last executing test programs: 4.123214003s ago: executing program 4 (id=1624): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1a, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0xfe, 0x0, 0x4}, {0x6, 0x1}]}) write(r4, 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x1800) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000400)=@generic={0x1, 0xffffffffffffffa5, 0xfffffffffffffffc}) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r5, &(0x7f00000005c0), 0x10000000000003c6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0xe0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_ife={0xc8, 0x1, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_METALST={0x4}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe0}}, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r8 = socket(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) socket(0x15, 0x5, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe) setsockopt(r8, 0x1, 0x9, &(0x7f0000000140)="3f14b0f1", 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b00070066696c746572"], 0x330}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.175751358s ago: executing program 1 (id=1630): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2506000000140007006d616373656330000000000000000000070004000000000008000500"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1901f49d769b55fe}, 0x8014) 2.79435123s ago: executing program 1 (id=1635): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@loopback, 0x4e20, 0x13, 0x4e22, 0x1, 0xa, 0x80, 0x0, 0x2e}, {0x800000009, 0x7, 0xfffffffffffffff8, 0x9, 0x20d80eb7, 0x7, 0x6, 0x1000}, {0x4, 0x0, 0x0, 0xab4}, 0xfffffff8, 0x6e6bb9, 0x2, 0x1}, {{@in=@remote, 0x4d5, 0x32}, 0x2, @in6=@mcast2, 0x3502, 0x2, 0x0, 0x1, 0x2, 0x6507, 0x5}}, 0xe8) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 2.640299357s ago: executing program 1 (id=1636): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008001e8040000000", 0x24) r2 = socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000480)="f9478f09724e57bdb47f6f725abefb3abc1e0dc879b4ca016bdc22a893b459c44d606ce63295e7e4f5f1679643afb082d48ee6066a23ec95ffbeb0882c43829f19ee7192b0493c3416e01bc4cda47e972f4c41c37d85961f82787c4172cec5aa1148681db806c8ce3a798c01d3d2cd2ad0ecc9caa5ebd841ba7307f3db610a56ba2e300db9374da8a98a18a68270f5a1f975b48ff3572f31", 0x98}, {&(0x7f0000000540)="0a18734ee9b4101c16a30745fe2736dbe0d81192d5725b6f1471a0b5545826047ec985423c0fad8c0b3ec4cb08ef0e1475433a0a", 0x34}, {&(0x7f0000000600)="acd8b9dd1c1438e30f7db2d20984e544933512111827898f70e55c99d11328826be2c7d8884c26c1bd77b8b600ab86c050e9406b99189f340b5a37e7540c572da778039111af3061abb5e2666110682d38aebf821440d8895a043411155dd05093fd20758abc68727197170c4926f1140d2a", 0x72}, {&(0x7f0000000680)}], 0x4, 0x100, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x112}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r10, 0x2f, 0x1, 0x2, 0x1, 0x26, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x1, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="6115a400000000006113540000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15", @ANYRESOCT=r8, @ANYRESHEX=r8, @ANYRES64, @ANYRES64=r2, @ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2.558906701s ago: executing program 4 (id=1637): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000041) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000041) unshare(0x6e020200) (async) unshare(0x6e020200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0xffffb000) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x4a4902, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x13) (async) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40801) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x1, 0x2, 0x1, 0xd, 0x4101}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r3, 0x40106e80, &(0x7f0000000240)={0x15, 0x1}) writev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000002}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000002}, 0x94) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000000)) r8 = accept$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000380)=0x6e) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000500)) (async) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000500)) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRESDEC=r7, @ANYRES16=r7, @ANYBLOB="1f774da3ff16ba4c30d5c06e20323b46e4a38a162172c0e39c7072de5df62998b3a5f91b3f128207bc147ba84e1d98b99756aad92f8421d4e5e93358ad09075e79760d9cab62617a4bff2d34c928fe9e464a23205180ccc5f0238bb7c4ac092c813beb89b58ad5e135846e7b4faa0cc5", @ANYRES32=r7, @ANYRES8=r2, @ANYRES8=r9], 0x6c}}, 0x4000081) (async) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRESDEC=r7, @ANYRES16=r7, @ANYBLOB="1f774da3ff16ba4c30d5c06e20323b46e4a38a162172c0e39c7072de5df62998b3a5f91b3f128207bc147ba84e1d98b99756aad92f8421d4e5e93358ad09075e79760d9cab62617a4bff2d34c928fe9e464a23205180ccc5f0238bb7c4ac092c813beb89b58ad5e135846e7b4faa0cc5", @ANYRES32=r7, @ANYRES8=r2, @ANYRES8=r9], 0x6c}}, 0x4000081) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) 2.053726898s ago: executing program 1 (id=1639): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x0, 0x0, 0x4020, 0x0, "bb02a3c344ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x24, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0xd, "148140a4713403000000db"}, @generic={0x4, 0x3, "a8"}]}}}}}}}}, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)={0x18, 0x2e, 0x107, 0x70bd2c, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) listen(r0, 0x800) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) accept4(r0, 0x0, 0x0, 0x80000) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 2.005214726s ago: executing program 2 (id=1640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) r2 = socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000012c0), 0x8) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0xffffffff}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) r3 = socket(0x10, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x55}, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94) r7 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r7, &(0x7f0000002840)=[{{&(0x7f0000000300)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="78000000000000000000000007000000441c19b3"], 0x78}}], 0x1, 0xfffe) r8 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000cc0)="0dda2dfa", 0x4}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}], 0x1, 0x0) recvmsg$can_j1939(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/47, 0x2f}], 0x1}, 0x2140) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0xc, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x20000000, 0xf, 0x10}, [@tail_call], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', r9, 0x0, 0x0, 0x1, 0x0, 0xd, @loopback, @private2={0xfc, 0x2, '\x00', 0x10}, 0x700, 0x0, 0xfffffffc}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000003c0)=r10}, 0x20) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x12, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x4, 0x0, 0x0, 0x6, 0x7, 0xfffffffffffffffe, 0x8}, @call={0x85, 0x0, 0x0, 0x27}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000500)='syzkaller\x00', 0xfffffff7, 0x63, &(0x7f0000000540)=""/99, 0x40f00, 0x40, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x0, 0xdcb, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[r12], &(0x7f00000006c0)=[{0x5, 0x5, 0xf}, {0x4, 0x1, 0x8}, {0x5, 0x1, 0x4}, {0x3, 0x3, 0xd, 0x7}], 0x10, 0x81}, 0x94) 1.631935897s ago: executing program 3 (id=1642): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e97", 0xffc8}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="ecff000001"], 0x48}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000030000000000000009000000850000002e000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'veth1_macvtap\x00', 0x8000}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e500000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000580)) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r5) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x80}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r9}, 0xc) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x48}}, 0x0) 1.621733701s ago: executing program 2 (id=1643): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x2ad, &(0x7f0000000780)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x29f, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, "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"}}}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040)=0x33, 0x2) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000305b0100140003006e657464657673696d3000000000000034001680300001802c000c80140001"], 0x70}, 0x1, 0x0, 0x0, 0xc1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in=@broadcast, 0x421f, 0x0, 0x0, 0x5, 0x2}, {0x10000, 0x200000004, 0x8, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x0, 0xfffffffffffffffd, 0x7}, 0x9, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in6=@local, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x6c}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1.367215792s ago: executing program 2 (id=1644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x3d3a, 0x4) sendto$inet(r2, &(0x7f0000000300)="01", 0x1, 0x4040, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/189, 0xbd}, 0x8000}], 0x1, 0x2100, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0800080005000600000014000000450a0018006620000b899078640101b45e8aebc27902ffffffff3297e3baa77773b7597eb5d3a85ffc2005dc9199166a138c1cf53dd3d6b7aaf4b08299037d659e390c0ec7b5acec318b0b193a2a234fe29329fce20a29000cb16c848332dc4d72465fcb22b85359783df8711591e8ef10423360c0f81f0419e7d36c9af4b039b62653fbd7cbb1490e1e7e98c6a7d5985059047e7c3b84cc81ea09eb56979185501a5f7edc966edd9023d095ae151149f5272543c8cb91cc59b4985d942ae60eb38b2e0aaa5c93098d661ca436da2b85e01284eb5952a78c26dddc69e8907fdc1b2c6f4002639a46699c5fe6aa88"], 0xfdef) 1.365983108s ago: executing program 3 (id=1645): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) (async) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) (async, rerun: 32) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@remote, r3}, 0x14) (async, rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r4, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14}}, 0x40880) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r8) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000700000008000500ac1e01fa070004"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 64) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r11, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) 1.352685983s ago: executing program 4 (id=1646): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x8, @loopback}, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f02000000000000870187ac1414aaa69d35a2cca84708f7abca1bac142910bd7c493872f750375ed08a560400000003c48f93b82a0300000046", 0x4c}], 0x1}, 0x2000c809) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r7, 0x4004743c, 0x0) (async) ioctl$PPPIOCSMRRU(r7, 0x4004743c, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10}, &(0x7f0000000180), &(0x7f0000000280)=r9}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r9}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r11, &(0x7f00000001c0), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r11, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg(r9, &(0x7f00000002c0), 0x0, 0x0) (async) sendmmsg(r9, &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0xb, @loopback, 0x7}}, 0x0, 0x0, 0x8030, 0x0, "cebd7ceedb7b0a0852e966bbe242b90b746b023df2cb59e32e10366456deac64ffffffffffffff7f005a52a40b7161161a98c349fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.11306843s ago: executing program 0 (id=1649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000070900010073797a310000130030000000030a01010000000000000000010000000900010073797a310000000008000a400000000208000b400000000088000000050a030000000000000000000a00000a090001"], 0x120}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000003}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x22}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000070900010073797a310000130030000000030a01010000000000000000010000000900010073797a310000000008000a400000000208000b400000000088000000050a030000000000000000000a00000a090001"], 0x120}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000003}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x22}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.026842705s ago: executing program 0 (id=1650): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, 0x0, 0x8840) 922.828237ms ago: executing program 3 (id=1651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x400, 0x5, 0x4ce8, 0x408, 0x4fce14d7}, &(0x7f0000000380)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r2, 0xb}, 0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x228, 0x3a8, 0x3a8, 0x228, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x700, {}, [@inet=@rpfilter={{0x2000}, {0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@dccp={{}, {[0x4e24, 0x4e24], [0x4e21, 0x4e20], 0x0, 0x0, 0x1000, 0xa5}}, @common=@ipv6header={{0x28}, {0x0, 0x82, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x2, 0x3}, {0x4, 0x3, 0x2}, 0x401, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xff91) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'batadv0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x4e, 0x1, 0x0, 0x0, {0x16, 0x0, 0x6e80}}, 0x14}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @val={0x0, 0x1, 0x2, 0x0, 0x4, 0x4}, @x25={0x2, 0xb, 0x27}}, 0xd) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r8, {0xd, 0x1}, {}, {0xd, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x5be8531507c86bc0}, 0x200020d1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, &(0x7f0000000040)="03827307167f209b8157f08e2d9fc91800", 0x0, 0x0, 0x0, 0xfffffffe}, 0x4) r11 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r9) ioctl$int_in(r10, 0x5452, &(0x7f00000002c0)=0x9) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0x2c, @loopback, 0xff}, 0x1c) sendmsg$NL80211_CMD_SET_TID_CONFIG(r13, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32=r14, @ANYBLOB="20001d801c0000800500090000000000060005003e00000005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 919.955415ms ago: executing program 4 (id=1652): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8c}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xfffffffffffffdcc, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 906.325575ms ago: executing program 0 (id=1653): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x2, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x40, 0x1, 0xf, 0x92}}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xfffffffffffffd80}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9d7d5867f27d7481bf6f5392c25a5e", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250200000014002580060002000300000006000200a1050000"], 0x28}, 0x1, 0x0, 0x0, 0x10000001}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@deltaction={0xa0, 0x31, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0xa0}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@deltaction={0xa0, 0x31, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0xa0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0xc) (async) listen(r8, 0xc) connect$x25(r8, &(0x7f0000000a80), 0x12) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r9 = socket(0x1e, 0x4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="120000007f000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000000000000009239f67bfb78362d3bdd5350c1561b0700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r11}, &(0x7f0000000080), &(0x7f0000000380)=r10}, 0x20) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r5, @ANYRES16=r9], 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x0, 0xfffffffffffffffd, 0x9b0318}) 815.920011ms ago: executing program 1 (id=1654): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000001e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000740)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "e343"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x12, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) sendfile(r2, r1, 0x0, 0x1) socket(0x2, 0x80805, 0x2) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000001040)={0x8, 0x6}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001140)=0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003600)=ANY=[@ANYBLOB="34000004000007bb5d0004686df33329f3ff009ed044967eb90000001d20cd36b85a9900"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={r8, 0x1c, &(0x7f00000010c0)=[@in6={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) 679.077038ms ago: executing program 2 (id=1655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8a}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x204, @remote}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x17, 0x0, 0x0, 0x2}, {0x8, 0x120, 0x0, 0x0, 0x7}]}}]}]}, 0x50}}, 0x40800) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000380)={0x7, &(0x7f0000000340)=[{0x2, 0x34, 0x4, 0x5}, {0x7f, 0x0, 0x0, 0xe8fd}, {0x400, 0x3, 0x2, 0x8}, {0x2, 0x2, 0x2, 0x100000}, {0xe, 0x10, 0x1, 0x4}, {0x1000, 0x0, 0x4a, 0x3}, {0xfff, 0x81, 0x1e, 0x1380}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x563, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) 678.436613ms ago: executing program 4 (id=1656): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000117010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x14, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="ecff000001"], 0x48}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000030000000000000009000000850000002e000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x20040084) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x7ff, '\x00', 0x0, r8, 0x1, 0x4, 0x5}, 0x50) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x48}}, 0x0) 635.548255ms ago: executing program 3 (id=1657): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) (async, rerun: 32) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r1}, 0x18) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f0000000140)="89bb70af472752bb5b18c4be3953e5325d1dbf22f702166f37ebc74a1aa75b309613", &(0x7f0000000180)=""/130}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x7800, 0xffff, 0x10, {{0x32, 0x4, 0x3, 0x3a, 0xc8, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0xf, 0xc, [@private=0xa010100, @local, @multicast1]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xa7, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@broadcast, 0x101}]}, @timestamp_prespec={0x44, 0x44, 0xa1, 0x3, 0xa, [{@remote, 0x1000000}, {@loopback, 0x116}, {@loopback, 0x6}, {@local, 0x3}, {@loopback, 0x1}, {@multicast2}, {@multicast1, 0xfffffff3}, {@loopback, 0x5}]}, @cipso={0x86, 0x21, 0x3, [{0x7, 0x9, "5c671c888f1796"}, {0x6, 0x12, "a30294125de76fd496280d085db51e2b"}]}, @ssrr={0x89, 0x7, 0xcf, [@multicast2]}, @lsrr={0x83, 0x1f, 0xb4, [@loopback, @broadcast, @broadcast, @empty, @remote, @broadcast, @multicast2]}]}}}}}) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}, [@call={0x85, 0x0, 0x0, 0xac}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f0000000700)='GPL\x00', 0x7, 0x0, &(0x7f0000000740), 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x5, 0xf, 0x9, 0x40}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[r2, r2, r2, r2], &(0x7f0000000800)=[{0x4, 0x1, 0xe, 0x8}], 0x10, 0x10000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0x11, &(0x7f0000000340)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xfffffffe}, @func, @jmp={0x5, 0x1, 0x7, 0x2, 0x8, 0xfffffffffffffff4, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xece}}, @jmp={0x5, 0x1, 0x6, 0x3, 0xb, 0xffffffffffffffc0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x30, '\x00', r4, @fallback=0x16, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x4, 0x8, 0x6}, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f00000009c0)={0x10, 0x0, "80f8d335ded9f75b5979c5e4bf0e22b5"}) (async, rerun: 32) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000a00)) (async, rerun: 32) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000a40)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@dellinkprop={0x20, 0x6d, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x2000}}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4044010) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r10, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, r11, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xfffffff7, 0x43}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x8}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x9a}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008815}, 0x20000000) (async) r15 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f0000000dc0)={r1}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r16, 0x84, 0x6, &(0x7f0000000e00)={0x0, @in6={{0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}}, &(0x7f0000000ec0)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r16, 0x84, 0x10, &(0x7f0000000f00)=@sack_info={r17, 0xf8}, &(0x7f0000000f40)=0xc) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001080)={@map=r2, 0x24, 0x0, 0x0, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000fc0)=[0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001100), &(0x7f0000001140)=r7}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)={@map=r19, r3, 0x38, 0x8, 0x0, @void, @value=r7, @void, @void, r18}, 0x20) (async) bind$inet(0xffffffffffffffff, &(0x7f00000011c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001300)={{r9}, 0x0, 0x10, @unused=[0x8, 0xbae, 0xfffffffffffffff7], @subvolid=0x7}) 560.055495ms ago: executing program 0 (id=1658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xcc, 0xc}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) (async) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r3, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9}, 0x1c) getsockopt$inet_opts(r2, 0x0, 0x9, 0x0, &(0x7f00000001c0)) (async) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "15fe08", 0x48, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3, 0x3]}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xfffc}}}}}}}}}, 0x0) 383.11143ms ago: executing program 2 (id=1659): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000004c0)={{0xfffffffb, 0xa}, 0x14}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r6, 0xf9c2f03d122f484f, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) 381.463031ms ago: executing program 3 (id=1660): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="00882bd0269cd8209319417b6ca6", 0x0, 0x0, 0x0, 0xb9, 0x0, &(0x7f0000000a40)="d580a67cd67831c9f16041b021b29fb3183fff11edb3d73df0548a9ca5d9bdf23cadf9255b0689c039f35371fe0f709b536d0b0901193c19d3c0a1b38c7fd63ebb2b20d9ae7b403f05ca637e344c29200f863c642d3fb488450c0e4d4a8b5b529d647e44c68cd9758b79a36622ac8d49c011ec34f60ba673d8626fc1f1669b6a47a02a79eb6c8bb7d05007d6ed2467d7173a2f5207599a9d0c255ab64ea1bc8cd350db318477bbcb01c58945f1a0220f05349d8b024e5e8d65", 0x0}, 0x50) 327.248063ms ago: executing program 0 (id=1661): getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x101}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r0, 0xfff}, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000800)={&(0x7f00000000c0)=0x80000000, 0x2, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000007c0)}) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000840)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r2, &(0x7f00000008c0)="48f7eacadb83602111938816593531e74b68ee08015fcfd9aca0c1127c99e3b00b9d2011126006f4bfc5e64f4921c9b68e469a97ce7464739ad25f731bd0517ddce4f583a123970067fdd51cac9e24799f725506c12e35415ee5370a98ca5da53dc06a55ebf44e3d3147c397e699a943bfa9a9cd64f98cc0fffff9006ad768d78db0baed3a4e941a736c9a1db86799d1555abc3b3c4fdd60a52d8003e8288ee8bec5f8dd927f935aa71b41ab2817", &(0x7f0000000980)=""/226, 0x4}, 0x20) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x1402, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x8085) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x6, 0x7ff, 0x6, 0x5, 0x2b, r2, 0x9, '\x00', 0x0, r2, 0x0, 0x4, 0x5}, 0x50) ioctl$int_out(r3, 0x2, &(0x7f0000000c80)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000cc0)=@int=0x6, 0x4) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000d00)=0x1) write$cgroup_subtree(r2, &(0x7f0000000d40)={[{0x2b, 'pids'}, {0x2d, 'pids'}, {0x2d, 'net_prio'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}]}, 0x22) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x54, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6c0f, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ef509f35614b88ef70521188a0e93462"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000844}, 0x4000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x10000, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x50) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000fc0)={r0, 0xb2, 0x20}, &(0x7f0000001000)=0xc) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000001280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001080)={0x1b4, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="89b303dae44f"}, @NL80211_ATTR_IE={0x192, 0x2a, [@fast_bss_trans={0x37, 0xe6, {0x9, 0x5, "33c61f8aaebdb37c2aa85b87aa57c82a", "ce9aee086181a6a938d11944bf60fdbe743c2d47076f1aa7117b4574c6668599", "6290171069d77980f2d3595dda78047a775cf3f22270368f70d908e7dc765797", [{0x2, 0x1a, "acfdb5f00a4a3842e0e31b18c2f879211f1074ae7585d2cf3fcc"}, {0x4, 0x21, "132f152901102ddb57114668f1fb1a961972790ba3cf636f55f279eb33e14e844e"}, {0x3, 0x25, "92978f04c01c54629dbd812ea0df40a100a6ed4615577f9be6a4516e7efbb15dcc85ab335e"}, {0x3, 0xc, "7dba779f68a6c0feb47f7c2f"}, {0x4, 0x1e, "09550d1de650386edd8eab6b855eea52e14bc8125afc3f4aad29197187e7"}]}}, @link_id={0x65, 0x12, {@initial, @device_b}}, @ht={0x2d, 0x1a, {0x0, 0x2, 0x6, 0x0, {0x6c, 0x7, 0x0, 0x1c9, 0x0, 0x0, 0x1, 0x3}, 0x800, 0x28000000, 0x1}}, @chsw_timing={0x68, 0x4, {0x3, 0x40}}, @random={0x9d, 0x6b, "29c2df783daf701697571f8f6ff60b69622eda6ca8ffe401870e73b9732fe624d60864b70c39223c2d894565c861ccb585be4b1d84da5ec009f80a257b197c06bc8227bd598c442b5613c456e9825acc113155291dc42154ecb0d6a4b7073ed09c51a957c4cf0fe66e6f85"}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$inet(r2, &(0x7f00000012c0)="ef06739cfd64c19b7c34d6f88acf5c0b7e1c77eefcab6500130e9f5284afd75c3cd4e7b2e4f75a4b44f48a3179fc890746ebf23e7e96adc6b4955671f782da53516aa38cd263d652e292e808824fb410568063165e8b38c565faa47a4751d17dc5ae25853d18fddc3099960cd88857c2e923dc37b2ec9d5e9fc73a37807151dd289460", 0x83, 0x8000, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000013c0), r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000014c0)={'ip_vti0\x00', &(0x7f0000001400)={'tunl0\x00', 0x0, 0x7, 0x20, 0x8ddc, 0x6, {{0x27, 0x4, 0x1, 0x7, 0x9c, 0x65, 0x0, 0x5, 0x0, 0x0, @private=0xa010100, @remote, {[@timestamp_prespec={0x44, 0x54, 0xc7, 0x3, 0x0, [{@multicast1, 0x8}, {@empty, 0xdc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@private=0xa010100, 0x80}, {@remote, 0x4}, {@multicast2, 0x9}, {@loopback, 0x9}, {@empty, 0x6}, {@local, 0x3}, {@broadcast, 0xfffffffb}]}, @cipso={0x86, 0x34, 0x2, [{0x2, 0x8, "d648142edea0"}, {0x0, 0x5, "7631aa"}, {0x6, 0x2}, {0x6, 0x8, "e77a7ec7e58e"}, {0x6, 0x8, "a2b94837f95e"}, {0x1, 0xf, "c8f9ebda0307b9eb74bbbca4e2"}]}]}}}}}) getsockname$packet(r2, &(0x7f0000001500)={0x11, 0x0, 0x0}, &(0x7f0000001540)=0x14) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000001680)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0x88, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000016c0)) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001940)={'syztnl2\x00', &(0x7f00000018c0)={'syztnl0\x00', r8, 0x1, 0x20, 0x7, 0x1ff, {{0x16, 0x4, 0x3, 0x3, 0x58, 0x64, 0x0, 0xb8, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x2b, 0xc8, [@private=0xa010102, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x68, [@rand_addr=0x64010102, @local, @loopback]}, @end]}}}}}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001980)={r8, @local, @dev={0xac, 0x14, 0x14, 0x3d}}, 0xc) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4$inet6(r9, 0x0, &(0x7f00000019c0), 0x80800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001ac0)={'erspan0\x00', &(0x7f0000001a00)={'syztnl1\x00', r7, 0x80, 0x80, 0x1, 0xe5, {{0x27, 0x4, 0x1, 0xf, 0x9c, 0x67, 0x0, 0xa, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x54, 0x27, 0x3, 0x4, [{@multicast2, 0x4}, {@private=0xa010102, 0x6}, {@multicast2, 0x3}, {@broadcast, 0xfffffffa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast1, 0x401}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@rand_addr=0x64010101, 0x8}]}, @cipso={0x86, 0x34, 0x1, [{0x1, 0x10, "52dd94caac34e3a5d739e669bb9f"}, {0x6, 0x2}, {0x2, 0x11, "c6393a60ad96cd0be94af3fc1bf434"}, {0x6, 0x9, "cb10efc5bf5096"}, {0x1, 0x2}]}]}}}}}) 307.6695ms ago: executing program 4 (id=1662): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) recvfrom$packet(r1, &(0x7f0000000000)=""/204, 0xcc, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x1, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 169.188421ms ago: executing program 3 (id=1663): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8840) 121.937802ms ago: executing program 1 (id=1664): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x8, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x1d64765e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xa, 0x4, 0xc, 0x2000800, 0x1, 0x8001, 0x8}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x5, 0x8, 0x4}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc7, &(0x7f0000000180)=""/199, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) 104.957389ms ago: executing program 0 (id=1665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x58c8674dda682ee5}, 0x8000) 0s ago: executing program 2 (id=1666): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0xf7a53000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x84, 0x0, &(0x7f00000001c0)) (async) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "bb9b69de4386bf2ae6a3b321505c68cd"}, @md5sig={0x1d, 0x12, "c52a2d43d2c85500"}]}}}}}}}}, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000000)={0x7, 'veth1_to_team\x00', {0x5}, 0x8000}) kernel console output (not intermixed with test programs): 3 [ 106.661748][ T6932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.780811][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'. [ 107.444074][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.453923][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.621638][ T6977] netlink: 324 bytes leftover after parsing attributes in process `syz.0.299'. [ 107.707083][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.759128][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.842093][ T6981] netlink: 'syz.0.300': attribute type 11 has an invalid length. [ 107.851734][ T6981] netlink: 'syz.0.300': attribute type 23 has an invalid length. [ 107.883122][ T6981] netlink: 224 bytes leftover after parsing attributes in process `syz.0.300'. [ 108.056672][ T6984] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 108.090173][ T4945] Bluetooth: hci3: command tx timeout [ 108.118971][ T151] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.148572][ T151] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.191839][ T151] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.232666][ T151] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.249395][ T6984] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 108.264928][ T151] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.303274][ T151] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.330293][ T151] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.367705][ T151] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.420724][ T6999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.305'. [ 108.522477][ T7004] IPVS: Unknown mcast interface: dvmrp1 [ 108.762333][ T7017] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 108.844549][ T7026] bond1: (slave geneve2): making interface the new active one [ 108.857819][ T7026] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 108.926227][ T1117] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.983519][ T7028] team0: Port device team_slave_0 removed [ 109.009678][ T7017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.253022][ T1117] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.291614][ T1117] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.341338][ T1117] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.432110][ T7043] Bluetooth: MGMT ver 1.23 [ 109.869002][ T7060] __nla_validate_parse: 68 callbacks suppressed [ 109.869019][ T7060] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.319'. [ 110.166290][ T4945] Bluetooth: hci3: command tx timeout [ 110.444164][ T7072] syzkaller1: entered promiscuous mode [ 110.454543][ T7072] syzkaller1: entered allmulticast mode [ 110.599628][ T7089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.326'. [ 110.634235][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 110.660582][ T7089] netlink: 31 bytes leftover after parsing attributes in process `syz.1.326'. [ 110.672250][ T7089] netlink: 'syz.1.326': attribute type 3 has an invalid length. [ 110.680713][ T7092] netlink: 44 bytes leftover after parsing attributes in process `syz.0.327'. [ 110.682516][ T7089] netlink: 'syz.1.326': attribute type 2 has an invalid length. [ 110.690661][ T7084] netlink: 484 bytes leftover after parsing attributes in process `syz.3.324'. [ 110.698637][ T7089] netlink: 31 bytes leftover after parsing attributes in process `syz.1.326'. [ 110.745306][ T7084] openvswitch: netlink: ufid size 960 bytes exceeds the range (1, 16) [ 110.763814][ T7084] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 110.765492][ T7089] netlink: 'syz.1.326': attribute type 2 has an invalid length. [ 110.802317][ T7086] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 111.281234][ T7115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.331'. [ 111.310531][ T7123] netlink: 'syz.4.330': attribute type 4 has an invalid length. [ 111.447466][ T7125] hsr0: entered promiscuous mode [ 111.459441][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 111.534322][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 112.157589][ T7124] hsr0: left promiscuous mode [ 112.253192][ T4945] Bluetooth: hci3: command tx timeout [ 112.553494][ T7147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.599770][ T7147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.644175][ T7147] bond0 (unregistering): Released all slaves [ 113.223799][ T7157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.604628][ T7188] xt_hashlimit: max too large, truncated to 1048576 [ 113.673407][ T7188] bond2: option lacp_active: invalid value (8) [ 113.710712][ T7192] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 113.718532][ T7192] netlink: 'syz.0.349': attribute type 7 has an invalid length. [ 113.722490][ T7188] bond2 (unregistering): Released all slaves [ 113.726411][ T7192] netlink: 'syz.0.349': attribute type 8 has an invalid length. [ 113.741341][ T7192] NCSI netlink: No device for ifindex 1073545264 [ 114.325374][ T4945] Bluetooth: hci3: command tx timeout [ 114.730424][ T7240] batadv0: entered promiscuous mode [ 114.745463][ T7240] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 115.033433][ T7249] __nla_validate_parse: 11 callbacks suppressed [ 115.033448][ T7249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'. [ 115.202019][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 115.234741][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 115.392851][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 115.415810][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 115.423073][ T1099] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.460947][ T1099] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.482799][ T1099] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.491349][ T1099] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.587444][ T29] audit: type=1804 audit(1779076291.425:4): pid=7274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.370" name="/newroot/60/memory.events" dev="tmpfs" ino=323 res=1 errno=0 [ 115.617165][ T29] audit: type=1800 audit(1779076291.435:5): pid=7274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.370" name="memory.events" dev="tmpfs" ino=323 res=0 errno=0 [ 115.646782][ T29] audit: type=1800 audit(1779076291.455:6): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.370" name="memory.events" dev="tmpfs" ino=323 res=0 errno=0 [ 115.738720][ T7274] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 115.797168][ T7274] bond2 (unregistering): Released all slaves [ 116.269184][ T7318] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 116.277377][ T7317] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 116.328660][ T7317] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.405371][ T4945] Bluetooth: hci3: command tx timeout [ 116.483035][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 116.520024][ T7338] xt_hashlimit: max too large, truncated to 1048576 [ 116.537005][ T7337] xt_hashlimit: max too large, truncated to 1048576 [ 116.581120][ T7337] No such timeout policy "syz1" [ 116.601932][ T7338] No such timeout policy "syz1" [ 116.613945][ T7342] netlink: 'syz.0.390': attribute type 1 has an invalid length. [ 116.778667][ T7342] bond0: entered promiscuous mode [ 116.808213][ T7342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.983933][ T7357] xt_connbytes: Forcing CT accounting to be enabled [ 117.271394][ T7368] netlink: 'syz.0.397': attribute type 8 has an invalid length. [ 117.287396][ T7367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.396'. [ 117.429806][ T7370] netlink: 3 bytes leftover after parsing attributes in process `syz.4.396'. [ 117.491756][ T7370] xt_hashlimit: size too large, truncated to 1048576 [ 117.533034][ T7376] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 117.659006][ T7380] syzkaller0: entered promiscuous mode [ 117.702089][ T7380] syzkaller0: entered allmulticast mode [ 117.802454][ T5737] IPVS: starting estimator thread 0... [ 117.905373][ T7385] IPVS: using max 33 ests per chain, 79200 per kthread [ 117.948846][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'. [ 118.077343][ T7389] bond2: entered promiscuous mode [ 118.082960][ T7389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.150888][ T7387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.159563][ T7387] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 118.179008][ T7387] bond2: (slave vti0): Error -95 calling set_mac_address [ 118.320069][ T7398] bridge4: entered promiscuous mode [ 118.335230][ T7398] bridge4: entered allmulticast mode [ 118.359730][ T7398] team0: Port device bridge4 added [ 118.371208][ T7397] hsr0: entered promiscuous mode [ 118.461808][ T7396] hsr0: left promiscuous mode [ 118.492892][ T4945] Bluetooth: hci3: command tx timeout [ 118.612258][ T7405] nbd: must specify a device to reconfigure [ 118.811855][ T7412] tipc: Can't bind to reserved service type 2 [ 118.879420][ T7413] netlink: 'syz.0.406': attribute type 3 has an invalid length. [ 118.940700][ T7413] netlink: 'syz.0.406': attribute type 3 has an invalid length. [ 119.005550][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 119.309637][ T7437] block nbd0: not configured, cannot reconfigure [ 119.656332][ T7416] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 120.050185][ T7454] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 120.099252][ T7454] __nla_validate_parse: 3 callbacks suppressed [ 120.099266][ T7454] netlink: 96 bytes leftover after parsing attributes in process `syz.0.418'. [ 120.119413][ T7454] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 120.127272][ T7454] netlink: 638 bytes leftover after parsing attributes in process `syz.0.418'. [ 120.136575][ T7454] netlink: 1 bytes leftover after parsing attributes in process `syz.0.418'. [ 120.520315][ T7350] Set syz1 is full, maxelem 65536 reached [ 120.566219][ T4945] Bluetooth: hci3: command tx timeout [ 122.645395][ T4945] Bluetooth: hci3: command tx timeout [ 124.725503][ T4945] Bluetooth: hci3: command tx timeout [ 126.805713][ T4945] Bluetooth: hci3: command tx timeout [ 128.885830][ T4945] Bluetooth: hci3: command tx timeout [ 130.965273][ T4945] Bluetooth: hci3: command tx timeout [ 132.727931][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.734927][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.055344][ T4945] Bluetooth: hci3: command tx timeout [ 135.125357][ T4945] Bluetooth: hci3: command tx timeout [ 137.206853][ T4945] Bluetooth: hci3: command tx timeout [ 138.451427][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'. [ 138.503523][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 138.505515][ T7457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.523839][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 138.541510][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.541671][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 138.559847][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 138.601145][ T7458] bond1: (slave veth3): Enslaving as an active interface with an up link [ 138.610941][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.630093][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.693481][ T7457] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 138.727105][ T7457] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 138.760759][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.094238][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.429'. [ 139.109664][ T7497] veth0: entered promiscuous mode [ 139.130261][ T7497] veth0: left promiscuous mode [ 139.142006][ T7488] netlink: 48 bytes leftover after parsing attributes in process `syz.3.426'. [ 139.286455][ T4945] Bluetooth: hci3: command tx timeout [ 139.327958][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.433'. [ 139.353666][ T7508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.434'. [ 139.368578][ T7504] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 139.421578][ T7512] openvswitch: netlink: Flow key attribute not present in set flow. [ 139.772448][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.780208][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.877735][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.947008][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.256364][ T151] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.299865][ T151] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.323185][ T151] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.386268][ T151] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.674047][ T7578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.450'. [ 140.828058][ T7585] sctp: [Deprecated]: syz.4.451 (pid 7585) Use of int in maxseg socket option. [ 140.828058][ T7585] Use struct sctp_assoc_value instead [ 140.863594][ T29] audit: type=1804 audit(1779076316.705:7): pid=7583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.452" name="/newroot/95/memory.events" dev="tmpfs" ino=504 res=1 errno=0 [ 140.914965][ T29] audit: type=1800 audit(1779076316.705:8): pid=7583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.452" name="memory.events" dev="tmpfs" ino=504 res=0 errno=0 [ 140.945663][ T7589] syz_tun: entered allmulticast mode [ 141.000586][ T7595] nbd: must specify a size in bytes for the device [ 141.050831][ T7597] syz_tun: left allmulticast mode [ 141.091325][ T7592] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.217706][ T7599] bridge5: entered promiscuous mode [ 141.223214][ T7599] bridge5: entered allmulticast mode [ 141.233637][ T7599] team0: Port device bridge5 added [ 141.240217][ T7606] veth0: entered promiscuous mode [ 141.277188][ T7603] veth0: left promiscuous mode [ 141.374307][ T4945] Bluetooth: hci3: command tx timeout [ 141.780620][ T7645] netlink: 'syz.2.467': attribute type 10 has an invalid length. [ 141.820567][ T7646] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 141.832855][ T7647] netlink: 'syz.2.467': attribute type 10 has an invalid length. [ 142.022769][ T7645] team0: Port device dummy0 added [ 142.054994][ T7647] team0: Port device dummy0 removed [ 142.064160][ T7647] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 142.208819][ T7662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.226297][ T7662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.247027][ T7662] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 142.285943][ T7662] bond0 (unregistering): Released all slaves [ 142.758592][ T7676] IPVS: Scheduler module ip_vs_sip not found [ 142.942913][ T7688] netlink: 'syz.4.478': attribute type 2 has an invalid length. [ 143.049622][ T7696] netlink: 'syz.3.480': attribute type 1 has an invalid length. [ 143.446565][ T4945] Bluetooth: hci3: command tx timeout [ 144.187951][ T7720] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 144.260621][ T5721] IPVS: starting estimator thread 0... [ 144.361178][ T7728] IPVS: using max 34 ests per chain, 81600 per kthread [ 144.685804][ T7738] __nla_validate_parse: 10 callbacks suppressed [ 144.685822][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.491'. [ 144.709819][ T7737] netlink: 5 bytes leftover after parsing attributes in process `syz.1.491'. [ 144.755091][ T7737] bond5: (slave bond_slave_1): Device is not our slave [ 144.762157][ T7737] bond5: option active_slave: invalid value (bond_slave_1) [ 144.772783][ T7737] bond5 (unregistering): Released all slaves [ 145.526896][ T4945] Bluetooth: hci3: command tx timeout [ 146.563984][ T7707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.643568][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 146.655068][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 146.704737][ T7761] macsec1: entered promiscuous mode [ 146.721843][ T7761] dummy0: entered promiscuous mode [ 146.761313][ T7761] macsec1: entered allmulticast mode [ 146.784508][ T7761] dummy0: entered allmulticast mode [ 146.883070][ T7775] netlink: 104 bytes leftover after parsing attributes in process `syz.0.500'. [ 146.897654][ T7765] bond2 (unregistering): Released all slaves [ 147.245046][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 147.272845][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 147.393443][ T7806] lo speed is unknown, defaulting to 1000 [ 147.409663][ T7806] lo speed is unknown, defaulting to 1000 [ 147.471929][ T7806] lo speed is unknown, defaulting to 1000 [ 147.540736][ T7806] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 147.583144][ T7806] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 147.609868][ T4945] Bluetooth: hci3: command tx timeout [ 147.644175][ T7814] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 147.677632][ T7806] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 147.701693][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 147.731929][ T7806] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 147.770593][ T7806] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 147.778502][ T7814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.828417][ T7806] lo speed is unknown, defaulting to 1000 [ 147.838656][ T7806] lo speed is unknown, defaulting to 1000 [ 147.853393][ T7806] lo speed is unknown, defaulting to 1000 [ 147.865095][ T7806] lo speed is unknown, defaulting to 1000 [ 147.874010][ T7806] lo speed is unknown, defaulting to 1000 [ 148.039018][ T7836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.516'. [ 148.064882][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'. [ 148.257678][ T7548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.358589][ T7848] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 148.368399][ T7848] netlink: 'syz.2.519': attribute type 3 has an invalid length. [ 148.378787][ T7848] netlink: 'syz.2.519': attribute type 3 has an invalid length. [ 148.390734][ T7848] batadv_slave_1: entered promiscuous mode [ 148.406380][ T7848] syzkaller0: entered promiscuous mode [ 148.412087][ T7848] syzkaller0: entered allmulticast mode [ 148.725584][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.735125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.237978][ T7847] batadv_slave_1: left promiscuous mode [ 149.286127][ T7548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.685245][ T4945] Bluetooth: hci3: command tx timeout [ 150.325436][ T7548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.569507][ T7822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.852743][ T7864] __nla_validate_parse: 4 callbacks suppressed [ 150.852759][ T7864] netlink: 68 bytes leftover after parsing attributes in process `syz.2.525'. [ 151.234657][ T7857] infiniband syz1: set down [ 151.261685][ T7857] infiniband syz1: added bond0 [ 151.363716][ T7857] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 151.391320][ T7548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.399440][ T7857] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 151.437315][ T7880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.528'. [ 151.461997][ T7857] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 151.604608][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'. [ 151.615516][ T7885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.636161][ T7857] RDS/IB: syz1: added [ 151.656469][ T7857] smc: adding ib device syz1 with port count 1 [ 151.676114][ T7857] smc: ib device syz1 port 1 has no pnetid [ 151.760007][ T7890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.533'. [ 151.769357][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.769556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.792225][ T4945] Bluetooth: hci3: command tx timeout [ 152.053520][ T7893] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.065022][ T7893] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.076010][ T7893] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.220944][ T7893] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.231673][ T7893] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.242425][ T7893] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.377367][ T7893] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.400182][ T7893] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.406126][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.421701][ T7893] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.592326][ T7893] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.640953][ T7893] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.669078][ T7893] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.937212][ T7921] netlink: 'syz.3.538': attribute type 11 has an invalid length. [ 152.958730][ T7921] netlink: 'syz.3.538': attribute type 1 has an invalid length. [ 152.967038][ T7921] netlink: 936 bytes leftover after parsing attributes in process `syz.3.538'. [ 152.992191][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.001404][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 153.012826][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 153.054099][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.074356][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 153.094159][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 153.175650][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.187322][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 153.208966][ T12] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 153.265045][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.295929][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 153.314352][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 153.383270][ T7935] netlink: 'syz.2.542': attribute type 1 has an invalid length. [ 153.446002][ T7548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.848791][ T4945] Bluetooth: hci3: command tx timeout [ 154.460973][ T8001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.554'. [ 154.487936][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.497073][ T1099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.505458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.647641][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.558'. [ 155.488767][ T8020] sctp: [Deprecated]: syz.2.560 (pid 8020) Use of int in max_burst socket option deprecated. [ 155.488767][ T8020] Use struct sctp_assoc_value instead [ 155.505071][ T29] audit: type=1800 audit(1779076331.345:9): pid=8020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.560" name="memory.events" dev="tmpfs" ino=645 res=0 errno=0 [ 155.529223][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.925317][ T4945] Bluetooth: hci3: command tx timeout [ 156.566433][ T7548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.236975][ T7990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.348901][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.558'. [ 157.480166][ T8040] tipc: Failed to remove unknown binding: 66,1,1/0:2905633739/2905633741 [ 157.512562][ T8040] tipc: Failed to remove unknown binding: 66,1,1/0:2905633739/2905633741 [ 157.530114][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.538806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.663034][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.717071][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.724818][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.770319][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.566'. [ 158.005303][ T4945] Bluetooth: hci3: command tx timeout [ 158.613832][ T8041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.643314][ T8041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.651370][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.843046][ T7539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.870696][ T8049] macsec2: entered promiscuous mode [ 158.887429][ T8049] macsec2: entered allmulticast mode [ 158.950781][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.002244][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 159.046645][ T12] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 159.086938][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.113821][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 159.143508][ T8092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.576'. [ 159.144357][ T12] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 159.207860][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.209228][ T8092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.576'. [ 159.227724][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 159.246734][ T12] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 159.261714][ T8064] lo speed is unknown, defaulting to 1000 [ 159.268873][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.273014][ T8096] nbd: must specify a device to reconfigure [ 159.278044][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 159.291915][ T12] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 159.302749][ T8077] syzkaller0: entered promiscuous mode [ 159.308712][ T8077] syzkaller0: entered allmulticast mode [ 159.439192][ T8100] netlink: 48 bytes leftover after parsing attributes in process `syz.2.579'. [ 159.455902][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 159.521520][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'. [ 159.553028][ T8111] tipc: Enabling of bearer rejected, failed to enable media [ 159.664180][ T8116] netlink: 'syz.3.583': attribute type 2 has an invalid length. [ 159.678924][ T8116] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 159.707469][ T8118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.717202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.748481][ T8115] ip6gre1: entered promiscuous mode [ 159.754438][ T8115] ip6gre1: entered allmulticast mode [ 159.768650][ T8114] netlink: 'syz.3.583': attribute type 2 has an invalid length. [ 159.804222][ T8129] syz_tun: entered allmulticast mode [ 159.815624][ T8114] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 159.836116][ T8116] nbd: must specify at least one socket [ 159.842804][ T8128] syz_tun: left allmulticast mode [ 159.848497][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.085383][ T4945] Bluetooth: hci3: command tx timeout [ 160.246009][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.254329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.274242][ T8145] lo speed is unknown, defaulting to 1000 [ 160.540369][ T8165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.598'. [ 160.887354][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.052269][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.599'. [ 161.065262][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.599'. [ 161.217242][ T8180] netlink: 'syz.2.602': attribute type 1 has an invalid length. [ 161.232079][ T8180] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 161.581080][ T8186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.753158][ T8186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.780348][ T8186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.799169][ T8186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.808059][ T8186] virt_wifi0: entered promiscuous mode [ 161.814768][ T8186] virt_wifi0: entered allmulticast mode [ 161.872974][ T48] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.887772][ T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.896854][ T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.912984][ T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.925864][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.165605][ T4945] Bluetooth: hci3: command tx timeout [ 162.359252][ T8234] tipc: Started in network mode [ 162.380287][ T8234] tipc: Node identity 26c07cf2525, cluster identity 4711 [ 162.394159][ T8234] tipc: Enabled bearer , priority 0 [ 162.494603][ T8234] syzkaller0: entered promiscuous mode [ 162.506841][ T8234] syzkaller0: entered allmulticast mode [ 162.517112][ T8234] tipc: Resetting bearer [ 162.545117][ T8251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.564889][ T8233] tipc: Resetting bearer [ 162.587266][ T8243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.763031][ T8261] __nla_validate_parse: 70 callbacks suppressed [ 162.763048][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.620'. [ 162.965629][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.010271][ T5737] net_ratelimit: 2 callbacks suppressed [ 164.010289][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.245373][ T4945] Bluetooth: hci3: command tx timeout [ 164.755988][ T8233] tipc: Disabling bearer [ 164.771603][ T5361] tipc: Node number set to 1955626226 [ 165.047774][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.492856][ T8257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.529697][ T8329] xt_hashlimit: size too large, truncated to 1048576 [ 165.598792][ T8330] netlink: 'syz.0.633': attribute type 1 has an invalid length. [ 165.654709][ T8330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.633'. [ 165.819313][ T8345] x_tables: duplicate underflow at hook 1 [ 166.008184][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.016579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.086869][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.132473][ T8361] netlink: 64 bytes leftover after parsing attributes in process `syz.0.642'. [ 166.161858][ T8361] netlink: 64 bytes leftover after parsing attributes in process `syz.0.642'. [ 166.294629][ T8364] lo speed is unknown, defaulting to 1000 [ 166.325662][ T4945] Bluetooth: hci3: command tx timeout [ 166.452871][ T8378] bond3: entered promiscuous mode [ 166.896720][ T8394] tipc: Enabled bearer , priority 0 [ 166.920229][ T8389] syzkaller0: entered promiscuous mode [ 166.925933][ T8389] syzkaller0: entered allmulticast mode [ 166.956956][ T8389] tipc: Resetting bearer [ 166.991965][ T8389] tipc: Resetting bearer [ 167.088238][ T8389] tipc: Disabling bearer [ 167.110931][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 167.122514][ T8403] sctp: [Deprecated]: syz.4.650 (pid 8403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.122514][ T8403] Use struct sctp_sack_info instead [ 167.125814][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.145433][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 167.321027][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 167.381875][ T8419] lo speed is unknown, defaulting to 1000 [ 167.414003][ T8427] tun0: tun_chr_ioctl cmd 1074025675 [ 167.421271][ T8427] tun0: persist enabled [ 167.438942][ T8427] tipc: Started in network mode [ 167.453857][ T8427] tipc: Node identity ff010000000000000000000000000001, cluster identity 3 [ 167.472836][ T8427] tipc: Enabling of bearer rejected, failed to enable media [ 167.494102][ T8427] tun0: tun_chr_ioctl cmd 1074025675 [ 167.500031][ T8427] tun0: persist disabled [ 167.517136][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 167.566080][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 167.769641][ T8437] geneve2: entered promiscuous mode [ 167.939627][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 167.951008][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 168.115307][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.665'. [ 168.170354][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.406123][ T4945] Bluetooth: hci3: command tx timeout [ 168.618192][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 169.050750][ T8057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.059227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.206038][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.584243][ T8488] lo speed is unknown, defaulting to 1000 [ 170.245841][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.485358][ T4945] Bluetooth: hci3: command tx timeout [ 171.084455][ T8453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.197440][ T8493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.674'. [ 171.286653][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.340735][ T8503] netlink: 280 bytes leftover after parsing attributes in process `syz.0.676'. [ 171.468068][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.674'. [ 171.498692][ T8508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.521313][ T8497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.530354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.539367][ T8506] vlan2: entered promiscuous mode [ 171.544455][ T8506] bridge0: entered promiscuous mode [ 171.760576][ T4945] block nbd0: Receive control failed (result -32) [ 171.760576][ T5637] block nbd0: Receive control failed (result -32) [ 171.775754][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.783979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.051776][ T8533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.076833][ T8524] pim6reg1: entered promiscuous mode [ 172.082285][ T8524] pim6reg1: entered allmulticast mode [ 172.291439][ T8543] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.688'. [ 172.305097][ T8548] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.687'. [ 172.565482][ T4945] Bluetooth: hci3: command tx timeout [ 172.755303][ T8568] veth0_macvtap: entered allmulticast mode [ 173.375113][ T8596] netlink: 224 bytes leftover after parsing attributes in process `syz.0.701'. [ 173.399068][ T8602] netlink: 'syz.1.703': attribute type 1 has an invalid length. [ 173.544739][ T8602] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 173.718915][ T8615] syzkaller1: entered promiscuous mode [ 173.732988][ T8615] syzkaller1: entered allmulticast mode [ 173.829531][ T8632] netlink: 52 bytes leftover after parsing attributes in process `syz.0.710'. [ 174.405684][ T5361] net_ratelimit: 6 callbacks suppressed [ 174.405701][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.477695][ T8656] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 174.504727][ T8656] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 174.646286][ T4945] Bluetooth: hci3: command tx timeout [ 174.817213][ T8057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.825781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.882717][ T8664] tipc: Enabled bearer , priority 0 [ 174.904898][ T8681] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 174.926772][ T8664] syzkaller0: entered promiscuous mode [ 174.928239][ T8681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.722'. [ 174.951305][ T8664] syzkaller0: entered allmulticast mode [ 175.012954][ T8663] tipc: Resetting bearer [ 175.041121][ T8686] netlink: 'syz.0.723': attribute type 1 has an invalid length. [ 175.084689][ T8663] tipc: Disabling bearer [ 175.448636][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.468205][ T8726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.733'. [ 175.592193][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.735'. [ 175.605079][ T8732] netlink: 488 bytes leftover after parsing attributes in process `syz.3.735'. [ 175.615847][ T8732] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.735'. [ 175.633132][ T8726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.733'. [ 175.641778][ T8732] syzkaller0: entered promiscuous mode [ 175.649865][ T8732] syzkaller0: entered allmulticast mode [ 175.666242][ T8734] netlink: 36 bytes leftover after parsing attributes in process `syz.2.734'. [ 175.714436][ T8732] tipc: Enabled bearer , priority 0 [ 175.724524][ T8731] tipc: Resetting bearer [ 175.794102][ T8731] tipc: Disabling bearer [ 175.800673][ T8741] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 175.825961][ T8743] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 176.457879][ T8761] bond3 (unregistering): Released all slaves [ 176.485838][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.565980][ T8765] netlink: 'syz.3.741': attribute type 2 has an invalid length. [ 176.671268][ T8771] tipc: Enabling of bearer rejected, failed to enable media [ 176.704227][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 176.726276][ T4945] Bluetooth: hci3: command tx timeout [ 176.744293][ T8776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.927083][ T8784] netlink: 'syz.1.749': attribute type 3 has an invalid length. [ 177.140210][ T8785] netlink: 'syz.1.749': attribute type 30 has an invalid length. [ 177.418287][ T8790] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 177.525573][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.533764][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.542284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.678535][ T8801] netlink: 'syz.3.753': attribute type 16 has an invalid length. [ 177.740153][ T8801] netlink: 'syz.3.753': attribute type 17 has an invalid length. [ 177.963451][ T8801] veth0_macvtap: left allmulticast mode [ 177.991651][ T8801] geneve2: left promiscuous mode [ 178.013040][ T8801] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.147346][ T8815] tipc: Enabling of bearer rejected, failed to enable media [ 178.186023][ T8816] netlink: 'syz.1.758': attribute type 5 has an invalid length. [ 178.454948][ T8829] __nla_validate_parse: 6 callbacks suppressed [ 178.454964][ T8829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.762'. [ 178.600223][ T8840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.763'. [ 178.611372][ T8837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.763'. [ 178.677105][ T8840] netlink: 'syz.3.763': attribute type 58 has an invalid length. [ 178.702831][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 178.737361][ T8837] netlink: 'syz.3.763': attribute type 58 has an invalid length. [ 178.818154][ T4945] Bluetooth: hci3: command tx timeout [ 178.818595][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 178.857900][ T7474] udevd[7474]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 178.932290][ T7474] udevd[7474]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 178.949819][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.767'. [ 178.979969][ T8856] netlink: 'syz.3.768': attribute type 10 has an invalid length. [ 179.011742][ T8856] team0: Port device dummy0 added [ 179.075819][ T8859] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 179.323994][ T8856] nbd1: detected capacity change from 0 to 63 [ 179.364936][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.772'. [ 179.375289][ T4945] block nbd1: Receive control failed (result -104) [ 179.376195][ T5637] block nbd1: Receive control failed (result -32) [ 179.387509][ T7773] block nbd1: Send control failed (result -32) [ 179.423786][ T7773] block nbd1: Request send failed, requeueing [ 179.496821][ T5002] block nbd1: Dead connection, failed to find a fallback [ 179.506710][ T5002] block nbd1: shutting down sockets [ 179.510157][ T7773] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.513134][ T5002] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.534718][ T5002] Buffer I/O error on dev nbd1, logical block 1, async page read [ 179.559795][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 179.592707][ T7773] Buffer I/O error on dev nbd1, logical block 2, async page read [ 179.605720][ T5737] net_ratelimit: 1 callbacks suppressed [ 179.605736][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.646094][ T7773] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.663039][ T7773] Buffer I/O error on dev nbd1, logical block 3, async page read [ 179.669295][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 179.701016][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.779'. [ 179.719774][ T8894] block nbd2: Unsupported socket: should be TCP or UNIX. [ 179.847353][ T8900] ip6gretap1: entered allmulticast mode [ 180.160234][ T8916] lo speed is unknown, defaulting to 1000 [ 180.427849][ T8941] netlink: 'syz.4.789': attribute type 1 has an invalid length. [ 180.565934][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.574316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.646455][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.709550][ T8966] bond3 (unregistering): Released all slaves [ 180.802974][ T8971] netlink: 'syz.0.795': attribute type 2 has an invalid length. [ 180.885488][ T5637] Bluetooth: hci3: command tx timeout [ 181.289994][ T8988] Cannot find del_set index 4 as target [ 181.298874][ T8987] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 181.688445][ T7539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.870238][ T9002] lo speed is unknown, defaulting to 1000 [ 181.942553][ T9015] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 182.357576][ T9029] syzkaller1: entered promiscuous mode [ 182.364138][ T9029] syzkaller1: entered allmulticast mode [ 182.728640][ T7539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.965242][ T5637] Bluetooth: hci3: command tx timeout [ 183.287099][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.295465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.327036][ T9072] tipc: Enabling of bearer rejected, failed to enable media [ 183.583384][ T9082] lo speed is unknown, defaulting to 1000 [ 183.604123][ T9086] batman_adv: batadv0: Adding interface: ipvlan3 [ 183.619603][ T9086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.643492][ T9086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.679251][ T9086] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 183.767630][ T7539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.819752][ T9097] vlan2: entered promiscuous mode [ 183.832298][ T9097] geneve1: entered promiscuous mode [ 183.857723][ T9097] vlan2: entered allmulticast mode [ 183.871471][ T9097] geneve1: entered allmulticast mode [ 184.073872][ T9105] __nla_validate_parse: 15 callbacks suppressed [ 184.073889][ T9105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.831'. [ 184.133937][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 184.145518][ T9109] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 184.154667][ T9106] netlink: 312 bytes leftover after parsing attributes in process `syz.4.831'. [ 184.164481][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 184.184012][ T9105] netlink: 76 bytes leftover after parsing attributes in process `syz.4.831'. [ 184.278763][ T9109] 8021q: adding VLAN 0 to HW filter on device bond5 [ 184.297826][ T9118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.320268][ T9113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.381586][ T9109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.832'. [ 184.415494][ T9109] bond5: entered promiscuous mode [ 184.425749][ T9109] bond5: entered allmulticast mode [ 184.434116][ T9115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.490341][ T9109] bond5: (slave dummy0): making interface the new active one [ 184.501070][ T9109] dummy0: entered promiscuous mode [ 184.508451][ T9109] dummy0: entered allmulticast mode [ 184.521233][ T9109] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 184.791905][ T9134] netlink: 'syz.2.839': attribute type 4 has an invalid length. [ 184.815977][ T7539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.835495][ T9134] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.839'. [ 184.960196][ T9141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.841'. [ 185.045274][ T5637] Bluetooth: hci3: command tx timeout [ 185.434695][ T9141] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.841'. [ 185.526189][ T9141] openvswitch: netlink: Key type 769 is out of range max 32 [ 185.780511][ T9181] netlink: 'syz.1.850': attribute type 8 has an invalid length. [ 185.814571][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 185.840342][ T9149] xt_hashlimit: size too large, truncated to 1048576 [ 185.857672][ T7539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.886201][ T9177] lo speed is unknown, defaulting to 1000 [ 186.303699][ T8057] bridge0: entered promiscuous mode [ 186.326868][ T8057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.714374][ T9227] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 186.809917][ T9228] netlink: 'syz.2.860': attribute type 16 has an invalid length. [ 186.886392][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.125373][ T5637] Bluetooth: hci3: command tx timeout [ 187.945413][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.389638][ T9309] tipc: Enabling of bearer rejected, failed to enable media [ 188.430040][ T9314] netlink: 'syz.1.880': attribute type 9 has an invalid length. [ 188.461135][ T9309] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.466961][ T9315] netlink: 'syz.1.880': attribute type 9 has an invalid length. [ 188.591451][ T9323] x_tables: duplicate underflow at hook 1 [ 188.973441][ T9344] Bluetooth: MGMT ver 1.23 [ 188.980533][ T9328] lo speed is unknown, defaulting to 1000 [ 189.097430][ T9350] __nla_validate_parse: 5 callbacks suppressed [ 189.097447][ T9350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.885'. [ 189.206037][ T4945] Bluetooth: hci3: command tx timeout [ 189.395449][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 189.414808][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.889'. [ 189.453943][ T9363] netlink: 'syz.0.889': attribute type 6 has an invalid length. [ 189.487548][ T9365] netlink: 'syz.0.889': attribute type 21 has an invalid length. [ 189.504978][ T9363] netlink: 'syz.0.889': attribute type 5 has an invalid length. [ 189.563430][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 189.577726][ T151] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.585287][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.889'. [ 189.617655][ T151] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.620071][ T9363] netlink: 'syz.0.889': attribute type 6 has an invalid length. [ 189.656072][ T9363] netlink: 'syz.0.889': attribute type 5 has an invalid length. [ 189.664429][ T9380] netlink: 'syz.2.894': attribute type 4 has an invalid length. [ 189.666259][ T151] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.717546][ T9384] netlink: 'syz.2.894': attribute type 4 has an invalid length. [ 189.720082][ T151] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.776798][ T9386] netlink: 'syz.3.895': attribute type 1 has an invalid length. [ 189.979941][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 189.990738][ T9399] bond4 (unregistering): Released all slaves [ 190.006873][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.976033][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.048307][ T5627] Bluetooth: hci2: command 0x0401 tx timeout [ 191.055783][ T5637] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 191.065286][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.285244][ T5637] Bluetooth: hci3: command tx timeout [ 191.685346][ T5637] Bluetooth: hci4: command 0x0405 tx timeout [ 192.085797][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.097430][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.895973][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.906509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.138011][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.365420][ T4945] Bluetooth: hci3: command tx timeout [ 193.518986][ T9454] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.000595][ T9482] bridge_slave_0: left allmulticast mode [ 194.018624][ T9482] bridge_slave_0: left promiscuous mode [ 194.026616][ T9482] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.109315][ T9482] bridge_slave_1: left allmulticast mode [ 194.120539][ T9487] netlink: 'syz.2.922': attribute type 2 has an invalid length. [ 194.123197][ T9492] netlink: 68 bytes leftover after parsing attributes in process `syz.0.921'. [ 194.128996][ T9482] bridge_slave_1: left promiscuous mode [ 194.174445][ T8057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.184324][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.192679][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.192810][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.210742][ T9482] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.260640][ T9482] team0: Port device team_slave_0 removed [ 194.271587][ T9482] team0: Port device team_slave_1 removed [ 194.284297][ T9482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.310404][ T9482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.353882][ T9482] bond1: (slave veth3): Releasing backup interface [ 194.368766][ T9482] bond1: (slave veth3): the permanent HWaddr of slave - d6:66:11:55:02:43 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 194.420784][ T9482] bond1: (slave batadv1): Releasing backup interface [ 194.593655][ T9519] netlink: 1308 bytes leftover after parsing attributes in process `syz.4.927'. [ 194.793656][ T9529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.929'. [ 195.131291][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.933'. [ 195.192819][ T9555] ip6gre1: entered promiscuous mode [ 195.210831][ T5361] net_ratelimit: 1 callbacks suppressed [ 195.210846][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.211344][ T9555] ip6gre1: entered allmulticast mode [ 195.340301][ T9570] bond0: left promiscuous mode [ 195.347196][ T9574] netlink: 36 bytes leftover after parsing attributes in process `syz.1.934'. [ 195.358280][ T9570] bond_slave_0: left promiscuous mode [ 195.364068][ T9570] bond_slave_1: left promiscuous mode [ 195.397714][ T9570] veth3: left promiscuous mode [ 195.407225][ T9570] veth5: left promiscuous mode [ 195.414778][ T9570] bridge1: left promiscuous mode [ 195.422231][ T9570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.445760][ T4945] Bluetooth: hci3: command tx timeout [ 195.463050][ T9570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.652238][ T9570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.671398][ T9570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.700244][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.938'. [ 195.736173][ T9570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.762218][ T9570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.797420][ T9570] veth1_vlan: left promiscuous mode [ 195.807283][ T9570] veth0_vlan: left promiscuous mode [ 195.816668][ T9570] veth0_vlan: entered promiscuous mode [ 195.828260][ T9570] veth1_vlan: entered promiscuous mode [ 195.841793][ T9570] veth1_macvtap: left promiscuous mode [ 195.848629][ T9570] veth0_macvtap: left promiscuous mode [ 195.855394][ T9570] veth0_macvtap: entered promiscuous mode [ 195.862662][ T9570] veth1_macvtap: entered promiscuous mode [ 195.874970][ T9570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.888602][ T9570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.899372][ T9570] vxlan0: left promiscuous mode [ 195.906173][ T9570] ipvlan2: left promiscuous mode [ 195.915435][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 195.929831][ T9570] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.938711][ T9570] bridge4: left promiscuous mode [ 195.940574][ T9555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.957442][ T9570] bridge5: left promiscuous mode [ 195.977011][ T9570] ip6gretap0: entered promiscuous mode [ 196.008670][ T9570] ip6gre1: left promiscuous mode [ 196.024348][ T9570] 8021q: adding VLAN 0 to HW filter on device eth0 [ 196.050859][ T9570] 8021q: adding VLAN 0 to HW filter on device eth1 [ 196.086286][ T9570] 8021q: adding VLAN 0 to HW filter on device eth2 [ 196.102658][ T9570] 8021q: adding VLAN 0 to HW filter on device eth3 [ 196.120690][ T9601] netlink: 'syz.0.939': attribute type 1 has an invalid length. [ 196.121104][ T9570] bond5: left promiscuous mode [ 196.134240][ T9570] dummy0: left promiscuous mode [ 196.140243][ T9570] 8021q: adding VLAN 0 to HW filter on device bond5 [ 196.193628][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.200777][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.210422][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.217688][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.242659][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 196.257027][ T7539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.359932][ T57] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.374364][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.395236][ T9609] sctp: [Deprecated]: syz.0.939 (pid 9609) Use of int in maxseg socket option. [ 196.395236][ T9609] Use struct sctp_assoc_value instead [ 196.513279][ T9601] 8021q: adding VLAN 0 to HW filter on device bond5 [ 196.570837][ T9602] macvlan3: entered promiscuous mode [ 196.583147][ T9602] macvlan3: entered allmulticast mode [ 196.603696][ T9602] bond5: entered allmulticast mode [ 196.635394][ T9614] netlink: 168 bytes leftover after parsing attributes in process `syz.1.942'. [ 196.649439][ T9602] bond5: entered promiscuous mode [ 196.674058][ T9602] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 196.687313][ T9602] team0: Port device macvlan3 added [ 196.726986][ T57] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.750929][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.786505][ T9613] vxcan6: entered allmulticast mode [ 196.880139][ T57] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.900415][ T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.932476][ T57] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.958291][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.003190][ T9626] netlink: 'syz.4.943': attribute type 8 has an invalid length. [ 197.032819][ T35] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 197.290989][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.382542][ T6002] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.394724][ T9643] netlink: 56 bytes leftover after parsing attributes in process `syz.3.949'. [ 197.420063][ T9644] openvswitch: netlink: Missing valid actions attribute. [ 197.463193][ T9644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.525531][ T5637] Bluetooth: hci3: command tx timeout [ 197.845337][ T5637] Bluetooth: hci4: command 0x0405 tx timeout [ 197.851701][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.956254][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.988457][ T9654] bridge_slave_0 (unregistering): left allmulticast mode [ 198.006153][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.016378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.017886][ T9654] bridge_slave_0 (unregistering): left promiscuous mode [ 198.024980][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.031875][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.114273][ T9657] tipc: Started in network mode [ 198.123589][ T9657] tipc: Node identity 922e62b02547, cluster identity 4711 [ 198.142867][ T9657] tipc: Enabled bearer , priority 0 [ 198.256351][ T9663] syzkaller0: mtu greater than device maximum [ 198.280103][ T9662] netlink: 'syz.3.955': attribute type 1 has an invalid length. [ 198.296341][ T9665] netlink: 'syz.2.956': attribute type 10 has an invalid length. [ 198.304232][ T9656] tipc: Disabling bearer [ 198.352867][ T9665] ipvlan0: entered allmulticast mode [ 198.358723][ T9665] veth0_vlan: entered allmulticast mode [ 198.388814][ T9665] team0: Device ipvlan0 failed to register rx_handler [ 198.616698][ T9674] syzkaller0: entered promiscuous mode [ 198.630325][ T9676] netlink: 'syz.3.960': attribute type 1 has an invalid length. [ 198.630751][ T9674] syzkaller0: entered allmulticast mode [ 198.831566][ T9676] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 199.017755][ T9697] netlink: 'syz.0.963': attribute type 2 has an invalid length. [ 199.358446][ T9709] __nla_validate_parse: 6 callbacks suppressed [ 199.358463][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 199.411632][ T9709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.968'. [ 199.593357][ T9728] netlink: 666 bytes leftover after parsing attributes in process `syz.4.972'. [ 199.606297][ T9708] Bluetooth: hci3: command tx timeout [ 199.799177][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 199.859444][ T9737] lo speed is unknown, defaulting to 1000 [ 199.876294][ T9739] lo speed is unknown, defaulting to 1000 [ 200.234141][ T9756] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 200.344272][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 200.410529][ T5737] net_ratelimit: 3 callbacks suppressed [ 200.410546][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.746203][ T9793] ip6erspan0: entered allmulticast mode [ 200.859386][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 201.063753][ T9796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.087442][ T9796] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.113883][ T9796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.125415][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 201.199231][ T9796] veth0_to_team: left promiscuous mode [ 201.221625][ T9796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.233218][ T9796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.256809][ T9796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.267670][ T9796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.283387][ T9796] veth1_vlan: left promiscuous mode [ 201.289351][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.302263][ T9796] veth0_vlan: left promiscuous mode [ 201.320645][ T9796] veth0_vlan: entered promiscuous mode [ 201.367994][ T9708] Bluetooth: hci0: command 0x0406 tx timeout [ 201.382939][ T9708] Bluetooth: hci1: command 0x0406 tx timeout [ 201.385833][ T9796] veth1_vlan: entered promiscuous mode [ 201.390609][ T9708] Bluetooth: hci2: command 0x0401 tx timeout [ 201.453722][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.477601][ T9796] veth1_macvtap: left promiscuous mode [ 201.520862][ T9796] veth0_macvtap: left promiscuous mode [ 201.556955][ T9796] veth0_macvtap: entered promiscuous mode [ 201.586172][ T9803] netlink: 276 bytes leftover after parsing attributes in process `syz.3.990'. [ 201.603253][ T9796] veth1_macvtap: entered promiscuous mode [ 201.626773][ T9796] veth3: left promiscuous mode [ 201.642197][ T9796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.685575][ T5634] Bluetooth: hci3: command 0x2001 tx timeout [ 201.689006][ T9796] 8021q: adding VLAN 0 to HW filter on device eth0 [ 201.700182][ T9796] 8021q: adding VLAN 0 to HW filter on device eth1 [ 201.709417][ T9796] 8021q: adding VLAN 0 to HW filter on device eth2 [ 201.719384][ T9796] 8021q: adding VLAN 0 to HW filter on device eth3 [ 201.729536][ T9796] vlan2: left promiscuous mode [ 201.734329][ T9796] geneve1: left promiscuous mode [ 201.750718][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.758058][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.795770][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.802978][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.893560][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 201.932312][ T48] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.951153][ T48] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.972684][ T48] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 201.989819][ T9808] xt_hashlimit: size too large, truncated to 1048576 [ 202.117986][ T48] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.137583][ T48] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.165069][ T48] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.189550][ T48] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.211045][ T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.220606][ T48] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.251924][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 202.342031][ T9819] syzkaller0: entered promiscuous mode [ 202.352572][ T9819] syzkaller0: entered allmulticast mode [ 202.372474][ T48] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.395877][ T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.405093][ T9839] netlink: 40 bytes leftover after parsing attributes in process `syz.2.996'. [ 202.406472][ T48] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.498097][ T7539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.506502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.618266][ T9852] openvswitch: netlink: Flow actions attr not present in new flow. [ 202.905730][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.914080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.533735][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.541995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.779161][ T5634] Bluetooth: hci3: command 0x2001 tx timeout [ 203.785894][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.906446][ T9883] __nla_validate_parse: 2 callbacks suppressed [ 204.906463][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 205.265011][ T9899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1011'. [ 205.301842][ T9900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1013'. [ 205.347506][ T9900] team0: Port device dummy0 removed [ 205.371566][ T9900] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1013'. [ 205.381764][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 205.386359][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'. [ 205.423476][ T9906] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1015'. [ 205.453488][ T9904] netlink: 'syz.4.1014': attribute type 1 has an invalid length. [ 205.473136][ T9904] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1014'. [ 205.484461][ T9904] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.494270][ T9904] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.547613][ T9908] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1016'. [ 205.565683][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 205.612052][ T7539] net_ratelimit: 12 callbacks suppressed [ 205.612068][ T7539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.626196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.845572][ T5634] Bluetooth: hci3: command 0x2001 tx timeout [ 206.079770][ T9935] batadv0: left promiscuous mode [ 206.198634][ T9935] ip6gre1: left promiscuous mode [ 206.206569][ T7539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.217035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.231599][ T9935] macsec1: left promiscuous mode [ 206.247203][ T9935] macsec2: left promiscuous mode [ 206.264623][ T9935] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 206.337742][ T9944] lo speed is unknown, defaulting to 1000 [ 206.522660][ T9957] openvswitch: netlink: Message has 4 unknown bytes. [ 206.581886][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.591264][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.661418][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.670826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.688450][ T7539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.696851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.923274][ T9966] hm3): entered promiscuous mode [ 206.929497][ T9970] bond0: (slave veth1_to_bond): Device is not bonding slave [ 206.937019][ T9970] bond0: option active_slave: invalid value (veth1_to_bond) [ 207.767269][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.926039][ T5634] Bluetooth: hci3: command 0x2001 tx timeout [ 207.951648][T10003] netlink: 'syz.2.1043': attribute type 10 has an invalid length. [ 207.972866][ T9999] syzkaller1: entered promiscuous mode [ 207.987667][ T9999] syzkaller1: entered allmulticast mode [ 208.041348][T10003] team0 (unregistering): Port device team_slave_1 removed [ 208.315009][T10021] sctp: [Deprecated]: syz.2.1048 (pid 10021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.315009][T10021] Use struct sctp_sack_info instead [ 208.370472][ T29] audit: type=1107 audit(1779076384.215:10): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 208.370472][ T29] ]PԮ'l8M:LԺ qvݾ.W 1~ʘ`sp <gGCO&ް9F, priority 0 [ 216.310072][T10371] syzkaller0: entered promiscuous mode [ 216.315868][T10371] syzkaller0: entered allmulticast mode [ 216.536124][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 216.565701][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.574067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.001382][T10377] tipc: Resetting bearer [ 217.028549][T10369] tipc: Resetting bearer [ 217.099242][T10369] tipc: Disabling bearer [ 217.143037][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.151448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.272094][T10395] hsr0: entered promiscuous mode [ 217.332783][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 217.385918][T10392] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1160'. [ 217.731646][T10429] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 217.766106][T10425] can: request_module (can-proto-0) failed. [ 217.809163][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 217.822987][T10426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1171'. [ 217.890942][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1172'. [ 218.018154][T10432] 8021q: adding VLAN 0 to HW filter on device bond7 [ 218.036317][T10432] bond7 (unregistering): Released all slaves [ 218.061780][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1174'. [ 218.170764][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.179135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.216211][T10438] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.371104][T10457] netlink: 'syz.3.1177': attribute type 1 has an invalid length. [ 218.467904][T10457] bond6: entered promiscuous mode [ 218.495034][T10457] 8021q: adding VLAN 0 to HW filter on device bond6 [ 218.669265][T10466] bond6: (slave bridge2): making interface the new active one [ 218.684601][T10466] bridge2: entered promiscuous mode [ 218.698753][T10466] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 218.777365][T10478] syz_tun (unregistering): left allmulticast mode [ 219.404218][T10514] xt_TCPMSS: Only works on TCP SYN packets [ 219.945975][T10534] bridge_slave_1: left allmulticast mode [ 219.972715][T10534] bridge_slave_1: left promiscuous mode [ 220.006792][T10534] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.047125][T10534] bridge_slave_0: left allmulticast mode [ 220.062884][T10534] bridge_slave_0: left promiscuous mode [ 220.079703][T10534] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.273962][T10545] ip6tnl0: Caught tx_queue_len zero misconfig [ 220.293711][T10545] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 220.577416][T10553] netlink: 'syz.3.1201': attribute type 10 has an invalid length. [ 220.611224][T10553] netlink: 'syz.3.1201': attribute type 10 has an invalid length. [ 221.045550][ T58] net_ratelimit: 10 callbacks suppressed [ 221.045567][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.060018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.286061][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.294382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.774509][T10593] __nla_validate_parse: 7 callbacks suppressed [ 221.774526][T10593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1211'. [ 222.327093][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.335264][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.337682][T10634] lo speed is unknown, defaulting to 1000 [ 222.343770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.357414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.430359][T10646] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1223'. [ 222.459072][ T57] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.813409][T10667] bond5: left allmulticast mode [ 222.841011][T10667] bond5: left promiscuous mode [ 222.880462][T10667] team0 (unregistering): Failed to send port change of device macvlan3 via netlink (err -105) [ 222.936140][T10667] team0 (unregistering): Port device macvlan3 removed [ 223.168235][T10692] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1229'. [ 223.214715][T10692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1229'. [ 223.249067][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'. [ 223.366731][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.375030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.615365][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 223.977777][T10721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1234'. [ 224.014289][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 224.072733][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 224.107629][T10724] netlink: 'syz.1.1235': attribute type 14 has an invalid length. [ 224.139366][T10724] netlink: 'syz.1.1235': attribute type 13 has an invalid length. [ 224.599312][T10749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.625399][T10749] netlink: 'syz.4.1240': attribute type 21 has an invalid length. [ 224.889282][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 225.339193][T10786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.348185][T10786] IPv6: NLM_F_CREATE should be set when creating new route [ 225.382442][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1250'. [ 225.405805][T10791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.414832][T10790] netlink: 'syz.0.1250': attribute type 1 has an invalid length. [ 225.431578][T10786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1248'. [ 225.639972][T10801] 8021q: adding VLAN 0 to HW filter on device bond7 [ 225.660635][T10801] bond6: (slave bond7): making interface the new active one [ 225.668985][T10801] bond6: (slave bond7): Enslaving as an active interface with an up link [ 225.700595][T10804] tipc: Enabled bearer , priority 0 [ 225.891905][T10804] syzkaller0: entered promiscuous mode [ 225.900678][T10804] syzkaller0: entered allmulticast mode [ 225.911796][T10804] tipc: Resetting bearer [ 225.954347][T10815] tipc: Resetting bearer [ 225.972552][T10804] tipc: Enabling of bearer rejected, already enabled [ 226.004470][T10803] tipc: Resetting bearer [ 226.359528][T10829] sctp: [Deprecated]: syz.3.1259 (pid 10829) Use of int in max_burst socket option deprecated. [ 226.359528][T10829] Use struct sctp_assoc_value instead [ 226.383742][T10829] net_ratelimit: 8 callbacks suppressed [ 226.383759][T10829] IPVS: rr: FWM 3 0x00000003 - no destination available [ 226.501266][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.509773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.532246][T10842] netlink: 'syz.4.1261': attribute type 2 has an invalid length. [ 226.816169][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.824415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.529181][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.538050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.547827][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.556115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.954789][T10803] tipc: Disabling bearer [ 228.024864][T10846] __nla_validate_parse: 4 callbacks suppressed [ 228.024880][T10846] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1262'. [ 228.065434][T10845] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1262'. [ 228.170575][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1263'. [ 228.309000][T10851] bond7: entered promiscuous mode [ 228.315830][T10851] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.454959][T10861] 8021q: adding VLAN 0 to HW filter on device bond8 [ 228.510701][T10861] bond8: entered promiscuous mode [ 228.516868][T10861] bond7: (slave bond8): Enslaving as an active interface with an up link [ 228.569271][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.719487][T10893] lo speed is unknown, defaulting to 1000 [ 228.882823][T10908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1276'. [ 228.936520][T10906] lo speed is unknown, defaulting to 1000 [ 229.066344][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1277'. [ 229.193023][T10916] vlan0: entered promiscuous mode [ 229.253620][T10916] gretap0: entered promiscuous mode [ 230.138828][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'. [ 230.573139][T10950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1286'. [ 230.632917][T10952] netlink: 'syz.4.1288': attribute type 3 has an invalid length. [ 231.000695][T10954] gretap1: entered allmulticast mode [ 231.182248][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1294'. [ 231.223755][T10982] xt_TCPMSS: Only works on TCP SYN packets [ 231.491398][T10995] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1298'. [ 231.797585][ T5361] net_ratelimit: 9 callbacks suppressed [ 231.797603][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.811538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.873603][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1304'. [ 231.935633][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.943942][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.986938][T11021] tipc: Enabled bearer , priority 0 [ 232.098048][T11019] syzkaller0: entered promiscuous mode [ 232.103896][T11019] syzkaller0: entered allmulticast mode [ 232.117836][T11021] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 232.118628][T11030] xt_hashlimit: size too large, truncated to 1048576 [ 232.169724][T11019] tipc: Resetting bearer [ 232.413135][T11018] tipc: Resetting bearer [ 232.830966][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.839721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.217757][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.226185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.852701][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.861015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.540323][T11018] tipc: Disabling bearer [ 234.572943][ T5737] tipc: Node number set to 4278255617 [ 234.647849][T11044] lo speed is unknown, defaulting to 1000 [ 234.716199][T11071] netlink: 'syz.4.1318': attribute type 16 has an invalid length. [ 234.743939][T11070] netlink: 'syz.0.1320': attribute type 4 has an invalid length. [ 234.761596][T11076] __nla_validate_parse: 3 callbacks suppressed [ 234.761613][T11076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1318'. [ 234.774704][T11071] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1318'. [ 234.796941][ T5908] lo speed is unknown, defaulting to 1000 [ 234.804392][ T5908] syz2: Port: 1 Link ACTIVE [ 234.818560][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1321'. [ 234.862422][T11080] veth1_macvtap: left promiscuous mode [ 234.869379][T11079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1322'. [ 234.879397][T11080] macsec0: entered promiscuous mode [ 234.890135][T11079] netlink: 'syz.1.1322': attribute type 1 has an invalid length. [ 234.906769][T11077] veth1_macvtap: entered promiscuous mode [ 234.914238][T11077] macsec0: left promiscuous mode [ 234.992011][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1324'. [ 235.025845][T11083] bond9 (unregistering): Released all slaves [ 235.068991][T11091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1322'. [ 235.074463][T11090] xt_TCPMSS: Only works on TCP SYN packets [ 235.078541][T11092] xt_TCPMSS: Only works on TCP SYN packets [ 235.232316][T11099] netlink: 'syz.4.1327': attribute type 1 has an invalid length. [ 235.349444][T11099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1327'. [ 235.594128][T11107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.660806][T11107] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 235.683864][T11107] batman_adv: batadv0: Removing interface: ipvlan2 [ 235.748408][T11107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.336459][T11137] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1337'. [ 236.347327][T11135] netlink: 'syz.0.1336': attribute type 1 has an invalid length. [ 236.445852][T11135] 8021q: adding VLAN 0 to HW filter on device bond8 [ 236.536711][T11135] netlink: 'syz.0.1336': attribute type 13 has an invalid length. [ 236.561658][T11135] netlink: 'syz.0.1336': attribute type 17 has an invalid length. [ 236.600953][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 236.644902][T11142] bond8: (slave ip6gretap1): making interface the new active one [ 236.664564][T11142] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 236.838241][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 236.973572][ T5737] net_ratelimit: 9 callbacks suppressed [ 236.973589][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.988537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.142995][T11167] netlink: 'syz.2.1344': attribute type 15 has an invalid length. [ 237.397592][T11182] xfrm1: entered allmulticast mode [ 237.690682][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.699084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.955086][T11206] xt_hashlimit: size too large, truncated to 1048576 [ 238.014208][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.022638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.026644][T11201] : entered promiscuous mode [ 238.127252][T11209] openvswitch: : Dropping previously announced user features [ 238.326380][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.334691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.060480][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.068851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.292931][T11274] netlink: 'syz.2.1371': attribute type 27 has an invalid length. [ 239.723655][T11298] vlan0: entered promiscuous mode [ 239.808594][T11303] __nla_validate_parse: 42 callbacks suppressed [ 239.808613][T11303] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1377'. [ 239.943162][T11307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1379'. [ 240.353839][T11315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1382'. [ 240.956322][T11347] tipc: Enabling of bearer rejected, failed to enable media [ 241.029918][T11353] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1395'. [ 241.212499][T11361] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1396'. [ 241.380461][T11369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1398'. [ 241.416585][T11369] ip6gre1: entered promiscuous mode [ 241.421951][T11369] ip6gre1: entered allmulticast mode [ 241.580316][T11378] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 241.632921][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'. [ 241.833874][T11378] bond7: entered promiscuous mode [ 241.843326][T11378] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.948511][T11394] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.957143][T11394] bond7: (slave ipip0): The slave device specified does not support setting the MAC address [ 241.978872][T11394] bond7: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 242.004086][T11394] bond7: (slave ipip0): making interface the new active one [ 242.019992][T11394] ipip0: entered promiscuous mode [ 242.053315][T11394] bond7: (slave ipip0): Enslaving as an active interface with an up link [ 242.097723][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.129767][ T5361] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.148738][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.167239][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'. [ 242.176858][ T5737] net_ratelimit: 10 callbacks suppressed [ 242.176875][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.191609][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.229017][T11417] lo speed is unknown, defaulting to 1000 [ 242.361009][T11427] netlink: 'syz.1.1411': attribute type 13 has an invalid length. [ 242.373462][T11427] gretap0: refused to change device tx_queue_len [ 242.385905][T11427] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 242.452115][T11431] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 242.665683][T11432] bond3: (slave dummy0): making interface the new active one [ 242.674165][T11432] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 242.699544][T11431] bond3: entered promiscuous mode [ 242.704753][T11431] dummy0: entered promiscuous mode [ 242.719006][T11429] netlink: 'syz.3.1409': attribute type 4 has an invalid length. [ 242.755012][T11431] bond3: left promiscuous mode [ 242.765608][T11431] dummy0: left promiscuous mode [ 242.885457][ T5737] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.902592][ T5737] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.960972][T11448] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1416'. [ 243.102826][T11453] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1418'. [ 243.213985][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.222326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.308137][T11458] lo speed is unknown, defaulting to 1000 [ 243.446784][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.454964][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.463109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.471217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.133293][T11469] netlink: 'syz.4.1422': attribute type 13 has an invalid length. [ 244.150525][T11469] netlink: 'syz.4.1422': attribute type 17 has an invalid length. [ 244.227345][T11468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.254555][ T7535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.724772][T11398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.125887][T11493] __nla_validate_parse: 1 callbacks suppressed [ 245.125904][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1427'. [ 245.247414][T11499] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 245.335761][T11469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.357226][T11469] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.371788][T11469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.410998][T11504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1427'. [ 245.461729][T11469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.480879][T11469] veth1_vlan: left promiscuous mode [ 245.490836][T11469] veth0_vlan: left promiscuous mode [ 245.500362][T11469] veth0_vlan: entered promiscuous mode [ 245.511188][T11469] veth1_vlan: entered promiscuous mode [ 245.577754][T11469] veth1_macvtap: left promiscuous mode [ 245.608090][T11469] veth0_macvtap: left promiscuous mode [ 245.617649][T11469] veth0_macvtap: entered promiscuous mode [ 245.646930][T11469] veth1_macvtap: entered promiscuous mode [ 245.762997][T11469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.815397][T11469] 8021q: adding VLAN 0 to HW filter on device eth0 [ 245.833107][T11469] 8021q: adding VLAN 0 to HW filter on device eth1 [ 245.849076][T11469] 8021q: adding VLAN 0 to HW filter on device eth2 [ 245.874625][T11469] 8021q: adding VLAN 0 to HW filter on device eth3 [ 245.901018][T11469] vlan2: left allmulticast mode [ 245.906345][T11469] geneve1: left allmulticast mode [ 245.922108][T11469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.959265][T11469] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.971316][T11482] netlink: 'syz.0.1423': attribute type 66 has an invalid length. [ 245.991736][T11493] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 245.994716][T11496] bond1: (slave lo): Releasing backup interface [ 246.033139][T11496] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 246.077606][T11496] bridge_slave_0: left allmulticast mode [ 246.083366][T11496] bridge_slave_0: left promiscuous mode [ 246.090733][T11496] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.129336][T11496] bridge_slave_1: left allmulticast mode [ 246.138018][T11496] bridge_slave_1: left promiscuous mode [ 246.144011][T11496] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.162046][T11496] bond0: (slave bond_slave_0): Releasing backup interface [ 246.175632][T11496] bond0: (slave bond_slave_1): Releasing backup interface [ 246.199356][T11496] team0: Port device team_slave_0 removed [ 246.220061][T11496] team0: Port device team_slave_1 removed [ 246.238128][T11496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.255102][T11496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.325762][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.631409][T11518] netlink: 'syz.3.1432': attribute type 1 has an invalid length. [ 246.687983][T11519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1432'. [ 246.767332][T11517] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 246.773384][T11517] syzkaller1: Refused to change device type [ 247.118110][T11524] netlink: 'syz.3.1435': attribute type 83 has an invalid length. [ 247.143062][T11528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1434'. [ 247.176502][T11528] bond0: ARP target 170.170.170.170 is already present [ 247.200825][T11528] bond0: option arp_ip_target: invalid value (2863311530) [ 247.450350][ T5737] net_ratelimit: 10 callbacks suppressed [ 247.450367][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.464623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.650688][T11551] siw: device registration error -23 [ 247.977101][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 248.067568][T11471] Set syz1 is full, maxelem 65536 reached [ 248.098201][T11564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1446'. [ 248.492371][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.500805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.502906][T11589] bond4: option xmit_hash_policy: invalid value (10) [ 248.531081][T11589] bond4 (unregistering): Released all slaves [ 248.566324][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.574709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.615058][T11584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.635958][T11598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1454'. [ 248.797905][T11606] tipc: Enabling of bearer rejected, failed to enable media [ 248.868303][T11611] netlink: 'syz.3.1457': attribute type 1 has an invalid length. [ 248.962110][T11611] gretap2: entered allmulticast mode [ 248.991952][T11611] bond9: (slave gretap2): making interface the new active one [ 249.017252][T11611] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 249.205614][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.213965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.527634][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.871882][T11647] netlink: 'syz.2.1466': attribute type 10 has an invalid length. [ 249.875429][T11654] netlink: 'syz.2.1466': attribute type 10 has an invalid length. [ 250.112485][T11666] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 250.354630][T11691] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1478'. [ 250.472421][T11697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1479'. [ 250.487680][T11697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1479'. [ 250.519964][T11697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1479'. [ 250.530952][T11697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1479'. [ 250.559010][T11702] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1482'. [ 250.579953][T11697] syzkaller0: entered promiscuous mode [ 250.586640][T11697] syzkaller0: entered allmulticast mode [ 250.668452][T11704] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 250.786408][T11706] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1484'. [ 250.811685][T11706] syzkaller1: entered promiscuous mode [ 250.817548][T11706] syzkaller1: entered allmulticast mode [ 250.871840][T11706] tipc: New replicast peer: 255.255.255.255 [ 250.878651][T11706] tipc: Enabled bearer , priority 10 [ 251.079414][T11721] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 251.102229][T11726] x_tables: duplicate underflow at hook 2 [ 251.120542][T11727] x_tables: duplicate underflow at hook 1 [ 251.142682][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1490'. [ 251.298194][T11727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.386713][T11738] block nbd2: server does not support multiple connections per device. [ 251.437319][T11738] block nbd2: shutting down sockets [ 251.565514][T11742] block nbd3: server does not support multiple connections per device. [ 251.578799][T11742] block nbd3: shutting down sockets [ 251.872435][T11779] netlink: 'syz.4.1502': attribute type 4 has an invalid length. [ 251.873297][T11782] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1504'. [ 251.930305][T11785] netlink: 'syz.4.1502': attribute type 4 has an invalid length. [ 252.032678][ T8057] tipc: Node number set to 3077137072 [ 252.102178][T11779] netlink: 'syz.4.1502': attribute type 4 has an invalid length. [ 252.320924][T11796] netlink: 'syz.3.1507': attribute type 1 has an invalid length. [ 252.363064][T11796] 8021q: adding VLAN 0 to HW filter on device bond10 [ 252.656075][ T5840] net_ratelimit: 11 callbacks suppressed [ 252.656092][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.670746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.840612][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1512'. [ 253.009035][T11826] bond4: (slave bridge8): Enslaving as an active interface with an up link [ 253.045339][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.686527][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.694713][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.702888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.711055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.744386][T11874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.787428][T11874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.852768][T11886] tipc: Enabled bearer , priority 8 [ 254.181073][T11904] netlink: 'syz.2.1527': attribute type 1 has an invalid length. [ 254.214591][T11907] openvswitch: netlink: IP tunnel dst address not specified [ 254.281746][T11904] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.465869][T11916] xt_hashlimit: size too large, truncated to 1048576 [ 254.497723][T11913] syzkaller0: entered promiscuous mode [ 254.522097][T11916] xt_hashlimit: max too large, truncated to 1048576 [ 254.533977][T11913] syzkaller0: entered allmulticast mode [ 254.725953][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.734317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.746627][T11923] lo speed is unknown, defaulting to 1000 [ 254.965368][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.968729][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.167855][T11950] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 255.226542][T11954] nft_compat: unsupported protocol 0 [ 255.607323][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 255.626498][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.641927][T11972] netlink: 'syz.1.1542': attribute type 11 has an invalid length. [ 255.710234][T11977] __nla_validate_parse: 9 callbacks suppressed [ 255.710253][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 255.832665][T11987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1546'. [ 255.867632][T11987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1546'. [ 256.028385][T11981] netlink: 'syz.3.1545': attribute type 10 has an invalid length. [ 256.040590][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'. [ 256.071131][T11981] syz_tun: entered promiscuous mode [ 256.091556][T11994] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1545'. [ 256.128726][T11981] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 256.137675][T11994] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1545'. [ 256.200956][T11994] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1545'. [ 256.236545][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1549'. [ 256.279579][T12001] scsi_nl_rcv_msg: discarding partial skb [ 256.352298][T12010] netlink: 762 bytes leftover after parsing attributes in process `syz.0.1551'. [ 256.393996][T12010] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1551'. [ 256.431593][T12014] vti1: entered promiscuous mode [ 256.437089][T12014] vti1: entered allmulticast mode [ 256.872610][T12031] netlink: 'syz.3.1555': attribute type 1 has an invalid length. [ 256.900620][T12033] netlink: 'syz.3.1555': attribute type 1 has an invalid length. [ 257.343388][T12045] bridge9: entered promiscuous mode [ 257.367433][T12045] bridge9: entered allmulticast mode [ 257.673120][T12075] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 257.723733][T12075] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 257.845458][ T5737] net_ratelimit: 10 callbacks suppressed [ 257.845476][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.859483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.006389][ T8056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.014746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.085463][ T5637] Bluetooth: hci0: command 0x0406 tx timeout [ 258.365009][T12094] bond9: Unable to set down delay as MII monitoring is disabled [ 258.383160][T12094] bond9 (unregistering): Released all slaves [ 258.806751][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.815075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.886440][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.894790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.996493][T12139] ip6tnl3: entered allmulticast mode [ 259.229251][T12150] netlink: 'syz.4.1579': attribute type 13 has an invalid length. [ 259.259952][T12150] netlink: 'syz.4.1579': attribute type 17 has an invalid length. [ 259.837812][T12145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.936478][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.944837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.439659][T12150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.451961][T12150] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.468632][T12150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.499084][T12150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.513562][T12150] veth1_vlan: left promiscuous mode [ 260.520036][T12150] veth0_vlan: left promiscuous mode [ 260.526361][T12150] veth0_vlan: entered promiscuous mode [ 260.534971][T12150] veth1_vlan: entered promiscuous mode [ 260.544410][T12150] veth1_macvtap: left promiscuous mode [ 260.551019][T12150] veth0_macvtap: left promiscuous mode [ 260.558662][T12150] veth0_macvtap: entered promiscuous mode [ 260.566004][T12150] veth1_macvtap: entered promiscuous mode [ 260.629644][T12181] netlink: 'syz.3.1589': attribute type 3 has an invalid length. [ 260.647062][T12181] netlink: 'syz.3.1589': attribute type 3 has an invalid length. [ 260.657292][T12183] netlink: 'syz.3.1589': attribute type 3 has an invalid length. [ 260.665748][T12183] netlink: 'syz.3.1589': attribute type 3 has an invalid length. [ 260.681045][ T6002] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.710248][ T6002] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 260.739597][ T6002] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.763067][ T6002] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 260.872063][ T6002] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.891206][ T6002] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 260.915415][T12172] lo speed is unknown, defaulting to 1000 [ 260.950496][ T6002] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.953396][T12203] netlink: 'syz.4.1595': attribute type 1 has an invalid length. [ 260.966913][ T6002] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.032025][T12203] bond5: entered promiscuous mode [ 261.054529][T12203] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.080960][T12197] lo speed is unknown, defaulting to 1000 [ 261.081410][T12193] syzkaller1: entered promiscuous mode [ 261.102334][T12193] syzkaller1: entered allmulticast mode [ 261.215118][T12205] bond5: (slave bridge5): making interface the new active one [ 261.224197][T12205] bridge5: entered promiscuous mode [ 261.238994][T12203] __nla_validate_parse: 10 callbacks suppressed [ 261.239013][T12203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1595'. [ 261.259382][T12205] bridge5: left promiscuous mode [ 261.680450][T12218] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1598'. [ 261.706074][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 261.820453][T12220] smc: removing ib device syz1 [ 262.083983][T12234] xt_hashlimit: size too large, truncated to 1048576 [ 262.104212][T12220] smbdirect: ib_dev[syz1] removed [ 262.363571][T12248] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20001 [ 263.046946][ T6002] net_ratelimit: 7 callbacks suppressed [ 263.046964][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.060923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.287780][ T9553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.296426][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.496965][T12256] netlink: 'syz.1.1607': attribute type 1 has an invalid length. [ 263.561933][T12258] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 263.561933][T12258] Please contact the netfilter-devel mailing list or update your nftables rules. [ 263.637652][T12258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1607'. [ 263.662351][T12256] 8021q: adding VLAN 0 to HW filter on device bond9 [ 263.746022][ T5737] IPVS: starting estimator thread 0... [ 263.845660][T12262] IPVS: using max 34 ests per chain, 81600 per kthread [ 263.928328][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.936702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.087801][T12279] macsec1: entered promiscuous mode [ 264.104833][T12279] batman_adv: batadv0: Adding interface: macsec1 [ 264.121008][T12279] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.147481][T12279] batman_adv: batadv0: Interface activated: macsec1 [ 264.749572][T12297] geneve3: entered allmulticast mode [ 265.149662][T12318] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1622'. [ 265.191337][T12321] netlink: 'syz.0.1622': attribute type 11 has an invalid length. [ 265.242460][T12323] netlink: 'syz.3.1625': attribute type 1 has an invalid length. [ 265.317366][T12320] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.458050][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1622'. [ 265.594400][T12331] macvlan2: entered promiscuous mode [ 265.612116][T12331] macvlan2: entered allmulticast mode [ 265.634936][T12331] bond12: entered promiscuous mode [ 265.653578][T12331] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 265.679643][T12331] bond12: left promiscuous mode [ 265.691810][T12337] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20000 [ 265.781133][T12320] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.951281][T12320] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.194387][T12320] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.374658][ T151] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.424813][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.486817][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.495285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.498229][ T151] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.575005][ T151] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.723671][T12375] netlink: 'syz.1.1636': attribute type 13 has an invalid length. [ 266.803077][ T8057] IPVS: starting estimator thread 0... [ 266.875130][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 266.905446][T12382] IPVS: using max 31 ests per chain, 74400 per kthread [ 267.164598][T12384] lo speed is unknown, defaulting to 1000 [ 267.246121][T12379] lo speed is unknown, defaulting to 1000 [ 267.338300][T12398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1639'. [ 267.507376][T12403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1641'. [ 267.662881][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 267.914030][T12415] netlink: 'syz.4.1646': attribute type 1 has an invalid length. [ 267.942448][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'. [ 268.003732][T12415] bond6: entered promiscuous mode [ 268.013297][T12428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.020125][T12415] bond6: entered allmulticast mode [ 268.023411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.029635][T12415] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.139465][T12437] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1649'. [ 268.175588][T12427] erspan2: entered allmulticast mode [ 268.187756][T12427] bond6: (slave erspan2): making interface the new active one [ 268.195642][T12427] erspan2: entered promiscuous mode [ 268.202988][T12427] bond6: (slave erspan2): Enslaving as an active interface with an up link [ 268.309793][T12428] syzkaller1: entered promiscuous mode [ 268.318728][T12428] syzkaller1: entered allmulticast mode [ 268.417253][ T9553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.426081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.460375][T12448] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1652'. [ 268.531605][T12456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1653'. [ 268.566743][T12456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1653'. [ 268.581068][T12458] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 268.586936][T12455] syzkaller1: entered promiscuous mode [ 268.620959][T12455] syzkaller1: entered allmulticast mode [ 269.044644][T12492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.051956][T12492] IPv6: NLM_F_CREATE should be set when creating new route [ 269.070360][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.078525][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.086652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.095978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.211454][ T151] [ 269.213817][ T151] ============================================ [ 269.219962][ T151] WARNING: possible recursive locking detected [ 269.226121][ T151] syzkaller #0 Not tainted [ 269.230536][ T151] -------------------------------------------- [ 269.236680][ T151] kworker/u8:6/151 is trying to acquire lock: [ 269.242741][ T151] ffff88807abb2958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 269.252608][ T151] [ 269.252608][ T151] but task is already holding lock: [ 269.259971][ T151] ffff888057b87158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 269.269822][ T151] [ 269.269822][ T151] other info that might help us debug this: [ 269.277867][ T151] Possible unsafe locking scenario: [ 269.277867][ T151] [ 269.285301][ T151] CPU0 [ 269.288561][ T151] ---- [ 269.291817][ T151] lock(&qdisc_xmit_lock_key#3); [ 269.296827][ T151] lock(&qdisc_xmit_lock_key#3); [ 269.301836][ T151] [ 269.301836][ T151] *** DEADLOCK *** [ 269.301836][ T151] [ 269.309957][ T151] May be due to missing lock nesting notation [ 269.309957][ T151] [ 269.318251][ T151] 10 locks held by kworker/u8:6/151: [ 269.323510][ T151] #0: ffff888020f32940 ((wq_completion)bond6#4){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 269.334627][ T151] #1: ffffc90002fefc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 269.347476][ T151] #2: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 269.357025][ T151] #3: ffffffff8e95ce00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 269.366918][ T151] #4: ffff888079aff228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 269.379512][ T151] #5: ffff888057b87158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 269.389762][ T151] #6: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 269.398614][ T151] #7: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 269.408336][ T151] #8: ffffffff8e95ce00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 269.418231][ T151] #9: ffff88807c7a3228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 269.430820][ T151] [ 269.430820][ T151] stack backtrace: [ 269.436701][ T151] CPU: 0 UID: 0 PID: 151 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 269.436715][ T151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.436724][ T151] Workqueue: bond6 bond_alb_monitor [ 269.436748][ T151] Call Trace: [ 269.436756][ T151] [ 269.436763][ T151] dump_stack_lvl+0xe8/0x150 [ 269.436777][ T151] print_deadlock_bug+0x279/0x290 [ 269.436792][ T151] __lock_acquire+0x253f/0x2cf0 [ 269.436808][ T151] ? unwind_next_frame+0xa6/0x2550 [ 269.436821][ T151] ? unwind_next_frame+0x1bbf/0x2550 [ 269.436838][ T151] ? sch_direct_xmit+0x15f/0x4c0 [ 269.436852][ T151] lock_acquire+0x106/0x350 [ 269.436863][ T151] ? sch_direct_xmit+0x15f/0x4c0 [ 269.436881][ T151] _raw_spin_lock+0x2e/0x40 [ 269.436901][ T151] ? sch_direct_xmit+0x15f/0x4c0 [ 269.436914][ T151] sch_direct_xmit+0x15f/0x4c0 [ 269.436930][ T151] ? __pfx_sch_direct_xmit+0x10/0x10 [ 269.436944][ T151] ? __bfs+0x80/0x290 [ 269.436958][ T151] __dev_queue_xmit+0x180f/0x3950 [ 269.436973][ T151] ? __dev_queue_xmit+0x2b6/0x3950 [ 269.436988][ T151] ? __pfx___dev_queue_xmit+0x10/0x10 [ 269.437000][ T151] ? neigh_resolve_output+0x438/0x750 [ 269.437016][ T151] ? eth_header+0x11b/0x200 [ 269.437027][ T151] ? __asan_memcpy+0x40/0x70 [ 269.437048][ T151] ? ip_finish_output2+0x3c2/0x1070 [ 269.437063][ T151] ip_finish_output2+0xca9/0x1070 [ 269.437077][ T151] ? ip_skb_dst_mtu+0x80b/0xa50 [ 269.437092][ T151] ? ip_finish_output+0x40e/0x530 [ 269.437107][ T151] ip_output+0x29f/0x450 [ 269.437121][ T151] ? ip_output+0x5b/0x450 [ 269.437134][ T151] iptunnel_xmit+0x621/0xd10 [ 269.437155][ T151] ip_tunnel_xmit+0x193a/0x1f20 [ 269.437176][ T151] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 269.437191][ T151] ? __pfx_gre_build_header+0x10/0x10 [ 269.437205][ T151] ? kfree+0x1c5/0x640 [ 269.437218][ T151] ? pskb_expand_head+0x458/0x1390 [ 269.437231][ T151] __gre_xmit+0x19e/0x240 [ 269.437243][ T151] ? __pfx___gre_xmit+0x10/0x10 [ 269.437258][ T151] erspan_xmit+0xa41/0x14d0 [ 269.437275][ T151] ? __pfx_erspan_xmit+0x10/0x10 [ 269.437291][ T151] dev_hard_start_xmit+0x2cd/0x830 [ 269.437307][ T151] sch_direct_xmit+0x251/0x4c0 [ 269.437323][ T151] ? __pfx_sch_direct_xmit+0x10/0x10 [ 269.437338][ T151] ? kthread+0x310/0x470 [ 269.437354][ T151] __dev_queue_xmit+0x180f/0x3950 [ 269.437367][ T151] ? __dev_queue_xmit+0x2b6/0x3950 [ 269.437383][ T151] ? __pfx___dev_queue_xmit+0x10/0x10 [ 269.437396][ T151] ? rcu_is_watching+0x15/0xb0 [ 269.437410][ T151] ? trace_kmem_cache_alloc+0x29/0xe0 [ 269.437424][ T151] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 269.437444][ T151] ? alb_send_lp_vid+0x14e/0x550 [ 269.437460][ T151] alb_send_lp_vid+0x348/0x550 [ 269.437476][ T151] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 269.437492][ T151] ? psi_group_change+0xab8/0x1050 [ 269.437508][ T151] alb_send_learning_packets+0x12c/0x300 [ 269.437524][ T151] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 269.437538][ T151] ? bond_alb_monitor+0xf8/0x17e0 [ 269.437554][ T151] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 269.437570][ T151] bond_alb_monitor+0x3d5/0x17e0 [ 269.437586][ T151] ? bond_alb_monitor+0xf8/0x17e0 [ 269.437600][ T151] ? __pfx_bond_alb_monitor+0x10/0x10 [ 269.437615][ T151] ? process_scheduled_works+0xa70/0x1860 [ 269.437626][ T151] ? process_scheduled_works+0xa70/0x1860 [ 269.437638][ T151] process_scheduled_works+0xb5d/0x1860 [ 269.437658][ T151] ? __pfx_process_scheduled_works+0x10/0x10 [ 269.437671][ T151] ? assign_work+0x3d5/0x5e0 [ 269.437683][ T151] worker_thread+0xa53/0xfc0 [ 269.437703][ T151] kthread+0x389/0x470 [ 269.437716][ T151] ? __pfx_worker_thread+0x10/0x10 [ 269.437727][ T151] ? __pfx_kthread+0x10/0x10 [ 269.437740][ T151] ret_from_fork+0x514/0xb70 [ 269.437753][ T151] ? __pfx_ret_from_fork+0x10/0x10 [ 269.437765][ T151] ? __switch_to+0xc79/0x1410 [ 269.437780][ T151] ? __pfx_kthread+0x10/0x10 [ 269.437794][ T151] ret_from_fork_asm+0x1a/0x30 [ 269.437812][ T151] [ 270.118839][T12492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.260883][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.273730][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.284352][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.294831][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.965532][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 271.606298][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.614527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.165645][ T9553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.173870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.182526][ T9553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.191071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.805505][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.813717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.365686][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.373920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog