last executing test programs: 5.267986823s ago: executing program 2 (id=2095): mmap(&(0x7f0000ac9000/0x2000)=nil, 0x2000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x12) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x6, 0x0, 0x0, 0xf, 0x2, [], "f841"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x1000000, 0x482, 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001500), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x4000004) r3 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0x5411, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x0) mmap(&(0x7f0000ac9000/0x2000)=nil, 0x2000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) socket$netlink(0x10, 0x3, 0x12) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x6, 0x0, 0x0, 0xf, 0x2, [], "f841"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x1000000, 0x482, 0x0, 0x0) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001500), r0) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x4000004) (async) socket(0x8, 0x4, 0x3) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0x5411, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) shutdown(r5, 0x0) (async) 4.076939239s ago: executing program 3 (id=2103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x2, 0x4, 0x3, 0x80000000, 0x7ff]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="011b25bd7000fddbdf250500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket$key(0xf, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x84, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000000) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a4, r5, 0x202, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4840}, 0x4008000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000002c000880280000022400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000000000000000000000000008000700ff00000014000200776732"], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000009, 0x30, r3, 0x80000000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f0000000240)=r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xd50, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000100100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r11, 0x114, 0x5, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r0) 3.700852294s ago: executing program 3 (id=2105): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="00000000160000082cbd7000fcdbdf250a78a5ff", @ANYRES32=r1, @ANYBLOB="00000100ff010000000000000000000001"], 0x54}, 0x1, 0x0, 0x0, 0x20000810}, 0x8c1) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14, 0x80000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000400)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r6, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000003500), &(0x7f0000004e00)=0x4) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) r8 = socket$kcm(0x29, 0x2, 0x0) close(r8) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240), 0x4) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, 0x1e}, 0x94) 3.578783387s ago: executing program 1 (id=2106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x890) 3.114608958s ago: executing program 1 (id=2109): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffffffffe8c}, 0x34004000) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) close(0x3) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18, r0}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r3, r4}) 2.736437248s ago: executing program 0 (id=2111): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0x448c, &(0x7f0000000280)='virt_wifi0\x00', 0x7fff, 0x18000000000000, 0x3}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@updsa={0x10c, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {{@in=@remote, @in6=@mcast2, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x734c4b15b9d5c4b4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, @in6=@remote, {0x7, 0x4, 0x7, 0x5, 0x0, 0x3ba, 0x8000, 0x1}, {0x7, 0x8, 0x30, 0xa}, {0x7a0c39ff, 0x0, 0x2}, 0x70bd28, 0x3506, 0xa, 0x2, 0x67, 0x5c}, [@encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e23, @in=@empty}}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@jmp={0x5, 0x1, 0x9, 0x4, 0x4, 0xc, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f00000004c0)='GPL\x00', 0x92, 0xf0, &(0x7f0000001500)=""/240, 0x40f00, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x2, 0xf, 0x4, 0x81}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000016c0)=[0x1, r2, 0x1, 0x1], &(0x7f0000001700)=[{0x3, 0x2, 0xb, 0x1}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000140)=r5, 0x4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='vlan1\x00', 0x10) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000002c0)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000340)="27031c00160014000000002f1eafacf706e1d6ab5e6825000000894f00050003ee0b0e558ddbba9b37786fd808252372a31e4939884f0abc3c1f1210cbd87f1a1afaebc18914d7f0b2b42e20351f122632e2d4c164875930d30b1f21a06cbbebca722fe1933809cd020038521bfb16d78df8eb1fff5e1c3efef6310e8d01450e9d1ad6942b31e959022fcd2fbc21641fdd03a78400000000000000000000000000001d14fe648a349c5d9ea7cadaca6aa9bf294e1a6e4196ea13cd4f380ee59f1efc87e8ce90e4384b2838ed95a79d7883f2172020c3b3862e", 0xd9}, {&(0x7f0000000600)="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", 0xedc}], 0x2}, 0x24004010) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002900), r9) sendmsg$TIPC_NL_KEY_FLUSH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, r10, 0x11cd070fe7ad71f3, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/110, 0x6e}, {&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f0000000240)=""/55, 0x37}], 0x3) clock_gettime(0x4, &(0x7f0000000000)) 2.651799559s ago: executing program 2 (id=2112): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f00000004c0)) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000280)=""/5, 0x1125000, 0x800, 0x0, 0x1}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r1, &(0x7f0000000080)=';\x00', 0x414102, &(0x7f00000000c0)={@align=0x1, {0x40ed, 0x8007, 0x4, 0x4}}, 0x1, &(0x7f0000000100), &(0x7f0000000180)}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000200)={0x1, [0x4]}, &(0x7f0000000240)=0x6) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x310000, 0x1000, 0x9, 0x2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 2.589731228s ago: executing program 1 (id=2113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, 0x1feff, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'sit0\x00', r4, 0x1, 0x80, 0x3, 0x3ff, {{0x17, 0x4, 0x2, 0x7, 0x5c, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @loopback, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0xb6, 0x0, 0xa, [0x9, 0x4, 0x401, 0x800, 0x4bb1]}, @timestamp_addr={0x44, 0x2c, 0xfe, 0x1, 0xa, [{@broadcast, 0x6}, {@remote, 0x9}, {@remote, 0x2520}, {@broadcast}, {@broadcast, 0x3}]}]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003b00010324bd7002fadbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048) 2.264908859s ago: executing program 4 (id=2114): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) pipe(&(0x7f00000000c0)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079b008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0x2}, 0x18) 2.229992303s ago: executing program 2 (id=2115): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x18, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 2.050091776s ago: executing program 4 (id=2116): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x42c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x408, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x404, 0x1, {{}, [@dev, @loopback, @private0, @ipv4={'\x00', '\xff\xff', @private}, @local, @mcast2, @empty, @mcast2, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @mcast1, @local, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @empty, @mcast2, @mcast2, @private0, @private2, @mcast2, @dev, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @loopback, @local, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast1, @empty, @local, @private1, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @ipv4, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev]}}}]}, 0x42c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000c40)={&(0x7f0000000580), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x90, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3e}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x29}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x90}, 0x1, 0x0, 0x0, 0x40040}, 0x40800) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) (async) getpid() (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, 0x0, 0xc010) (async) sendto(r5, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r6}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x40, 0x4, 0x68, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2, 0x0, 0x7, 0x1, 0x2}}) sendmsg$inet(r5, &(0x7f0000000b00)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000006c0)="681f36acc812cf2da7f1f577f41eed048f6f89d7b97fd3c97f6e9bd44cb5078fcc49db816f19fa6f1179714a4af69189681f4ee52003b2d9c6b7a84f9b14d3bf2f64f6628c5ddca4814898fb1a1801e5c5f5ec843aad5a20c18b3404b23c9929f626b80a5232e415389962c9a0303f9b09d2c2f71ea1cd547bc037a629fe1c4248b905e14b84f2a51a730fe766b653927dbf65b905f60a9b752d1bc616f11ff3899c4e922e24cd9e01fdfe8446a903c872e8adf26a065a682194d3d34c54da9fd3b9026b4c281df87ea829af16f5b5e7682cad3636f44d", 0xd7}, {&(0x7f0000000880)="95029c540b0b453d63da6ec559c358324042804ad3573e0e13d161ab94194ba41392844451faedc733e69dbd22c74c7cf562961e", 0x34}], 0x2, &(0x7f0000000a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x98}, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000c80), &(0x7f0000000cc0)=0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f0000000340), &(0x7f0000000480)=r7}, 0x20) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7, r6}, 0xc) (async) bind$alg(r5, &(0x7f0000000d00)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xa401000000000000) (async) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.78518518s ago: executing program 3 (id=2117): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c1000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 1.694535129s ago: executing program 1 (id=2118): recvmsg(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/159, 0x9f}], 0x3}, 0x40002000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001240)={0x0, 0xd83b, 0x9c1b, 0x5}, &(0x7f0000001280)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000012c0)={r0, 0x944}, 0x8) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000001300), &(0x7f0000001340)=0xe) (async) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000001380), &(0x7f00000013c0)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002500)={'syztnl0\x00', &(0x7f0000002480)={'ip6gre0\x00', 0x0, 0x2f, 0xe1, 0x3f, 0x607, 0x24, @loopback, @loopback, 0x8, 0x1, 0xffff, 0x5}}) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000002540), 0x8) (async) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002600)=@generic={&(0x7f00000025c0)='./file0\x00', 0x0, 0x1c}, 0x18) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002640)={0x0, 0x7, 0x18}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002700)=@bpf_ext={0x1c, 0x4, &(0x7f0000001400)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a3b}], &(0x7f0000001440)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000001480)=""/4096, 0x41100, 0x1, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002580)={0x2, 0x8, 0x2c3c, 0x7}, 0x10, 0x6584, r4, 0x3, &(0x7f0000002680)=[r5], &(0x7f00000026c0)=[{0x5, 0x5, 0xc, 0xa}, {0x4, 0x4, 0xf, 0xa}, {0x3, 0x2, 0xf, 0x5}], 0x10, 0x2}, 0x94) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000002800)={0x1, &(0x7f00000027c0)=[{0x10, 0x6, 0xf, 0xfff}]}) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x58, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x11) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$FOU_CMD_GET(r3, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048080}, 0x20040000) (async) connect$rxrpc(r3, &(0x7f0000002ac0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x24) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000002b00)={@loopback, 0x3d, r2}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002b80), r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000002c80)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x44, r7, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000002cc0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000002f40)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000003180)=[{&(0x7f0000002d00)={0x27, r8, 0x0, 0x5, 0x4, 0x2, "a3dddd0e814582a1eff7e3cd8120e50a77c202c2c6c72ba877688b695f0f75d58615a102dbf2d5894a590de5cc20e0cb1c08807d49e94947567d7eeae72788", 0x22}, 0x60, &(0x7f0000002ec0)=[{&(0x7f0000002d80)="974dd61ddb63352d0d2595548ebbc7743a31280168041cfa951e9729560d2903c4739f81196444996bead343967873f809a64aed63616568dfc743294e9ab61cf0a23a0f7ac8715cd450ebb254efdd5f76cbc20476fec68b66093067a0acfcb2f4729db35486a4682da57ecb5420369135cccd9956ed4fc99374f9c99c9a2e6a7a212ff69ec251d929cadd1335ee1c4420bf3fca4962c216d4c7be6a19d071d54ce10fdf3fbedf130c214c18131193bc5d484f4b280dd2", 0xb7}, {&(0x7f0000002e40)="bd227be36dd9f73ab5808fd5e37b03703524f00c4097e393fda5402392ea1aea47625e615d23f36c01df976b2d351ef3ae8f7a6da526857c209afdd5a5246e2f5b65c1577b93bf0ebd6b59e602dea3010181cc5d781a820e9b467f225b5f4a020d506307051e796e2956", 0x6a}], 0x2, &(0x7f0000002f00)={0x20, 0x1, 0x7, "97597198ac4b1b5fa88675c69c"}, 0x20, 0x1000c000}, {&(0x7f0000002f80)={0x27, r9, 0x1, 0x2, 0x0, 0x1, "72f8c305bb09e16b7dc0c326daa807d974324b2a0953c0612b9f13d8d4758ccf71c8f3156ac6c0f9d40684d4e48ae8a4eb14c3b9e258e992db0c4356492a53", 0x34}, 0x60, &(0x7f0000003100)=[{&(0x7f0000003000)="42dc444d7d5d24ad55a9cdcc0a9b2aa525638c301daf99ac6a888ba962d4cb9a7c489b8a02d12c8b84da1d24e3831e4a115ff0139915241fb11594bee1e53835267fdc13eeda5153a6614837f4832326a3f078af2afa3a", 0x57}, {&(0x7f0000003080)="0881e5222776ab84b8ee70652eee43af6b4e", 0x12}, {&(0x7f00000030c0)="7e05e5388c17eb2d78248ea12dc96549f1cecb431b19a064f5e047f4f4", 0x1d}], 0x3, &(0x7f0000003140)={0x10, 0x103, 0x3fa6}, 0x10, 0x4}], 0x2, 0x8004) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000003280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000003380)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003340)={&(0x7f00000032c0)={0x44, r10, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000033c0)={'pimreg1\x00', 0x200}) (async) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000003500)=@buf={0xd1, &(0x7f0000003400)="2fcedb1b9883bcf9cc0e7f52ddb29d684e13216446523795a4569023bfaed9af22613a2df6d20fb2ce624a01c1f5bc4aa814459e08e1dadbf195b6e0111ef0c9f29052676b8c0173034fecac2e785cb52b3ac56f3f2cd25c90224e1a4a120ec06eb98adbc6cb707a034de3946450bd9f1df88e28be395e93fc668a6be848e5a7fd7111c8757a2b6b2707aee717273f74204950a9aab748848d733940f9b72f80193527d8ee5180ff99f4fb887d4d2d2aca7ead472b80d1d479e08cd0de78e60662eee17aab47943e215ee92000b14c6277"}) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000003540)={r0, 0x7fff, 0x0, 0x401}, &(0x7f0000003580)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000035c0)={r12, 0x8}, &(0x7f0000003600)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000003640)={r0, 0x8}, &(0x7f0000003680)=0x8) 1.650645614s ago: executing program 0 (id=2119): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x190, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0xffff}, {@in=@broadcast, 0x4d4}, @in6=@private2, {0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x1000, 0xa, 0x4, 0x0, 0x50}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x58, 0x1, {{'xcbc(aes)\x00'}, 0x80, "8478b0098a3a72ec6b13aa7d25e76d54"}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x40082) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0xffff, 0xfff, 0x6, 0x8]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x9, 0x1000, 0x715, 0xc26, 0x2]}, @CTA_TIMEOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20004004) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x5298, 0x10}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000380)="3418", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, 0x0, &(0x7f00000002c0)=""/26}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pB \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1b, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6d8d9947, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @ldst={0x1, 0x2, 0x3d01f8665d131f8d, 0xb, 0x2, 0x2, 0xfffffffffffffffc}, @map_val={0x18, 0x5, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0x0, 0xfffffffffffffff4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x6a, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$can_bcm(r3, &(0x7f0000000000)={0x1d, r8}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 1.436892581s ago: executing program 3 (id=2120): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1, 0x6, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bbb51b1724331a78e6cce715b995ce46bfa200000000000007020000f8ffffffb703000008000000a704000002000000850000009200000018180000", @ANYRES32=r2, @ANYBLOB="000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000181a0000", @ANYRES32=r2, @ANYBLOB="0000000000000000dd16feff735d3a33183900000300000000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b, r2}, 0xfffffffffffffda3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x73}, 0x94) 1.35414384s ago: executing program 2 (id=2121): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e2300000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000c0015005d07350002000000329691e72b625cfcaba588b99b"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9d3, 0xffffffff}, {0xfffffffffffffffd}, 0xfffffffd, 0x6e6bb5, 0x1}}, 0xb8}}, 0x0) 1.333719068s ago: executing program 0 (id=2122): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket(0x2, 0x80805, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0xfffffffffffffffe, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008020) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}}, 0x48010) 1.212927679s ago: executing program 4 (id=2123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x408041, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d00200000072c"], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x408041, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d00200000072c"], 0xfdef) (async) 1.04833284s ago: executing program 0 (id=2124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 952.597326ms ago: executing program 2 (id=2125): syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @remote, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @mcast1, [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) 905.017083ms ago: executing program 3 (id=2126): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0x9, 0xa6cf, {{0x7, 0x4, 0x1, 0x25, 0x1c, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @loopback, {[@generic={0x82, 0x3, "10"}, @generic={0x82, 0x4, "5ebd"}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0xf7, 0x1, 0x40, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x5, 0x2}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x744, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x2dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xfb, 0x5, "30d65783548499504b3c98730ff13c41714352ddef6834d9130b427d0722080010e959173018a06806a325538c17da56a5900fe0aab5ed5b77755e98e80d575fb6af04fc1ba3c643803ed5ff38883161f9ef0d7d00af7a6675da03f031721cca9723ea6bac5f4dceb1a4467d3cbcfb53b6ba67b8895eaad69fffcdefd30c55e88c22968a6ef5672da9c740c57200ca5bc87aef8302881f8fe2917fc87eb8408934ec0c5ee3899ed3d17cb6a1a88b7eaa0e3ddb5790c70aa9ccffad166e4864934dccde40d490a672dd34673d24b2d2ed29767a9a9797ebcc8fac5561e17503a28c29ac210b16ebb07c6fae94c015ae0d0d776b3bcb8425"}, @ETHTOOL_A_BITSET_MASK={0xc9, 0x5, "3a855ca0ab1fcfe8bd9fbd9256c1b50fca7fa11bbd757e74e0829aeea300be29adf4834b40d95b2eacee2f073a6ebbe20c9646bd290fca9b319bd4b70f25c03bca4a1e91d8ec6b2304851359cc91fb7825f83cc7a2d4a35c76522fa0b3278a76598faea02a03595e0fbe79cdda2a17f45234fed499a05af21048f3d09907028fc8188c64ed983b5e912e67f73f80a0979c65621cef6c181371ddfe671a9fd33d231bee580810b504791e4f5bc6333694a1ecb1a59d183bc482d8e3c2553679b68b64bdfe59"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "6bc3e7ea60350846aa902e0d45e69f06a626c73425fdfe2464923da1b1af4e1c6ff9a1faf957c0b69ba40dea029a2f1f5005943c81cd30b6b83520ac27363b04a90397dd82b2099c4ef0e2a62f95cab9bad239de67076162599b7d9d7917b48e7d54407c051d2a247016a8c8a0be56cbd670c8ab60c6712020ae2a7c8003bf1ade61a7e68da45b04e20de4f7cf036f1c29131f252827f6c79d6c3926377bb29b00f2f307f3c292e9d1850f573239fc5344e72e"}, @ETHTOOL_A_BITSET_MASK={0x52, 0x5, "97f5ed931a691ebd1d74ce43f14ceda6dc55d768adeffb1b1120eb87bcdab55d3d3d1ad85c6e8515dd658610657fdf94295eb664a8b16c84d59008c49b1151898809d37236b1de1a786612a8c99e"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2e8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2ab5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x71, 0x4, "8a5cd1a79ba30c193129177cbf321e53670328d7e6910a7adfff2fd1533ce371c5f0a4fb6b032c32dee50f0473ed8a26bed16c60c321d999d493899009a7b3d91957bfbe232f175ada3ebae87843ea567c96844d4c586d2b693d54bea9cf3fe2e30eeb3ec4ab758f389c4243cd"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')\x96\\/(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '-/-@}[&#:^\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-\\,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#\\,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x551f1fdc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ',.!$$-\xc9#-^\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "b4ab4a3586408fbf1abb11ce65ae181fb45c5080ecaf38d84ea235e6435398b9762387356ef521c859715d703cf6412a13b3537bb924798399fcaccbc7978cf4a004daecabd6dd37541395d5051091ce279ef4a9e627db6d9d0ed96a988821facd3f601efb1d14e7618c99788dc4b0a58db284205889a145e9de65dad9e3f9ead9cb6bfe33fbbb6b4848f995716dd74ef093ddc73559815bf279ea181690e15564b1f9eab475cab6a9668430571db435b37203ac128e90055c1c667871816de0bcd373eea0f215dd4df1377c020a1bb53b95344191755791bee992e9cbb9d6"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x502}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x744}, 0x1, 0x0, 0x0, 0x50}, 0x4002) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b80)={0x160, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1af23e5f}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x101, 0xa9, @random="2d39f586f2998894dd779e51e1442cab00651ab0f73be4fa6d600f683056a84f99bec2162a67eb25f3fbd53214d4992ee83233425485b067bfa98b6e52d95b527c7692cd6917a3c25765d5ac25161a4c6ebae2039d1a8172fb2014bf396a681f4a4349b5cf19228aa53fed286305552990b033dabe352817f3b76d6ca28883ee4e367879f452aa59df8308fb1fc091270515605e29086dc0ee6587b4ed6b417393e876be2412afc637e075bd3145bad2f868da5b11142ab1d7b6d840d832eb277847f59c7165e8ed6c8f2714b24e638394c8aa01fbb988b6fb28ac4fdff28de01c76ddb5502905fe925fa2a85b2c17a7837c63b85ef0b7b74f0343b783"}]}, 0x160}, 0x1, 0x0, 0x0, 0x20040081}, 0x20004898) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r8, 0x0, 0x1, &(0x7f0000000d80)=0x4, 0x4) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000dc0)={0x1, 0x1}, 0x2) setsockopt$sock_void(r8, 0x1, 0x3f, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0x29, 0xb5a2b6ce7010470f, 0x0) socketpair(0x23, 0x2, 0x5, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000000e40)={0xffffffffffffffff, 0x8, 0x2, 0x7, @vifc_lcl_ifindex=r4, @multicast1}, 0x10) ioctl$SIOCGSTAMP(r10, 0x8906, &(0x7f0000000e80)) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f00000012c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000000f80)={0x2dc, r13, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x64}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x3]}, @NL80211_ATTR_FRAME={0x2a9, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @initial, {0x3, 0x4}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x1, 0x4, 0x68, @void, [{0xdd, 0xd, "23dc9e8c4642ac60851da1bb68"}, {0xdd, 0x4d, "80e9425c492700d0829f7e538ebacfa8b2d626604638f21931944751e478523b0d1895d42f2b374472443a0687596a8b88c8780190032f21b12adab8129143ed1a47ec9aebcdf8a1266f8a67a6"}, {0xdd, 0x31, "b5a028b6b68999ea49a41d908d39a106f7c8b1645c73499f5851775ba9b77f33851e593a896bdbcfa9d9fbf5ff1acc1c7c"}, {0xdd, 0x3f, "36c9cc7b33e48c816fd8980ce1b31e6cbedb422ebb1990850c980b195e09b2fa7a84934c138afb31dc49cada6dec89ef39f4386d0f2b85ca25827f09c3641c"}, {0xdd, 0xb3, "ed44fb6f783c7d4307883d3cd9956afcfccbae49242499db1af5a82d2825853f4923e777969b39533a7e19232f3c8be6d88d50ab54771aba4c4ae5d9f99d708d737405fb4159ccfc73f23b1317b398b44152a13b97100d176845548b03172aed7e5e619f985eb452e072daa5186382f04bb46755392c379ecdde6b6c824c5b172cfa47f600ab231b6e6bd810bb6775a5354bb1be1c4299358cd600f5d1a16f65530de7563fe013af242ff68c0ab4379b906449"}, {0xdd, 0x63, "06ff172fb7cf41f0c72299165c2b7312459a8bba29940212c0185e1400842a89ca3c20784632e2f4183ee373b963300a0200e00d92e2f16812d42211cc055a569efba3385df29db4f1d7b3eaefbd350325dc17b2dd1b74d10b946c4e3cb4344fd9d09c"}, {0xdd, 0x95, "4e64f8a72a353fbe7907de883425154306045ca53b2c9a9cf0260724086fb805196cf104b523c5334d2ff5516b7fccdbeebad503a9353ad8aa5a98d02ad0a5341de475b7658750735aaa53bedafab56ec5407225ea6c1943cc5f8b432834b76c3aed6444870460746a6160bd3cf0bb09f9c88f0778b118e8b2684af73bee551a6c048f7576b7ea2f11aafd69de3ead265517d9617f"}]}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40004}, 0xc080) getpeername$packet(r11, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001340)=0x14) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, r13, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20008000) sendmsg$NL80211_CMD_JOIN_OCB(r9, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, r13, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000) r15 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r15, 0x8980, &(0x7f0000001580)={'veth1_virt_wifi\x00', 0x3ff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1b, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000001640)={r16, 0xe05}, 0x8) connect$rds(r11, &(0x7f0000001680)={0x2, 0x4e23, @multicast1}, 0x10) 903.987107ms ago: executing program 1 (id=2127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x8, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "60001706111000"}}, 0x48}, 0x1, 0x0, 0x0, 0x400d4}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) unshare(0x600) r6 = socket$netlink(0x10, 0x3, 0x0) pwrite64(r6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x5, 0x0, 0x0, {0xb}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r7, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) socket$nl_xfrm(0x10, 0x3, 0x6) 746.773997ms ago: executing program 0 (id=2128): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000440)={r3, 0x2, 0xe}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="24005a8020000180140003000000200000000000edff"], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) 589.033397ms ago: executing program 2 (id=2129): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0xcb, 0x0, &(0x7f0000000a80)=""/203, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)="84", 0x2, 0x0, 0x4}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r11, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r12, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r7}, &(0x7f0000000400), &(0x7f0000000500)=r13}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff036bd9a3d0392eb005ead97f", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 520.971235ms ago: executing program 4 (id=2130): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) clock_gettime(0x3, &(0x7f0000000540)) 320.44778ms ago: executing program 4 (id=2131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x11, &(0x7f0000000000)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe53}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000000c0)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x1, 0x3, 0x3, 0xb2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x1}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x1, 0xea, 0x2, 0x9, @empty, @private0, 0x7800, 0x80, 0x2, 0xfffffc00}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x14, 0x3, &(0x7f0000000340)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x3ff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x22}], &(0x7f0000000380)='syzkaller\x00', 0xe93, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x36, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000001400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000001440)=[{0x2, 0x4, 0x10, 0x6}, {0x1, 0x1, 0x3, 0x5}, {0x1, 0x4, 0x6, 0xc3cd4ab8e2baa4ef}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex=r1, r0, 0x1b, 0x0, 0x0, @void, @value=r2}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001540)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001980)={{r2, &(0x7f0000001800)='!-+\x00', 0x408200, &(0x7f0000001840)={@align=0x7, {0x7, 0x2, 0x5, 0x2}}, 0x2, &(0x7f0000001880)={@_ha_fsid}, &(0x7f00000018c0)=0x7}, {[0x40, 0x5, 0xf7c, 0x6]}, 0x3, 0x46, &(0x7f0000001900)=""/70}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b00)=@o_path={&(0x7f0000001ac0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)=r2}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x73e6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{0x1, 0xffffffffffffffff}, &(0x7f0000001c80), &(0x7f0000001cc0)=r2}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x18, 0x1e, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000016c0)='GPL\x00', 0x6, 0xde, &(0x7f0000001700)=""/222, 0x41100, 0x48, '\x00', r1, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x3, 0x5, 0x10000, 0x600}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r5, r6, r7, r8, r9], 0x0, 0x10, 0x8}, 0x94) ioctl$XFS_IOC_GETBMAPX(r10, 0xc0205838, &(0x7f0000001e40)={0xa, 0x5, 0x3ff, 0x4, 0x77, 0x8, 0x2}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001ec0)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000001fc0)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000002240)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002000)=@updpolicy={0x200, 0x19, 0x200, 0x7, 0x25dfdbfd, {{@in6=@private0, @in6=@private2, 0x4e22, 0x2, 0x4e21, 0x0, 0x2, 0xb0, 0xa0, 0x2b, r1, r11}, {0x4, 0x9, 0x3, 0x3, 0xfffffffffffffffc, 0xffffffff, 0x3, 0x4}, {0x7fffffff, 0x3, 0x8, 0x7}, 0x4, 0x6e6bbf, 0x0, 0x1, 0x6}, [@mark={0xc, 0x15, {0x350759, 0xf}}, @lifetime_val={0x24, 0x9, {0xb65, 0x5, 0x6, 0x1}}, @iptfs_dont_frag={0x4}, @replay_thresh={0x8, 0xb, 0x7}, @iptfs_dont_frag={0x4}, @algo_auth_trunc={0x9c, 0x14, {{'sha3-256\x00'}, 0x280, 0xe0, "33382bf4d3958ecc73168b740e8160dd22ba2397b7b82d7ae58c6a0d8fe6e696663a82a0bd9701093b7fd629c66e4beae7f5c7466ea5f92064fdc0e86aa2e9a1e62558aa99206023a96635ca4f3a0953"}}, @encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e21, @in6=@mcast1}}, @lastused={0xc, 0xf, 0x34678ae7}, @replay_esn_val={0x3c, 0x17, {0x8, 0x70bd2a, 0x70bd2a, 0x70bd2b, 0x70bd2b, 0x9, [0xccbc, 0x6000, 0x6, 0x2, 0x101, 0xf, 0x10001, 0x1]}}, @tfcpad={0x8, 0x16, 0x7}]}, 0x200}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002380)={@cgroup=r4, 0x3, 0x1085692802fdf94e, 0x5, &(0x7f0000002280)=[0x0], 0x1, 0x0, &(0x7f00000022c0)=[0x0, 0x0, 0x0], &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000023c0)={r10, r7, 0x37, 0x0, @val=@netkit={@void, @value=r2, @void, @void, r12}}, 0x1c) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x13, r8, 0xd1b95000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002500)={@cgroup=r4, 0x15, 0x0, 0xfffffffa, &(0x7f0000002400)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000024c0)=[0x0]}, 0x40) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), r4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000002700)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000026c0)={&(0x7f00000025c0)={0x100, r13, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0x22}}}}, [@NL80211_ATTR_IE={0xcf, 0x2a, [@supported_rates={0x1, 0x3, [{0x6, 0x1}, {0x1}, {0x6c}]}, @random_vendor={0xdd, 0xc4, "b6cf83012298c299f18675eafa5eefc8f45cb9745dfd040458545cc6a08d1ae4e263f0634278585cb236de9a05f9c70146f81fded61f7ca20544b984256d3e172e8ea22d3ad3b6f5598a1550dd478292d86b55ada1e9ca2d70808f25808c71e401755dff6b517643871f6c2c5484f5df94d5b3956115698f5a55a20dc64bc45ff2d89e8b0e3fc00b69351e5925e51f7934794e3bca51a9a7e2b118ae5c83c1b609c6fc409f13fcdd9ec0812156cc038e3ffb23b0b3e13f0e2e5a1d3ddcda11281a0544da"}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3ff}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002900)={r9, &(0x7f0000002740)="4a274305d9fefcfbe707ae9bac9db9f982abda28edc32ef6aa0077ce131489914532c01b1810559306e442630acfe5217ef2a413ea2c2569057800be3009db46e85343c3a795995851d1d6adb6dd3f20eb37d04a4d1baf799525f27954e8ff40eb368e0f06c278670b0a80581060e56e82b681399898b1a133b517bc7e17d9c1f32e355a1bac522b3170d49dede71ecc1176acdaae8cf90e3a5d60a4d738c321060b0069df2db0c4eaf64015a7217a82b3a7d6", &(0x7f0000002800)=""/233, 0x4}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000002940), r4) socketpair(0x2b, 0x3, 0x10, &(0x7f0000002980)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r15, 0xc0096616, &(0x7f00000029c0)={0x3, [0x0, 0x0, 0x0]}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000002a00)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r14, 0x84, 0xe, &(0x7f0000002a40)={0x0, 0x101, 0x800, 0xcfe7, 0x8, 0x3, 0xf2, 0x6, {0x0, @in6={{0xa, 0x4e20, 0xb2eb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, 0x9, 0x2c, 0x9, 0x9, 0x2}}, &(0x7f0000002b00)=0xb0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000002b40)={r16, 0xffec, 0x0, 0x8, 0x0, 0x9}, 0x14) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000002b80)) 153.662809ms ago: executing program 1 (id=2132): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000300)=0x90) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="260000000000000000000000ecffffff60100000000000009500000000000000804303055328f68c0649fd84c452f94528579a00dda984e935b0da53aa73c82f916d54b1977b2eea51a0e9741383ea5cb9af5547d7d852209fc473b3740a0a13ee69a96026221c7d835e94cdabbe49a5fab08a57"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000005c0)={{r3, &(0x7f0000000080)='\x00', 0x100402, &(0x7f00000000c0)={@align=0x9, {0x2, 0x3, 0x3, 0x5}}, 0x800, &(0x7f00000001c0), &(0x7f0000000200)=0x1ff}, 0x3, &(0x7f0000000540)=[{0x3, 0x4, &(0x7f0000000240)='GPL\x00', &(0x7f0000000280)="f845865753da93ddd1d19ee9b1e657081ee86b579bf6328ae0ea9c265bd5670b3897ecdf170aee7a71127c13641e78b323e231f2590e65216435107b7cfb092370b954f9510d88b34fd4590f666534b93192d71b2155f517650bed2fe3ff4b", 0x5f, 0x2}, {0x2, 0x7, &(0x7f0000000300)='F*\x00', &(0x7f0000000340)="04822797990573003e9cc57615317e9131bcb0bcb8a6f3c9e37a8439ac4fc46f3669caa3b293aac7a8e06ad9530553098a9f6dbe0a35b23ff59aedae3628b888e4378e283ed8d7202e69340536c3c715478820848493b1495dd4794359321514b3069807a47a03a1b0a0395162e1036120a8adb8d0be59822732232ef01392b5a83d7b4ac0e472f19abc9f2ae5f8a35a6fa10b8bb6c7da28a25cce4359cb477f654070e0c80200c8ca5d43ed76f7ccc710", 0xb1, 0x28}, {0x2, 0x92, &(0x7f0000000400)='\x00', &(0x7f0000000440)="47b349fae1e0d4599a8f08788c689a3c6ef3389dd1d2a4a5c9092e002723ddc32365b45f013dceae29a5e35e2ac295cb644aad9fca553c2a43866fcc04c1dc88dc9e9856fd67fd274176c612f400358de0c3c668a697181506b1bc7ae6a9e6a0c092c6485b495a210194b6a5dfe876186181f2216568b380b8c3ea473684f36f4a85e1f9b235b7c2775c2159b9a221276a5eb8f59b9fa18edd2f714a2d1a49c5c317667785a75a813292badce7704d2db9e4ae928b9d2e6778b2899562e80b831b738710", 0xc4, 0x18}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) (async) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000001140)) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48081}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)={0x70, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2008091}, 0x4000004) (async) sendmsg$sock(r4, &(0x7f0000000d40)={&(0x7f0000000800)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x1, 0x3, 0x4, {0xa, 0x4e23, 0xfffffff8, @mcast1}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000880)="c206dd9acb871a4b30415eda42f9bf8534eaf33211cb24b938ac4c021150c157ed769b789f6eec0ce6f71fde029dd98791ead82642cbb4924c2eef0d8c8908f1c5ce8990f26a90a334e20cd85f5522ee62e4a579f13c90107d8b15677df465c58cf4c0613cc21b5611aa597cd57163e05b9d445654bdc8f90b20e445709893f00e0b96afe32b8450723f39b7db792ae135d06775de2fb8a8d8e0460bbe72f2697a2dd49fa5e681b7bd661e4daa829faab05929797037627703220381d3a5dfd41026b78a196175ba60fbf0", 0xcb}, {&(0x7f0000000980)="ec0699892861922261e873341ce69c6f9374660086e857ed87799c27ec861cf706d0ec0625567472ee41f2b87fe69cdf8da66fe9abec515e98a198a5b292ef4cc48587ff98fbdd7be15e3ea39704b6f7caed1609c9b4646c11498b6b1c40c4b97b3fead05480bee4af65a16f61c1da593bf784712a4369b5d71009c4093b08cb7c85cbc17d06ba28d471e8a1d6d53d14eb01400fef0cfa5e547edeef6addbf578b0610c908d26da229", 0xa9}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="cca1b2e6c84c4dcf539bf50eac1eb84813428cd064a1cdd14805709d2639c36b8c02946d5e25f5cd969d9ffdfefaea1510395fc250dda409598282a0efc96fbfb22a1fedb45f7ca266c368c000a6c8d4cdea082bab2794339e4aaa6a3a4e9a68f0d97e74ed3ac0ddc10cb2885ca82f69", 0x70}, {&(0x7f0000000b00)="840b46363e9ec560ccbcc6b0f9cf6b10da00f48f00d498105e703bdd7b698b4bef14e45b76a99bc428bd294d605d544bd5b837fa5ff940679b616794aed6d4f4d18ad56d38fcb40b8c4385a59a", 0x4d}, {&(0x7f0000000b80)="00e56c959d4ef2c855c90baacefa5062781acdd174802c7bf16e70c9a0d6973f8ca95b498dd47404b2477c18cffd991fec334101d71e188d2a2bf27b2e81af797dac42a8405aaf0fd00ed307ef4a54339dbfef8e1883e5e823febaaa425104075a5af5943861eb3a52a9ff99198e7b657812d71732", 0x75}, {&(0x7f0000000c00)="2b136678df7bd5c65382b2196624af942dfa6c9ee0229386bc31", 0x1a}, {&(0x7f0000000c40)="6a60cf89a545166068bdf814c25b0abfb7eebdeaa3f22a1393d20e4fdb6319f0956ae493cf6866a25cf0477a59abec1dbf5582c6eb0a7032987a", 0x3a}], 0x8, &(0x7f0000000d00)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x200}}], 0x30}, 0x8000) 72.899594ms ago: executing program 0 (id=2133): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x2, 0xfc420911c9029fd0}, {0x0, 0x1, 0x5}, 0x2, 0x95a9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf250100000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x4008000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xffffffff, 0x0, 0x2d8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x91a, 0x0, 0xc}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) 19.500921ms ago: executing program 3 (id=2134): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="798609", 0x3}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x18}, 0x0) close(0x3) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40841}, 0x40004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c000380680000800800034000000002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000400), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000080)={'vlan1\x00', @broadcast}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000040)) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 4 (id=2135): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x0, 0xd0, 0x1b8, 0x1b8, 0x2e0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ipv6={@empty, @local, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0x0, 0xff, 0xff000000], 'bridge_slave_0\x00', 'dummy0\x00', {0xff}, {}, 0x84, 0x5, 0x6, 0x4c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'rose0\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0xc1, 0x5}, 0x0, 0x120, 0x160, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x10, 0x10001, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xee5f356c6f495b18, 0x100fffe00, 0xff], [0x0, 0xff, 0xffffff00, 0xffffff00], 'veth1_macvtap\x00', 'dummy0\x00', {}, {}, 0x1d, 0x6, 0x4, 0x19}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @common=@ipv6header={{0x28}, {0x22, 0x0, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) (async, rerun: 64) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) kernel console output (not intermixed with test programs): uetooth: hci0: unsupported parameter 5161 [ 117.067739][ T6806] Bluetooth: hci0: unsupported parameter 8192 [ 117.099300][ T6817] xt_policy: neither incoming nor outgoing policy selected [ 117.819685][ T6860] gretap0: mtu less than device minimum [ 117.913037][ T6861] xt_hashlimit: size too large, truncated to 1048576 [ 118.533961][ T6896] GUP no longer grows the stack in syz.0.307 (6896): 200000003000-20000000a000 (200000001000) [ 118.599862][ T6896] CPU: 1 UID: 0 PID: 6896 Comm: syz.0.307 Not tainted syzkaller #0 PREEMPT(full) [ 118.599894][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.599916][ T6896] Call Trace: [ 118.599925][ T6896] [ 118.599938][ T6896] dump_stack_lvl+0xe8/0x150 [ 118.599978][ T6896] __get_user_pages+0x238c/0x2720 [ 118.600016][ T6896] ? __gup_longterm_locked+0xc3b/0x15c0 [ 118.600054][ T6896] ? __gup_longterm_locked+0xc3b/0x15c0 [ 118.600082][ T6896] __gup_longterm_locked+0xd52/0x15c0 [ 118.600104][ T6896] ? lock_acquire+0x106/0x350 [ 118.600154][ T6896] gup_fast_fallback+0x1d92/0x20e0 [ 118.600187][ T6896] ? lockdep_hardirqs_on+0x7b/0x110 [ 118.600251][ T6896] ? __pfx_gup_fast_fallback+0x10/0x10 [ 118.600289][ T6896] ? is_valid_gup_args+0x11f/0x200 [ 118.600326][ T6896] ? get_user_pages_fast+0x4d/0xb0 [ 118.600363][ T6896] __iov_iter_get_pages_alloc+0x378/0xa40 [ 118.600393][ T6896] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 118.600433][ T6896] iov_iter_get_pages2+0x5e/0xa0 [ 118.600458][ T6896] __se_sys_vmsplice+0x7b5/0x1660 [ 118.600512][ T6896] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 118.600549][ T6896] ? __pfx_futex_wake+0x10/0x10 [ 118.600583][ T6896] ? hci_sock_bind+0x27d/0x1090 [ 118.600607][ T6896] ? lockdep_hardirqs_on+0x7b/0x110 [ 118.600635][ T6896] ? hci_sock_bind+0x27d/0x1090 [ 118.600713][ T6896] do_syscall_64+0x166/0x520 [ 118.600740][ T6896] ? trace_irq_disable+0x3b/0x140 [ 118.600769][ T6896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.600791][ T6896] ? clear_bhb_loop+0x70/0xc0 [ 118.600818][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.600840][ T6896] RIP: 0033:0x7f1499d9e0d9 [ 118.600866][ T6896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.600885][ T6896] RSP: 002b:00007f1497ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 118.600917][ T6896] RAX: ffffffffffffffda RBX: 00007f149a025fa0 RCX: 00007f1499d9e0d9 [ 118.600933][ T6896] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 118.600952][ T6896] RBP: 00007f1499e35024 R08: 0000000000000000 R09: 0000000000000000 [ 118.600965][ T6896] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 118.600978][ T6896] R13: 00007f149a026038 R14: 00007f149a025fa0 R15: 00007ffda7b51a18 [ 118.601030][ T6896] [ 119.041473][ T6912] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 119.191379][ T6924] __nla_validate_parse: 11 callbacks suppressed [ 119.191396][ T6924] netlink: 288 bytes leftover after parsing attributes in process `syz.2.316'. [ 119.225416][ T6925] netlink: zone id is out of range [ 119.233189][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.315'. [ 119.253926][ T6925] netlink: del zone limit has 4 unknown bytes [ 119.388737][ T6943] netlink: 44 bytes leftover after parsing attributes in process `syz.3.315'. [ 119.871818][ T6970] netlink: 'syz.2.325': attribute type 10 has an invalid length. [ 119.898312][ T6970] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 120.110903][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 121.933400][ T6922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.171704][ T6996] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 122.183321][ T6997] netlink: 260 bytes leftover after parsing attributes in process `syz.3.331'. [ 122.371522][ T7005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.448814][ T7009] team0: Device gtp0 is of different type [ 123.004317][ T7044] netlink: set zone limit has 4 unknown bytes [ 123.028439][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'. [ 123.312577][ T7061] netlink: 'syz.4.352': attribute type 22 has an invalid length. [ 123.328779][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 123.364819][ T7061] netlink: 'syz.4.352': attribute type 22 has an invalid length. [ 123.376787][ T7064] IPv6: Can't replace route, no match found [ 123.394004][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 123.405957][ T7064] IPv6: Can't replace route, no match found [ 124.057276][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 124.446442][ T7125] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 124.472525][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 124.518659][ T7126] netlink: 'syz.0.370': attribute type 39 has an invalid length. [ 124.592832][ T7127] team0 (unregistering): Port device team_slave_0 removed [ 124.618249][ T7131] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 124.646747][ T7127] team0 (unregistering): Port device team_slave_1 removed [ 124.774603][ T7136] bond2: (slave geneve2): making interface the new active one [ 124.786585][ T7136] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 124.804448][ T3272] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 124.829120][ T3272] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 124.838834][ T3272] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 124.847993][ T3272] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 125.070873][ T7153] netlink: 'syz.1.379': attribute type 7 has an invalid length. [ 125.080187][ T7153] netlink: 140 bytes leftover after parsing attributes in process `syz.1.379'. [ 125.134781][ T7160] openvswitch: netlink: IP tunnel dst address not specified [ 125.168001][ T7160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.209555][ T7160] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 125.262318][ T7163] netlink: ct_mark mask cannot be 0 [ 125.283350][ T7163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.334853][ T7160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.350163][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 125.414450][ T7176] netlink: 'syz.0.387': attribute type 24 has an invalid length. [ 125.461673][ T7173] netlink: 32 bytes leftover after parsing attributes in process `syz.3.376'. [ 125.524897][ T7181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.386'. [ 125.852380][ T7196] bond3: entered promiscuous mode [ 125.965607][ T7196] macvlan3: entered promiscuous mode [ 125.991557][ T7196] macvlan3: entered allmulticast mode [ 126.390483][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.404'. [ 126.629639][ T7231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.667179][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.406'. [ 126.746231][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.406'. [ 126.970488][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 127.013387][ T7263] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 127.049267][ T7263] gretap2: entered promiscuous mode [ 127.086193][ T7263] gretap2: entered allmulticast mode [ 127.490694][ T7284] xt_hashlimit: size too large, truncated to 1048576 [ 127.497748][ T7283] xt_hashlimit: size too large, truncated to 1048576 [ 127.706965][ T7291] netlink: 5508 bytes leftover after parsing attributes in process `syz.3.419'. [ 128.201307][ T7319] SET target dimension over the limit! [ 128.429566][ T7329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.493014][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.515769][ T7329] bridge_slave_0 (unregistering): left allmulticast mode [ 128.528995][ T7329] bridge_slave_0 (unregistering): left promiscuous mode [ 128.564498][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.902737][ T7358] openvswitch: netlink: VLAN attribute unexpected. [ 129.187534][ T7371] netlink: 'syz.3.442': attribute type 2 has an invalid length. [ 129.213171][ T7371] netlink: 'syz.3.442': attribute type 2 has an invalid length. [ 129.240823][ T7371] netlink: 'syz.3.442': attribute type 10 has an invalid length. [ 129.297494][ T7371] geneve2: entered promiscuous mode [ 129.302939][ T7371] geneve2: entered allmulticast mode [ 129.339018][ T7383] xt_cluster: you have exceeded the maximum number of cluster nodes (2047 > 32) [ 129.474031][ T7385] hsr_slave_1 (unregistering): left promiscuous mode [ 129.519872][ T7388] __nla_validate_parse: 15 callbacks suppressed [ 129.519895][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 129.817126][ T7402] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 129.853550][ T7411] ip_tables: iptables: counters copy to user failed while replacing table [ 129.862440][ T7402] syzkaller1: linktype set to 823 [ 129.923173][ T7413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.455'. [ 129.950183][ T7415] bridge0: entered promiscuous mode [ 129.960825][ T7415] bridge0: entered allmulticast mode [ 130.004603][ T5724] syzkaller1: tun_net_xmit 90 [ 130.031372][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065d86c00: rx timeout, send abort [ 130.320110][ T7449] Cannot find set identified by id 4 to match [ 130.369082][ T7434] syzkaller1: tun_net_xmit 86 [ 130.531633][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065d84800: rx timeout, send abort [ 130.541739][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065d86c00: abort rx timeout. Force session deactivation [ 130.567141][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888065d84800: connection exists (fe ff). last cmd: 20 [ 130.653910][ T7476] netlink: 16720 bytes leftover after parsing attributes in process `syz.2.467'. [ 130.747950][ T7480] netlink: 'syz.4.468': attribute type 2 has an invalid length. [ 130.767044][ T7480] netlink: 'syz.4.468': attribute type 11 has an invalid length. [ 130.789423][ T7480] netlink: 132 bytes leftover after parsing attributes in process `syz.4.468'. [ 130.814687][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065d84c00: rx timeout, send abort [ 130.929255][ T7484] netlink: 'syz.1.472': attribute type 1 has an invalid length. [ 131.263222][ T7503] ipt_REJECT: TCP_RESET invalid for non-tcp [ 131.323037][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065d84c00: abort rx timeout. Force session deactivation [ 131.485898][ T48] IPVS: starting estimator thread 0... [ 131.516628][ T7518] netlink: 'syz.1.480': attribute type 13 has an invalid length. [ 131.552734][ T7518] netlink: 'syz.1.480': attribute type 17 has an invalid length. [ 131.595427][ T7515] IPVS: using max 26 ests per chain, 62400 per kthread [ 131.605929][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065d84000: rx timeout, send abort [ 131.847309][ T7518] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.854639][ T7518] bridge0: port 1(bridge_slave_0) entered listening state [ 132.074041][ T7518] macvlan0: left promiscuous mode [ 132.105224][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880669c8000: rx timeout, send abort [ 132.114346][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065d84000: abort rx timeout. Force session deactivation [ 132.146148][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880669c8000: connection exists (fe ff). last cmd: 20 [ 132.203152][ T7518] veth3: left promiscuous mode [ 132.273797][ T7518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.288173][ T7518] bond3: left promiscuous mode [ 132.305616][ T7518] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.338218][ T7518] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.396119][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a1c1000: rx timeout, send abort [ 132.433468][ T7532] team0: Device gtp0 is of different type [ 132.441879][ T7555] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.485'. [ 132.529320][ T3369] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.536587][ T3369] bridge0: port 2(bridge_slave_1) entered listening state [ 132.596435][ T7546] syzkaller0: entered promiscuous mode [ 132.618843][ T7559] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 132.644835][ T7546] syzkaller0: entered allmulticast mode [ 132.904029][ T3329] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.912606][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a1c1000: abort rx timeout. Force session deactivation [ 132.948612][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.959414][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.990590][ T7568] tipc: Started in network mode [ 133.015726][ T7568] tipc: Node identity 7f000001, cluster identity 4711 [ 133.042234][ T7568] tipc: New replicast peer: 127.0.0.2 [ 133.053381][ T7568] tipc: Enabled bearer , priority 10 [ 133.079549][ T7574] syzkaller1: entered promiscuous mode [ 133.115646][ T7574] syzkaller1: entered allmulticast mode [ 133.189998][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a1c1c00: rx timeout, send abort [ 133.237600][ T7581] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 133.508654][ T7587] tipc: Started in network mode [ 133.526861][ T7587] tipc: Node identity 000000002e0000000040000000000001, cluster identity 4711 [ 133.558802][ T7587] tipc: Enabling of bearer rejected, failed to enable media [ 133.578506][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'. [ 133.607848][ T7592] block nbd0: reconnected socket [ 133.619421][ T7592] block nbd0: reconnected socket [ 133.644577][ T5624] block nbd0: Receive control failed (result -32) [ 133.645264][ T4929] block nbd0: Receive control failed (result -32) [ 133.690195][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034043800: rx timeout, send abort [ 133.698688][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a1c1c00: abort rx timeout. Force session deactivation [ 133.721229][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888034043800: connection exists (fe ff). last cmd: 20 [ 133.817133][ T7596] tipc: Enabling of bearer rejected, failed to enable media [ 133.866785][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 133.971160][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a1c0c00: rx timeout, send abort [ 134.091497][ T7612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.506'. [ 134.109462][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 134.126912][ T7612] unsupported nla_type 216 [ 134.143677][ T7609] wireguard0: entered promiscuous mode [ 134.154187][ T7609] wireguard0: entered allmulticast mode [ 134.177424][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 134.222322][ T5745] tipc: Node number set to 2130706433 [ 134.397039][ T7621] veth5: entered promiscuous mode [ 134.404478][ T7621] veth5: entered allmulticast mode [ 134.479515][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a1c0c00: abort rx timeout. Force session deactivation [ 134.717151][ T7640] netlink: 'syz.0.514': attribute type 7 has an invalid length. [ 134.753847][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a1c3800: rx timeout, send abort [ 134.763299][ T7643] netlink: 'syz.4.515': attribute type 1 has an invalid length. [ 135.080521][ T7665] batadv_slave_0: entered promiscuous mode [ 135.128413][ T7665] __nla_validate_parse: 1 callbacks suppressed [ 135.128435][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'. [ 135.147123][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.182451][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.253237][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066d72400: rx timeout, send abort [ 135.262260][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a1c3800: abort rx timeout. Force session deactivation [ 135.289775][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888066d72400: connection exists (fe ff). last cmd: 20 [ 135.446294][ T7673] netlink: 64 bytes leftover after parsing attributes in process `syz.4.525'. [ 135.539737][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a1c1800: rx timeout, send abort [ 135.593320][ T7689] syzkaller1: entered promiscuous mode [ 135.601353][ T7689] syzkaller1: entered allmulticast mode [ 135.780659][ T7694] 8021q: adding VLAN 0 to HW filter on device bond5 [ 135.789315][ T7697] netlink: 288 bytes leftover after parsing attributes in process `syz.4.532'. [ 135.872294][ T7701] netlink: 'syz.2.533': attribute type 11 has an invalid length. [ 135.948825][ T7702] netlink: 220 bytes leftover after parsing attributes in process `syz.1.534'. [ 135.966323][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.535'. [ 136.048115][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a1c1800: abort rx timeout. Force session deactivation [ 136.058567][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035f0a000: rx timeout, send abort [ 136.319388][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 136.332540][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a1c2000: rx timeout, send abort [ 136.468294][ T7729] netlink: 'syz.0.546': attribute type 1 has an invalid length. [ 136.482761][ T7729] netlink: 228 bytes leftover after parsing attributes in process `syz.0.546'. [ 136.552599][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035f0a800: rx timeout, send abort [ 136.567077][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035f0a000: abort rx timeout. Force session deactivation [ 136.650468][ T7737] syzkaller1: entered promiscuous mode [ 136.686588][ T7737] syzkaller1: entered allmulticast mode [ 136.736129][ T7743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.548'. [ 136.753611][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'. [ 136.784418][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.832724][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066cf1c00: rx timeout, send abort [ 136.841168][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a1c2000: abort rx timeout. Force session deactivation [ 136.863636][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888066cf1c00: connection exists (fe ff). last cmd: 20 [ 136.868115][ T7749] IPVS: set_ctl: invalid protocol: 22395 100.1.1.2:20003 [ 137.060978][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035f0a800: abort rx timeout. Force session deactivation [ 137.113578][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031765800: rx timeout, send abort [ 137.245270][ T7768] netlink: 3 bytes leftover after parsing attributes in process `syz.4.554'. [ 137.256764][ T7770] openvswitch: netlink: Message has 8 unknown bytes. [ 137.404493][ T7773] netlink: 'syz.0.556': attribute type 21 has an invalid length. [ 137.621945][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031765800: abort rx timeout. Force session deactivation [ 137.803553][ T7796] gretap0: entered promiscuous mode [ 137.892445][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031765400: rx timeout, send abort [ 137.907940][ T5624] Bluetooth: hci4: link tx timeout [ 137.917397][ T5624] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.392642][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054873000: rx timeout, send abort [ 138.401784][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031765400: abort rx timeout. Force session deactivation [ 138.431544][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888054873000: connection exists (fe ff). last cmd: 20 [ 138.681486][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031767000: rx timeout, send abort [ 139.189819][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031767000: abort rx timeout. Force session deactivation [ 139.463365][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031767c00: rx timeout, send abort [ 139.963494][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a7e4000: rx timeout, send abort [ 139.971950][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031767c00: abort rx timeout. Force session deactivation [ 139.985244][ T4929] Bluetooth: hci4: command 0x0406 tx timeout [ 139.995394][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807a7e4000: connection exists (fe ff). last cmd: 20 [ 140.245393][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031766000: rx timeout, send abort [ 140.491107][ T7777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.754553][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031766000: abort rx timeout. Force session deactivation [ 140.803535][ T30] audit: type=1804 audit(1787622437.904:2): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.570" name="/newroot/107/cgroup.controllers" dev="tmpfs" ino=565 res=1 errno=0 [ 140.827844][ T30] audit: type=1800 audit(1787622437.904:3): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.570" name="cgroup.controllers" dev="tmpfs" ino=565 res=0 errno=0 [ 140.937116][ T7826] syzkaller1: entered promiscuous mode [ 140.950966][ T7826] syzkaller1: entered allmulticast mode [ 141.036007][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b37c000: rx timeout, send abort [ 141.536045][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066d70800: rx timeout, send abort [ 141.546119][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b37c000: abort rx timeout. Force session deactivation [ 141.572825][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888066d70800: connection exists (fe ff). last cmd: 20 [ 141.622654][ T7862] __nla_validate_parse: 2 callbacks suppressed [ 141.622674][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 141.678948][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'. [ 141.717214][ T7871] netlink: 192 bytes leftover after parsing attributes in process `syz.2.586'. [ 141.822789][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b37e000: rx timeout, send abort [ 142.162223][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 142.174598][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 142.308416][ T7904] netlink: 542 bytes leftover after parsing attributes in process `syz.4.596'. [ 142.319944][ T7905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.335486][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b37e000: abort rx timeout. Force session deactivation [ 142.379331][ T5624] block nbd1: Receive control failed (result -32) [ 142.473252][ T7910] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 142.606758][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b37f800: rx timeout, send abort [ 142.788149][ T7925] netlink: 'syz.1.602': attribute type 19 has an invalid length. [ 143.108425][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066400000: rx timeout, send abort [ 143.117388][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b37f800: abort rx timeout. Force session deactivation [ 143.145855][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888066400000: connection exists (fe ff). last cmd: 20 [ 143.395822][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b37d000: rx timeout, send abort [ 143.694928][ T7964] bond0 (unregistering): (slave ): Releasing backup interface [ 143.742205][ T7964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.764963][ T7964] bond0 (unregistering): Released all slaves [ 143.904344][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b37d000: abort rx timeout. Force session deactivation [ 144.073222][ T7976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.617'. [ 144.202765][ T7987] IPVS: length: 133 != 8 [ 144.605137][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.625'. [ 145.032384][ T8034] openvswitch: netlink: Duplicate key (type 6). [ 145.104621][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 145.139790][ T8041] netlink: 104 bytes leftover after parsing attributes in process `syz.3.632'. [ 147.226643][ T7995] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.654932][ T8069] tls_set_device_offload: netdev not found [ 148.085471][ T8077] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 148.106245][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 148.144275][ T8077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.251587][ T8056] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 148.982250][ T8106] netlink: 196 bytes leftover after parsing attributes in process `syz.3.651'. [ 149.003323][ T8106] netlink: 244 bytes leftover after parsing attributes in process `syz.3.651'. [ 149.371925][ T8126] openvswitch: netlink: Duplicate or invalid key (type 0). [ 149.400162][ T8125] lo: entered promiscuous mode [ 149.407663][ T8125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.893845][ T8156] IPVS: set_ctl: invalid protocol: 11612 224.0.0.2:21 [ 149.957317][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 149.980912][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 150.198457][ T8178] netlink: 'syz.1.672': attribute type 12 has an invalid length. [ 150.422025][ T8189] netlink: 60 bytes leftover after parsing attributes in process `syz.4.674'. [ 150.461599][ T8189] netlink: 60 bytes leftover after parsing attributes in process `syz.4.674'. [ 150.523458][ T8187] netlink: 'syz.4.674': attribute type 32 has an invalid length. [ 150.542082][ T8187] netlink: 500 bytes leftover after parsing attributes in process `syz.4.674'. [ 150.568029][ T8187] netlink: 44 bytes leftover after parsing attributes in process `syz.4.674'. [ 150.587587][ T8192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.599914][ T8192] bond0: (slave bond2): Enslaving as an active interface with an up link [ 150.617574][ T8192] netlink: 'syz.0.676': attribute type 3 has an invalid length. [ 150.627132][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 150.673798][ T8198] sctp: [Deprecated]: syz.1.677 (pid 8198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.673798][ T8198] Use struct sctp_sack_info instead [ 150.913077][ T8220] netlink: 'syz.1.683': attribute type 10 has an invalid length. [ 151.437673][ T8242] netlink: 'syz.0.688': attribute type 6 has an invalid length. [ 151.513349][ T8248] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 151.528451][ T8248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.988957][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.231529][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.240345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.387554][ T8299] netlink: 'syz.4.704': attribute type 1 has an invalid length. [ 152.451456][ T8303] geneve3: entered promiscuous mode [ 152.726877][ T8320] x_tables: duplicate underflow at hook 1 [ 152.785181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.795290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.233902][ T8353] __nla_validate_parse: 9 callbacks suppressed [ 153.233922][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 153.267686][ T947] net_ratelimit: 2 callbacks suppressed [ 153.267704][ T947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.281736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.337373][ T8354] syzkaller0: entered promiscuous mode [ 153.353723][ T8354] syzkaller0: entered allmulticast mode [ 153.373413][ T8360] tipc: Enabling of bearer rejected, failed to enable media [ 153.547989][ T8367] netlink: 92 bytes leftover after parsing attributes in process `syz.4.721'. [ 153.718428][ T8375] netlink: 256 bytes leftover after parsing attributes in process `syz.3.723'. [ 153.824304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.833142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.899488][ T8376] netlink: 'syz.1.724': attribute type 2 has an invalid length. [ 154.022373][ T8381] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.105944][ T8399] netlink: 'syz.3.728': attribute type 7 has an invalid length. [ 154.310806][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.319279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.502059][ T8426] netlink: 512 bytes leftover after parsing attributes in process `syz.4.735'. [ 154.708776][ T8440] netlink: 550 bytes leftover after parsing attributes in process `syz.1.736'. [ 154.721143][ T8439] netlink: 100 bytes leftover after parsing attributes in process `syz.2.739'. [ 154.758280][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 154.864312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.872939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.905134][ T8447] : renamed from dummy0 (while UP) [ 155.027224][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.061187][ T8457] netlink: 72 bytes leftover after parsing attributes in process `syz.4.745'. [ 155.218958][ T8467] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 155.344592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.559694][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 155.571137][ T8486] netlink: 'syz.3.751': attribute type 7 has an invalid length. [ 155.589010][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 155.669927][ T8486] netlink: 'syz.3.751': attribute type 7 has an invalid length. [ 155.684221][ T173] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.696629][ T173] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.713446][ T173] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.723729][ T173] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.828599][ T8497] netlink: 'syz.3.756': attribute type 2 has an invalid length. [ 155.836916][ T8497] netlink: 'syz.3.756': attribute type 11 has an invalid length. [ 156.719340][ T8541] netlink: 'syz.1.770': attribute type 1 has an invalid length. [ 156.772098][ T8541] 8021q: adding VLAN 0 to HW filter on device bond6 [ 157.008658][ T8563] syzkaller0: entered promiscuous mode [ 157.030955][ T8563] syzkaller0: entered allmulticast mode [ 157.623770][ T8605] syzkaller1: entered promiscuous mode [ 157.636861][ T8605] syzkaller1: entered allmulticast mode [ 158.249133][ T8635] Bluetooth: MGMT ver 1.23 [ 158.273459][ T8635] netlink: 'syz.3.796': attribute type 12 has an invalid length. [ 158.360809][ T8646] __nla_validate_parse: 11 callbacks suppressed [ 158.360828][ T8646] netlink: 100 bytes leftover after parsing attributes in process `syz.1.798'. [ 158.457986][ T8654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 158.483320][ T24] net_ratelimit: 15 callbacks suppressed [ 158.483339][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.497539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.542910][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 159.024506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.033033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.155948][ T8643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.186608][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.511398][ T4999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.519969][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.591912][ T8684] netlink: 'syz.4.809': attribute type 2 has an invalid length. [ 159.600900][ T8684] netlink: 'syz.4.809': attribute type 2 has an invalid length. [ 159.674925][ T8685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.810'. [ 159.819888][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 160.064373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.073993][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.329529][ T8725] xt_TCPMSS: Only works on TCP SYN packets [ 160.398591][ T8728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.623788][ T197] IPVS: starting estimator thread 0... [ 160.754486][ T8745] IPVS: using max 29 ests per chain, 69600 per kthread [ 160.843061][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.912685][ T8749] wg0: entered allmulticast mode [ 161.139774][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 161.336922][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.831'. [ 161.542747][ T8774] netlink: 'syz.0.834': attribute type 1 has an invalid length. [ 161.587956][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 161.647572][ T8780] netlink: 'syz.3.836': attribute type 11 has an invalid length. [ 161.662136][ T8780] netlink: 224 bytes leftover after parsing attributes in process `syz.3.836'. [ 161.675967][ T8776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.835'. [ 161.742809][ T8781] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 161.775907][ T8781] gretap1: entered promiscuous mode [ 161.788245][ T8781] gretap1: entered allmulticast mode [ 161.991154][ T3329] IPVS: starting estimator thread 0... [ 162.025572][ T8796] netlink: 'syz.2.841': attribute type 1 has an invalid length. [ 162.039544][ T8792] netlink: 'syz.3.839': attribute type 1 has an invalid length. [ 162.055212][ T8797] netlink: 256 bytes leftover after parsing attributes in process `syz.4.840'. [ 162.094292][ T8793] IPVS: using max 29 ests per chain, 69600 per kthread [ 162.271424][ T8792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.386193][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 162.594475][ T8823] IPVS: Unknown mcast interface: nr0 [ 162.995256][ T8848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.008898][ T30] audit: type=1800 audit(1787622460.124:4): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.852" name=0A dev="tmpfs" ino=965 res=0 errno=0 [ 163.034657][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 163.039255][ T8848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.464073][ T8875] __nla_validate_parse: 3 callbacks suppressed [ 163.512844][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'. [ 163.660191][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 163.679010][ T24] net_ratelimit: 28 callbacks suppressed [ 163.679029][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.681346][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 163.685302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.976682][ T8903] openvswitch: netlink: EtherType 2 is less than min 600 [ 164.305160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.315169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.342769][ T8916] netlink: 'syz.1.870': attribute type 21 has an invalid length. [ 164.362170][ T8916] netlink: 156 bytes leftover after parsing attributes in process `syz.1.870'. [ 164.716974][ T4999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.725455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.268026][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.348619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.357247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.938833][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.878'. [ 166.489005][ T8949] bond0: entered promiscuous mode [ 166.691617][ T8976] netlink: 'syz.3.886': attribute type 21 has an invalid length. [ 166.721672][ T8976] netlink: 156 bytes leftover after parsing attributes in process `syz.3.886'. [ 166.873462][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.889'. [ 166.910220][ T8984] netlink: 'syz.4.889': attribute type 2 has an invalid length. [ 166.923699][ T8984] netlink: 300 bytes leftover after parsing attributes in process `syz.4.889'. [ 167.092470][ T8996] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 167.313063][ T9004] bridge0: port 3(vlan2) entered blocking state [ 167.319982][ T9007] netlink: 'syz.1.900': attribute type 64 has an invalid length. [ 167.329321][ T9004] bridge0: port 3(vlan2) entered disabled state [ 167.336322][ T9007] netlink: 5 bytes leftover after parsing attributes in process `syz.1.900'. [ 167.345719][ T9004] vlan2: entered allmulticast mode [ 167.352630][ T9004] geneve0: entered allmulticast mode [ 167.363400][ T9004] vlan2: entered promiscuous mode [ 167.369447][ T9004] geneve0: entered promiscuous mode [ 167.736551][ T9035] netlink: 'syz.0.907': attribute type 32 has an invalid length. [ 167.744920][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 167.798789][ T9035] bond3: Setting coupled_control to off (0) [ 168.372281][ T9052] ip6gre1: entered allmulticast mode [ 168.789395][ T9067] net_ratelimit: 16 callbacks suppressed [ 168.789414][ T9067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.876818][ T947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.885872][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.938050][ T9076] netlink: 'syz.2.914': attribute type 2 has an invalid length. [ 169.126381][ T9084] __nla_validate_parse: 1 callbacks suppressed [ 169.126402][ T9084] netlink: 666 bytes leftover after parsing attributes in process `syz.3.916'. [ 169.390572][ T9105] netlink: 56 bytes leftover after parsing attributes in process `syz.3.922'. [ 169.504274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.512889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.533883][ T9110] hsr0: entered allmulticast mode [ 169.541496][ T9110] hsr_slave_0: entered allmulticast mode [ 169.547953][ T9110] hsr_slave_1: entered allmulticast mode [ 169.663225][ T9116] netlink: 60 bytes leftover after parsing attributes in process `syz.3.926'. [ 169.704433][ T9116] netlink: 60 bytes leftover after parsing attributes in process `syz.3.926'. [ 169.744050][ T9116] netlink: 500 bytes leftover after parsing attributes in process `syz.3.926'. [ 169.905695][ T947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.914306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.056932][ T9134] erspan0: entered promiscuous mode [ 170.158427][ T9138] bond3: entered allmulticast mode [ 170.165628][ T9138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.192714][ T9139] bond4: entered allmulticast mode [ 170.200878][ T9139] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.303813][ T9007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.544509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.553439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.945691][ T947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.054938][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'. [ 171.120642][ T9181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.941'. [ 171.260575][ T9188] netlink: 'syz.2.945': attribute type 39 has an invalid length. [ 171.634939][ T9207] netlink: 32 bytes leftover after parsing attributes in process `syz.1.949'. [ 171.823779][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.953'. [ 172.067000][ T9238] netlink: 68 bytes leftover after parsing attributes in process `syz.4.958'. [ 172.307015][ T9252] : renamed from dummy0 [ 172.726863][ T9265] Cannot find add_set index 34 as target [ 172.739388][ T9268] netlink: 'syz.1.966': attribute type 1 has an invalid length. [ 172.856160][ T9273] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.313593][ T9292] bond3: invalid ARP target 0.0.0.0 specified for addition [ 173.354207][ T9292] bond3: option arp_ip_target: invalid value (0) [ 173.407880][ T9292] bond3 (unregistering): Released all slaves [ 174.075143][ T947] net_ratelimit: 25 callbacks suppressed [ 174.075163][ T947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.090029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.166040][ T9329] pim6reg1: entered promiscuous mode [ 174.183494][ T9329] pim6reg1: entered allmulticast mode [ 174.327003][ T48] IPVS: starting estimator thread 0... [ 174.384635][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.455113][ T9338] IPVS: using max 27 ests per chain, 64800 per kthread [ 174.704252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.713374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.105390][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.113822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.152975][ T9372] netlink: 'syz.3.999': attribute type 1 has an invalid length. [ 175.190502][ T9372] netlink: 'syz.3.999': attribute type 16 has an invalid length. [ 175.201365][ T9374] __nla_validate_parse: 16 callbacks suppressed [ 175.201384][ T9374] netlink: 32 bytes leftover after parsing attributes in process `syz.1.998'. [ 175.216012][ T9372] netlink: 'syz.3.999': attribute type 17 has an invalid length. [ 175.405127][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1003'. [ 175.439792][ T9372] hsr0: left allmulticast mode [ 175.459550][ T9372] hsr_slave_0: left allmulticast mode [ 175.467095][ T9372] hsr_slave_1: left allmulticast mode [ 175.551352][ T9372] ipvlan2: left allmulticast mode [ 175.557385][ T9372] batadv_slave_1: left allmulticast mode [ 175.571120][ T9372] gretap1: left promiscuous mode [ 175.577764][ T9372] gretap1: left allmulticast mode [ 175.631977][ T9372] gretap2: left promiscuous mode [ 175.637192][ T9372] gretap2: left allmulticast mode [ 175.652776][ T9372] bond3: left allmulticast mode [ 175.659083][ T9372] bond4: left allmulticast mode [ 175.744239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.754681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.820749][ T9402] batman_adv: batadv0: Adding interface: dummy0 [ 175.840657][ T9402] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.918339][ T9402] batman_adv: batadv0: Interface activated: dummy0 [ 175.974010][ T9405] batadv0: mtu less than device minimum [ 176.622202][ T9432] wireguard0: entered promiscuous mode [ 176.679711][ T9435] xt_ecn: cannot match TCP bits for non-tcp packets [ 176.729766][ T9440] netlink: 'syz.1.1015': attribute type 4 has an invalid length. [ 176.937205][ T9452] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 177.302071][ T9479] netlink: 'syz.1.1023': attribute type 1 has an invalid length. [ 177.328189][ T9479] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1023'. [ 177.593858][ T9488] ksmbd: Unknown IPC event: 4, ignore. [ 177.898026][ T9497] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 178.077171][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1032'. [ 178.098639][ T9503] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1032'. [ 178.201213][ T9504] netlink: 'syz.3.1032': attribute type 12 has an invalid length. [ 178.478743][ T9514] syzkaller1: entered promiscuous mode [ 178.495867][ T9514] syzkaller1: entered allmulticast mode [ 178.763487][ T9522] netlink: 'syz.0.1036': attribute type 1 has an invalid length. [ 178.892189][ T9522] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.957293][ T9532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1039'. [ 179.052987][ T9528] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 179.105239][ T7462] net_ratelimit: 38 callbacks suppressed [ 179.105259][ T7462] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 179.266808][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.275936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.304295][ T197] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 179.372270][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 179.393250][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1041'. [ 179.504776][ T9549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.513265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.524430][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 179.533870][ T9549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.543099][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.553844][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1041'. [ 179.575471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.663171][ T9549] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 180.128123][ T9571] netlink: 'syz.4.1049': attribute type 1 has an invalid length. [ 180.379536][ T9571] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.477747][ T9603] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 180.497148][ T9605] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 180.518502][ T9578] vlan3: entered promiscuous mode [ 180.548747][ T9578] bond3: entered promiscuous mode [ 180.573594][ T9578] vlan3: entered allmulticast mode [ 180.602672][ T9578] bond3: entered allmulticast mode [ 181.570382][ T9660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1070'. [ 182.053433][ T9641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.271784][ T9676] netlink: 'syz.2.1074': attribute type 3 has an invalid length. [ 182.388608][ T9681] tipc: Can't bind to reserved service type 1 [ 182.559889][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 182.867912][ T9700] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1079'. [ 183.614027][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 183.741042][ T9746] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.127256][ T9776] net_ratelimit: 30 callbacks suppressed [ 184.127279][ T9776] openvswitch: netlink: Flow key attr not present in new flow. [ 184.190532][ T9783] netlink: 'syz.1.1096': attribute type 11 has an invalid length. [ 184.491229][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.499731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.682866][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 184.701604][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 184.780283][ T9803] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 184.798081][ T9802] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 185.011171][ T9825] netlink: 'syz.1.1112': attribute type 1 has an invalid length. [ 185.104251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.114279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.175713][ T9825] bond7: entered promiscuous mode [ 185.181433][ T9825] 8021q: adding VLAN 0 to HW filter on device bond7 [ 185.281307][ T9839] 8021q: adding VLAN 0 to HW filter on device bond7 [ 185.313754][ T9830] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 185.323364][ T9839] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 185.336273][ T9839] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 185.364046][ T9839] bond7: (slave ip6gre2): making interface the new active one [ 185.377528][ T9839] ip6gre2: entered promiscuous mode [ 185.385429][ T9839] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 185.505477][ T947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.513857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.852896][ T9860] syzkaller0: entered promiscuous mode [ 185.877802][ T9860] syzkaller0: entered allmulticast mode [ 185.976475][ T9876] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 186.081469][ T9885] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1125'. [ 186.144256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.153055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.350721][ T9896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.358102][ T9896] IPv6: NLM_F_CREATE should be set when creating new route [ 187.270748][ T9941] wireguard0: entered promiscuous mode [ 187.360396][ T9949] netlink: 'syz.4.1144': attribute type 7 has an invalid length. [ 187.972380][ T9972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1148'. [ 187.989124][ T9972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1148'. [ 188.495676][ T9989] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1154'. [ 188.560743][ T9996] netlink: 'syz.4.1156': attribute type 11 has an invalid length. [ 188.792204][T10000] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1158'. [ 188.935844][T10014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1161'. [ 189.264558][ C0] net_ratelimit: 15 callbacks suppressed [ 189.264578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.279349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.591618][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.666602][ T947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.675601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.038248][T10064] atomic_op ffff888034c3a9e0 conn xmit_atomic 0000000000000000 [ 190.304276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.312981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.411047][T10074] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1175'. [ 190.473478][T10074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1175'. [ 190.613764][T10086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1180'. [ 190.707761][ T947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.716927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.791898][T10091] h: entered promiscuous mode [ 190.859329][T10099] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1184'. [ 191.019402][T10106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1186'. [ 191.243768][T10119] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 191.342721][T10119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.349753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.406514][T10124] bond2: (slave batadv_slave_0): Enslaving as a backup interface with an up link [ 191.464277][T10119] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 191.559105][T10132] Bluetooth: hci0: unsupported parameter 5161 [ 191.574255][T10132] Bluetooth: hci0: unsupported parameter 8192 [ 191.583712][T10132] Bluetooth: hci0: unsupported parameter 5161 [ 191.597117][T10132] Bluetooth: hci0: unsupported parameter 8192 [ 191.745077][T10140] nft_compat: unsupported protocol 0 [ 192.109999][T10165] lo speed is unknown, defaulting to 1000 [ 192.132958][T10165] lo speed is unknown, defaulting to 1000 [ 192.187336][T10165] lo speed is unknown, defaulting to 1000 [ 192.209304][T10165] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 192.244342][T10165] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 192.306574][T10165] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 192.389014][T10165] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 192.465115][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.472426][ C0] bridge0: topology change detected, propagating [ 192.501495][T10165] lo speed is unknown, defaulting to 1000 [ 192.531445][T10165] lo speed is unknown, defaulting to 1000 [ 192.552852][T10165] lo speed is unknown, defaulting to 1000 [ 192.576514][T10165] lo speed is unknown, defaulting to 1000 [ 192.586778][T10190] netlink: 'syz.0.1206': attribute type 25 has an invalid length. [ 192.594594][T10165] lo speed is unknown, defaulting to 1000 [ 192.812342][T10206] netlink: 'syz.3.1211': attribute type 1 has an invalid length. [ 192.826153][T10208] netlink: 'syz.3.1211': attribute type 1 has an invalid length. [ 193.001414][T10220] Bluetooth: hci0: unsupported parameter 5134 [ 193.018448][T10220] Bluetooth: hci0: unsupported parameter 8192 [ 193.042840][T10220] Bluetooth: hci0: unsupported parameter 5134 [ 193.053330][T10220] Bluetooth: hci0: unsupported parameter 8192 [ 193.114202][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.121554][ C1] bridge0: topology change detected, propagating [ 193.192301][T10226] sit0: entered promiscuous mode [ 193.203635][T10232] __nla_validate_parse: 37 callbacks suppressed [ 193.203655][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'. [ 193.236883][T10226] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 193.272927][T10226] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1216'. [ 193.319353][T10230] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 193.331659][T10230] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1216'. [ 193.430533][T10238] netlink: 'syz.4.1219': attribute type 7 has an invalid length. [ 193.455101][T10238] netlink: 'syz.4.1219': attribute type 8 has an invalid length. [ 193.734505][T10255] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.742236][T10255] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.792859][T10258] netlink: 'syz.2.1226': attribute type 2 has an invalid length. [ 193.848462][T10261] lo: entered promiscuous mode [ 193.860860][T10261] lo: entered allmulticast mode [ 193.895273][T10261] tunl0: entered promiscuous mode [ 193.916625][T10261] tunl0: entered allmulticast mode [ 193.936773][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 193.962958][T10265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1228'. [ 193.968772][T10261] gre0: entered promiscuous mode [ 193.977623][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 194.018710][T10261] gre0: entered allmulticast mode [ 194.062756][T10261] gretap0: entered promiscuous mode [ 194.084849][T10261] gretap0: entered allmulticast mode [ 194.106390][T10261] erspan0: entered allmulticast mode [ 194.115036][T10261] ip_vti0: entered promiscuous mode [ 194.120305][T10261] ip_vti0: entered allmulticast mode [ 194.128960][T10261] ip6_vti0: entered promiscuous mode [ 194.134436][T10261] ip6_vti0: entered allmulticast mode [ 194.142684][T10261] sit0: entered allmulticast mode [ 194.149915][T10261] ip6tnl0: entered promiscuous mode [ 194.155582][T10261] ip6tnl0: entered allmulticast mode [ 194.164406][T10261] ip6gre0: entered promiscuous mode [ 194.169899][T10261] ip6gre0: entered allmulticast mode [ 194.182313][T10261] syz_tun: entered promiscuous mode [ 194.187809][T10261] syz_tun: entered allmulticast mode [ 194.198388][T10261] ip6gretap0: entered promiscuous mode [ 194.203925][T10261] ip6gretap0: entered allmulticast mode [ 194.215405][T10261] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.226816][T10261] bridge0: entered promiscuous mode [ 194.232126][T10261] bridge0: entered allmulticast mode [ 194.240832][T10261] vcan0: entered promiscuous mode [ 194.246969][T10261] vcan0: entered allmulticast mode [ 194.253287][T10261] bond0: entered promiscuous mode [ 194.258782][T10261] bond_slave_0: entered promiscuous mode [ 194.265012][T10261] bond_slave_1: entered promiscuous mode [ 194.270932][T10261] bond0: entered allmulticast mode [ 194.276256][T10261] bond_slave_0: entered allmulticast mode [ 194.282054][T10261] bond_slave_1: entered allmulticast mode [ 194.294051][T10261] team0: entered promiscuous mode [ 194.299381][T10261] team_slave_0: entered promiscuous mode [ 194.306254][T10261] team_slave_1: entered promiscuous mode [ 194.306279][T10282] net_ratelimit: 15 callbacks suppressed [ 194.306320][T10282] openvswitch: netlink: Tunnel attr 9475 out of range max 16 [ 194.314404][T10261] team0: entered allmulticast mode [ 194.332531][T10261] team_slave_0: entered allmulticast mode [ 194.339259][T10261] team_slave_1: entered allmulticast mode [ 194.348506][T10261] : entered promiscuous mode [ 194.353719][T10261] : entered allmulticast mode [ 194.364059][T10261] nlmon0: entered promiscuous mode [ 194.369692][T10261] nlmon0: entered allmulticast mode [ 194.377067][T10261] batadv0: entered promiscuous mode [ 194.382370][T10261] batadv0: entered allmulticast mode [ 194.389657][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.390289][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.399469][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.417965][T10261] veth0: entered promiscuous mode [ 194.423090][T10261] veth0: entered allmulticast mode [ 194.430926][T10261] veth1: entered promiscuous mode [ 194.436965][T10261] veth1: entered allmulticast mode [ 194.447717][T10261] wg0: entered promiscuous mode [ 194.456215][T10261] wg1: entered promiscuous mode [ 194.461249][T10261] wg1: entered allmulticast mode [ 194.467072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.467911][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.486521][T10261] wg2: entered promiscuous mode [ 194.491485][T10261] wg2: entered allmulticast mode [ 194.499275][T10261] veth1_to_bridge: entered promiscuous mode [ 194.507414][T10261] veth1_to_bridge: entered allmulticast mode [ 194.520869][T10261] veth0_to_bond: entered promiscuous mode [ 194.527245][T10261] veth0_to_bond: entered allmulticast mode [ 194.538300][T10261] veth1_to_bond: entered promiscuous mode [ 194.545053][T10261] veth1_to_bond: entered allmulticast mode [ 194.559712][T10261] veth0_to_team: entered promiscuous mode [ 194.565779][T10261] veth0_to_team: entered allmulticast mode [ 194.576809][T10261] veth1_to_team: entered promiscuous mode [ 194.582697][T10261] veth1_to_team: entered allmulticast mode [ 194.597217][T10261] veth0_to_batadv: entered promiscuous mode [ 194.603289][T10261] veth0_to_batadv: entered allmulticast mode [ 194.612503][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.625868][T10261] batadv_slave_0: entered promiscuous mode [ 194.631850][T10261] batadv_slave_0: entered allmulticast mode [ 194.648504][T10261] veth1_to_batadv: entered promiscuous mode [ 194.656279][T10261] veth1_to_batadv: entered allmulticast mode [ 194.666121][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.673596][T10261] batadv_slave_1: entered promiscuous mode [ 194.679730][T10261] batadv_slave_1: entered allmulticast mode [ 194.688985][T10261] xfrm0: entered promiscuous mode [ 194.695283][T10261] xfrm0: entered allmulticast mode [ 194.702884][T10261] veth0_to_hsr: entered promiscuous mode [ 194.708710][T10261] veth0_to_hsr: entered allmulticast mode [ 194.718900][T10261] hsr_slave_0: entered allmulticast mode [ 194.726666][T10261] veth1_to_hsr: entered promiscuous mode [ 194.732415][T10261] veth1_to_hsr: entered allmulticast mode [ 194.741568][T10261] hsr_slave_1: entered allmulticast mode [ 194.749223][T10261] hsr0: entered promiscuous mode [ 194.754994][T10261] hsr0: entered allmulticast mode [ 194.760916][T10261] veth1_virt_wifi: entered promiscuous mode [ 194.767089][T10261] veth1_virt_wifi: entered allmulticast mode [ 194.777045][T10261] veth0_virt_wifi: entered promiscuous mode [ 194.782996][T10261] veth0_virt_wifi: entered allmulticast mode [ 194.793228][T10261] virt_wifi0: entered promiscuous mode [ 194.800066][T10261] virt_wifi0: entered allmulticast mode [ 194.807522][T10261] veth1_vlan: entered allmulticast mode [ 194.815534][T10261] veth0_vlan: entered allmulticast mode [ 194.825598][T10261] vlan0: entered promiscuous mode [ 194.830823][T10261] vlan0: entered allmulticast mode [ 194.838596][T10261] vlan1: entered promiscuous mode [ 194.843837][T10261] vlan1: entered allmulticast mode [ 194.853943][T10261] macvlan0: entered promiscuous mode [ 194.859392][T10261] macvlan0: entered allmulticast mode [ 194.866608][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.874967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.887285][T10261] macvlan1: entered promiscuous mode [ 194.892644][T10261] macvlan1: entered allmulticast mode [ 194.900393][T10261] ipvlan0: entered promiscuous mode [ 194.905899][T10261] ipvlan0: entered allmulticast mode [ 194.913381][T10261] ipvlan1: entered promiscuous mode [ 194.918753][T10261] ipvlan1: entered allmulticast mode [ 194.928685][T10261] veth1_macvtap: entered allmulticast mode [ 194.938010][T10261] veth0_macvtap: entered allmulticast mode [ 194.948314][T10261] macvtap0: entered promiscuous mode [ 194.953638][T10261] macvtap0: entered allmulticast mode [ 194.961696][T10261] macsec0: entered promiscuous mode [ 194.969042][T10261] macsec0: entered allmulticast mode [ 194.978229][T10261] geneve0: entered promiscuous mode [ 194.983494][T10261] geneve0: entered allmulticast mode [ 194.992426][T10261] geneve1: entered promiscuous mode [ 194.998594][T10261] geneve1: entered allmulticast mode [ 195.007382][T10261] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 195.015171][T10261] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 195.032597][T10261] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 195.040276][T10261] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 195.050765][T10261] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 195.058886][T10261] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 195.069998][T10261] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 195.077747][T10261] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 195.098250][T10261] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 195.106174][T10261] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 195.125488][T10261] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 195.133276][T10261] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 195.142276][T10261] dvmrp0: entered promiscuous mode [ 195.149123][T10261] ipip0: entered promiscuous mode [ 195.154637][T10261] ipip0: entered allmulticast mode [ 195.160940][T10261] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 195.168098][T10261] ipvlan2: entered promiscuous mode [ 195.173469][T10261] ipvlan2: entered allmulticast mode [ 195.181331][T10261] gretap1: entered promiscuous mode [ 195.186931][T10261] gretap1: entered allmulticast mode [ 195.232393][T10261] rose0: entered promiscuous mode [ 195.238041][T10261] rose0: entered allmulticast mode [ 195.251124][T10261] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 195.258291][T10261] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 195.266757][T10261] bond1: entered promiscuous mode [ 195.271838][T10261] bond1: entered allmulticast mode [ 195.277891][T10261] gretap2: entered promiscuous mode [ 195.283144][T10261] gretap2: entered allmulticast mode [ 195.291257][T10261] vxlan0: entered promiscuous mode [ 195.297909][T10261] vxlan0: entered allmulticast mode [ 195.305748][T10261] bridge1: entered promiscuous mode [ 195.311154][T10261] bridge1: entered allmulticast mode [ 195.318310][T10261] veth1_to_team.3: entered promiscuous mode [ 195.324521][T10261] veth1_to_team.3: entered allmulticast mode [ 195.335240][T10261] bond2: entered promiscuous mode [ 195.340355][T10261] bond2: entered allmulticast mode [ 195.346453][T10261] geneve2: entered promiscuous mode [ 195.351696][T10261] geneve2: entered allmulticast mode [ 195.358937][T10261] macsec1: entered promiscuous mode [ 195.364279][T10261] macsec1: entered allmulticast mode [ 195.371477][T10261] bond3: entered promiscuous mode [ 195.377206][T10261] bond3: entered allmulticast mode [ 195.383198][T10261] bond4: entered promiscuous mode [ 195.388377][T10261] bond4: entered allmulticast mode [ 195.394905][T10261] ip6tnl1: entered promiscuous mode [ 195.400177][T10261] ip6tnl1: entered allmulticast mode [ 195.406809][T10261] ip6erspan0: entered promiscuous mode [ 195.412342][T10261] ip6erspan0: entered allmulticast mode [ 195.423695][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 195.427202][ T7463] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.448569][ T24] lo speed is unknown, defaulting to 1000 [ 195.461215][ T24] syz0: Port: 1 Link DOWN [ 195.474838][ T7463] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.504264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.513526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.570382][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 195.582376][ T48] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.618090][ T48] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.649089][ T48] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.665800][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.683338][ T48] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.704840][T10291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1235'. [ 195.716423][ T48] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.742460][ T48] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.761651][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.793567][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.839691][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.880215][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.903597][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 195.916000][ T947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.924599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.648496][T10295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.873837][T10346] syzkaller1: entered promiscuous mode [ 196.889191][T10346] syzkaller1: entered allmulticast mode [ 197.142269][T10360] validate_nla: 3 callbacks suppressed [ 197.142289][T10360] netlink: 'syz.3.1250': attribute type 5 has an invalid length. [ 197.165184][T10360] geneve3: entered promiscuous mode [ 197.170569][T10360] geneve3: entered allmulticast mode [ 197.204327][ T7463] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 197.228516][ T7463] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 197.258465][ T7463] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 197.298662][ T7463] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 197.693512][T10384] ip6t_REJECT: ECHOREPLY is not supported [ 197.725378][T10387] netlink: 'syz.1.1259': attribute type 9 has an invalid length. [ 198.326406][T10411] __nla_validate_parse: 7 callbacks suppressed [ 198.326466][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'. [ 198.798416][T10443] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 199.348428][T10484] net_ratelimit: 16 callbacks suppressed [ 199.348448][T10484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.413596][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 199.481440][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 199.507484][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.517341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.609412][T10487] ovs-system: entered promiscuous mode [ 199.664292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.673790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.683059][T10494] openvswitch: ovs-system: Dropping previously announced user features [ 199.775624][T10501] netlink: 'syz.3.1288': attribute type 1 has an invalid length. [ 199.863319][T10501] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 199.889424][T10501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.065716][ T947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.074139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.324447][T10525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1294'. [ 200.700828][T10546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1302'. [ 200.704965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.770186][T10549] sctp: [Deprecated]: syz.1.1301 (pid 10549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.770186][T10549] Use struct sctp_sack_info instead [ 200.816064][T10556] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1303'. [ 200.882263][T10556] 0: renamed from hsr0 (while UP) [ 200.901994][T10558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 200.917960][T10556] 0: entered allmulticast mode [ 200.928974][T10556] hsr_slave_0: entered allmulticast mode [ 200.959430][T10556] hsr_slave_1: entered allmulticast mode [ 201.001760][T10558] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1304'. [ 201.049660][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 201.081453][T10558] gretap0: entered promiscuous mode [ 201.162466][T10570] tipc: Enabling of bearer rejected, failed to enable media [ 201.402895][T10582] lo speed is unknown, defaulting to 1000 [ 201.630172][ T5275] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.068646][T10621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1317'. [ 202.085795][T10621] geneve2: entered promiscuous mode [ 202.170171][T10582] bond6: option all_slaves_active: invalid value (222) [ 202.189341][T10582] bond6 (unregistering): Released all slaves [ 203.317564][T10691] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 203.403426][T10697] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 203.418552][T10694] syzkaller1: entered promiscuous mode [ 203.427239][T10694] syzkaller1: entered allmulticast mode [ 203.440864][T10694] __nla_validate_parse: 3 callbacks suppressed [ 203.440885][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1336'. [ 203.464575][T10698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1338'. [ 203.863753][T10719] netlink: 'syz.1.1344': attribute type 8 has an invalid length. [ 204.255373][T10746] netlink: 'syz.1.1353': attribute type 2 has an invalid length. [ 204.276564][T10746] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 204.480952][T10757] netlink: 'syz.3.1358': attribute type 3 has an invalid length. [ 204.719724][T10773] netlink: 'syz.1.1363': attribute type 2 has an invalid length. [ 204.731144][T10774] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1364'. [ 204.786121][ T5744] net_ratelimit: 21 callbacks suppressed [ 204.786143][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.847629][T10773] : entered promiscuous mode [ 204.864321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.873291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.265463][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.273966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.284398][ T947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.292782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.370227][T10804] netlink: 'syz.4.1371': attribute type 4 has an invalid length. [ 205.378128][T10804] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1371'. [ 205.914352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.923642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.304893][ T947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.715016][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 206.721185][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 206.723777][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 207.702852][T10776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.327594][T10839] geneve5: entered allmulticast mode [ 208.355439][ T7445] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 208.390023][ T7445] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 208.423452][ T7445] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 208.460272][T10848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1385'. [ 208.482835][T10850] tipc: Enabled bearer , priority 10 [ 208.494966][T10850] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1384'. [ 208.508788][T10850] tipc: Enabling of bearer rejected, already enabled [ 208.648097][T10854] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1387'. [ 208.990378][T10869] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 209.009149][T10869] netlink: 'syz.4.1392': attribute type 2 has an invalid length. [ 209.068143][T10881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1394'. [ 209.206942][T10881] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1394'. [ 209.248929][T10881] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1394'. [ 209.305986][T10887] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 210.023010][T10926] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 210.074397][ C0] net_ratelimit: 28 callbacks suppressed [ 210.074417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.088594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.097759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.106175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.335794][T10938] netlink: 'syz.2.1413': attribute type 1 has an invalid length. [ 210.389693][ T7437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.398290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.464392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.472773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.489730][ T4999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.498203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.537610][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'. [ 210.556265][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 210.565585][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1415'. [ 210.575775][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'. [ 210.654485][ T7437] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.674664][ T7437] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.695147][ T7445] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.726517][ T7445] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.973589][T10957] netlink: 'syz.4.1418': attribute type 1 has an invalid length. [ 211.312141][T10969] unsupported nlmsg_type 40 [ 211.970300][T11016] gre1: entered promiscuous mode [ 211.982624][T11020] v: renamed from veth0_vlan (while UP) [ 212.363287][T11041] netlink: 'syz.1.1443': attribute type 7 has an invalid length. [ 212.391052][T11041] netlink: 'syz.1.1443': attribute type 7 has an invalid length. [ 212.525057][T11046] IPv6: sit1: Disabled Multicast RS [ 212.700798][T11059] netlink: 'syz.2.1448': attribute type 1 has an invalid length. [ 213.627407][T11107] netlink: 'syz.1.1461': attribute type 21 has an invalid length. [ 213.646239][T11107] netlink: 'syz.1.1461': attribute type 22 has an invalid length. [ 213.673771][T11107] netlink: 'syz.1.1461': attribute type 23 has an invalid length. [ 213.698058][T11109] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 213.704053][T11107] __nla_validate_parse: 16 callbacks suppressed [ 213.705824][T11107] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1461'. [ 213.728243][T11109] bond3 (unregistering): Released all slaves [ 213.819337][T11116] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 213.922017][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 213.942234][T11122] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1464'. [ 214.075034][T11132] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1466'. [ 214.180916][T11136] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1466'. [ 214.279628][T11087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.422434][T11149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1470'. [ 214.733986][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1475'. [ 214.815914][T11177] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 215.264484][ C0] net_ratelimit: 39 callbacks suppressed [ 215.264506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.278680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.287548][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.295886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.664599][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.673040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.681262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.689414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.828494][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.144721][ T7437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.389691][T11155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.646998][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 218.343119][T11233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1496'. [ 218.396822][T11237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1498'. [ 218.632735][T11247] nft_compat: unsupported protocol 0 [ 218.677513][T11244] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 218.717463][T11251] nft_compat: unsupported protocol 0 [ 218.763637][T11247] IPv6: sit2: Disabled Multicast RS [ 218.990040][T11263] __nla_validate_parse: 1 callbacks suppressed [ 218.990072][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 219.042289][T11259] validate_nla: 1 callbacks suppressed [ 219.042309][T11259] netlink: 'syz.1.1504': attribute type 2 has an invalid length. [ 219.730866][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1518'. [ 219.817602][T11307] xt_ecn: cannot match TCP bits for non-tcp packets [ 219.840495][T11309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1521'. [ 219.872920][T11309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1521'. [ 219.880536][T11307] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1520'. [ 219.905210][T11309] netlink: 'syz.3.1521': attribute type 4 has an invalid length. [ 219.929451][T11312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1521'. [ 220.170097][T11322] netlink: 'syz.2.1524': attribute type 2 has an invalid length. [ 220.192249][T11322] netlink: 'syz.2.1524': attribute type 8 has an invalid length. [ 220.204829][T11322] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1524'. [ 220.305572][T11328] geneve2: entered promiscuous mode [ 220.320186][T11328] geneve2: entered allmulticast mode [ 220.464483][ C0] net_ratelimit: 48 callbacks suppressed [ 220.464502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.478760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.865983][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.874472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.882864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.301782][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 221.330679][T11379] tipc: Started in network mode [ 221.359560][T11379] tipc: Node identity ac14140f, cluster identity 4711 [ 221.390559][T11379] tipc: New replicast peer: 255.255.255.255 [ 221.410063][T11379] tipc: Enabled bearer , priority 10 [ 221.423820][T11393] netlink: 'syz.3.1541': attribute type 13 has an invalid length. [ 221.440210][T11381] syzkaller0: left promiscuous mode [ 221.458835][T11392] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1544'. [ 221.468338][T11381] syzkaller0: left allmulticast mode [ 221.504308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.512693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.556400][T11392] siw: device registration error -23 [ 221.642867][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 221.653545][T11392] ip6gre3: entered allmulticast mode [ 221.667200][ T48] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 221.905904][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.914278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.922443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.526508][ T5724] tipc: Node number set to 2886997007 [ 224.896189][T11415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.138059][T11486] ip6erspan0: entered allmulticast mode [ 225.167121][T11491] netlink: 'syz.1.1573': attribute type 2 has an invalid length. [ 225.184298][T11491] netlink: 'syz.1.1573': attribute type 2 has an invalid length. [ 225.341902][T11498] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 225.504291][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 225.664415][ C0] net_ratelimit: 19 callbacks suppressed [ 225.664434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.678660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.724438][T11518] __nla_validate_parse: 7 callbacks suppressed [ 225.724455][T11518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1579'. [ 225.907082][T11529] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1584'. [ 225.926800][T11529] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1584'. [ 226.064519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.072743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.081125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.173906][T11539] can: request_module (can-proto-0) failed. [ 226.343790][T11548] bond1: (slave vlan2): Releasing active interface [ 226.436381][T11548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.498172][T11548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.597100][T11548] bond0 (unregistering): (slave bond2): Releasing backup interface [ 226.645484][T11548] bond0 (unregistering): Released all slaves [ 226.680094][T11571] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1594'. [ 226.707533][T11571] gretap0: entered promiscuous mode [ 226.714420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.722837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.733294][T11574] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1594'. [ 226.745825][T11574] 0{X: renamed from gretap0 [ 226.756106][T11574] 0{X: left promiscuous mode [ 226.767473][T11574] 0{X: entered allmulticast mode [ 226.788316][T11574] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 227.010210][T11583] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1598'. [ 227.104400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.112772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.359984][T11603] syz_tun: refused to change device tx_queue_len [ 227.674557][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1609'. [ 227.800071][T11632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1613'. [ 227.829476][T11632] netlink: 'syz.3.1613': attribute type 2 has an invalid length. [ 227.924919][T11627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1612'. [ 228.119194][T11644] xt_hashlimit: invalid interval [ 228.120039][T11640] xt_hashlimit: invalid interval [ 228.137286][T11648] netlink: 'syz.4.1617': attribute type 21 has an invalid length. [ 228.150603][T11648] IPv6: NLM_F_CREATE should be specified when creating new route [ 228.160717][T11648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.168061][T11648] IPv6: NLM_F_CREATE should be set when creating new route [ 228.175412][T11648] IPv6: NLM_F_CREATE should be set when creating new route [ 228.182661][T11648] IPv6: NLM_F_CREATE should be set when creating new route [ 228.321900][T11654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1619'. [ 228.340949][T11654] geneve6: entered promiscuous mode [ 230.865021][ C0] net_ratelimit: 21 callbacks suppressed [ 230.865038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.879136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.264421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.272609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.280914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.914436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.922720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.304471][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.314352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.322594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.784408][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 235.985302][ T7447] net_ratelimit: 18 callbacks suppressed [ 235.985323][ T7447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.064412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.072706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.464386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.472607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.480932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.104516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.112872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.504391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.512682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.105560][ T12] net_ratelimit: 18 callbacks suppressed [ 241.105583][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.264371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.272661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.664359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.672549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.680877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.745852][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.304700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.313025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.704386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.771253][ T50] Bluetooth: hci4: link tx timeout [ 244.776593][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 246.464407][ C0] net_ratelimit: 19 callbacks suppressed [ 246.464423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.478473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.864596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.872764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.880957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.889275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.898541][ T4929] Bluetooth: hci4: command 0x0406 tx timeout [ 247.504460][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 247.510151][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.521379][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.529543][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.904327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.664346][ C0] net_ratelimit: 19 callbacks suppressed [ 251.664373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.678519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.985504][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.064308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.072507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.080829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.704418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.712724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.104416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.112703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.825729][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.864317][ C0] net_ratelimit: 19 callbacks suppressed [ 256.864338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.878495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.953453][T11827] bond0: entered allmulticast mode [ 257.264396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.272665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.281002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.596325][T11857] __nla_validate_parse: 1 callbacks suppressed [ 257.596350][T11857] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1644'. [ 257.654410][T11857] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1644'. [ 257.742357][T11863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1646'. [ 257.765403][ T7437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.889136][T11875] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1651'. [ 257.914433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.922934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.083905][T11878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1653'. [ 258.269444][T11892] ip_tables: iptables: counters copy to user failed while replacing table [ 258.306207][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.580969][T11917] gre0: left promiscuous mode [ 258.591573][T11917] gre0: left allmulticast mode [ 258.859240][T11921] lo speed is unknown, defaulting to 1000 [ 258.872813][T11924] lo speed is unknown, defaulting to 1000 [ 259.072516][T11939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1671'. [ 259.300885][T11943] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 259.562049][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 259.758415][T11962] syzkaller1: entered promiscuous mode [ 259.781272][T11962] syzkaller1: entered allmulticast mode [ 260.039727][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 260.072884][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 260.152760][T11970] lo speed is unknown, defaulting to 1000 [ 260.226519][T11984] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1685'. [ 260.518624][T12001] wg0: entered allmulticast mode [ 260.533107][T12001] wg0: left allmulticast mode [ 260.954312][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.159618][T12033] 1: renamed from c0 (while UP) [ 261.176006][T12038] netlink: 'syz.3.1697': attribute type 10 has an invalid length. [ 261.309131][T12038] veth0_to_bond: left promiscuous mode [ 261.322876][T12038] veth0_to_bond: left allmulticast mode [ 261.335174][T12038] veth0_to_bond: entered promiscuous mode [ 261.343700][T12038] veth0_to_bond: entered allmulticast mode [ 261.350537][T12038] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 261.569892][T12046] macvtap1: entered promiscuous mode [ 261.576362][T12046] vlan0: entered promiscuous mode [ 261.583112][T12046] macvtap1: entered allmulticast mode [ 261.598355][T12046] vlan0: entered allmulticast mode [ 261.603697][T12046] veth0_vlan: entered allmulticast mode [ 261.729936][T12058] syzkaller0: entered promiscuous mode [ 261.736239][T12058] syzkaller0: entered allmulticast mode [ 262.064429][ C0] net_ratelimit: 21 callbacks suppressed [ 262.064453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.078625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.388400][T12065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.464418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.472919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.481238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.104458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.112904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.504461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.512837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.580833][T12077] __nla_validate_parse: 8 callbacks suppressed [ 263.580855][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'. [ 263.598448][T12077] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1711'. [ 263.611310][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1711'. [ 263.712101][T12008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.883127][T12081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1713'. [ 264.078337][T12089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1715'. [ 264.127527][T12096] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 264.603226][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'. [ 264.893448][T12121] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 265.141558][ T7438] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 265.208991][T12138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.278128][T12147] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1729'. [ 265.691315][T12162] can: request_module (can-proto-0) failed. [ 265.801292][T12176] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1736'. [ 266.099639][T12186] pim6reg1: entered promiscuous mode [ 266.135844][T12186] pim6reg1: entered allmulticast mode [ 266.213236][T12190] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1743'. [ 266.473946][T12195] bond5: entered allmulticast mode [ 266.505599][T12195] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.969464][T12222] IPv6: sit2: Disabled Multicast RS [ 267.185233][ T5744] net_ratelimit: 25 callbacks suppressed [ 267.185253][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.223437][T12226] scsi_nl_rcv_msg: discarding partial skb [ 267.264420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.272847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.345975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.399899][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'. [ 267.611642][T12242] macvlan0: entered promiscuous mode [ 267.664421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.672779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.684767][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.261394][T12252] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 268.304448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.313120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.272049][T12198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.265965][T12283] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1766'. [ 270.325315][T12272] syz.2.1762 (12272) used greatest stack depth: 17664 bytes left [ 270.348217][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1767'. [ 270.711729][T12306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1771'. [ 271.255569][T12327] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1774'. [ 272.464347][ C0] net_ratelimit: 22 callbacks suppressed [ 272.464371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.478500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.864384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.872756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.881815][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.500243][T12296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.509326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.509530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.710228][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1776'. [ 273.904262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.912471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.920820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.992836][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 274.157817][T12353] xt_hashlimit: size too large, truncated to 1048576 [ 274.221220][T12358] xt_TPROXY: Can be used only with -p tcp or -p udp [ 274.287091][T12358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.608315][T12368] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 275.692150][T12419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1802'. [ 276.795080][T12432] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1806'. [ 276.992423][T12439] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1808'. [ 277.031448][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 277.082974][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 277.346093][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1814'. [ 277.584354][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 277.593338][ T7439] net_ratelimit: 19 callbacks suppressed [ 277.593356][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.664296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.672741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.738216][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 277.806503][T12476] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 278.064637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.072859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.081197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.459510][T12494] tipc: Failed to remove unknown binding: 66,0,0/0:537695692/537695693 [ 278.542445][T12505] tipc: Failed to remove unknown binding: 66,0,0/0:537695692/537695693 [ 278.704275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.712740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.906374][T12512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.225665][T12521] netlink: 'syz.1.1829': attribute type 4 has an invalid length. [ 279.253355][T12521] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1829'. [ 279.761124][T12545] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 279.882474][T12545] xt_hashlimit: size too large, truncated to 1048576 [ 280.093753][T12557] netlink: 'syz.0.1838': attribute type 1 has an invalid length. [ 280.122091][T12557] netlink: 'syz.0.1838': attribute type 16 has an invalid length. [ 280.148089][T12557] netlink: 'syz.0.1838': attribute type 17 has an invalid length. [ 280.223128][T12557] gretap0: left promiscuous mode [ 280.394890][T12557] macvlan0: left promiscuous mode [ 280.450242][T12557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.486098][T12557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 280.502138][T12557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 280.512640][T12557] ip6gre1: left allmulticast mode [ 280.768577][ T7437] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 280.885453][ T7437] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.907446][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1844'. [ 280.926072][ T7438] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.970596][ T7438] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.102929][T12592] x_tables: duplicate underflow at hook 2 [ 281.151547][T12595] macvtap0: left promiscuous mode [ 281.166337][T12595] macvtap0: left allmulticast mode [ 281.176877][T12597] netlink: 'syz.0.1850': attribute type 25 has an invalid length. [ 281.723252][T12616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1855'. [ 282.351212][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'. [ 282.627289][ T7439] net_ratelimit: 49 callbacks suppressed [ 282.627311][ T7439] bond4: (slave gretap1): failed to get link speed/duplex [ 282.794562][ T12] bond4: (slave gretap1): failed to get link speed/duplex [ 282.864567][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.873020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.936829][ T7439] bond4: (slave gretap1): failed to get link speed/duplex [ 283.075887][ T7463] bond4: (slave gretap1): failed to get link speed/duplex [ 283.214280][ T7439] bond4: (slave gretap1): failed to get link speed/duplex [ 283.273916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.282276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.292394][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.313693][T12682] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1867'. [ 285.864272][T12669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.291139][T12712] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1879'. [ 286.943334][T12733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1885'. [ 287.049126][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1885'. [ 287.109115][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 287.565919][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'. [ 287.654309][ T48] net_ratelimit: 55 callbacks suppressed [ 287.654332][ T48] bond4: (slave gretap1): failed to get link speed/duplex [ 287.834509][ T48] bond4: (slave gretap1): failed to get link speed/duplex [ 287.965513][ T7437] bond4: (slave gretap1): failed to get link speed/duplex [ 288.064321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.072739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.131425][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1894'. [ 288.177206][T12770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1894'. [ 288.187078][ T7438] bond4: (slave gretap1): failed to get link speed/duplex [ 288.337863][ T7437] bond4: (slave gretap1): failed to get link speed/duplex [ 288.464369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.472707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.484747][ T7437] bond4: (slave gretap1): failed to get link speed/duplex [ 288.868730][T12795] netlink: 'syz.2.1901': attribute type 2 has an invalid length. [ 289.108347][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 289.797526][T12827] netlink: 'syz.4.1907': attribute type 7 has an invalid length. [ 290.893038][T12853] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1920'. [ 291.383656][T12878] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 291.605326][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 291.617490][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 291.637799][ T7445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.658617][ T7445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.922544][T12901] trusted_key: syz.0.1933 sent an empty control message without MSG_MORE. [ 292.499442][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1936'. [ 292.674556][ T12] net_ratelimit: 57 callbacks suppressed [ 292.674578][ T12] bond4: (slave gretap1): failed to get link speed/duplex [ 292.719669][T12904] erspan0: entered promiscuous mode [ 292.742583][T12922] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 292.758958][T12904] erspan0: entered allmulticast mode [ 292.868963][ T12] bond4: (slave gretap1): failed to get link speed/duplex [ 292.961278][T12930] Bluetooth: hci0: unsupported parameter 5161 [ 292.986352][T12930] Bluetooth: hci0: unsupported parameter 8192 [ 293.011679][T12930] Bluetooth: hci0: unsupported parameter 5161 [ 293.065613][ T7438] bond4: (slave gretap1): failed to get link speed/duplex [ 293.078834][T12930] Bluetooth: hci0: unsupported parameter 8192 [ 293.264451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.272907][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.356847][T12942] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1945'. [ 293.367359][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.400585][T12943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.416068][ T12] bond4: (slave gretap1): failed to get link speed/duplex [ 293.504203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.536806][ T12] bond4: (slave gretap1): failed to get link speed/duplex [ 293.773332][T12955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1951'. [ 294.769769][T12982] rdma_op ffff8880312fea38 conn xmit_rdma 0000000000000000 [ 294.773651][T12985] rdma_op ffff88805482c238 conn xmit_rdma 0000000000000000 [ 294.872888][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1960'. [ 294.916192][T12991] netlink: 'syz.4.1960': attribute type 10 has an invalid length. [ 294.932854][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1960'. [ 294.979953][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 296.021859][T13027] netlink: 'syz.4.1967': attribute type 28 has an invalid length. [ 296.049856][T13027] netlink: 'syz.4.1967': attribute type 3 has an invalid length. [ 296.079278][T13027] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1967'. [ 296.269597][T13033] netlink: 'syz.0.1969': attribute type 2 has an invalid length. [ 296.355396][T13035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1970'. [ 296.487809][T13033] lo speed is unknown, defaulting to 1000 [ 296.645178][T13045] ieee802154 phy0 wpan0: encryption failed: -22 [ 297.122351][T13066] netlink: 'syz.0.1980': attribute type 1 has an invalid length. [ 297.337905][T13066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.491857][T13067] bond0: (slave gretap2): Enslaving as a backup interface with an up link [ 297.549460][T13071] nbd2: detected capacity change from 0 to 63 [ 297.613283][ T50] block nbd2: Receive control failed (result -32) [ 297.655403][ T25] block nbd2: Dead connection, failed to find a fallback [ 297.666337][ T25] block nbd2: shutting down sockets [ 297.673467][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 297.687454][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 297.696248][ T7438] net_ratelimit: 45 callbacks suppressed [ 297.696268][ T7438] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 297.716382][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 297.732179][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 297.742901][ T25] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 297.757153][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 297.766877][ T25] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 297.777670][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 297.788827][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 297.800164][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 297.809588][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 297.824782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.829307][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 297.833326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.842181][ T48] bond4: (slave gretap1): failed to get link speed/duplex [ 297.861393][ T25] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 297.872412][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 297.883545][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 297.898987][ T1611] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 297.912518][ T1611] Buffer I/O error on dev nbd2, logical block 0, async page read [ 297.923343][ T1611] Buffer I/O error on dev nbd2, logical block 1, async page read [ 297.937221][ T1611] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 297.948076][ T1611] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 297.978096][T12020] ldm_validate_partition_table(): Disk read failed. [ 297.990600][ T48] bond4: (slave gretap1): failed to get link speed/duplex [ 298.006691][T13086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1985'. [ 298.042083][T13091] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1986'. [ 298.054310][T12020] Dev nbd2: unable to read RDB block 0 [ 298.067423][ T7447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.076601][T12020] nbd2: unable to read partition table [ 298.142502][T12020] ldm_validate_partition_table(): Disk read failed. [ 298.186575][T12020] Dev nbd2: unable to read RDB block 0 [ 298.203827][T12020] nbd2: unable to read partition table [ 298.266416][ T7439] bond4: (slave gretap1): failed to get link speed/duplex [ 298.405876][ T7437] bond4: (slave gretap1): failed to get link speed/duplex [ 298.464450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.473005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.579865][T13115] xt_TCPMSS: Only works on TCP SYN packets [ 298.768427][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1996'. [ 299.659720][T13163] netlink: 'syz.4.2007': attribute type 10 has an invalid length. [ 299.685047][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2007'. [ 299.697321][T13165] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2008'. [ 300.078214][T13176] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2012'. [ 300.125758][T13176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2012'. [ 300.185398][T13176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2012'. [ 300.206236][T13176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2012'. [ 300.292326][T13180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2013'. [ 302.720055][ T48] net_ratelimit: 54 callbacks suppressed [ 302.720076][ T48] bond4: (slave gretap1): failed to get link speed/duplex [ 302.770249][T13279] netlink: 'syz.1.2040': attribute type 1 has an invalid length. [ 302.904560][ T7437] bond4: (slave gretap1): failed to get link speed/duplex [ 302.973560][T13289] netlink: 'syz.0.2042': attribute type 4 has an invalid length. [ 303.024458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.032869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.047121][T13289] __nla_validate_parse: 11 callbacks suppressed [ 303.047140][T13289] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2042'. [ 303.187540][ T7445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.206601][ T7438] bond4: (slave gretap1): failed to get link speed/duplex [ 303.394471][ T7437] bond4: (slave gretap1): failed to get link speed/duplex [ 303.514259][ T7437] bond4: (slave gretap1): failed to get link speed/duplex [ 303.637527][ T48] bond4: (slave gretap1): failed to get link speed/duplex [ 303.661336][T13309] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2046'. [ 303.674694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.927136][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'. [ 303.941197][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 304.437663][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2053'. [ 304.591208][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2056'. [ 304.602903][T13340] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2056'. [ 305.593688][T13279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.656799][T13348] netlink: 'syz.4.2057': attribute type 1 has an invalid length. [ 305.689322][T13348] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2057'. [ 305.715292][T13348] netlink: 'syz.4.2057': attribute type 1 has an invalid length. [ 306.341538][T13384] netlink: 'syz.4.2066': attribute type 10 has an invalid length. [ 306.373422][T13384] veth1_macvtap: left promiscuous mode [ 306.478949][T13384] netlink: 'syz.4.2066': attribute type 1 has an invalid length. [ 306.569453][T13390] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2069'. [ 306.611288][T13393] netlink: 'syz.0.2071': attribute type 1 has an invalid length. [ 307.112523][T13408] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 307.132539][T13409] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 307.286236][T13419] netlink: 'syz.3.2077': attribute type 1 has an invalid length. [ 307.592628][T13431] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2080'. [ 307.726129][T13419] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.824310][ C0] net_ratelimit: 49 callbacks suppressed [ 307.824333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.838605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.993364][T13428] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 308.096518][T13428] bond6: (slave batadv1): making interface the new active one [ 308.218146][T13428] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 308.227183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.227340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.329560][ T7439] bond4: (slave gretap1): failed to get link speed/duplex [ 308.351405][T13459] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20001 [ 308.477393][ T7439] bond4: (slave gretap1): failed to get link speed/duplex [ 308.624906][ T7438] bond4: (slave gretap1): failed to get link speed/duplex [ 308.665173][T13466] __nla_validate_parse: 1 callbacks suppressed [ 308.665194][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2085'. [ 308.748302][ T7438] bond4: (slave gretap1): failed to get link speed/duplex [ 308.864279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.872727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.913016][T13466] ip6erspan1: entered promiscuous mode [ 309.620616][T13506] x_tables: duplicate underflow at hook 2 [ 309.899440][T13511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2099'. [ 310.355886][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2101'. [ 310.375535][T13525] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2102'. [ 310.396942][T13524] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2101'. [ 311.017341][T13541] SET target dimension over the limit! [ 311.253056][T13547] wireguard: wg2: Could not create IPv4 socket [ 311.679753][T13556] netlink: 'syz.4.2110': attribute type 39 has an invalid length. [ 311.703962][T13557] netlink: 'syz.1.2109': attribute type 1 has an invalid length. [ 311.755060][T13557] netlink: 'syz.1.2109': attribute type 11 has an invalid length. [ 311.792255][T13559] netlink: 404 bytes leftover after parsing attributes in process `syz.4.2110'. [ 311.802213][T13557] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2109'. [ 311.830684][T13559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2110'. [ 311.905407][T13559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2110'. [ 311.978888][T13559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2110'. [ 312.277477][T13574] netlink: 'syz.1.2113': attribute type 1 has an invalid length. [ 312.623414][T13576] bond9: (slave veth9): Enslaving as an active interface with a down link [ 312.708457][T13578] 8021q: adding VLAN 0 to HW filter on device bond9 [ 312.768666][T13581] bridge0: left promiscuous mode [ 312.831637][T13581] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.838955][T13581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.020820][T13581] gretap1: left promiscuous mode [ 313.026279][ C0] net_ratelimit: 43 callbacks suppressed [ 313.026300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.070448][T13581] wireguard0: left promiscuous mode [ 313.086905][T13581] geneve2: left promiscuous mode [ 313.115675][ T7445] bond4: (slave gretap1): failed to get link speed/duplex [ 313.246993][ T7447] bond4: (slave gretap1): failed to get link speed/duplex [ 313.400431][ T7447] bond4: (slave gretap1): failed to get link speed/duplex [ 313.424500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.435106][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.567034][ T7445] bond4: (slave gretap1): failed to get link speed/duplex [ 313.715045][ T7447] bond4: (slave gretap1): failed to get link speed/duplex [ 313.821369][T13620] __nla_validate_parse: 2 callbacks suppressed [ 313.821390][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2127'. [ 313.934998][ T7447] bond4: (slave gretap1): failed to get link speed/duplex [ 313.942511][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.220716][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 314.230629][T13639] syz_tun: entered allmulticast mode [ 314.279969][T13633] dvmrp8: entered allmulticast mode [ 314.609332][T13646] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2132'. [ 314.677334][T13650] [ 314.679735][T13650] ====================================================== [ 314.686808][T13650] WARNING: possible circular locking dependency detected [ 314.693892][T13650] syzkaller #0 Not tainted [ 314.698333][T13650] ------------------------------------------------------ [ 314.705383][T13650] syz.0.2133/13650 is trying to acquire lock: [ 314.707211][T13646] 0: renamed from hsr0 (while UP) [ 314.711512][T13650] ffff88801c2b7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 314.711588][T13650] [ 314.711588][T13650] but task is already holding lock: [ 314.711598][T13650] ffffffff8e9e76f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 314.711660][T13650] [ 314.711660][T13650] which lock already depends on the new lock. [ 314.711660][T13650] [ 314.711669][T13650] [ 314.711669][T13650] the existing dependency chain (in reverse order) is: [ 314.711678][T13650] [ 314.711678][T13650] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 314.711712][T13650] cpus_read_lock+0x42/0x160 [ 314.711734][T13650] static_key_slow_inc+0x12/0x30 [ 314.711763][T13650] nbd_genl_reconfigure+0x1301/0x1e80 [ 314.711793][T13650] genl_family_rcv_msg_doit+0x233/0x340 [ 314.711824][T13650] genl_rcv_msg+0x614/0x7a0 [ 314.799649][T13650] netlink_rcv_skb+0x226/0x4a0 [ 314.804978][T13650] genl_rcv+0x28/0x40 [ 314.809564][T13650] netlink_unicast+0x7bd/0x940 [ 314.814897][T13650] netlink_sendmsg+0x813/0xb40 [ 314.820213][T13650] sock_sendmsg_nosec+0x13a/0x180 [ 314.825800][T13650] ____sys_sendmsg+0x54e/0x850 [ 314.831177][T13650] ___sys_sendmsg+0x2a5/0x360 [ 314.836426][T13650] __x64_sys_sendmsg+0x1b1/0x290 [ 314.841931][T13650] do_syscall_64+0x166/0x520 [ 314.847091][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.853605][T13650] [ 314.853605][T13650] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 314.861301][T13650] __mutex_lock+0x19d/0x1550 [ 314.866455][T13650] nbd_queue_rq+0x373/0x1150 [ 314.871630][T13650] blk_mq_dispatch_rq_list+0x499/0x1990 [ 314.877768][T13650] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 314.884660][T13650] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 314.891228][T13650] blk_mq_run_work_fn+0x16c/0x300 [ 314.896819][T13650] process_scheduled_works+0xa88/0x14c0 [ 314.902941][T13650] worker_thread+0xa47/0xfb0 [ 314.908089][T13650] kthread+0x38b/0x480 [ 314.912738][T13650] ret_from_fork+0x514/0xb70 [ 314.917888][T13650] ret_from_fork_asm+0x1a/0x30 [ 314.923225][T13650] [ 314.923225][T13650] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 314.930475][T13650] __mutex_lock+0x19d/0x1550 [ 314.935631][T13650] nbd_queue_rq+0xc1/0x1150 [ 314.940712][T13650] blk_mq_dispatch_rq_list+0x499/0x1990 [ 314.946820][T13650] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 314.953708][T13650] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 314.960245][T13650] blk_mq_run_work_fn+0x16c/0x300 [ 314.965824][T13650] process_scheduled_works+0xa88/0x14c0 [ 314.971962][T13650] worker_thread+0xa47/0xfb0 [ 314.977111][T13650] kthread+0x38b/0x480 [ 314.981748][T13650] ret_from_fork+0x514/0xb70 [ 314.986905][T13650] ret_from_fork_asm+0x1a/0x30 [ 314.992231][T13650] [ 314.992231][T13650] -> #4 (set->srcu){.+.+}-{0:0}: [ 314.999403][T13650] __synchronize_srcu+0xc9/0x2f0 [ 315.004923][T13650] elevator_switch+0x1e8/0x7b0 [ 315.010247][T13650] elevator_change+0x2fa/0x480 [ 315.015596][T13650] elevator_set_default+0x375/0x440 [ 315.021361][T13650] blk_register_queue+0x3f3/0x4e0 [ 315.026948][T13650] __add_disk+0x6cb/0xe30 [ 315.031834][T13650] add_disk_fwnode+0x100/0x3a0 [ 315.037169][T13650] nbd_dev_add+0x733/0xb60 [ 315.042146][T13650] nbd_init+0x15f/0x1e0 [ 315.046876][T13650] do_one_initcall+0x250/0x870 [ 315.052265][T13650] do_initcall_level+0x10a/0x1a0 [ 315.057764][T13650] do_initcalls+0x59/0xa0 [ 315.062743][T13650] kernel_init_freeable+0x29d/0x3e0 [ 315.068505][T13650] kernel_init+0x22/0x1d0 [ 315.073399][T13650] ret_from_fork+0x514/0xb70 [ 315.078564][T13650] ret_from_fork_asm+0x1a/0x30 [ 315.083904][T13650] [ 315.083904][T13650] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 315.091776][T13650] __mutex_lock+0x19d/0x1550 [ 315.096937][T13650] elevator_change+0x1af/0x480 [ 315.102313][T13650] elevator_set_none+0xb5/0x140 [ 315.107731][T13650] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 315.114099][T13650] nbd_start_device+0x189/0xb30 [ 315.119513][T13650] nbd_genl_connect+0x1597/0x1c10 [ 315.125104][T13650] genl_family_rcv_msg_doit+0x233/0x340 [ 315.131215][T13650] genl_rcv_msg+0x614/0x7a0 [ 315.136287][T13650] netlink_rcv_skb+0x226/0x4a0 [ 315.141609][T13650] genl_rcv+0x28/0x40 [ 315.146159][T13650] netlink_unicast+0x7bd/0x940 [ 315.151501][T13650] netlink_sendmsg+0x813/0xb40 [ 315.156827][T13650] sock_sendmsg_nosec+0x13a/0x180 [ 315.162417][T13650] ____sys_sendmsg+0x54e/0x850 [ 315.167746][T13650] ___sys_sendmsg+0x2a5/0x360 [ 315.172989][T13650] __x64_sys_sendmsg+0x1b1/0x290 [ 315.178493][T13650] do_syscall_64+0x166/0x520 [ 315.183645][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.190137][T13650] [ 315.190137][T13650] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 315.198801][T13650] blk_alloc_queue+0x544/0x690 [ 315.204146][T13650] __blk_mq_alloc_disk+0x194/0x390 [ 315.209857][T13650] nbd_dev_add+0x494/0xb60 [ 315.214855][T13650] nbd_init+0x15f/0x1e0 [ 315.219588][T13650] do_one_initcall+0x250/0x870 [ 315.224955][T13650] do_initcall_level+0x10a/0x1a0 [ 315.230455][T13650] do_initcalls+0x59/0xa0 [ 315.235341][T13650] kernel_init_freeable+0x29d/0x3e0 [ 315.241106][T13650] kernel_init+0x22/0x1d0 [ 315.246007][T13650] ret_from_fork+0x514/0xb70 [ 315.251167][T13650] ret_from_fork_asm+0x1a/0x30 [ 315.256541][T13650] [ 315.256541][T13650] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 315.263820][T13650] fs_reclaim_acquire+0x71/0x100 [ 315.269333][T13650] kmem_cache_alloc_noprof+0x64/0x5f0 [ 315.274475][T13659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2134'. [ 315.284190][T13650] __kernfs_iattrs+0xdd/0x380 [ 315.284229][T13650] kernfs_iop_setattr+0xe6/0x3f0 [ 315.284260][T13650] notify_change+0xbba/0xea0 [ 315.284282][T13650] do_truncate+0x1c2/0x250 [ 315.284312][T13650] path_openat+0x15b5/0x1d60 [ 315.284330][T13650] do_file_open+0x23e/0x4a0 [ 315.284348][T13650] do_sys_openat2+0x115/0x200 [ 315.284372][T13650] __x64_sys_openat+0x138/0x170 [ 315.284397][T13650] do_syscall_64+0x166/0x520 [ 315.284423][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.284444][T13650] [ 315.284444][T13650] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 315.284482][T13650] __lock_acquire+0x1520/0x2cf0 [ 315.284512][T13650] lock_acquire+0x106/0x350 [ 315.284539][T13650] down_read+0x4a/0x330 [ 315.284565][T13650] kernfs_iop_permission+0x7f/0x430 [ 315.284597][T13650] inode_permission+0x3de/0x5f0 [ 315.284622][T13650] cgroup_attach_permissions+0x28e/0x9f0 [ 315.284651][T13650] __cgroup_procs_write+0x24b/0x320 [ 315.284677][T13650] cgroup_threads_write+0x24/0x50 [ 315.284702][T13650] cgroup_file_write+0x331/0x8f0 [ 315.284724][T13650] kernfs_fop_write_iter+0x3a4/0x540 [ 315.284749][T13650] vfs_write+0x612/0xba0 [ 315.284777][T13650] ksys_write+0x150/0x270 [ 315.284805][T13650] do_syscall_64+0x166/0x520 [ 315.284830][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.284851][T13650] [ 315.284851][T13650] other info that might help us debug this: [ 315.284851][T13650] [ 315.284868][T13650] Chain exists of: [ 315.284868][T13650] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 315.284868][T13650] [ 315.284910][T13650] Possible unsafe locking scenario: [ 315.284910][T13650] [ 315.284918][T13650] CPU0 CPU1 [ 315.284926][T13650] ---- ---- [ 315.284933][T13650] rlock(cpu_hotplug_lock); [ 315.284950][T13650] lock(&nsock->tx_lock); [ 315.284987][T13650] lock(cpu_hotplug_lock); [ 315.285006][T13650] rlock(&root->kernfs_iattr_rwsem); [ 315.285024][T13650] [ 315.285024][T13650] *** DEADLOCK *** [ 315.285024][T13650] [ 315.285031][T13650] locks held by syz.0.2133/13650: 5, last CPU#0: [ 315.285050][T13650] #0: ffff888033bad430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 315.285116][T13650] #1: ffff888029b32460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 315.285189][T13650] #2: ffff888064d6cc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 315.285250][T13650] #3: ffffffff8eb99ca0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 315.285314][T13650] #4: ffffffff8e9e76f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 315.285391][T13650] [ 315.285391][T13650] stack backtrace: [ 315.285404][T13650] CPU: 0 UID: 0 PID: 13650 Comm: syz.0.2133 Not tainted syzkaller #0 PREEMPT(full) [ 315.285459][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.285558][T13650] Call Trace: [ 315.285604][T13650] [ 315.285640][T13650] dump_stack_lvl+0xe8/0x150 [ 315.285720][T13650] print_circular_bug+0x2e1/0x300 [ 315.285783][T13650] check_noncircular+0x12e/0x150 [ 315.285846][T13650] __lock_acquire+0x1520/0x2cf0 [ 315.285938][T13650] ? __lock_acquire+0x683/0x2cf0 [ 315.286030][T13650] ? kernfs_iop_permission+0x7f/0x430 [ 315.286103][T13650] lock_acquire+0x106/0x350 [ 315.286175][T13650] ? kernfs_iop_permission+0x7f/0x430 [ 315.286261][T13650] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 315.286352][T13650] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 315.286423][T13650] down_read+0x4a/0x330 [ 315.286486][T13650] ? kernfs_iop_permission+0x7f/0x430 [ 315.286571][T13650] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 315.286652][T13650] kernfs_iop_permission+0x7f/0x430 [ 315.286734][T13650] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 315.286810][T13650] inode_permission+0x3de/0x5f0 [ 315.286907][T13650] cgroup_attach_permissions+0x28e/0x9f0 [ 315.287017][T13650] __cgroup_procs_write+0x24b/0x320 [ 315.287087][T13650] cgroup_threads_write+0x24/0x50 [ 315.287150][T13650] ? __pfx_cgroup_threads_write+0x10/0x10 [ 315.287211][T13650] cgroup_file_write+0x331/0x8f0 [ 315.287264][T13650] ? kernfs_fop_write_iter+0x22b/0x540 [ 315.287337][T13650] ? __pfx_cgroup_file_write+0x10/0x10 [ 315.287393][T13650] ? __kmalloc_noprof+0x39a/0x720 [ 315.287446][T13650] ? vfs_write+0x22b/0xba0 [ 315.287519][T13650] ? __kmalloc_noprof+0x1af/0x720 [ 315.287590][T13650] ? __pfx_cgroup_file_write+0x10/0x10 [ 315.287643][T13650] kernfs_fop_write_iter+0x3a4/0x540 [ 315.287715][T13650] vfs_write+0x612/0xba0 [ 315.287798][T13650] ? __pfx_vfs_write+0x10/0x10 [ 315.287895][T13650] ? __fget_files+0x2a/0x420 [ 315.287980][T13650] ksys_write+0x150/0x270 [ 315.288061][T13650] ? __pfx_ksys_write+0x10/0x10 [ 315.288144][T13650] do_syscall_64+0x166/0x520 [ 315.288205][T13650] ? trace_irq_disable+0x3b/0x140 [ 315.288282][T13650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.288354][T13650] ? clear_bhb_loop+0x70/0xc0 [ 315.288421][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.288480][T13650] RIP: 0033:0x7f1499d9e0d9 [ 315.288533][T13650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.288583][T13650] RSP: 002b:00007f1497ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.288636][T13650] RAX: ffffffffffffffda RBX: 00007f149a025fa0 RCX: 00007f1499d9e0d9 [ 315.288677][T13650] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000006 [ 315.288711][T13650] RBP: 00007f1499e35024 R08: 0000000000000000 R09: 0000000000000000 [ 315.288745][T13650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.288777][T13650] R13: 00007f149a026038 R14: 00007f149a025fa0 R15: 00007ffda7b51a18 [ 315.288839][T13650] [ 315.315282][T13656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.488989][T13646] 0: entered allmulticast mode [ 315.507432][T13656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.507547][T13656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.507659][T13656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.507758][T13656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.507869][T13656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.507975][T13656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.508106][T13656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.508208][T13656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.508310][T13656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.981296][T13646] hsr_slave_0: entered allmulticast mode [ 315.987774][T13646] hsr_slave_1: entered allmulticast mode [ 315.995749][T13654] : renamed from vlan1 [ 316.020953][T13632] syz_tun: left allmulticast mode [ 317.268018][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.044781][ T7447] net_ratelimit: 35 callbacks suppressed [ 318.044804][ T7447] bond4: (slave gretap1): failed to get link speed/duplex [ 318.164154][ T7447] bond4: (slave gretap1): failed to get link speed/duplex [ 318.274837][ T7437] bond4: (slave gretap1): failed to get link speed/duplex [ 318.384186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.388941][ T7447] bond4: (slave gretap1): failed to get link speed/duplex [ 318.505542][ T7447] bond4: (slave gretap1): failed to get link speed/duplex [ 318.544299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.615511][ T7437] bond4: (slave gretap1): failed to get link speed/duplex [ 318.624261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.725713][ T7439] bond4: (slave gretap1): failed to get link speed/duplex [ 323.084175][ T7439] net_ratelimit: 50 callbacks suppressed [ 323.084204][ T7439] bond4: (slave gretap1): failed to get link speed/duplex [ 323.214499][ T7439] bond4: (slave gretap1): failed to get link speed/duplex [ 323.324159][ T7447] bond4: (slave gretap1): failed to get link speed/duplex [ 323.434760][ T7437] bond4: (slave gretap1): failed to get link speed/duplex [ 323.554662][ T7437] bond4: (slave gretap1): failed to get link speed/duplex [ 323.584192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.665026][ T7433] bond4: (slave gretap1): failed to get link speed/duplex [ 323.675386][ T7437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.774234][ T7447] bond4: (slave gretap1): failed to get link speed/duplex [ 323.824262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog