 1326.352404][ T6610] ? trace_page_fault_user+0x84/0x1e0 [ 1326.352427][ T6610] exc_page_fault+0x6a/0xc0 [ 1326.352453][ T6610] asm_exc_page_fault+0x26/0x30 [ 1326.352472][ T6610] RIP: 0033:0x7f6110960102 [ 1326.352490][ T6610] Code: 8d 15 45 22 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 b8 4c 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 1326.352507][ T6610] RSP: 002b:00007f610ebf4d20 EFLAGS: 00010286 [ 1326.352525][ T6610] RAX: ffffffffffffffff RBX: 00007f6108000000 RCX: 00007f611099dfd7 [ 1326.352539][ T6610] RDX: 00007f6110a52323 RSI: 0000000000021000 RDI: 00007f6108000000 [ 1326.352552][ T6610] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1326.352564][ T6610] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 1326.352576][ T6610] R13: 0000000000001000 R14: 00007f610c000000 R15: 0000000001600000 [ 1326.352607][ T6610] [ 1326.352651][ T6610] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1327.023215][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7958'. [ 1327.092992][ T6623] netlink: 'syz.4.7961': attribute type 27 has an invalid length. [ 1327.392487][ T6629] –: renamed from virt_wifi0 [ 1327.878586][ T6664] FAULT_INJECTION: forcing a failure. [ 1327.878586][ T6664] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.878617][ T6664] CPU: 0 UID: 0 PID: 6664 Comm: syz.0.7970 Not tainted syzkaller #0 PREEMPT(full) [ 1327.878637][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1327.878649][ T6664] Call Trace: [ 1327.878656][ T6664] [ 1327.878665][ T6664] dump_stack_lvl+0xe8/0x150 [ 1327.878696][ T6664] should_fail_ex+0x410/0x560 [ 1327.878726][ T6664] should_failslab+0xa8/0x100 [ 1327.878751][ T6664] ? ptlock_alloc+0x20/0x70 [ 1327.878782][ T6664] kmem_cache_alloc_noprof+0xa1/0x600 [ 1327.878804][ T6664] ? ptlock_alloc+0x20/0x70 [ 1327.878838][ T6664] ptlock_alloc+0x20/0x70 [ 1327.878865][ T6664] pte_alloc_one+0x7a/0x370 [ 1327.878890][ T6664] __pte_alloc+0x25/0x1a0 [ 1327.878913][ T6664] do_pte_missing+0x2db7/0x34b0 [ 1327.878932][ T6664] ? __lock_acquire+0x747/0x2de0 [ 1327.878969][ T6664] handle_mm_fault+0x1a53/0x3750 [ 1327.879006][ T6664] ? handle_mm_fault+0xf1/0x3750 [ 1327.879038][ T6664] ? __pfx_handle_mm_fault+0x10/0x10 [ 1327.879060][ T6664] ? lock_vma_under_rcu+0x45a/0x500 [ 1327.879101][ T6664] do_user_addr_fault+0xa4f/0x1340 [ 1327.879127][ T6664] ? trace_page_fault_user+0x84/0x1e0 [ 1327.879158][ T6664] exc_page_fault+0x6a/0xc0 [ 1327.879184][ T6664] asm_exc_page_fault+0x26/0x30 [ 1327.879202][ T6664] RIP: 0033:0x7feb0bf60102 [ 1327.879220][ T6664] Code: 8d 15 45 22 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 b8 4c 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 1327.879236][ T6664] RSP: 002b:00007feb0ce8ad20 EFLAGS: 00010286 [ 1327.879254][ T6664] RAX: ffffffffffffffff RBX: 00007feb04000000 RCX: 00007feb0bf9dfd7 [ 1327.879269][ T6664] RDX: 00007feb0c052323 RSI: 0000000000021000 RDI: 00007feb04000000 [ 1327.879282][ T6664] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1327.879294][ T6664] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 1327.879307][ T6664] R13: 0000000000001000 R14: 00007feb08000000 R15: 0000000002000000 [ 1327.879338][ T6664] [ 1328.122142][ T6664] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1328.210361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.210571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.598318][ T6669] bond11: entered allmulticast mode [ 1328.603525][ T6669] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1330.071272][ T6694] netlink: 4912 bytes leftover after parsing attributes in process `syz.4.7979'. [ 1330.187107][ T6701] netlink: 'syz.3.7980': attribute type 3 has an invalid length. [ 1330.187129][ T6701] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7980'. [ 1330.251652][ T5619] Bluetooth: hci2: unexpected event for opcode 0x203d [ 1330.561860][ T6712] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1330.849546][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1331.107891][ T6729] syzkaller1: entered promiscuous mode [ 1331.107915][ T6729] syzkaller1: entered allmulticast mode [ 1331.153919][ T6729] ipvlan0: Caught tx_queue_len zero misconfig [ 1331.786862][ T6744] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7992'. [ 1331.837492][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7992'. [ 1331.837529][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7992'. [ 1332.025035][ T6694] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1332.331634][ T6694] lo speed is unknown, defaulting to 1000 [ 1332.331749][ T6694] lo speed is unknown, defaulting to 1000 [ 1332.332536][ T6694] lo speed is unknown, defaulting to 1000 [ 1332.358199][ T6694] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1332.358235][ T6694] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1332.358272][ T6694] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1332.674170][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7993'. [ 1332.674194][ T6757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7993'. [ 1332.763061][ T6694] lo speed is unknown, defaulting to 1000 [ 1332.781592][ T6694] lo speed is unknown, defaulting to 1000 [ 1332.811020][ T6694] lo speed is unknown, defaulting to 1000 [ 1332.882906][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7993'. [ 1332.885230][ T6694] lo speed is unknown, defaulting to 1000 [ 1332.917472][ T6694] lo speed is unknown, defaulting to 1000 [ 1332.972748][ T6694] lo speed is unknown, defaulting to 1000 [ 1332.993391][ T6694] lo speed is unknown, defaulting to 1000 [ 1333.134350][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7994'. [ 1333.969476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.969685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.638615][ T6777] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1335.844003][ T6778] bridge10: entered promiscuous mode [ 1335.844030][ T6778] bridge10: entered allmulticast mode [ 1336.017242][ T92] batadv1: left promiscuous mode [ 1336.350777][ T6799] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1336.401309][ T6797] ip_tables: iptables: counters copy to user failed while replacing table [ 1336.650532][ T6809] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1336.889716][ T6816] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1337.853865][ T6830] lo: entered promiscuous mode [ 1337.867690][ T6830] tunl0: entered promiscuous mode [ 1337.915264][ T6830] gre0: entered promiscuous mode [ 1337.953371][ T6835] ip_tables: iptables: counters copy to user failed while replacing table [ 1337.972384][ T6830] gretap0: entered promiscuous mode [ 1338.077351][ T6830] erspan0: entered promiscuous mode [ 1338.229430][ T6830] ip_vti0: entered promiscuous mode [ 1338.344390][ T6830] ip6_vti0: entered promiscuous mode [ 1338.472937][ T6830] sit0: entered promiscuous mode [ 1338.693965][ T6830] ip6tnl0: entered promiscuous mode [ 1338.734270][ T6843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8013'. [ 1338.774470][ T6830] ip6gre0: entered promiscuous mode [ 1338.878666][ T6830] ip6gretap0: entered promiscuous mode [ 1338.976532][ T6830] team0: entered promiscuous mode [ 1339.036430][ T6830] nlmon0: entered promiscuous mode [ 1339.080732][ T6830] batadv0: entered promiscuous mode [ 1339.151769][ T6830] vxcan0: entered promiscuous mode [ 1339.182423][ T6830] vxcan1: entered promiscuous mode [ 1339.205045][ T6830] veth0: entered promiscuous mode [ 1339.303127][ T6830] veth1: entered promiscuous mode [ 1339.316527][ T6848] Bluetooth: MGMT ver 1.23 [ 1339.380584][ T6830] wg0: entered promiscuous mode [ 1339.446669][ T6830] wg1: entered promiscuous mode [ 1339.501245][ T6830] wg2: entered promiscuous mode [ 1339.522970][ T6830] veth0_to_bridge: entered promiscuous mode [ 1339.565008][ T6830] bridge_slave_0: entered promiscuous mode [ 1339.588887][ T6830] veth1_to_bridge: entered promiscuous mode [ 1339.653922][ T6830] bridge_slave_1: entered promiscuous mode [ 1339.701261][ T6830] veth0_to_bond: entered promiscuous mode [ 1339.703848][ T6830] bond_slave_0: entered promiscuous mode [ 1339.750445][ T6830] veth1_to_bond: entered promiscuous mode [ 1339.825989][ T6830] bond_slave_1: entered promiscuous mode [ 1339.885063][ T6830] veth0_to_team: entered promiscuous mode [ 1339.947513][ T3008] Bluetooth: hci1: connection err: -111 [ 1339.995380][ T6830] team_slave_0: entered promiscuous mode [ 1340.061995][ T6830] veth1_to_team: entered promiscuous mode [ 1340.118713][ T6830] team_slave_1: entered promiscuous mode [ 1340.166868][ T6830] veth0_to_batadv: entered promiscuous mode [ 1340.238094][ T6830] batadv_slave_0: entered promiscuous mode [ 1340.294062][ T6830] veth1_to_batadv: entered promiscuous mode [ 1340.439438][ T6830] batadv_slave_1: entered promiscuous mode [ 1340.506663][ T6830] xfrm0: entered promiscuous mode [ 1340.569801][ T6830] veth0_to_hsr: entered promiscuous mode [ 1340.628300][ T6830] hsr_slave_0: entered promiscuous mode [ 1340.669385][ T6830] veth1_to_hsr: entered promiscuous mode [ 1340.725967][ T6830] hsr_slave_1: entered promiscuous mode [ 1340.789639][ T6830] veth1_virt_wifi: entered promiscuous mode [ 1340.829438][ T6830] veth0_virt_wifi: entered promiscuous mode [ 1340.910922][ T6830] –: entered promiscuous mode [ 1341.296716][ T6830] vlan0: entered promiscuous mode [ 1341.321445][ T6830] vlan1: entered promiscuous mode [ 1341.377453][ T6830] macvlan0: entered promiscuous mode [ 1341.406226][ T6830] macvlan1: entered promiscuous mode [ 1341.410954][ T3008] Bluetooth: hci4: command 0x0405 tx timeout [ 1341.452356][ T6830] ipvlan0: entered promiscuous mode [ 1341.492175][ T6830] ipvlan1: entered promiscuous mode [ 1341.523344][ T6830] geneve0: entered promiscuous mode [ 1341.556457][ T6830] geneve1: entered promiscuous mode [ 1341.592516][ T6830] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1341.615603][ T6830] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1341.641245][ T6830] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 1341.691389][ T6830] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 1341.727455][ T6830] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 1341.727674][ T6830] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 1341.728866][ T6830] bond1: entered promiscuous mode [ 1341.778382][ T6830] bridge1: entered promiscuous mode [ 1341.831746][ T6830] ip6tnl1: entered promiscuous mode [ 1341.855143][ T6830] sit1: entered promiscuous mode [ 1341.888558][ T6830] bridge2: entered promiscuous mode [ 1341.922353][ T6830] syztnl1: entered promiscuous mode [ 1341.949699][ T6830] bridge3: entered promiscuous mode [ 1341.981499][ T6830] gre1: entered promiscuous mode [ 1342.006648][ T6830] bridge4: entered promiscuous mode [ 1342.022358][ T6830] vxcan2: entered promiscuous mode [ 1342.022532][ T6830] vxcan3: entered promiscuous mode [ 1342.022670][ T6830] bond2: entered promiscuous mode [ 1342.022683][ T6830] geneve2: entered promiscuous mode [ 1342.079395][ T6830] bond3: entered promiscuous mode [ 1342.080234][ T6830] veth2: entered promiscuous mode [ 1342.080405][ T6830] veth3: entered promiscuous mode [ 1342.108258][ T6830] bond5: entered promiscuous mode [ 1342.121395][ T6830] bond6: entered promiscuous mode [ 1342.123568][ T6830] veth4: entered promiscuous mode [ 1342.123737][ T6830] veth5: entered promiscuous mode [ 1342.123873][ T6830] batadv1: entered promiscuous mode [ 1342.124067][ T6830] ip6erspan0: entered promiscuous mode [ 1342.125720][ T6830] bond7: entered promiscuous mode [ 1342.165409][ T6830] bond8: entered promiscuous mode [ 1342.165431][ T6830] gretap1: entered promiscuous mode [ 1342.200248][ T6830] bond9: entered promiscuous mode [ 1342.200488][ T6830] sit2: entered promiscuous mode [ 1342.462071][ T6830] bond10: entered promiscuous mode [ 1342.481895][ T6830] bond11: entered promiscuous mode [ 1342.515329][ T9126] lo speed is unknown, defaulting to 1000 [ 1342.515375][ T9126] syz2: Port: 1 Link DOWN [ 1342.730078][ T6845] dvmrp0: entered allmulticast mode [ 1342.775743][T21873] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.775777][T21873] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1342.776410][T21873] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.776435][T21873] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1342.776585][T21873] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.776610][T21873] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1342.949742][ T6876] ip_tables: iptables: counters copy to user failed while replacing table [ 1343.105488][ T6882] ip_tables: iptables: counters copy to user failed while replacing table [ 1343.315029][ T6883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8023'. [ 1343.315057][ T6883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8023'. [ 1343.315089][ T6883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8023'. [ 1343.365413][ T6889] batman_adv: batadv0: Adding interface: syzkaller0 [ 1343.365441][ T6889] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.365471][ T6889] batman_adv: batadv0: Interface activated: syzkaller0 [ 1343.491999][ T6884] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1343.646454][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8026'. [ 1343.646563][ T6894] openvswitch: netlink: Message has 4 unknown bytes. [ 1343.877921][ T6884] batman_adv: batadv0: Removing interface: syzkaller0 [ 1344.018932][ T6901] netlink: 'syz.1.8027': attribute type 16 has an invalid length. [ 1344.018953][ T6901] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.8027'. [ 1345.205729][ T6918] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8034'. [ 1345.521465][ T6927] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1345.640023][ T6928] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1346.344881][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8033'. [ 1346.710717][ T6963] team0: Port device dummy0 removed [ 1346.713215][ T6963] bridge_slave_0: left allmulticast mode [ 1346.713241][ T6963] bridge_slave_0: left promiscuous mode [ 1346.713462][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.751246][ T6963] bridge_slave_1: left allmulticast mode [ 1346.751272][ T6963] bridge_slave_1: left promiscuous mode [ 1346.751506][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.828447][ T6973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8043'. [ 1346.905900][ T6963] bond0: (slave bond_slave_0): Releasing backup interface [ 1346.980360][ T6963] bond0: (slave bond_slave_1): Releasing backup interface [ 1347.021878][ T6963] team0: Port device team_slave_0 removed [ 1347.048202][ T6963] team0: Port device team_slave_1 removed [ 1347.056629][ T6963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.071832][ T6963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1347.197092][ T6970] team0: Port device xfrm0 added [ 1347.245115][ T6967] tipc: Started in network mode [ 1347.245153][ T6967] tipc: Node identity 02922f8324d5, cluster identity 4711 [ 1347.245294][ T6967] tipc: Enabled bearer , priority 0 [ 1347.726190][ T6988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.726653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.843153][ T6988] sctp: [Deprecated]: syz.2.8048 (pid 6988) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1347.843153][ T6988] Use struct sctp_sack_info instead [ 1348.283065][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8053'. [ 1348.383213][ T7009] netlink: 388 bytes leftover after parsing attributes in process `syz.3.8053'. [ 1348.426403][ T7005] bond7: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 1348.466062][ T7005] bond7 (unregistering): Released all slaves [ 1348.601153][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8053'. [ 1348.956785][ T7029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.059968][ T7029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.062838][ T7029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.131403][ T5293] tipc: Node number set to 642199427 [ 1349.490847][ T7029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.491127][ T7029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.493205][ T7029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.557727][ T7029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.558166][ T7029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.580475][ T7029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.774519][ T7044] netlink: 'syz.4.8059': attribute type 23 has an invalid length. [ 1349.774544][ T7044] netlink: 'syz.4.8059': attribute type 9 has an invalid length. [ 1349.944993][ T7044] bridge6: entered promiscuous mode [ 1351.163637][ T7075] netlink: 'syz.1.8065': attribute type 2 has an invalid length. [ 1351.565421][ T7079] ovs-dp0: entered promiscuous mode [ 1351.692832][ T7086] batman_adv: batadv0: Adding interface: syzkaller0 [ 1351.692857][ T7086] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.693048][ T7086] batman_adv: batadv0: Interface activated: syzkaller0 [ 1351.840048][ T7084] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1352.135063][ T7084] batman_adv: batadv0: Removing interface: syzkaller0 [ 1352.846785][ T7098] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8072'. [ 1353.720062][ T7132] netlink: 'syz.2.8076': attribute type 1 has an invalid length. [ 1353.818956][ T7132] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1354.039501][ T7142] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1354.074461][ T7142] bond14: (slave batadv1): making interface the new active one [ 1354.102722][ T7142] bond14: (slave batadv1): Enslaving as an active interface with an up link [ 1354.384055][ T7139] bond14: (slave veth7): Enslaving as an active interface with a down link [ 1355.233359][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8082'. [ 1355.427567][ T7169] batman_adv: batadv0: Adding interface: syzkaller0 [ 1355.427587][ T7169] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.516649][ T7169] batman_adv: batadv0: Interface activated: syzkaller0 [ 1355.623450][ T7161] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1355.801381][ T7161] batman_adv: batadv0: Removing interface: syzkaller0 [ 1356.024023][ T7174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.025810][ T7174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.025902][ T7174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.025977][ T7174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.026936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.155317][ T7178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8087'. [ 1356.416792][ T7186] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8088'. [ 1356.451971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.452424][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1359.385612][ T7190] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1359.856849][ T7202] syzkaller0: entered promiscuous mode [ 1359.856872][ T7202] syzkaller0: entered allmulticast mode [ 1360.084812][ T7209] IPv6: NLM_F_CREATE should be specified when creating new route [ 1360.680990][ T7233] netlink: 'syz.2.8097': attribute type 1 has an invalid length. [ 1360.848047][ T7233] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1360.976615][ T7235] bond15: (slave gretap4): making interface the new active one [ 1361.013632][ T7235] bond15: (slave gretap4): Enslaving as an active interface with an up link [ 1361.096385][ T7237] batman_adv: batadv0: Adding interface: syzkaller0 [ 1361.096404][ T7237] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.096435][ T7237] batman_adv: batadv0: Interface activated: syzkaller0 [ 1361.301666][ T7236] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1361.708039][ T7236] batman_adv: batadv0: Removing interface: syzkaller0 [ 1361.867414][ T7241] ªªªªªª: renamed from vlan0 [ 1362.268169][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8104'. [ 1362.268898][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8103'. [ 1362.343684][ T7257] bond0: (slave bond_slave_1): Releasing backup interface [ 1362.344430][ T7257] bond_slave_1 (unregistering): left promiscuous mode [ 1362.344453][ T7257] bond_slave_1 (unregistering): left allmulticast mode [ 1362.539064][ T7261] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1362.558627][ T7261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1362.619657][ T7261] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1363.094221][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8109'. [ 1363.113500][ T7280] netlink: 'syz.4.8110': attribute type 1 has an invalid length. [ 1363.295382][ T7280] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1363.396568][ T7267] ovs-s: entered promiscuous mode [ 1363.513634][ T7282] bond12: (slave gretap2): making interface the new active one [ 1363.568779][ T7282] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 1364.193129][ T7292] veth1: Caught tx_queue_len zero misconfig [ 1364.250549][ T7299] syzkaller1: entered promiscuous mode [ 1364.250573][ T7299] syzkaller1: entered allmulticast mode [ 1365.039744][ T7312] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8120'. [ 1365.101381][ T7301] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1365.140117][ T7316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8120'. [ 1365.185567][ T7309] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8116'. [ 1365.202952][ T7309] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8116'. [ 1365.267145][ T7314] sctp: [Deprecated]: syz.4.8121 (pid 7314) Use of int in max_burst socket option. [ 1365.267145][ T7314] Use struct sctp_assoc_value instead [ 1365.314310][ T7319] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8120'. [ 1365.838955][ T7331] netlink: 'syz.3.8125': attribute type 1 has an invalid length. [ 1366.251401][ T7331] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1366.376177][ T7335] bond10: (slave gretap3): making interface the new active one [ 1366.395710][ T7335] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 1366.710369][ T7343] netlink: 'syz.2.8126': attribute type 1 has an invalid length. [ 1367.065079][ T7347] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 1367.987388][ T7362] netlink: 'syz.0.8130': attribute type 49 has an invalid length. [ 1368.314080][ T7366] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8132'. [ 1368.451477][ T7362] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1368.451608][ T7362] ip6gretap0: entered promiscuous mode [ 1368.451624][ T7362] ip6gretap0: entered allmulticast mode [ 1368.507836][ T7376] sctp: [Deprecated]: syz.3.8134 (pid 7376) Use of int in maxseg socket option. [ 1368.507836][ T7376] Use struct sctp_assoc_value instead [ 1368.984592][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8134'. [ 1369.698272][ T7402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1369.762076][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8134'. [ 1370.712672][ T7427] netlink: 'syz.2.8143': attribute type 1 has an invalid length. [ 1370.932099][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8143'. [ 1370.932137][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8143'. [ 1371.010220][ T7427] bond16: entered promiscuous mode [ 1371.012508][ T7427] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1371.138391][ T7439] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8145'. [ 1371.305431][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8145'. [ 1371.354165][ T7438] bond16: (slave bridge12): making interface the new active one [ 1371.354192][ T7438] bridge12: entered promiscuous mode [ 1371.387036][ T7438] bond16: (slave bridge12): Enslaving as an active interface with an up link [ 1371.388363][ T7435] ip6tnl0: Caught tx_queue_len zero misconfig [ 1371.572566][ T7439] bridge0: entered promiscuous mode [ 1371.572594][ T7439] bridge0: entered allmulticast mode [ 1372.279512][ T7453] –: renamed from virt_wifi0 [ 1372.375512][ T7465] netlink: 'syz.2.8149': attribute type 21 has an invalid length. [ 1372.375536][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8149'. [ 1372.375559][ T7465] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1372.375805][ T7468] netlink: 'syz.2.8149': attribute type 21 has an invalid length. [ 1372.375819][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8149'. [ 1372.375835][ T7468] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1372.704502][ T7475] netlink: 'syz.4.8151': attribute type 39 has an invalid length. [ 1372.784867][ T7481] ip6t_rpfilter: unknown options [ 1372.805380][ T7485] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8150'. [ 1373.547428][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8154'. [ 1373.948554][ T7505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1374.086761][ T7511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1374.277864][ T7501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1374.278253][ T7496] syzkaller0: entered promiscuous mode [ 1374.278272][ T7496] syzkaller0: entered allmulticast mode [ 1374.847045][ T7520] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8159'. [ 1374.914028][ T7520] netlink: 504 bytes leftover after parsing attributes in process `syz.1.8159'. [ 1374.957822][ T30] audit: type=1800 audit(1791848366.353:40): pid=7520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8159" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2188 res=0 errno=0 [ 1375.179130][ T7527] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8161'. [ 1375.179159][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8161'. [ 1375.179172][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8161'. [ 1375.498386][ T7531] netlink: 'syz.3.8162': attribute type 25 has an invalid length. [ 1375.635553][ T7538] netlink: 'syz.4.8165': attribute type 83 has an invalid length. [ 1375.637203][ T7528] xt_CT: No such helper "netbios-ns" [ 1376.134700][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8167'. [ 1376.637021][ T9128] lo speed is unknown, defaulting to 1000 [ 1376.637064][ T9128] syz2: Port: 1 Link ACTIVE [ 1376.746685][ T7567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8170'. [ 1376.759842][ T7567] netlink: 'syz.2.8170': attribute type 1 has an invalid length. [ 1376.805585][ T7549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1377.360068][ T7578] netlink: 'syz.0.8171': attribute type 1 has an invalid length. [ 1377.505429][ T7588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.505783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.536385][ T7588] xt_IDLETIMER: timeout value is too big [ 1377.697398][ T7578] Cannot find del_set index 17 as target [ 1377.782628][ T7593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.034191][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8176'. [ 1378.097666][ T7592] syzkaller1: entered promiscuous mode [ 1378.097691][ T7592] syzkaller1: entered allmulticast mode [ 1378.718942][ T7624] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8181'. [ 1378.933036][ T7627] netlink: 'syz.1.8182': attribute type 1 has an invalid length. [ 1379.038170][ T7633] netlink: 'syz.1.8182': attribute type 1 has an invalid length. [ 1379.156801][ T7636] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1379.157591][ T7636] netlink: 'syz.2.8184': attribute type 1 has an invalid length. [ 1379.385198][ T7636] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1379.435901][ T92] IPVS: starting estimator thread 0... [ 1379.662460][ T7643] IPVS: using max 28 ests per chain, 67200 per kthread [ 1379.696568][ T7651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8186'. [ 1379.804954][ T7654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8186'. [ 1381.404192][ T7691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1381.487715][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8195'. [ 1381.851827][ T7682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.854699][ T7682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1381.856653][ T7682] tipc: Resetting bearer [ 1381.911001][ T7682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1381.980809][T11944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.981189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.988444][T11951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.094310][ T7682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1382.094339][ T7682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1382.098105][ T7682] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1382.098344][ T7685] syzkaller1: entered allmulticast mode [ 1382.225038][ T7700] bridge14: port 1(erspan0) entered blocking state [ 1382.225234][ T7700] bridge14: port 1(erspan0) entered disabled state [ 1382.247177][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.259779][ T7700] erspan0: entered promiscuous mode [ 1382.261143][ T7700] bridge14: port 1(erspan0) entered blocking state [ 1382.261264][ T7700] bridge14: port 1(erspan0) entered forwarding state [ 1383.393087][ T7718] syzkaller0: entered promiscuous mode [ 1383.393114][ T7718] syzkaller0: entered allmulticast mode [ 1384.784541][ T7755] lo: entered promiscuous mode [ 1384.818413][ T7755] tunl0: entered promiscuous mode [ 1384.922808][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8210'. [ 1385.482273][ T7755] 0ªî{X¹¦: entered promiscuous mode [ 1385.808911][ T7755] erspan0: entered promiscuous mode [ 1385.860658][ T7755] ip_vti0: entered promiscuous mode [ 1385.888537][ T7755] ip6_vti0: entered promiscuous mode [ 1385.889787][ C0] net_ratelimit: 1 callbacks suppressed [ 1385.889831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.957789][ T7755] sit0: entered promiscuous mode [ 1386.086289][ T7755] ip6tnl0: entered promiscuous mode [ 1386.107784][ T7755] ip6gre0: entered promiscuous mode [ 1386.133130][ T7755] syz_tun: entered promiscuous mode [ 1386.301045][ T7755] ip6gretap0: entered promiscuous mode [ 1386.344234][ T7755] bridge0: entered promiscuous mode [ 1386.368955][ T7755] vcan0: entered promiscuous mode [ 1386.393153][ T7755] bond0: entered promiscuous mode [ 1386.393181][ T7755] bond_slave_0: entered promiscuous mode [ 1386.393335][ T7755] bond_slave_1: entered promiscuous mode [ 1386.456638][ T7755] nlmon0: entered promiscuous mode [ 1386.478949][ T7755] batadv0: entered promiscuous mode [ 1386.548668][ T7755] veth0: entered promiscuous mode [ 1386.696596][ T7755] veth1: entered promiscuous mode [ 1386.855786][ T7755] wg0: entered promiscuous mode [ 1386.877432][ T7755] wg1: entered promiscuous mode [ 1386.901224][ T7755] wg2: entered promiscuous mode [ 1386.921809][ T7755] veth0_to_bridge: entered promiscuous mode [ 1386.983079][ T7755] veth1_to_bridge: entered promiscuous mode [ 1387.027422][T21871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.029735][ T7791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.029952][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.088390][ T7755] veth0_to_bond: entered promiscuous mode [ 1387.169207][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1387.213281][ T7755] veth1_to_bond: entered promiscuous mode [ 1387.304281][ T7755] veth0_to_team: entered promiscuous mode [ 1387.408578][ T7755] veth1_to_team: entered promiscuous mode [ 1387.540873][ T7755] veth0_to_batadv: entered promiscuous mode [ 1387.567985][ T7755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.568044][ T7755] batadv_slave_0: entered promiscuous mode [ 1387.642672][ T7755] veth1_to_batadv: entered promiscuous mode [ 1387.698502][ T7755] batman_adv: batadv0: Interface deactivated: €Â0 [ 1387.698557][ T7755] €Â0: entered promiscuous mode [ 1387.745167][ T7755] xfrm0: entered promiscuous mode [ 1387.793658][ T7755] veth0_to_hsr: entered promiscuous mode [ 1387.857893][ T7755] veth1_to_hsr: entered promiscuous mode [ 1387.898994][ T7755] hsr0: entered promiscuous mode [ 1387.926044][ T7755] veth1_virt_wifi: entered promiscuous mode [ 1387.987529][ T7755] veth0_virt_wifi: entered promiscuous mode [ 1388.035212][ T7755] virt_wifi0: entered promiscuous mode [ 1388.106685][ T7755] vlan0: entered promiscuous mode [ 1388.107164][ T7755] vlan1: entered promiscuous mode [ 1388.162736][ T7755] macvlan0: entered promiscuous mode [ 1388.198738][ T7755] macvlan1: entered promiscuous mode [ 1388.245436][ T7755] ipvlan0: entered promiscuous mode [ 1388.272261][ T7755] ipvlan1: entered promiscuous mode [ 1388.330480][ T7755] macvtap0: entered promiscuous mode [ 1388.353711][ T7755] macsec0: entered promiscuous mode [ 1388.380860][ T7755] geneve0: entered promiscuous mode [ 1388.429299][ T7755] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1388.440265][ T7755] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 1388.478473][ T7755] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 1388.508272][ T7755] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 1388.551845][ T7755] mac80211_hwsim hwsim38 ªªªªªª: entered promiscuous mode [ 1388.552076][ T7755] ip6erspan0: entered promiscuous mode [ 1388.556953][ T7755] bond1: entered promiscuous mode [ 1388.556974][ T7755] gretap1: entered promiscuous mode [ 1388.613577][ T7755] bond2: entered promiscuous mode [ 1388.613727][ T7755] veth2: entered promiscuous mode [ 1388.613873][ T7755] veth3: entered promiscuous mode [ 1388.653653][ T7755] bond4: entered promiscuous mode [ 1388.653892][ T7755] ip6tnl1: entered promiscuous mode [ 1388.695883][ T7755] bond3: entered promiscuous mode [ 1388.695908][ T7755] gretap2: entered promiscuous mode [ 1388.732502][ T7755] bridge2: entered promiscuous mode [ 1388.752240][ T7755] geneve2: entered promiscuous mode [ 1388.752641][ T7755] vxlan0: entered promiscuous mode [ 1388.778629][ T7755] erspan1: entered promiscuous mode [ 1388.784861][ T7755] bridge3: entered promiscuous mode [ 1388.804708][ T7755] mac80211_hwsim hwsim44 wlan2: entered promiscuous mode [ 1388.805299][ T7755] bridge4: entered promiscuous mode [ 1388.833082][ T7755] mac80211_hwsim hwsim45 wlan3: entered promiscuous mode [ 1388.833263][ T7755] syztnl0: entered promiscuous mode [ 1388.833382][ T7755] veth4: entered promiscuous mode [ 1388.833531][ T7755] veth5: entered promiscuous mode [ 1388.833725][ T7755] bond5: entered promiscuous mode [ 1388.834237][ T7755] bridge5: entered promiscuous mode [ 1388.885828][ T7755] gretap0: entered promiscuous mode [ 1388.885970][ T7755] bond6: entered promiscuous mode [ 1388.886090][ T7755] bridge6: entered promiscuous mode [ 1388.888359][ T7755] ip6gretap1: entered promiscuous mode [ 1388.956977][ T7755] : entered promiscuous mode [ 1388.957130][ T7755] veth6: entered promiscuous mode [ 1388.957281][ T7755] veth7: entered promiscuous mode [ 1388.957421][ T7755] bond8: entered promiscuous mode [ 1388.957434][ T7755] bridge7: entered promiscuous mode [ 1388.957631][ T7755] bridge8: entered promiscuous mode [ 1388.957805][ T7755] bridge9: entered promiscuous mode [ 1389.022166][ T7755] ipvlan2: entered promiscuous mode [ 1389.028981][ T7755] ipvlan3: entered promiscuous mode [ 1389.047287][ T7755] ipvlan4: entered promiscuous mode [ 1389.060181][ T7755] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 1389.062342][ T7755] bond9: entered promiscuous mode [ 1389.062361][ T7755] batadv1: entered promiscuous mode [ 1389.093761][ T7755] veth8: entered promiscuous mode [ 1389.094336][ T7755] veth9: entered promiscuous mode [ 1389.119273][ T7755] bridge10: entered promiscuous mode [ 1389.141407][ T7755] bond10: entered promiscuous mode [ 1389.141431][ T7755] gretap3: entered promiscuous mode [ 1389.210622][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8212'. [ 1389.216609][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8212'. [ 1389.261660][T11944] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1389.261696][T11944] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.262254][T11951] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1389.262281][T11951] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.262316][T11951] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1389.262340][T11951] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.262375][T11951] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1389.262398][T11951] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.428764][ T7781] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1390.048906][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8219'. [ 1390.048936][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8219'. [ 1390.104943][ T7827] bridge0: Caught tx_queue_len zero misconfig [ 1390.114406][ T7833] IPv6: Can't replace route, no match found [ 1390.337709][ T7841] batman_adv: batadv0: Adding interface: syzkaller0 [ 1390.337730][ T7841] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.337833][ T7841] batman_adv: batadv0: Interface activated: syzkaller0 [ 1390.578603][ T7839] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1390.791104][ T7839] batman_adv: batadv0: Removing interface: syzkaller0 [ 1391.087088][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8227'. [ 1391.201730][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8227'. [ 1391.791783][ T7879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1391.859391][ T7879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.081908][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8233'. [ 1392.081972][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8233'. [ 1392.293899][T11944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.366707][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.367020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.510035][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8235'. [ 1392.537558][ T7895] nbd: must specify at least one socket [ 1392.882205][ T7904] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8239'. [ 1393.010316][ T7909] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.8241'. [ 1393.171842][ T7909] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.8241'. [ 1393.245316][ T7904] hsr_slave_0 (unregistering): left promiscuous mode [ 1394.135338][ T7933] batman_adv: batadv0: Adding interface: syzkaller0 [ 1394.135358][ T7933] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.135561][ T7933] batman_adv: batadv0: Interface activated: syzkaller0 [ 1394.375907][ T7951] IPVS: set_ctl: invalid protocol: 230 172.20.20.187:20001 [ 1394.636843][ T7925] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1394.888047][ T7925] batman_adv: batadv0: Removing interface: syzkaller0 [ 1394.958540][ T7959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.960001][ T7959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.963025][ T7959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.966598][ T7959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.967568][ T7959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.968611][ T7959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.970426][ T7959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.534417][ T7977] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1395.648119][ T7982] sock: sock_timestamping_bind_phc: sock not bind to device [ 1395.694816][ T7984] __nla_validate_parse: 100 callbacks suppressed [ 1395.694837][ T7984] netlink: 4384 bytes leftover after parsing attributes in process `syz.1.8259'. [ 1395.865008][ T7990] netlink: 'syz.4.8261': attribute type 30 has an invalid length. [ 1396.037300][ T7994] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 1396.672753][ T8006] netlink: 172 bytes leftover after parsing attributes in process `syz.3.8265'. [ 1396.994657][ T8017] netlink: 29 bytes leftover after parsing attributes in process `syz.4.8267'. [ 1397.043949][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8265'. [ 1397.222213][ T8018] netlink: 'syz.2.8268': attribute type 3 has an invalid length. [ 1397.419263][ T92] net_ratelimit: 186 callbacks suppressed [ 1397.419286][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.421061][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.421269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.823083][ T8039] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1397.895847][ T8040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.896830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.918598][ T8040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8274'. [ 1398.393937][ T8054] syzkaller1: entered promiscuous mode [ 1398.393959][ T8054] syzkaller1: entered allmulticast mode [ 1398.881895][ T8052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.036160][ T8076] netlink: 'syz.0.8282': attribute type 1 has an invalid length. [ 1399.089474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.089783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.089885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.257662][ T8076] bond12: entered promiscuous mode [ 1399.268438][ T8076] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1399.288375][ T8070] lo speed is unknown, defaulting to 1000 [ 1400.110390][ T8097] netlink: 'syz.0.8286': attribute type 1 has an invalid length. [ 1400.129420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.273540][ T8097] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1400.441375][ T8103] bond13: (slave gretap8): making interface the new active one [ 1400.459862][ T8103] bond13: (slave gretap8): Enslaving as an active interface with an up link [ 1400.524299][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8287'. [ 1401.176505][ T8119] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.8290'. [ 1401.176634][ T8119] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1401.214674][ T8119] 0ªX¹¦Dö»: entered allmulticast mode [ 1401.635946][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8293'. [ 1403.009310][ C0] net_ratelimit: 1 callbacks suppressed [ 1403.009332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.010220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.010378][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.320191][ T8160] lo speed is unknown, defaulting to 1000 [ 1403.360352][ T8177] netlink: 'syz.1.8300': attribute type 1 has an invalid length. [ 1403.561920][ T8177] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1403.589769][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8301'. [ 1403.612849][ T8180] bond7: (slave gretap0): making interface the new active one [ 1403.646824][ T8180] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 1403.711262][ T8188] netlink: 388 bytes leftover after parsing attributes in process `syz.4.8303'. [ 1403.771279][ T8178] erspan0: left promiscuous mode [ 1403.771506][ T8178] bridge14: port 1(erspan0) entered disabled state [ 1403.800018][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.893175][ T8178] bond0: left allmulticast mode [ 1403.893201][ T8178] bond_slave_0: left allmulticast mode [ 1403.893220][ T8178] bond_slave_1: left allmulticast mode [ 1403.893240][ T8178] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 1403.894660][ T8178] bond0: left promiscuous mode [ 1403.894684][ T8178] bond_slave_0: left promiscuous mode [ 1403.894883][ T8178] bond_slave_1: left promiscuous mode [ 1403.896101][ T8178] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 1403.896585][ T8178] bridge0: port 3(bond0) entered disabled state [ 1404.015228][ T8178] bridge_slave_0: left allmulticast mode [ 1404.015258][ T8178] bridge_slave_0: left promiscuous mode [ 1404.016985][ T8178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.073071][ T8178] bridge_slave_1: left allmulticast mode [ 1404.073099][ T8178] bridge_slave_1: left promiscuous mode [ 1404.077719][ T8178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.174923][ T8178] bond7: (slave veth0_to_bond): Releasing backup interface [ 1404.174950][ T8178] bond7: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1404.234327][ T8178] bond0: (slave bond_slave_0): Releasing backup interface [ 1404.291261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.319884][ T8178] bond0: (slave bond_slave_1): Releasing backup interface [ 1404.434809][ T8178] team0: Port device team_slave_0 removed [ 1404.474041][ T8178] team0: Port device team_slave_1 removed [ 1404.474972][ T8178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1404.474993][ T8178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.522467][ T8178] bond0: (slave netdevsim1): Releasing backup interface [ 1404.528768][ T8178] bond1: (slave gretap1): Releasing active interface [ 1404.530448][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.576123][ T8178] team0: Port device bond2 removed [ 1404.588948][ T8178] bond7: (slave bridge4): Releasing backup interface [ 1404.601750][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.605217][ T8178] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1404.605239][ T8178] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1404.608710][ T8178] bond9: (slave bridge7): Releasing backup interface [ 1404.639556][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.640917][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.691443][ T8178] bond13: (slave gretap3): Releasing active interface [ 1404.713510][ T8178] bond14: (slave batadv1): Releasing active interface [ 1404.713534][ T8178] bond14: (slave batadv1): the permanent HWaddr of slave - da:c8:5c:6b:60:f0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1404.716893][ T8178] bond14: (slave veth7): Releasing active interface [ 1404.756948][ T8178] bond15: (slave gretap4): Releasing active interface [ 1404.767773][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.791207][ T8178] bond16: (slave bridge12): Releasing backup interface [ 1404.791235][ T8178] bridge12: left promiscuous mode [ 1405.869544][ T8218] wg2: Caught tx_queue_len zero misconfig [ 1406.075683][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8310'. [ 1406.684268][ T8249] IPVS: set_ctl: invalid protocol: 41 100.1.1.2:20001 [ 1406.986951][ T8242] xt_hashlimit: size too large, truncated to 1048576 [ 1407.127370][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8309'. [ 1407.736798][ T8268] netlink: 'syz.3.8323': attribute type 1 has an invalid length. [ 1407.936971][ T8268] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1408.064562][ T8272] bond11: (slave gretap4): making interface the new active one [ 1408.081719][ T8272] bond11: (slave gretap4): Enslaving as an active interface with an up link [ 1408.086697][ T8275] ovs-dp0: left promiscuous mode [ 1408.403513][ T8297] netlink: 'syz.3.8329': attribute type 1 has an invalid length. [ 1408.465051][ T8297] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1408.467586][ T8296] batman_adv: batadv0: Adding interface: syzkaller0 [ 1408.467690][ T8296] batman_adv: batadv0: Interface activated: syzkaller0 [ 1408.912359][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8331'. [ 1408.918922][ T8304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8331'. [ 1409.024373][ T8303] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1409.056674][ T8309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8332'. [ 1409.407625][ T8294] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1409.756759][ T8294] batman_adv: batadv0: Removing interface: syzkaller0 [ 1409.846273][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8334'. [ 1410.202668][ T8346] tipc: Enabling of bearer rejected, failed to enable media [ 1410.268045][ T8355] netlink: 'syz.3.8340': attribute type 1 has an invalid length. [ 1410.368928][ T8355] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1410.661317][ T8362] net_ratelimit: 5 callbacks suppressed [ 1410.661339][ T8362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.661550][ T8362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.661983][ T8362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.811625][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8342'. [ 1410.849318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.850426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.850719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.928188][ T8369] syzkaller0: left promiscuous mode [ 1410.928441][ T8369] syzkaller0: left allmulticast mode [ 1411.032038][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.032249][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.284766][ T8378] netlink: 'syz.1.8345': attribute type 10 has an invalid length. [ 1411.302732][ T8376] netlink: 376 bytes leftover after parsing attributes in process `syz.3.8344'. [ 1411.367438][ T8378] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 1411.687549][T11946] IPVS: starting estimator thread 0... [ 1411.707759][ T8384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.707997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.789787][ T8388] IPVS: using max 32 ests per chain, 76800 per kthread [ 1411.808013][ T8385] netlink: 'syz.2.8346': attribute type 1 has an invalid length. [ 1411.883566][ T8397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8346'. [ 1411.885252][ T8393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8346'. [ 1412.563892][ T8405] bond15: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 1412.594212][ T8405] bond15 (unregistering): Released all slaves [ 1413.262822][ T8439] nbd: couldn't find a device at index 0 [ 1413.268199][ T8445] tipc: Enabled bearer , priority 23 [ 1413.319812][ T8439] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8362'. [ 1414.044861][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8368'. [ 1414.075598][ T3008] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 1414.075813][ T3008] Bluetooth: hci5: unexpected cc 0x2060 length: 3 < 7 [ 1414.075833][ T3008] Bluetooth: hci5: unexpected event for opcode 0x2060 [ 1414.248583][ T8469] pimreg: entered allmulticast mode [ 1414.367210][ T8477] sctp: [Deprecated]: syz.0.8370 (pid 8477) Use of int in maxseg socket option. [ 1414.367210][ T8477] Use struct sctp_assoc_value instead [ 1414.384367][ T7790] tipc: Node number set to 651974729 [ 1414.803941][ T8462] pimreg: left allmulticast mode [ 1415.330123][ T5619] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1415.900994][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8379'. [ 1415.987436][ T8517] bridge0: port 4(syz_tun) entered blocking state [ 1415.987551][ T8517] bridge0: port 4(syz_tun) entered disabled state [ 1415.987739][ T8517] syz_tun: entered allmulticast mode [ 1416.024039][ T8517] syz_tun: entered promiscuous mode [ 1416.039509][ T8517] bridge0: port 4(syz_tun) entered blocking state [ 1416.039632][ T8517] bridge0: port 4(syz_tun) entered forwarding state [ 1416.468239][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8380'. [ 1416.615576][ T8535] vti0: entered promiscuous mode [ 1416.625649][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8380'. [ 1416.642071][ T8541] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8383'. [ 1416.642699][ T8536] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8383'. [ 1417.607142][ T8572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8388'. [ 1418.024556][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8390'. [ 1418.229372][ T8581] batman_adv: batadv0: Adding interface: syzkaller0 [ 1418.229392][ T8581] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.229495][ T8581] batman_adv: batadv0: Interface activated: syzkaller0 [ 1418.669152][ T8588] caif0: tun_chr_ioctl cmd 2147767507 [ 1418.764081][ T8584] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8392'. [ 1418.764262][ T8584] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8392'. [ 1419.122345][ T8581] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1419.283149][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8394'. [ 1419.283568][ T8581] batman_adv: batadv0: Removing interface: syzkaller0 [ 1419.970972][ T8605] net_ratelimit: 13 callbacks suppressed [ 1419.970992][ T8605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.971382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.607573][ T8632] syzkaller0: MTU not usable for tipc bearer [ 1420.607611][ T8632] tipc: Enabling of bearer rejected, failed to enable media [ 1420.806804][ T8635] syzkaller0: entered promiscuous mode [ 1420.806829][ T8635] syzkaller0: entered allmulticast mode [ 1421.225882][ T8647] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8405'. [ 1421.242027][ T8651] netlink: 'syz.0.8406': attribute type 9 has an invalid length. [ 1421.247199][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.274977][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8406'. [ 1421.275007][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8406'. [ 1421.326318][ T8652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.477531][ T8652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.608230][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8408'. [ 1422.121305][ T8678] netlink: 'syz.3.8413': attribute type 1 has an invalid length. [ 1422.189858][ T8678] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1422.336170][ T8684] tipc: Resetting bearer [ 1422.516188][ T8684] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1422.599963][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8415'. [ 1422.800097][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8415'. [ 1423.566626][ T8717] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8420'. [ 1423.649675][T21864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.649940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.990956][ T8727] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1423.997934][ T8723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8422'. [ 1424.028945][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8422'. [ 1424.289397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.290014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.290998][T21875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.346359][T19205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.346584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.801373][ T8743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8426'. [ 1424.859416][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8427'. [ 1424.862183][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8427'. [ 1424.862745][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8427'. [ 1424.976601][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8431'. [ 1425.030998][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8431'. [ 1425.812763][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8434'. [ 1425.812800][ T8775] netlink: 'syz.2.8434': attribute type 10 has an invalid length. [ 1425.812815][ T8775] netlink: 'syz.2.8434': attribute type 5 has an invalid length. [ 1425.812835][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8434'. [ 1425.868882][ T8775] geneve4: entered promiscuous mode [ 1425.868908][ T8775] geneve4: entered allmulticast mode [ 1425.900137][T21875] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 39521 - 0 [ 1425.900184][T21875] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 39521 - 0 [ 1425.900218][T21875] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 39521 - 0 [ 1425.900249][T21875] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 39521 - 0 [ 1426.849354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.850783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.850965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.279763][ T8738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1427.961348][ T8792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.961821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.076443][ T8800] Bluetooth: hci0: unsupported parameter 5135 [ 1428.076468][ T8800] Bluetooth: hci0: unsupported parameter 8192 [ 1428.076488][ T8800] Bluetooth: hci0: unsupported parameter 5135 [ 1428.076500][ T8800] Bluetooth: hci0: unsupported parameter 8192 [ 1429.372808][ T8828] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1429.410960][ T8828] bond15: entered promiscuous mode [ 1429.411165][ T8828] bond15: entered allmulticast mode [ 1429.421131][T21867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.421419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.482830][ T8828] team0: Port device bond15 added [ 1429.509509][ T8842] __nla_validate_parse: 2 callbacks suppressed [ 1429.509530][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8450'. [ 1429.565744][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8450'. [ 1429.591753][ T8845] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8451'. [ 1429.680899][ T8850] ip_tables: iptables: counters copy to user failed while replacing table [ 1429.681271][ T8849] ip_tables: iptables: counters copy to user failed while replacing table [ 1430.050680][T21867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.225936][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8455'. [ 1430.225965][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8455'. [ 1430.736240][ T8897] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8457'. [ 1431.428578][ T30] audit: type=1800 audit(1791848422.823:41): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8461" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2435 res=0 errno=0 [ 1431.467861][ T8927] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8462'. [ 1431.501968][ T30] audit: type=1800 audit(1791848422.903:42): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8461" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2435 res=0 errno=0 [ 1431.502021][ T30] audit: type=1800 audit(1791848422.903:43): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8461" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2435 res=0 errno=0 [ 1431.502060][ T30] audit: type=1800 audit(1791848422.903:44): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8461" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2435 res=0 errno=0 [ 1431.502097][ T30] audit: type=1800 audit(1791848422.903:45): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8461" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2435 res=0 errno=0 [ 1431.502137][ T30] audit: type=1800 audit(1791848422.903:46): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8461" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2435 res=0 errno=0 [ 1431.502174][ T30] audit: type=1800 audit(1791848422.903:47): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8461" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2435 res=0 errno=0 [ 1431.711065][ T30] audit: type=1800 audit(1791848423.113:48): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8461" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2435 res=0 errno=0 [ 1431.711117][ T30] audit: type=1800 audit(1791848423.113:49): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8461" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2435 res=0 errno=0 [ 1431.711156][ T30] audit: type=1800 audit(1791848423.113:50): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8461" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2435 res=0 errno=0 [ 1431.907471][ T8927] net_ratelimit: 3 callbacks suppressed [ 1431.907492][ T8927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.964658][ T8927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.965076][ T8927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.965483][ T8927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.048038][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8462'. [ 1432.148932][ T8927] xt_TCPMSS: Only works on TCP SYN packets [ 1432.772304][ T8943] nbd: couldn't find a device at index 0 [ 1433.865388][ T8984] bridge0: entered allmulticast mode [ 1434.251545][ T8995] team0: left allmulticast mode [ 1434.251571][ T8995] team_slave_0: left allmulticast mode [ 1434.251587][ T8995] team_slave_1: left allmulticast mode [ 1434.251603][ T8995] bond15: left allmulticast mode [ 1434.251894][ T8995] bridge0: port 3(team0) entered disabled state [ 1434.303852][ T8995] bridge_slave_0: left allmulticast mode [ 1434.304086][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.437195][ T9001] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1434.461438][ T8995] bridge_slave_1: left allmulticast mode [ 1434.461664][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.496093][ T8995] bond0: (slave bond_slave_0): Releasing backup interface [ 1434.519826][ T8995] bond0: (slave bond_slave_1): Releasing backup interface [ 1434.578056][ T8995] team0: Port device team_slave_0 removed [ 1434.640244][ T9011] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1434.679495][ T9021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.679761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.680699][ T9021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.726875][ T8995] team0: Port device team_slave_1 removed [ 1434.728095][ T8995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1434.751683][ T8995] batman_adv: batadv0: Removing interface: €Â0 [ 1434.780183][ T8995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1434.838413][ T9009] bridge_slave_0: left allmulticast mode [ 1434.838441][ T9009] bridge_slave_0: left promiscuous mode [ 1434.838703][ T9009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.991416][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.991561][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.991705][ T9012] bridge_slave_0: entered allmulticast mode [ 1435.031541][ T9031] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1435.054566][ T9012] bridge_slave_0: entered promiscuous mode [ 1435.055192][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.055298][ T9012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.110469][ T9015] bridge_slave_0: left allmulticast mode [ 1435.110523][ T9015] bridge_slave_0: left promiscuous mode [ 1435.110740][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.776242][ T9039] netlink: 'syz.0.8482': attribute type 1 has an invalid length. [ 1435.954538][ T9039] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1436.828232][ T9077] tunl0: Caught tx_queue_len zero misconfig [ 1437.024827][ T9087] net_ratelimit: 9 callbacks suppressed [ 1437.024857][ T9087] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 1437.340614][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8494'. [ 1437.478785][ T9097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8493'. [ 1437.695619][ T9104] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1437.849597][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8493'. [ 1437.849630][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8493'. [ 1438.237345][ T9119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.237944][ T9119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.238449][ T9119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.280860][ T9119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.281229][ T9119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.321465][ T9117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.325764][ T9097] hsr_slave_1 (unregistering): left promiscuous mode [ 1438.765002][ T9140] netlink: 'syz.1.8501': attribute type 3 has an invalid length. [ 1438.767438][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8500'. [ 1438.891307][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8500'. [ 1439.751151][ T9156] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1440.938184][T21864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.489207][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8512'. [ 1441.896955][ T9219] netlink: 'syz.0.8516': attribute type 30 has an invalid length. [ 1446.694509][T11951] net_ratelimit: 2 callbacks suppressed [ 1446.694533][T11951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.712002][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.712225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.166576][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8514'. [ 1448.168971][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8514'. [ 1448.435373][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8518'. [ 1448.496724][ T9226] batman_adv: batadv0: Adding interface: syzkaller0 [ 1448.496744][ T9226] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.497023][ T9226] batman_adv: batadv0: Interface activated: syzkaller0 [ 1448.568971][ T9225] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1448.674381][ T9229] IPv6: NLM_F_CREATE should be specified when creating new route [ 1448.674476][ T9229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1448.674486][ T9229] IPv6: NLM_F_CREATE should be set when creating new route [ 1448.674533][ T9229] IPv6: NLM_F_CREATE should be set when creating new route [ 1448.674555][ T9229] IPv6: NLM_F_CREATE should be set when creating new route [ 1448.736043][ T9225] batman_adv: batadv0: Removing interface: syzkaller0 [ 1448.751186][ T9232] tipc: MTU too low for tipc bearer [ 1449.121984][ T9250] ip_tables: iptables: counters copy to user failed while replacing table [ 1449.136770][ T9253] batman_adv: batadv0: Adding interface: syzkaller0 [ 1449.136787][ T9253] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.150946][ T9253] batman_adv: batadv0: Interface activated: syzkaller0 [ 1449.243246][ T9259] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.8526'. [ 1450.222006][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8530'. [ 1450.537453][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8530'. [ 1450.629266][ T9302] SET target dimension over the limit! [ 1450.736398][ T9270] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1451.100608][ T9270] batman_adv: batadv0: Removing interface: syzkaller0 [ 1451.466246][ T9298] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1451.858717][ T9327] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1452.022010][ T9331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8540'. [ 1452.220687][ T9112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.419800][ T9112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.425998][ T9112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.427566][ T9112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.460191][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.475894][ T9112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.476126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.579774][ T9112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.626738][ T9342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.627160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.771979][ T9342] netlink: 'syz.1.8542': attribute type 4 has an invalid length. [ 1452.797734][ T9342] netlink: 'syz.1.8542': attribute type 4 has an invalid length. [ 1453.257685][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1453.257705][ T30] audit: type=1804 audit(1791848444.653:81): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8548" name="/newroot/508/cgroup.controllers" dev="tmpfs" ino=2622 res=1 errno=0 [ 1453.257748][ T30] audit: type=1800 audit(1791848444.653:82): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8548" name="cgroup.controllers" dev="tmpfs" ino=2622 res=0 errno=0 [ 1453.403721][ T9380] netlink: 'syz.4.8551': attribute type 4 has an invalid length. [ 1453.404149][ T9380] netlink: 'syz.4.8551': attribute type 4 has an invalid length. [ 1453.404555][ T9380] netlink: 'syz.4.8551': attribute type 4 has an invalid length. [ 1453.404947][ T9380] netlink: 'syz.4.8551': attribute type 4 has an invalid length. [ 1453.405325][ T9380] netlink: 'syz.4.8551': attribute type 4 has an invalid length. [ 1453.501662][ T9380] netlink: 'syz.4.8551': attribute type 4 has an invalid length. [ 1453.501770][ T9380] netlink: 'syz.4.8551': attribute type 4 has an invalid length. [ 1453.501866][ T9380] netlink: 'syz.4.8551': attribute type 4 has an invalid length. [ 1453.656047][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8551'. [ 1457.249032][ C0] sched: DL replenish lagged too much [ 1457.636106][T21863] net_ratelimit: 11 callbacks suppressed [ 1457.636129][T21863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.209348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.210213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.210449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.771470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.199611][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.305065][T21863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.969446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.396884][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.270009][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.138830][ T9417] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1474.209618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.367645][T21870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.187651][T11952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.236829][T11951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.183420][T21863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.451403][ T5619] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1483.330384][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1483.335656][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1483.350535][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1483.596097][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1483.597383][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1485.807016][T21870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.009539][ T5619] Bluetooth: hci3: command tx timeout [ 1486.652764][T21873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.119465][ T5619] Bluetooth: hci3: command tx timeout [ 1488.997816][ T9441] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8561'. [ 1489.811642][ T9434] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1490.129138][ T9434] Bluetooth: hci3: command tx timeout [ 1490.170703][ T9434] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1490.175576][ T9434] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1490.176804][ T9434] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1491.124683][ T9434] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1491.128310][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1492.137038][T21875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.319242][ T5619] Bluetooth: hci3: command tx timeout [ 1493.339159][ T5619] Bluetooth: hci6: command tx timeout [ 1494.690232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.423696][ T5619] Bluetooth: hci6: command tx timeout [ 1497.489154][ T5619] Bluetooth: hci6: command tx timeout [ 1498.079891][ T6454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.629121][ T5619] Bluetooth: hci6: command tx timeout [ 1504.966969][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.375353][T11952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.049152][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.776977][T21864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.785176][T21864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.841538][ T9434] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1516.302530][ T9434] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1516.667243][T21863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.678671][T21863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.579533][ T9434] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1517.584364][ T9434] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1517.589638][ T9434] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1519.870997][ T3008] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1520.290670][ T3008] Bluetooth: hci7: command tx timeout [ 1520.613734][ T3008] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1521.085576][ T3008] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1521.370711][ T9434] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1521.372000][ T9434] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1521.661915][ T9470] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1522.329599][ T5619] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1522.340808][ T8488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.346883][ T5619] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1522.383529][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.509480][ T9470] Bluetooth: hci7: command tx timeout [ 1522.772543][ T9472] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1522.919913][ T9472] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1524.899046][ T9472] Bluetooth: hci7: command tx timeout [ 1525.736375][ T9472] Bluetooth: hci9: command tx timeout [ 1526.929191][ T9470] Bluetooth: hci7: command tx timeout [ 1527.809133][ T9470] Bluetooth: hci9: command tx timeout [ 1528.014093][ T8493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.219287][ T9470] Bluetooth: hci8: command tx timeout [ 1528.602528][ T8493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.899642][ T9470] Bluetooth: hci9: command tx timeout [ 1530.289261][ T9470] Bluetooth: hci8: command tx timeout [ 1531.989050][ T5619] Bluetooth: hci9: command tx timeout [ 1532.449691][ T5619] Bluetooth: hci8: command tx timeout [ 1533.752064][ T6502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.381467][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.530254][ T9470] Bluetooth: hci8: command tx timeout [ 1539.694194][ T8490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.595739][T21864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.357711][ T8490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.905996][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.328553][T21873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.742962][T21870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.119983][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1555.209575][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1555.314700][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1555.507195][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1555.800635][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1556.999870][T11944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.618212][T21863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.889134][ T5619] Bluetooth: hci0: command tx timeout [ 1558.843393][ T9470] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1559.641429][ T9470] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1559.963367][ T9470] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1560.077904][ T9470] Bluetooth: hci0: command tx timeout [ 1560.079514][ T9472] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1560.080839][ T9472] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1562.194376][ T5619] Bluetooth: hci0: command tx timeout [ 1562.339119][ T5619] Bluetooth: hci1: command tx timeout [ 1562.587147][T21875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.300184][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.209393][ T5619] Bluetooth: hci0: command tx timeout [ 1564.490616][ T5619] Bluetooth: hci1: command tx timeout [ 1566.692945][ T5619] Bluetooth: hci1: command tx timeout [ 1568.587136][ T6502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.595382][ T6502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.938594][ T5619] Bluetooth: hci1: command tx timeout [ 1574.244934][T11944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.253081][T11944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.321150][ T9470] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1578.333890][ T9470] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1578.335272][ T9470] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1578.344460][ T9470] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1578.345769][ T9470] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1580.789154][ T9470] Bluetooth: hci2: command tx timeout [ 1580.816078][ T8494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.949141][ T9470] Bluetooth: hci2: command tx timeout [ 1583.693521][T11951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.010624][ T9470] Bluetooth: hci2: command tx timeout [ 1585.671041][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1586.580123][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1586.583382][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1586.633945][T21875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.112107][ T5619] Bluetooth: hci2: command tx timeout [ 1587.854160][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1587.856791][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1588.849968][ T9470] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1588.919519][ T9470] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1588.929072][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.819096][ T9470] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1589.837503][ T9470] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1589.886960][ T9470] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1590.823157][ T9470] Bluetooth: hci3: command tx timeout [ 1592.189171][ T9470] Bluetooth: hci4: command tx timeout [ 1592.379124][T21867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.889036][ T9470] Bluetooth: hci3: command tx timeout [ 1594.619150][ T9470] Bluetooth: hci4: command tx timeout [ 1594.812252][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.929177][ T9470] Bluetooth: hci3: command tx timeout [ 1596.749116][ T9470] Bluetooth: hci4: command tx timeout [ 1597.319239][ T9470] Bluetooth: hci3: command tx timeout [ 1597.903836][T11944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.009582][ T9470] Bluetooth: hci4: command tx timeout [ 1600.218803][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.234399][T31764] bridge0: port 4(syz_tun) entered disabled state [ 1603.556937][T21864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.065532][T11944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.329216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.069524][T31764] syz_tun (unregistering): left allmulticast mode [ 1608.069880][T31764] syz_tun (unregistering): left promiscuous mode [ 1608.070294][T31764] bridge0: port 4(syz_tun) entered disabled state [ 1609.334969][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.882514][ T6454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.302159][T21867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1616.655217][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1616.664691][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1617.134411][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1617.369413][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1617.475968][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1617.615579][ T8493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.381852][ T8493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.652584][ T5619] Bluetooth: hci5: command tx timeout [ 1626.005527][ T9470] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1626.033004][ T9470] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1626.034892][ T9470] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1626.036825][ T9470] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1626.038177][ T9470] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1626.689683][ T9470] Bluetooth: hci5: command tx timeout [ 1628.289434][ T9470] Bluetooth: hci6: command tx timeout [ 1628.769629][ T9470] Bluetooth: hci5: command tx timeout [ 1629.127148][T21863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.396255][ T9470] Bluetooth: hci6: command tx timeout [ 1631.039156][ T9470] Bluetooth: hci5: command tx timeout [ 1632.710446][ T5619] Bluetooth: hci6: command tx timeout [ 1634.516968][T21873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.879081][ T5619] Bluetooth: hci6: command tx timeout [ 1637.159119][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.980432][ T6502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.607980][T11952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.890598][ T9470] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1646.036925][ T8489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.119506][ T9470] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1646.220665][ T9470] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1646.341697][ T9470] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1646.569319][ T9470] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1647.066428][ T9472] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1647.453615][ T9472] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1647.708347][ T9472] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1647.712629][ T9472] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1647.889651][ T9472] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1648.007593][T11944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.289172][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1649.453667][ T9472] Bluetooth: hci7: command tx timeout [ 1650.008686][ T9472] Bluetooth: hci8: command tx timeout [ 1650.837393][ T9470] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1650.979344][ T9470] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1650.984108][ T9470] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1650.986016][ T9470] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1650.987337][ T9470] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1651.489550][ T9470] Bluetooth: hci7: command tx timeout [ 1651.817383][T21873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.049927][ T9472] Bluetooth: hci8: command tx timeout [ 1653.412281][ T9472] Bluetooth: hci9: command tx timeout [ 1653.557859][T11951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.903186][ T9472] Bluetooth: hci7: command tx timeout [ 1654.129613][ T9472] Bluetooth: hci8: command tx timeout [ 1655.492797][ T9472] Bluetooth: hci9: command tx timeout [ 1656.079394][ T9472] Bluetooth: hci7: command tx timeout [ 1656.269106][ T9472] Bluetooth: hci8: command tx timeout [ 1657.473746][ T8494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.636172][ T9472] Bluetooth: hci9: command tx timeout [ 1659.182608][T21863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.779138][ T9472] Bluetooth: hci9: command tx timeout [ 1663.386577][T11952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.121675][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.341434][T11951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.915367][T11951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.614434][T21867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.997323][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.317121][T21864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.852715][ T9470] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1681.027521][ T9470] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1681.071257][ T9470] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1681.191961][ T9470] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1681.193238][ T9470] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1682.885385][T21864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.815495][ T9470] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1683.932709][ T9470] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1684.039523][ T9470] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1684.150902][ T9470] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1684.176458][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1684.289271][ T9470] Bluetooth: hci0: command tx timeout [ 1686.153698][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.449269][ T5619] Bluetooth: hci0: command tx timeout [ 1688.611518][ T9472] Bluetooth: hci0: command tx timeout [ 1688.736783][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.159244][ T9470] Bluetooth: hci1: command tx timeout [ 1690.852665][ T9470] Bluetooth: hci0: command tx timeout [ 1691.169785][ T9470] Bluetooth: hci1: command tx timeout [ 1692.630786][T21864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.369162][ T9470] Bluetooth: hci1: command tx timeout [ 1694.377788][ T8493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.579060][ T9470] Bluetooth: hci1: command tx timeout [ 1700.686331][T21864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.437851][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.665474][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.271087][ T9472] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1707.399716][ T9472] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1707.551155][ T6502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.969345][ T9472] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1708.060462][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1708.061717][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1709.729386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.211407][ T3008] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1713.425108][ T8488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.704687][T21867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.630582][ T9470] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1714.687950][ T9470] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1716.459076][ T9472] Bluetooth: hci2: command tx timeout [ 1716.460453][ T9472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1716.461149][ T9472] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1716.619122][ T3008] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1716.622123][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1716.950026][ T9472] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1717.146700][ T9472] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1717.371875][ T9472] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1718.672182][ T9472] Bluetooth: hci2: command tx timeout [ 1718.929701][ T9470] Bluetooth: hci3: command tx timeout [ 1719.007653][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.370934][ T6454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.039062][ T9470] Bluetooth: hci2: command tx timeout [ 1721.039130][ T9470] Bluetooth: hci4: command tx timeout [ 1721.039636][ T9470] Bluetooth: hci3: command tx timeout [ 1723.182210][ T5619] Bluetooth: hci3: command tx timeout [ 1723.182250][ T5619] Bluetooth: hci4: command tx timeout [ 1723.182273][ T5619] Bluetooth: hci2: command tx timeout [ 1725.103450][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.128531][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.609047][ T9470] Bluetooth: hci4: command tx timeout [ 1725.609087][ T9470] Bluetooth: hci3: command tx timeout [ 1727.659114][ T5619] Bluetooth: hci4: command tx timeout [ 1731.301713][T21864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.256241][T21867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.697036][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.931765][T11952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.752052][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.898355][T21871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.981475][ T9470] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1744.986478][ T9470] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1744.987723][ T9470] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1745.013789][ T9470] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1747.199651][ T9470] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1748.185275][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.128451][T21867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.459679][ T9470] Bluetooth: hci5: command tx timeout [ 1750.797073][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1750.814890][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1750.816315][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1750.999489][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1751.104120][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1752.829097][ T9470] Bluetooth: hci5: command tx timeout [ 1753.349290][ T9470] Bluetooth: hci6: command tx timeout [ 1753.927142][ T8488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.999691][ T9470] Bluetooth: hci5: command tx timeout [ 1755.669124][ T9470] Bluetooth: hci6: command tx timeout [ 1757.259169][ T9470] Bluetooth: hci5: command tx timeout [ 1757.729655][ T9470] Bluetooth: hci6: command tx timeout [ 1759.809631][ T9470] Bluetooth: hci6: command tx timeout [ 1760.105112][T21873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.433286][T11944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.645111][ T8488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.358565][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.045220][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.265127][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.400265][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1779.160076][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1779.191113][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1779.748513][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.388223][ T9472] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1780.400919][ T9472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1781.689333][ T5619] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1783.039067][ T5619] Bluetooth: hci0: command tx timeout [ 1783.137433][T11944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.155202][ T5619] Bluetooth: hci0: command tx timeout [ 1785.268389][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.179230][ T5619] Bluetooth: hci0: command tx timeout [ 1788.644203][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.332060][ T5619] Bluetooth: hci0: command tx timeout [ 1789.750423][ T9470] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1790.309808][ T9470] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1790.419490][ T9470] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1790.441033][ T8489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.599118][ T9470] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1790.600548][ T9470] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1793.289675][ T9470] Bluetooth: hci1: command tx timeout [ 1794.227697][T21873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.329123][ T9470] Bluetooth: hci1: command tx timeout [ 1796.146765][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.409327][ T9470] Bluetooth: hci1: command tx timeout [ 1799.323466][ T8490] bond12 (unregistering): (slave gretap2): Releasing active interface [ 1799.629038][ T9470] Bluetooth: hci1: command tx timeout [ 1800.005050][T21873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1802.215187][ T8489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.510670][ T5619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1804.517637][ T5619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1804.533348][ T5619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1805.114127][ T5619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1805.257890][T11951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.391444][ T5619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1806.849947][ T8490] bond8 (unregistering): (slave gretap1): Releasing active interface [ 1807.720255][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.456912][ T9470] Bluetooth: hci7: command tx timeout [ 1810.545060][ T9470] Bluetooth: hci7: command tx timeout [ 1810.879135][T21873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1812.609222][ T9470] Bluetooth: hci7: command tx timeout [ 1813.875595][T21873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.719184][ T9470] Bluetooth: hci7: command tx timeout [ 1816.371695][ T8490] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1819.177964][ T8488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1820.547911][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1825.464710][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1826.221019][T11944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1831.442450][ T8489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1831.977849][ T8488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.810051][ T5619] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1834.817563][ T5619] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1834.818827][ T5619] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1834.842165][ T5619] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1834.843432][ T5619] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1837.247866][T21871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1837.256020][T21871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1837.491099][ T5619] Bluetooth: hci8: command tx timeout [ 1839.039944][ T3008] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1839.043909][ T3008] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1839.045133][ T3008] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1839.047027][ T3008] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1839.150072][ T3008] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1839.600506][ T3008] Bluetooth: hci8: command tx timeout [ 1839.889088][ T3008] Bluetooth: hci2: command 0x0406 tx timeout [ 1839.889186][ T3008] Bluetooth: hci3: command 0x0406 tx timeout [ 1841.162185][ T3008] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1841.165175][ T3008] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1841.166458][ T3008] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1841.168342][ T3008] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1841.329342][ T9470] Bluetooth: hci9: command tx timeout [ 1841.649103][ T9470] Bluetooth: hci8: command tx timeout [ 1841.770411][ T9470] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1843.335204][ T5619] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1843.350188][T21864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.409285][ T5619] Bluetooth: hci9: command tx timeout [ 1843.491722][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.669691][ T5619] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1843.690516][ T5619] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1843.730062][ T5619] Bluetooth: hci8: command tx timeout [ 1843.816606][ T5619] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1843.817883][ T5619] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1844.989240][ T9472] Bluetooth: hci4: command 0x0406 tx timeout [ 1845.029316][ T9472] Bluetooth: hci10: command tx timeout [ 1845.489305][ T5619] Bluetooth: hci9: command tx timeout [ 1847.140956][ T5619] Bluetooth: hci10: command tx timeout [ 1847.579244][ T9470] Bluetooth: hci9: command tx timeout [ 1848.759495][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1848.788650][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.249080][ T9470] Bluetooth: hci10: command tx timeout [ 1849.709174][ T9470] Bluetooth: hci11: command tx timeout [ 1851.347322][ T9470] Bluetooth: hci10: command tx timeout [ 1851.733470][ T9470] Bluetooth: hci11: command tx timeout [ 1853.816254][ T9470] Bluetooth: hci11: command tx timeout [ 1854.777581][T11952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.793234][T11952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.889297][ T9470] Bluetooth: hci11: command tx timeout [ 1859.833304][T21870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1860.376988][T21871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.936825][ T6454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1865.980466][ T9472] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1865.985459][ T9472] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1865.986683][ T9472] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1865.988578][ T9472] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1866.019524][T21870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1866.090942][ T8490] team0: Port device bond0 removed [ 1866.093072][ T8490] bond0 (unregistering): Released all slaves [ 1866.907536][ T9472] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1867.578182][ T8490] bond1 (unregistering): Released all slaves [ 1869.529310][ T9470] Bluetooth: hci12: command tx timeout [ 1870.625366][T11951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.569125][ T9470] Bluetooth: hci12: command tx timeout [ 1871.714672][T21864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.994213][ T8490] bond2 (unregistering): Released all slaves [ 1873.649110][ T5619] Bluetooth: hci12: command tx timeout [ 1874.600176][ T8490] bond3 (unregistering): Released all slaves [ 1875.649255][ T5619] Bluetooth: hci6: command 0x0406 tx timeout [ 1875.649358][ T5619] Bluetooth: hci5: command 0x0406 tx timeout [ 1875.674066][T21871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1875.773106][ T3008] Bluetooth: hci12: command tx timeout [ 1877.015280][ T8490] bond4 (unregistering): Released all slaves [ 1877.841704][ T8489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1878.420908][ T8490] bond5 (unregistering): Released all slaves [ 1881.968855][ T8490] bond6 (unregistering): Released all slaves [ 1883.178935][T11951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1883.935218][ T8490] bond7 (unregistering): Released all slaves [ 1886.101288][ T8490] bond8 (unregistering): Released all slaves [ 1888.256592][ T8490] bond9 (unregistering): Released all slaves [ 1889.795333][T21864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1889.808322][ T31] INFO: task dhcpcd:5278 blocked for more than 143 seconds. [ 1889.808345][ T31] Not tainted syzkaller #0 [ 1889.808356][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1889.808365][ T31] task:dhcpcd state:D stack:25288 pid:5278 tgid:5278 ppid:1 task_flags:0x400140 flags:0x00080000 [ 1889.808427][ T31] Call Trace: [ 1889.808435][ T31] [ 1889.808449][ T31] __schedule+0x17db/0x58f0 [ 1889.808509][ T31] ? __pfx___schedule+0x10/0x10 [ 1889.808542][ T31] ? schedule+0x90/0x2b0 [ 1889.808569][ T31] schedule+0x164/0x2b0 [ 1889.808594][ T31] schedule_preempt_disabled+0x13/0x30 [ 1889.808618][ T31] __mutex_lock+0x7c1/0x1550 [ 1889.808648][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1889.808677][ T31] ? vlan_ioctl_handler+0xf0/0x630 [ 1889.808702][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1889.808748][ T31] vlan_ioctl_handler+0xf0/0x630 [ 1889.808775][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1889.808801][ T31] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1889.808821][ T31] ? hook_file_ioctl+0x1f2/0x600 [ 1889.808861][ T31] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1889.808882][ T31] sock_ioctl+0x612/0x7e0 [ 1889.808909][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 1889.808943][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1890.052918][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 1890.052955][ T31] __se_sys_ioctl+0xfc/0x170 [ 1890.052983][ T31] do_syscall_64+0x166/0x520 [ 1890.053009][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.053030][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1890.053095][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.053116][ T31] RIP: 0033:0x7f22eb53c378 [ 1890.053134][ T31] RSP: 002b:00007ffc97c69348 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1890.053155][ T31] RAX: ffffffffffffffda RBX: 000056530c2ee4a0 RCX: 00007f22eb53c378 [ 1890.053169][ T31] RDX: 00007ffc97c69350 RSI: 0000000000008982 RDI: 000000000000000f [ 1890.053182][ T31] RBP: 00007ffc97c69350 R08: 0000000000000000 R09: 0000000000000000 [ 1890.053194][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1890.053206][ T31] R13: 000056530c2fc038 R14: 00007ffc97c79760 R15: 000056530c2ee4a0 [ 1890.053239][ T31] [ 1890.053275][ T31] INFO: task kworker/1:13:19205 blocked for more than 143 seconds. [ 1890.053290][ T31] Not tainted syzkaller #0 [ 1890.053300][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1890.053309][ T31] task:kworker/1:13 state:D stack:23144 pid:19205 tgid:19205 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1890.053358][ T31] Workqueue: events netdev_work_proc [ 1890.053383][ T31] Call Trace: [ 1890.053390][ T31] [ 1890.053403][ T31] __schedule+0x17db/0x58f0 [ 1890.053447][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 1890.053481][ T31] ? __pfx___schedule+0x10/0x10 [ 1890.053513][ T31] ? schedule+0x90/0x2b0 [ 1890.053539][ T31] schedule+0x164/0x2b0 [ 1890.053565][ T31] schedule_preempt_disabled+0x13/0x30 [ 1890.053587][ T31] __mutex_lock+0x7c1/0x1550 [ 1890.053618][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1890.053653][ T31] ? netdev_work_proc+0x209/0x780 [ 1890.053678][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1890.053702][ T31] ? kthread+0x38b/0x480 [ 1890.053728][ T31] ? netdev_work_proc+0x12b/0x780 [ 1890.053753][ T31] ? __local_bh_enable_ip+0xd6/0x140 [ 1890.053784][ T31] netdev_work_proc+0x209/0x780 [ 1890.053811][ T31] ? __pfx_netdev_work_proc+0x10/0x10 [ 1890.053837][ T31] ? rcu_is_watching+0x16/0xb0 [ 1890.053864][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1890.053890][ T31] process_scheduled_works+0xc3d/0x1630 [ 1890.053946][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1890.053978][ T31] ? assign_work+0x3cf/0x5d0 [ 1890.054007][ T31] worker_thread+0xa47/0xfb0 [ 1890.054061][ T31] kthread+0x38b/0x480 [ 1890.054080][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1890.054104][ T31] ? __pfx_kthread+0x10/0x10 [ 1890.054124][ T31] ret_from_fork+0x514/0xb70 [ 1890.054156][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1890.054185][ T31] ? __switch_to+0xc89/0x1420 [ 1890.054214][ T31] ? __pfx_kthread+0x10/0x10 [ 1890.054234][ T31] ret_from_fork_asm+0x1a/0x30 [ 1890.054279][ T31] [ 1890.054292][ T31] INFO: task kworker/u8:43:21875 blocked for more than 143 seconds. [ 1890.054306][ T31] Not tainted syzkaller #0 [ 1890.054316][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1890.054324][ T31] task:kworker/u8:43 state:D stack:22568 pid:21875 tgid:21875 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1890.054371][ T31] Workqueue: events_unbound linkwatch_event [ 1890.054393][ T31] Call Trace: [ 1890.054400][ T31] [ 1890.054412][ T31] __schedule+0x17db/0x58f0 [ 1890.054464][ T31] ? __pfx___schedule+0x10/0x10 [ 1890.054496][ T31] ? schedule+0x90/0x2b0 [ 1890.054522][ T31] schedule+0x164/0x2b0 [ 1890.054547][ T31] schedule_preempt_disabled+0x13/0x30 [ 1890.054570][ T31] __mutex_lock+0x7c1/0x1550 [ 1890.054600][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1890.054629][ T31] ? linkwatch_event+0xe/0x60 [ 1890.054678][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1890.054705][ T31] ? lock_acquire+0x115/0x350 [ 1890.054734][ T31] ? rcu_is_watching+0x16/0xb0 [ 1890.054759][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1890.054784][ T31] linkwatch_event+0xe/0x60 [ 1890.054805][ T31] process_scheduled_works+0xc3d/0x1630 [ 1890.054863][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1890.054894][ T31] ? assign_work+0x3cf/0x5d0 [ 1890.054924][ T31] worker_thread+0xa47/0xfb0 [ 1890.054977][ T31] kthread+0x38b/0x480 [ 1890.054997][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1890.055020][ T31] ? __pfx_kthread+0x10/0x10 [ 1890.055041][ T31] ret_from_fork+0x514/0xb70 [ 1890.055072][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1890.055101][ T31] ? __switch_to+0xc89/0x1420 [ 1890.055129][ T31] ? __pfx_kthread+0x10/0x10 [ 1890.055149][ T31] ret_from_fork_asm+0x1a/0x30 [ 1890.055194][ T31] [ 1890.055284][ T31] INFO: task syz-executor:9611 blocked for more than 143 seconds. [ 1890.055298][ T31] Not tainted syzkaller #0 [ 1890.055307][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1890.055316][ T31] task:syz-executor state:D stack:26616 pid:9611 tgid:9611 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1890.055365][ T31] Call Trace: [ 1890.055372][ T31] [ 1890.055384][ T31] __schedule+0x17db/0x58f0 [ 1890.055436][ T31] ? __pfx___schedule+0x10/0x10 [ 1890.055468][ T31] ? schedule+0x90/0x2b0 [ 1890.055495][ T31] schedule+0x164/0x2b0 [ 1890.055519][ T31] schedule_preempt_disabled+0x13/0x30 [ 1890.055542][ T31] __mutex_lock+0x7c1/0x1550 [ 1890.055572][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1890.055601][ T31] ? rtnl_newlink+0xc1d/0x1c30 [ 1890.055621][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1890.055680][ T31] ? ns_capable+0x89/0xe0 [ 1890.055706][ T31] ? rtnl_nets_add+0x16c/0x300 [ 1890.055725][ T31] ? rtnl_newlink+0x912/0x1c30 [ 1890.055745][ T31] rtnl_newlink+0xc1d/0x1c30 [ 1890.055776][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1890.055800][ T31] ? __lock_acquire+0x747/0x2de0 [ 1890.055828][ T31] ? __lock_acquire+0x747/0x2de0 [ 1890.055864][ T31] ? lock_acquire+0x115/0x350 [ 1890.055891][ T31] ? lock_acquire+0x115/0x350 [ 1890.055920][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1890.055952][ T31] ? __lock_acquire+0x747/0x2de0 [ 1890.055979][ T31] ? __kernel_text_address+0xd/0x30 [ 1890.056000][ T31] ? unwind_get_return_address+0x4d/0x90 [ 1890.056023][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1890.056043][ T31] ? arch_stack_walk+0xfb/0x150 [ 1890.056077][ T31] ? lock_acquire+0x115/0x350 [ 1890.056097][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1890.056128][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1890.056145][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 1890.056172][ T31] ? netlink_sendmsg+0x5d4/0xb40 [ 1890.056200][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1890.056229][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1890.056259][ T31] ? __lock_acquire+0x747/0x2de0 [ 1890.056292][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1890.056318][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1890.056349][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1890.056387][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1890.056411][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1890.056442][ T31] netlink_unicast+0x7bd/0x940 [ 1890.056477][ T31] netlink_sendmsg+0x813/0xb40 [ 1890.056512][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1890.056546][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 1890.056574][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1890.056598][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 1890.056626][ T31] __sys_sendto+0x408/0x5a0 [ 1890.056666][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1890.056692][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 1890.056729][ T31] ? fput_close_sync+0x11f/0x240 [ 1890.056755][ T31] ? kmem_cache_free+0x471/0x650 [ 1890.056787][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1890.056823][ T31] __x64_sys_sendto+0xde/0x100 [ 1890.056855][ T31] do_syscall_64+0x166/0x520 [ 1890.056880][ T31] ? trace_irq_disable+0x3b/0x140 [ 1890.056900][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.056920][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1890.056944][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.056963][ T31] RIP: 0033:0x7fbb20b5ea0e [ 1890.056980][ T31] RSP: 002b:00007ffe8cadf948 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1890.056999][ T31] RAX: ffffffffffffffda RBX: 0000555594272500 RCX: 00007fbb20b5ea0e [ 1890.057013][ T31] RDX: 000000000000002c RSI: 00007fbb21954670 RDI: 0000000000000003 [ 1890.057026][ T31] RBP: 0000000000000001 R08: 00007ffe8cadf9c4 R09: 000000000000000c [ 1890.057038][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1890.057050][ T31] R13: 0000000000000000 R14: 00007fbb21954670 R15: 0000000000000000 [ 1890.057081][ T31] [ 1890.057089][ T31] INFO: task syz-executor:9613 blocked for more than 143 seconds. [ 1890.057102][ T31] Not tainted syzkaller #0 [ 1890.057112][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1890.057120][ T31] task:syz-executor state:D stack:26616 pid:9613 tgid:9613 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1890.057169][ T31] Call Trace: [ 1890.057175][ T31] [ 1890.057187][ T31] __schedule+0x17db/0x58f0 [ 1890.057239][ T31] ? __pfx___schedule+0x10/0x10 [ 1890.057270][ T31] ? schedule+0x90/0x2b0 [ 1890.057296][ T31] schedule+0x164/0x2b0 [ 1890.057321][ T31] schedule_preempt_disabled+0x13/0x30 [ 1890.057344][ T31] __mutex_lock+0x7c1/0x1550 [ 1890.057374][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1890.057403][ T31] ? rtnl_newlink+0xc1d/0x1c30 [ 1890.057423][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1890.057458][ T31] ? ns_capable+0x89/0xe0 [ 1890.057484][ T31] ? rtnl_nets_add+0x16c/0x300 [ 1890.057502][ T31] ? rtnl_newlink+0x912/0x1c30 [ 1890.057524][ T31] rtnl_newlink+0xc1d/0x1c30 [ 1890.057554][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1890.057578][ T31] ? __lock_acquire+0x747/0x2de0 [ 1890.057606][ T31] ? __lock_acquire+0x747/0x2de0 [ 1890.057635][ T31] ? __lock_acquire+0x747/0x2de0 [ 1890.057665][ T31] ? lock_acquire+0x115/0x350 [ 1890.057692][ T31] ? lock_acquire+0x115/0x350 [ 1890.057722][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1890.057752][ T31] ? __lock_acquire+0x747/0x2de0 [ 1890.057779][ T31] ? __kernel_text_address+0xd/0x30 [ 1890.057800][ T31] ? unwind_get_return_address+0x4d/0x90 [ 1890.057822][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1890.057841][ T31] ? arch_stack_walk+0xfb/0x150 [ 1890.057874][ T31] ? lock_acquire+0x115/0x350 [ 1890.057894][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1890.057926][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1890.057943][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 1890.057970][ T31] ? netlink_sendmsg+0x5d4/0xb40 [ 1890.057998][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1890.058026][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1890.058056][ T31] ? __lock_acquire+0x747/0x2de0 [ 1890.058090][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1890.058115][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1890.058146][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1890.058184][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1890.058208][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1890.058238][ T31] netlink_unicast+0x7bd/0x940 [ 1890.058272][ T31] netlink_sendmsg+0x813/0xb40 [ 1890.058307][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1890.058340][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 1890.058367][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1890.058406][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 1890.058434][ T31] __sys_sendto+0x408/0x5a0 [ 1890.058467][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1890.058493][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 1890.058529][ T31] ? fput_close_sync+0x11f/0x240 [ 1890.058554][ T31] ? kmem_cache_free+0x471/0x650 [ 1890.058585][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1890.058620][ T31] __x64_sys_sendto+0xde/0x100 [ 1890.058659][ T31] do_syscall_64+0x166/0x520 [ 1890.058683][ T31] ? trace_irq_disable+0x3b/0x140 [ 1890.058702][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.058722][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1890.058746][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.058766][ T31] RIP: 0033:0x7fa7f575ea0e [ 1890.058782][ T31] RSP: 002b:00007ffdb64accb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1890.058800][ T31] RAX: ffffffffffffffda RBX: 000055555d4ff500 RCX: 00007fa7f575ea0e [ 1890.058814][ T31] RDX: 000000000000002c RSI: 00007fa7f6554670 RDI: 0000000000000003 [ 1890.058827][ T31] RBP: 0000000000000001 R08: 00007ffdb64acd34 R09: 000000000000000c [ 1890.058839][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1890.058851][ T31] R13: 0000000000000000 R14: 00007fa7f6554670 R15: 0000000000000000 [ 1890.058882][ T31] [ 1890.058914][ T31] [ 1890.058914][ T31] Showing all locks held in the system: [ 1890.058925][ T31] locks held by pr/ttyS0/16: 1, last CPU#1: [ 1890.058939][ T31] #0: ffffffff8fc364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1892.280004][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 1892.280021][ T31] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1892.280080][ T31] locks held by kworker/u8:2/42: 3, last CPU#0: [ 1892.280094][ T31] #0: ffff888040828140 ((wq_completion)krds_cp_wq#12/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.280146][ T31] #1: ffffc90000b27c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.280197][ T31] #2: ffff888058020680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1892.280250][ T31] locks held by kworker/u8:5/92: 4, last CPU#1: [ 1892.280264][ T31] #0: ffff88807e6c0140 ((wq_completion)krds_cp_wq#12/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.280314][ T31] #1: ffffc9000258fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.280363][ T31] #2: ffff888058168380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1892.280413][ T31] #3: ffff88803a3b3860 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1892.280490][ T31] locks held by dhcpcd/5278: 2, on CPU#0: [ 1892.280504][ T31] #0: ffffffff91236ba0 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5eb/0x7e0 [ 1892.280558][ T31] #1: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 1892.280605][ T31] locks held by getty/5370: 2, on CPU#0: [ 1892.280618][ T31] #0: ffff8880340790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1892.280664][ T31] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1892.280716][ T31] locks held by syz-executor/5601: 1, last CPU#0: [ 1892.280730][ T31] #0: ffff888076cd9bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1892.280774][ T31] locks held by kworker/u8:18/11944: 4, last CPU#0: [ 1892.280788][ T31] #0: ffff88807e6c7940 ((wq_completion)krds_cp_wq#12/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.280837][ T31] #1: ffffc90005757c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.280887][ T31] #2: ffff888058168980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1892.280937][ T31] #3: ffff88803a3b1d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1892.280987][ T31] locks held by kworker/u8:22/11948: 3, on CPU#0: [ 1892.281001][ T31] #0: ffff88801dfb0940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.281048][ T31] #1: ffffc900056bfc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.281099][ T31] #2: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1892.281146][ T31] locks held by kworker/u8:26/11952: 5, last CPU#0: [ 1892.281159][ T31] #0: ffff88807e6c2940 ((wq_completion)krds_cp_wq#12/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.281207][ T31] #1: ffffc9000332fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.281257][ T31] #2: ffff888058020c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1892.281306][ T31] #3: ffff8880b8428298 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_rearm_deferred+0x99/0x4b0 [ 1892.281358][ T31] #4: ffffffff9ba28748 (&____s->seqcount#2){----}-{0:0}, at: hrtimer_run_softirq+0x71/0x2e0 [ 1892.281418][ T31] locks held by kworker/1:13/19205: 3, on CPU#1: [ 1892.281431][ T31] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.281480][ T31] #1: ffffc90004fefc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.281536][ T31] #2: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 1892.281585][ T31] locks held by kworker/u8:31/21864: 4, last CPU#0: [ 1892.281599][ T31] #0: ffff88804082f140 ((wq_completion)krds_cp_wq#12/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.281648][ T31] #1: ffffc90005b57c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.281697][ T31] #2: ffff888058020380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1892.281747][ T31] #3: ffff88807fd89d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1892.281797][ T31] locks held by kworker/u8:36/21867: 2, last CPU#1: [ 1892.281811][ T31] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.281860][ T31] #1: ffffc90005b27c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.281910][ T31] locks held by kworker/u8:39/21871: 3, last CPU#1: [ 1892.281924][ T31] #0: ffff88807e6c6940 ((wq_completion)krds_cp_wq#12/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.281974][ T31] #1: ffffc90005ae7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.282022][ T31] #2: ffff888058168080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1892.282072][ T31] locks held by kworker/u8:43/21875: 3, on CPU#0: [ 1892.282086][ T31] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.282135][ T31] #1: ffffc90005a97c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.282184][ T31] #2: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1892.282249][ T31] locks held by kworker/u8:0/6454: 4, last CPU#0: [ 1892.282263][ T31] #0: ffff88802a296140 ((wq_completion)krds_cp_wq#12/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.282312][ T31] #1: ffffc90006ca7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.282360][ T31] #2: ffff888058020980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1892.282410][ T31] #3: ffff88803a3b0fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1892.282464][ T31] locks held by kworker/u8:6/8489: 2, last CPU#1: [ 1892.282477][ T31] #0: ffff888034105140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.282532][ T31] #1: ffffc9000da97c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.282582][ T31] locks held by kworker/u8:7/8490: 6, on CPU#0: [ 1892.282595][ T31] #0: ffff88801d2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.282644][ T31] #1: ffffc9000db07c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.282692][ T31] #2: ffffffff91247348 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1892.282744][ T31] #3: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1892.282795][ T31] #4: ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1892.282845][ T31] #5: ffff88801d2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1892.282894][ T31] locks held by kworker/u8:9/8494: 4, last CPU#0: [ 1892.282907][ T31] #0: ffff88807e6c7140 ((wq_completion)krds_cp_wq#12/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.282957][ T31] #1: ffffc900042d7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1892.283006][ T31] #2: ffff888058168680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1892.283056][ T31] #3: ffff88807fd88fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1892.283106][ T31] locks held by syz-executor/9607: 1, on CPU#0: [ 1892.283120][ T31] #0: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1892.283170][ T31] locks held by syz-executor/9611: 1, on CPU#1: [ 1892.283183][ T31] #0: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1892.283225][ T31] locks held by syz-executor/9613: 1, on CPU#1: [ 1892.283239][ T31] #0: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1892.283280][ T31] locks held by syz-executor/9644: 1, on CPU#0: [ 1892.283293][ T31] #0: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1892.283344][ T31] locks held by syz-executor/9646: 1, on CPU#0: [ 1892.283357][ T31] #0: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1892.283407][ T31] locks held by syz-executor/9661: 1, on CPU#0: [ 1892.283421][ T31] #0: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1892.283471][ T31] locks held by syz-executor/9670: 1, on CPU#1: [ 1892.283484][ T31] #0: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1892.283540][ T31] locks held by syz-executor/9676: 1, on CPU#1: [ 1892.283554][ T31] #0: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1892.283604][ T31] locks held by syz-executor/9685: 1, on CPU#1: [ 1892.283618][ T31] #0: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1892.283667][ T31] locks held by syz-executor/9688: 1, on CPU#0: [ 1892.283681][ T31] #0: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1892.283731][ T31] locks held by syz-executor/9694: 1, on CPU#1: [ 1892.283744][ T31] #0: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1892.283794][ T31] locks held by syz-executor/9696: 1, on CPU#0: [ 1892.283807][ T31] #0: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1892.283857][ T31] locks held by syz-executor/9705: 1, on CPU#1: [ 1892.283870][ T31] #0: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1892.283920][ T31] locks held by syz-executor/9712: 1, last CPU#0: [ 1892.283933][ T31] #0: ffff88801d2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650 [ 1892.283981][ T31] locks held by syz-executor/9715: 1, last CPU#0: [ 1892.283995][ T31] #0: ffff88801d2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650 [ 1892.284042][ T31] locks held by syz-executor/9716: 1, on CPU#1: [ 1892.284055][ T31] #0: ffff88801d2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650 [ 1892.284108][ T31] [ 1892.284114][ T31] ============================================= [ 1892.284114][ T31] [ 1892.284135][ T31] NMI backtrace for cpu 1 [ 1892.284149][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1892.284170][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1892.284181][ T31] Call Trace: [ 1892.284191][ T31] [ 1892.284200][ T31] dump_stack_lvl+0xe8/0x150 [ 1892.284228][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1892.284250][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1892.284281][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1892.284305][ T31] sys_info+0x135/0x170 [ 1892.284322][ T31] watchdog+0xfd7/0x1030 [ 1892.284354][ T31] ? watchdog+0x1c7/0x1030 [ 1892.284381][ T31] kthread+0x38b/0x480 [ 1892.284401][ T31] ? __pfx_watchdog+0x10/0x10 [ 1892.284418][ T31] ? __pfx_kthread+0x10/0x10 [ 1892.284438][ T31] ret_from_fork+0x514/0xb70 [ 1892.284469][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1892.284497][ T31] ? __switch_to+0xc89/0x1420 [ 1892.284530][ T31] ? __pfx_kthread+0x10/0x10 [ 1892.284550][ T31] ret_from_fork_asm+0x1a/0x30 [ 1892.284592][ T31] [ 1892.284600][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1892.284629][ C0] NMI backtrace for cpu 0 [ 1892.284641][ C0] CPU: 0 UID: 0 PID: 11952 Comm: kworker/u8:26 Not tainted syzkaller #0 PREEMPT(full) [ 1892.284662][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1892.284674][ C0] Workqueue: krds_cp_wq#12/4 rds_connect_worker [ 1892.284696][ C0] RIP: 0010:__hrtimer_get_next_event+0x9b/0x600 [ 1892.284725][ C0] Code: 13 00 eb 05 e8 b6 c1 13 00 49 8d 5e 50 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 0a 05 00 00 <41> 83 fc 10 40 0f 92 c5 40 0a 2b bf 10 00 00 00 44 89 e6 e8 7d c6 [ 1892.284741][ C0] RSP: 0018:ffffc90000007eb0 EFLAGS: 00000046 [ 1892.284757][ C0] RAX: 0000000000000000 RBX: ffff8880b84282d0 RCX: dffffc0000000000 [ 1892.284771][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 1892.284785][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000000 [ 1892.284798][ C0] R10: ffff88807bf95940 R11: ffffed100f7f2b2a R12: 00000000000000f0 [ 1892.284811][ C0] R13: ffff8880b84286a8 R14: ffff8880b8428280 R15: 000001b89339d57e [ 1892.284826][ C0] FS: 0000000000000000(0000) GS:ffff888123ad0000(0000) knlGS:0000000000000000 [ 1892.284842][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1892.284855][ C0] CR2: 00007fe08b157e20 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 1892.284872][ C0] Call Trace: [ 1892.284879][ C0] [ 1892.284891][ C0] hrtimer_run_softirq+0x20b/0x2e0 [ 1892.284923][ C0] handle_softirqs+0x226/0x860 [ 1892.284949][ C0] ? do_softirq+0x77/0xd0 [ 1892.284975][ C0] ? __inet6_bind+0x386/0xf30 [ 1892.285000][ C0] do_softirq+0x77/0xd0 [ 1892.285028][ C0] [ 1892.285035][ C0] [ 1892.285042][ C0] __local_bh_enable_ip+0x100/0x140 [ 1892.285067][ C0] __inet6_bind+0x386/0xf30 [ 1892.285099][ C0] kernel_bind+0x13e/0x1c0 [ 1892.285121][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 1892.285150][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 1892.285179][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 1892.285211][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1892.285240][ C0] ? lock_acquire+0x115/0x350 [ 1892.285266][ C0] rds_connect_worker+0x1d8/0x290 [ 1892.285285][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1892.285310][ C0] process_scheduled_works+0xc3d/0x1630 [ 1892.285351][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1892.285379][ C0] ? assign_work+0x3cf/0x5d0 [ 1892.285404][ C0] worker_thread+0xa47/0xfb0 [ 1892.285444][ C0] kthread+0x38b/0x480 [ 1892.285462][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1892.285485][ C0] ? __pfx_kthread+0x10/0x10 [ 1892.285503][ C0] ret_from_fork+0x514/0xb70 [ 1892.285533][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1892.285562][ C0] ? __switch_to+0xc89/0x1420 [ 1892.285588][ C0] ? __pfx_kthread+0x10/0x10 [ 1892.285606][ C0] ret_from_fork_asm+0x1a/0x30 [ 1892.285642][ C0] [ 1892.286634][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1894.251340][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1894.260807][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1894.270872][ T31] Call Trace: [ 1894.274158][ T31] [ 1894.277092][ T31] vpanic+0x56d/0xa60 [ 1894.281092][ T31] ? __pfx_vpanic+0x10/0x10 [ 1894.285611][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 1894.291186][ T31] panic+0xc5/0xd0 [ 1894.294919][ T31] ? __pfx_panic+0x10/0x10 [ 1894.299520][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 1894.304548][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1894.310707][ T31] watchdog+0x1030/0x1030 [ 1894.315051][ T31] ? watchdog+0x1c7/0x1030 [ 1894.319477][ T31] kthread+0x38b/0x480 [ 1894.323548][ T31] ? __pfx_watchdog+0x10/0x10 [ 1894.328224][ T31] ? __pfx_kthread+0x10/0x10 [ 1894.332816][ T31] ret_from_fork+0x514/0xb70 [ 1894.337420][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1894.342539][ T31] ? __switch_to+0xc89/0x1420 [ 1894.347222][ T31] ? __pfx_kthread+0x10/0x10 [ 1894.351811][ T31] ret_from_fork_asm+0x1a/0x30 [ 1894.356598][ T31] [ 1894.359896][ T31] Kernel Offset: disabled [ 1894.364215][ T31] Rebooting in 86400 seconds..