last executing test programs: 9m4.600743377s ago: executing program 3 (id=1130): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8931, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000005c0)={0xa, 0x2, 0x200, @empty, 0x7}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x200080c0, &(0x7f0000000180)={0xa, 0x2, 0x8000, @dev={0xfe, 0x80, '\x00', 0x25}, 0x8}, 0x1c) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r7, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x8, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="4a51b8da", @ANYRES16=r10, @ANYBLOB="000128bd7000fddbdf250700000005000500080000000800030007000000080002000100000008000300000000000800040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @loopback}}, [0x0, 0x8, 0x40, 0xfffffffeffffffff, 0x10000, 0x6fa9017d, 0x98, 0x1c734e5a, 0x2, 0xffff, 0xffffffffffffffff, 0x8, 0x3, 0x800, 0x8]}, &(0x7f0000000540)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000005c0)={r13, 0x2c, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e24, 0x1, @empty, 0x4}]}, &(0x7f0000000600)=0x10) 9m3.504286911s ago: executing program 3 (id=1140): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x1c0, 0x30, 0x53b, 0x0, 0x400000, {0x9}, [{0x1ac, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000007}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x2}}}}, @m_nat={0x150, 0x19, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xb28, 0x0, 0xfffff399, 0x12c4}, @multicast2, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x2, 0x20000000, 0x5, 0x2251}, @remote, @dev={0xac, 0x14, 0x14, 0x18}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe6, 0x8, 0x30000004, 0x2, 0x6}, @multicast1, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe3, 0x3, 0x4, 0x6, 0x200}, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x16}, 0xffffff00, 0x1}}]}, {0x87, 0x6, "221a1750d47cd2bedbea26dd47a36ec5e68f92f67364424720a9696c2d9b5add91445d37cfbb2c3e329b063f4440ed6fc18b0024770c71a1e5b8dabc229abf24e57ea94d22281f9c59b1e694ccd6ca784f675b4a1dc7a73d04d179db2b77a22dabe14004d519f9c2696abc860df03fe123184e1fdbb0941854a26c51401b762cc64879"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1c0}}, 0x0) 9m3.296929384s ago: executing program 3 (id=1143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000380)=r1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getpid() (async) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000380)=r1) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)) (async) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) (async) 9m3.129570542s ago: executing program 3 (id=1146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003580)=ANY=[@ANYBLOB="5400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000002c001a80080002800400018020007c0000000700ff0200000000000000000000000000010500080003000000deef9ad15c05df9190bec209d3600fc27c959f19ebe72c4d83a4ba5fecce6bb7b7104536bacbe0753f9ed1fc6ed969f9f49f836a5a7ceec71d23bf0af829d88fc544b21e3ad024b38a5fa712e1c792266ea95841d99f23446cb9eb11d860f08b42d2c65aa2e45b8ad11a364a8acf2f8710bca79e65a87cba38be82982b9789fcbf67e52d69c223eef3133793e10e8886"], 0x54}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x68}}, 0x200400c0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) 9m2.965245871s ago: executing program 3 (id=1148): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000), 0x6) (async) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) (async) 9m2.714111677s ago: executing program 3 (id=1152): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000004000070135bd7000fadbdf25037c00000400c2801c0010000000f1000000e042badb000000000000000067ab34000004000800193f5b5a3cf32a0583a192654d71eaf21e5c4948"], 0x38}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = socket$rxrpc(0x21, 0x2, 0xa) listen(r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='FROZEN\x00', 0x7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000006c00000000000000ac1414aa00000000000000000000000000000000050300"/244], 0x13c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x0, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044010}, 0x44008000) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d0000000401a80016000a003a40f8ff070000000000004dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r8, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f0000005400)={r11, @in6={{0xa, 0x4e23, 0x46, @mcast1, 0x40}}}, 0x84) 8m47.649979463s ago: executing program 32 (id=1152): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000004000070135bd7000fadbdf25037c00000400c2801c0010000000f1000000e042badb000000000000000067ab34000004000800193f5b5a3cf32a0583a192654d71eaf21e5c4948"], 0x38}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = socket$rxrpc(0x21, 0x2, 0xa) listen(r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='FROZEN\x00', 0x7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000006c00000000000000ac1414aa00000000000000000000000000000000050300"/244], 0x13c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x0, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044010}, 0x44008000) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d0000000401a80016000a003a40f8ff070000000000004dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r8, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f0000005400)={r11, @in6={{0xa, 0x4e23, 0x46, @mcast1, 0x40}}}, 0x84) 1m31.05018547s ago: executing program 0 (id=4207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000000f40)=""/4087, 0xff7}, {&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000000)=""/166, 0xa6}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x66, 0x2120, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000200000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470580800000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x18}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x154}]}, @NFT_MSG_DELOBJ={0x64, 0x14, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'nicvf0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x727a6577}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5ae462d0}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x19c}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000001780)=0x3, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newtaction={0x88, 0x30, 0x10, 0x70bd28, 0x0, {}, [{0x74, 0x1, [@m_skbmod={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x4000000006}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xd0cc}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8014}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x5ea11b84c59b353c, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xa, 0x10}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @private1, 0x28}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="dc", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x280}}], 0x1, 0x880) (async) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000280), &(0x7f0000000080)=0x8) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000002c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003ef05000100000000000c0002"], 0xc0}}, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000500)={{r3, &(0x7f0000000100)=',\x00', 0x280, &(0x7f0000000180)={@_ha_fsid={[0x80000001, 0x6]}, {0x2, 0x3, 0x0, 0x9}}, 0x7, &(0x7f00000004c0), &(0x7f0000000440)=0x4}, {[0x4, 0xb, 0xfffffffc, 0x6]}, 0x8, 0x66, &(0x7f0000000d40)=""/102}) recvmsg$can_bcm(r8, &(0x7f00000009c0)={&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000600)=""/155, 0x9b}, {&(0x7f00000006c0)=""/153, 0x99}, {&(0x7f0000000780)=""/55, 0x37}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/74, 0x4a}], 0x5, &(0x7f0000000900)=""/140, 0x8c}, 0x2002) 1m30.73163097s ago: executing program 0 (id=4212): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000a0e000/0x4000)=nil, 0x4000, 0x8, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100039", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket(0x27, 0x800, 0x107f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 1m30.369626176s ago: executing program 0 (id=4216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xaf}]}}}]}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e65766530"], 0x110}}, 0x0) 1m30.143591064s ago: executing program 0 (id=4218): socket$kcm(0x10, 0x2, 0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000000)=0x5, 0x4) close(0x4) close(0xffffffffffffffff) 1m29.92424213s ago: executing program 0 (id=4220): syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r1, 0x2}, 0x20) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x4) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2d8, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1da}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x41c}]}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14a}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x38}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffff8, @rand_addr=' \x01\x00', 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @empty, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8b6, @dev={0xfe, 0x80, '\x00', 0xd}, 0xe}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @empty, 0xe37}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000011) 1m29.32574109s ago: executing program 0 (id=4225): unshare(0x62000000) r0 = socket$inet6(0xa, 0x80001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x140a, 0x200, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 1m14.450961684s ago: executing program 33 (id=4225): unshare(0x62000000) r0 = socket$inet6(0xa, 0x80001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x140a, 0x200, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 12.824086993s ago: executing program 4 (id=4505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000e80)=0x57bb, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002000010000000000000000000a00000000000000000000000c001400", @ANYRES16], 0x28}}, 0x0) 12.288274131s ago: executing program 4 (id=4508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockname$packet(r1, 0x0, &(0x7f0000000040)) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x2304, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xe}, {0x1, 0x3}, {0xfff3, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x15bc, 0x2, [@TCA_MATCHALL_ACT={0x1040, 0x2, [@m_gact={0xcc, 0x1d, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0x3ff, 0x20000000, 0x7fff, 0x1000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xf293, 0x8, 0x3, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x4a3, 0xffffffffffffffff}}]}, {0x62, 0x6, "af845b9191e21c9326074c2f1ae3eb5902ef82e793e71a7bd0ddcaf2ba24fb7e6eab85f560158ade597a0ed2bbc7c1676fe259210f9c1230de4776d6334349b882c5c6d4f1ae3568ff9a793618e28652a132db810ea32eb61ec401100347"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0xd14, 0x2, 0x0, 0x0, {{0xb}, {0xc70, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffff81, 0x8, 0x401, 0x1, 0x2, 0x7, 0x7, 0x0, 0x7, 0x2, 0x9, 0x6, 0x1, 0x0, 0x1, 0x259e, 0x8, 0x1, 0x7, 0x80000001, 0x4, 0x8, 0x3, 0x2, 0x0, 0x1, 0x6, 0x9, 0xdc8, 0x5052, 0x800, 0xffffff01, 0xfffffffb, 0xa329, 0x9, 0x9, 0x7, 0x565, 0x7, 0x4, 0x6, 0xffffffff, 0x81, 0x3, 0x131, 0x5, 0x2, 0x4, 0x8, 0x7, 0x4b1, 0x3, 0x0, 0x0, 0x7, 0x1ff, 0x4224, 0x2131, 0x7, 0x0, 0x5f, 0x4, 0x9, 0x2, 0x0, 0x4094, 0x800000, 0xffffff01, 0x9c0, 0x10001, 0x1, 0xa, 0x4, 0x7, 0xffffff2e, 0xb, 0x4, 0x3, 0x8, 0x3, 0x7, 0x3ff, 0x0, 0x200, 0x100, 0x5, 0x6, 0x80000001, 0x0, 0x4, 0x6, 0x5, 0xf, 0x7, 0x2, 0x7, 0x4, 0x1, 0x9, 0xec60000, 0xffffff13, 0x7f, 0x0, 0x6, 0x5, 0x4, 0xffff8eab, 0x65f4, 0xc, 0x0, 0xfffff0bc, 0x94f5, 0x7, 0x2, 0x1, 0x9, 0xd, 0x8001, 0x200, 0x80000001, 0xffffffff, 0x2, 0xd, 0x2, 0xb90, 0x192, 0xb688, 0x1, 0x9, 0x0, 0xffff8001, 0x1ff, 0xe6a, 0x5, 0x5, 0xff, 0x6, 0x1, 0x0, 0x354, 0x8, 0xb4, 0x8, 0x2, 0x3, 0x8, 0x4, 0xe, 0x6, 0x80a, 0x4a, 0xffffffff, 0x5, 0x52cf, 0x6, 0x8, 0x7, 0x0, 0x809, 0x9, 0x4, 0x3, 0x3, 0x9, 0x5, 0x3, 0x5, 0xc, 0x97c, 0x5, 0x6, 0x80000000, 0x7, 0x10, 0xffff, 0x5, 0x2e08b172, 0x0, 0xffffffc2, 0x8000, 0x5, 0x7fff, 0xc, 0x6a7cedd3, 0x2932, 0x9b69e8a1, 0x0, 0x1, 0x3, 0x3, 0x3, 0x5, 0x374, 0x5, 0x1000, 0xf6b, 0x4, 0xffffff80, 0x1, 0x1, 0x8, 0x10, 0x4, 0x7, 0x7, 0x8, 0x3ff, 0x2, 0x3, 0x6, 0x7, 0x4, 0x1, 0xffff, 0x59, 0xffffffff, 0x7, 0x5, 0x3, 0x6, 0xffffffff, 0x401, 0x7, 0x6b, 0x3, 0xed800000, 0x0, 0x9, 0x9, 0xa, 0x6, 0x8, 0x8, 0x152c94d3, 0x1, 0x3, 0x8, 0x9, 0x1c000000, 0x2b6, 0x0, 0x8, 0x7, 0x1, 0x7, 0xc0000000, 0x80, 0x6, 0x10001, 0x8, 0x4, 0x5, 0x6, 0x5, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0xd, 0x2, 0x8, {0x7f, 0x2, 0x7, 0xffff, 0x4, 0x80000000}, {0x6, 0x0, 0x1, 0x5, 0x1, 0x81}, 0xffffffff, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xff, 0x96d, 0x2c2021d0, 0x3, 0x7, 0x2, 0x0, 0x3, 0xcb98, 0xa7eb, 0x6, 0x4, 0x1, 0x6, 0xffffffff, 0x1, 0xff, 0x0, 0xffff, 0x10, 0x0, 0x9, 0x31c, 0x8, 0xfd, 0x1, 0x2, 0x5, 0x217, 0xb, 0xfffffffc, 0x0, 0x8001, 0x200, 0x0, 0x2, 0x1, 0x9, 0x94a, 0xb41, 0x7, 0x6, 0x1, 0x5, 0x9, 0x2, 0x6155, 0xe, 0x4, 0x1, 0xeeda, 0x1, 0x3, 0x4, 0x1, 0xebc8e530, 0x7, 0x8000, 0xfffffffa, 0x6a67fde3, 0x81, 0x5, 0x0, 0x8, 0xd559, 0xfff, 0x0, 0x4, 0x7, 0x8007, 0x4, 0x4, 0x0, 0x9, 0x3, 0x1ff, 0x9, 0x6, 0xfffffff8, 0x6b4a, 0x8, 0x101, 0x62ef, 0x4, 0xfffffffc, 0xfffffff9, 0xffffffff, 0xffffffff, 0x9, 0x6, 0x2, 0x973, 0x4, 0x6, 0x4, 0xc, 0xf, 0x9, 0x0, 0x81, 0x1, 0x9a, 0x6, 0x81, 0x6, 0x40, 0x0, 0x9, 0x401, 0x2, 0x6, 0xe, 0x1, 0x3, 0x4, 0x1, 0x2, 0x42c455ee, 0x2, 0x1, 0x0, 0xf9, 0xfffffff9, 0x9, 0x0, 0x8, 0x7, 0x1, 0x9, 0x2, 0x0, 0x9, 0x40000000, 0x0, 0xe1, 0x6, 0x30f, 0x4, 0x6, 0x5, 0x5, 0x8, 0xfff, 0x1, 0x3, 0x5, 0x7, 0x8, 0xfffffff9, 0xfffffffa, 0x6, 0x2, 0x7, 0x16cf, 0xf3, 0x3, 0x80, 0x12, 0x1000, 0x1, 0x8, 0x7fff, 0x4, 0x9, 0x6, 0x9af, 0x9, 0x7f, 0x200, 0x5, 0x2, 0x800, 0xf, 0x80000001, 0x7ff, 0x10000, 0x100, 0x3, 0x1, 0x0, 0x101, 0x0, 0xb5, 0x1, 0x0, 0x6, 0x0, 0x101, 0x9, 0x9, 0x4, 0x9, 0x0, 0x4, 0x4, 0x25c, 0x10, 0x8001, 0x9, 0x5b4, 0x4, 0x1, 0x79f, 0x5, 0x4, 0xfffffffa, 0x10001, 0xffffffff, 0x80, 0x2f67, 0x1e3, 0x3, 0x2, 0x7, 0x180, 0x7, 0x0, 0x58e4, 0x5, 0x2, 0xe, 0xca6b, 0x8, 0x1, 0xfffffffa, 0x5, 0xb3, 0xfffff4a5, 0xa, 0x80, 0x9d39, 0xffff, 0x6, 0x0, 0x72, 0x1ff, 0x6, 0x4, 0xffffffff, 0x6, 0x87, 0x800, 0x6, 0xa02210a, 0x2, 0xb1, 0xffffffff, 0x9, 0x0, 0xb, 0xfff, 0x7fff, 0x61b5, 0x9, 0x4]}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfffffffd, 0x17, 0x80000001, 0x4, 0x400, 0xc, 0x40, 0x2fd30171, 0x0, 0xff, 0x0, 0x6fbf, 0x7, 0x26, 0x10000, 0x4, 0x3c9b, 0x0, 0x0, 0x9, 0x0, 0x9, 0x2, 0x8, 0x6, 0x80000001, 0x4, 0x8000, 0x9, 0x3, 0x9, 0x3, 0x7, 0x8000, 0xffff, 0x5, 0x80000001, 0xf, 0xe6f, 0x800, 0x9, 0xa, 0x7, 0x4000000, 0x1000, 0x8d2, 0x8, 0x7e0, 0x2, 0xb0, 0x2, 0x6, 0x6, 0x6, 0x6d2d, 0x20, 0x7, 0x5, 0x1ff, 0x1ea, 0x1000, 0x7, 0x3, 0xfffffffb, 0x5, 0x8, 0x8, 0x0, 0xd94, 0x4, 0x8, 0x9, 0x4, 0x1, 0x6, 0xc8a0, 0x9, 0x3, 0x902, 0x140, 0x1000, 0x4f, 0x1, 0x7, 0x7, 0x4a, 0x155a, 0xd, 0x0, 0x4dbd, 0x0, 0x3, 0x7, 0x100, 0x35c, 0x5, 0x6, 0x9, 0x82e3, 0x5, 0x55, 0x77, 0x0, 0x0, 0xbd71, 0x3, 0x80000001, 0x54, 0x2, 0x4, 0x7, 0xa, 0x76, 0x5, 0x80000000, 0x9, 0x4, 0x1, 0x7, 0x2, 0x200, 0x0, 0x200, 0x2, 0x7, 0x6, 0x3, 0x2, 0x10000000, 0x0, 0x40000003, 0x6, 0x3, 0x5, 0x5, 0x3, 0x7, 0x2be, 0x9, 0x800, 0x2800, 0x2, 0x100, 0x8, 0xe388, 0x7, 0x6, 0x3, 0x1, 0x2, 0xdd, 0xe0, 0x0, 0x7fffffff, 0x0, 0x6, 0x68, 0x9, 0xfff, 0x6, 0x2, 0x3ff, 0x6, 0x80, 0x10000, 0x5, 0x4, 0xf1f, 0x7, 0x9, 0x1ff, 0xffffff12, 0x8e, 0x8, 0x1, 0x0, 0xa15, 0x18, 0x9, 0xd, 0x2, 0x41, 0x95e, 0xfffffffd, 0x6, 0x7fff, 0x71f, 0x0, 0x410a, 0x6, 0x5, 0x0, 0xa9, 0x7, 0x4, 0x4, 0x6, 0x80000001, 0x5, 0x4, 0x0, 0x8, 0x739, 0x2, 0x3a, 0x2, 0x7ff, 0x9, 0x2, 0x9, 0xd96c, 0x7ff, 0x0, 0x10001, 0x4, 0xfff, 0x800, 0x7, 0x4, 0x1400, 0x9, 0x7, 0x8, 0x4, 0x7fffffff, 0x9, 0x8, 0x7, 0xffffffff, 0x80000000, 0x6e0, 0x2, 0x746f637d, 0x7, 0x6, 0x6, 0x401, 0x7ff, 0x7, 0x1, 0x7ff, 0x3, 0xf6f, 0x101, 0x0, 0x9, 0x0, 0xd, 0xc00, 0x1ff, 0x7, 0x0, 0x5, 0x7, 0x4]}]]}, {0x7a, 0x6, "1252a3360dbec5b2c76ec5535d59c10ce640f6ff401459f03b5b643b81135498afe81549cb63443aa13c9af05abd278d179be0b7a3c3749687e18560974ba772d30312f24720db0e5530750510a07a1ac60e4a4054ed881309032e8ea69b4e7401b268901ae111cb18bc5ad5b5d613dd0effdef65fee"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0xf0, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xffe0}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0xaa, 0x6, "27bcf59bd037d82505c721bed01a4a44f5d70f84aef2d48d193af97a39582b9dc7e624989b1fb106f916f63d8e443aaa2ba209d1b4bfe270689064560c38f2e948ce9c755367cb3be675ca7dcf9c429029b2293db7c5fc3bbb3734268357d6a5ff265d84c9a80a73de2bc3ebd0155b19c60045f8884e6c881edf7ca7a345c4ffd67e29332938627d82f79e68489555d2730fac0b1b8f7e7aaf23d18e7e9f31975badbddc4ddb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x16c, 0x18, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x7fff, 0x5, 0xd5, 0xc2}, @dev={0xac, 0x14, 0x14, 0xd}, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf4, 0x3, 0x4, 0x81, 0x5}, @loopback, @rand_addr=0x64010102, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xfffffc01, 0x6, 0x0, 0x7f}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0x0, 0x5, 0x4, 0x9}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa3, 0x101, 0x10000000, 0x4, 0x7ff}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x4, 0x4, 0x9, 0x1000}, @rand_addr=0x64010102, @remote, 0xff000000, 0x1}}]}, {0x51, 0x6, "4af4b50b9145727c1144161ab3e536adf97d89d6a6f0620438d02a519c1b9e9c1ab543cc432400022909a2fe7270251d558ae8dc7296996e602879c738872edad756a84670d21736d499f8fcb1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x8}}, @TCA_MATCHALL_ACT={0x39c, 0x2, [@m_csum={0x198, 0x14, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x6, 0x1, 0x4, 0x4}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x3, 0x4, 0x40, 0x7}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x4, 0xfffffbff, 0x4}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x2, 0x5, 0x4}, 0x11}}]}, {0xfc, 0x6, "2e1b518fc4c7cef04de166f63055697f9b9eecfefcf05b2e635ce7e9fcdedddcf80708ee7330241edefd9a39775666b8f2f7087ecddb965f059e40791032b8cbedadf44f1aaf4468beda1a519152599bc03bd1177cbbe9fc3fd09fd72894b1b075bb6a599101b7e281e80cd9ea42d1db25a7f7089b18638320dfd55c2d2d3eceb3f7d6a159faa148c0d961f84dc1e2f76698262151c9a8f533a41b4f84cd840f45ea4ed016912f462e1b1bda11bfe07ef943754b911985dab4326da115fd8935492c94f64ed4e86f169f9e7a22fd28c22de5e9c5c1ed2e498ff81f7e526b488ceba1a027faab011c3930269f8c870e4a0168b87b2b17c4b4"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x104, 0x19, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6d03db93}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x87b3}]}, {0x8e, 0x6, "5317ce62880b640703ae1076fd5996f71993796fab3dce5594584a8c55c93c660f9832b07bf0ee213c8abfe0f63e21d7875c68a014e7baa2a23de59f80f3c33d1b48e21d6f602d076292531666016efb4faa363a6ca36c258e1114f71987a2b0a59ad76d2cf3e580099b9f28455c2eabf6bbb3f8a87ec625ad38a58927b09f6d57e91c61197bbdf8b823"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xfc, 0xe, 0x0, 0x0, {{0x7}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x88, 0x6, {0x0, 'raw\x00', 0xf9, 0x4, "ab130da97beb3e9945f48e97779eb26f0f2ea3b225fd05903d4c677fafd8663e278ccd22345f584635536e9edd18182b097b06b404765113bfbeb76fc1eeedabee53d9519eff0707aa93c91bcbefced0a0f20ebc336f8e650d46dbf68d62"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x1f, 0x6, "b4ff0f32c49d066b9ffea739bbe7c816772966a83c38f24e245432"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x6c, 0x2, [@m_ife={0x68, 0xb, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x29, 0x6, "47535329f30a30e7b8853a94f3d5026357e6ba5d0e12336669b00aa919a96bb2c9f2803dde"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_MATCHALL_ACT={0x15c, 0x2, [@m_skbedit={0x158, 0xa, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9f96, 0x538, 0x8, 0xffffffff, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8001, 0x8, 0x0, 0x1, 0x7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0xe4, 0x6, "bfd150501646be0b88eb9783ea382a955493e1dd6c45065b2f5c317f7696a946381710f4671e0dfab8f324407a724cc0ae594cd4cb1175ea26e6cdf6bfee94907ae0a45092f50047c68b37309a7bfd6d84d9f8ad621a6eba9dff15da667820eeca5eb9a44eea2fe1ff1f5ad4bbfaa615e2303220a6060f14d2d045e9b776ef988c2e454f59c075eac9906b78b8ba64400d13485386727044e1fc89112340dfca83d89c354121d5f74036a03646d42c40e134d3dbfada491a8463710b1d0752a4d735c6e14f6547bf019d65a17ed35bfa11a1c5405b348f3e08e62f4d966fb064"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xf9}}, @TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_bpf={{0x8}, {0xcf4, 0x2, [@TCA_BPF_POLICE={0x824, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x400, 0x5, 0x0, 0x7, 0x0, 0x4, 0x5, 0x3, 0x800, 0x9, 0xffffff3f, 0x5, 0x1d76028e, 0x3, 0x8001, 0xfffffffc, 0x1, 0xf9, 0x1, 0x523b, 0x10000, 0x9, 0x9, 0x7c7, 0x20, 0x5, 0xfffffffb, 0xffff7fff, 0x9, 0x9, 0x9, 0x1, 0x6, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x1ff, 0x6, 0x7, 0x4, 0x1000, 0x1, 0x1, 0x2, 0x6d8, 0x2, 0x2, 0x2, 0x6, 0xd, 0x1, 0xdf39, 0x1000, 0x3, 0x2, 0x7, 0x3, 0x400, 0x9991, 0x5, 0x80000001, 0x8, 0xdf, 0x401, 0x6b7, 0x81, 0xa, 0xfd8, 0x7b, 0x81, 0xe5, 0x4a91, 0xd, 0x4, 0x6, 0x8, 0x1, 0x4, 0x7, 0x4ee9, 0x2, 0x7fff, 0x9, 0x7, 0x4, 0x3, 0x4ed, 0x7fff, 0x5, 0x7, 0x2, 0x5, 0x1, 0x3, 0x4, 0x9, 0x3, 0x4, 0x4, 0x8, 0xd711, 0x6, 0x7, 0x6939eecf, 0xab31, 0x5, 0x1, 0x4, 0x8001, 0x7, 0x1, 0x6, 0x3, 0x4, 0xffff, 0x7, 0x5, 0x0, 0x3, 0x200, 0x24, 0xfff, 0x5, 0x1f5f, 0xbb, 0x1ff, 0x1, 0x9, 0x800000, 0x2, 0x2, 0x9, 0x800000, 0xffff, 0x0, 0x1ff, 0x4, 0x8, 0x0, 0x7, 0x7, 0x80000001, 0x6, 0x3fe6d201, 0x4, 0x1, 0xe, 0x8, 0x401, 0x1000, 0xff, 0x10001, 0xffffffcd, 0x6, 0x80000001, 0x4, 0x2, 0x8, 0xf92f, 0xc3c4, 0xc4d, 0x7a9, 0x4, 0x8, 0x4, 0xa0000000, 0x0, 0xa0d, 0x6, 0xffffffff, 0x401, 0x7, 0x1000, 0x1, 0x400, 0x0, 0x6, 0x0, 0xffff0c10, 0x6, 0x6, 0x6, 0x8, 0x81b, 0x5, 0xe, 0x8, 0x6, 0xdef, 0x6, 0xcc700000, 0xbf, 0xfffffffd, 0xa03f, 0x10000, 0x10, 0x5, 0x5, 0x9, 0xaf, 0x0, 0x2, 0x2, 0x9, 0x2, 0x5, 0x3ff, 0x5, 0x7, 0x81, 0x7ff, 0x4, 0x8, 0x4, 0x646, 0x0, 0x3ff, 0x7, 0x6, 0xbc, 0x6, 0xfffffff8, 0x0, 0x2, 0x2, 0xa6b, 0x5, 0xd1, 0x0, 0x2c, 0xffff, 0x22, 0x5966, 0x5, 0x0, 0x9, 0x595, 0xfffff5f4, 0x5, 0xf, 0x6, 0x2, 0xb, 0x6, 0x2, 0x0, 0x6, 0xcae, 0x2, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x54, 0x401, 0x5, 0x3ff, 0x0, 0xd, 0x0, 0xfffffffa, 0xfff, 0x5, 0x829, 0x8, 0x6, 0x6, 0x7, 0x4, 0x10000, 0x7f, 0x70000000, 0x10000, 0xfff, 0x3, 0x1, 0x3, 0x8, 0x8, 0x10, 0x7898, 0xffffffff, 0x8, 0xffffffff, 0xd9, 0x2, 0xb070, 0xfffffff8, 0x98, 0x7, 0xfff, 0xffff, 0x401, 0x6, 0x101, 0x5, 0x6, 0x0, 0x7, 0xe7, 0x5, 0x80, 0x4, 0x1, 0x1, 0x3, 0x10001, 0x8000, 0x2, 0x0, 0xd411, 0x5, 0x5, 0x2, 0x9, 0x4, 0x10000, 0x2, 0x5, 0x10000, 0x8, 0x7eb, 0x3, 0x7, 0x7, 0x131, 0x5, 0x8, 0x1, 0x0, 0x5, 0xb, 0x8bd, 0x5, 0xa, 0xffff, 0x1, 0x4, 0x7fffffff, 0x3, 0x7, 0x2, 0xe, 0x9, 0x1000, 0x8, 0x3, 0x2, 0x4, 0x7, 0x4, 0x9, 0xe94, 0xbb, 0x9, 0x3, 0x173c5e66, 0xffff, 0x80000000, 0x10001, 0x5, 0x2, 0x0, 0x1, 0x6, 0x6, 0x7fffffff, 0x0, 0x8f32, 0x800, 0x2506, 0x8, 0x9, 0xfffffffd, 0xe, 0x7ff, 0xfff, 0x2, 0x1, 0x5, 0x9, 0x1, 0x78, 0x2, 0x0, 0x8000, 0x8, 0x2, 0x554e, 0x2ea, 0x1af80000, 0x7, 0x2, 0x6, 0x468, 0x9, 0x2, 0xd96d, 0x8, 0xa18, 0x8bc, 0xffff8000, 0x0, 0x9, 0x80, 0x7fffffff, 0x7ff, 0x4, 0x1, 0xc6, 0xa, 0x8000, 0xb, 0x5, 0x6, 0x2, 0xffffffff, 0x9, 0x5, 0x0, 0x6, 0x1, 0x80, 0xf7, 0x1, 0xe, 0x10, 0x98, 0xffff, 0x40, 0x7, 0x80000000, 0xfffffff9, 0x6, 0x4, 0x4, 0x4, 0x7, 0x4, 0x7, 0xe, 0x6, 0xa7, 0x5, 0xfffffffc, 0x9, 0xf, 0x80, 0x3ff, 0xbefb, 0x1, 0x3df7, 0x7e08, 0x2, 0x4cd, 0x8, 0x1000, 0x40, 0x80000000, 0x3, 0x4, 0x895, 0x2, 0xea34, 0x8, 0xfff, 0x2, 0x5, 0x1, 0x9, 0x5, 0x4, 0x8, 0xab, 0xc44e, 0xb2af, 0x1, 0xf, 0x62, 0x4, 0x8, 0x2, 0x0, 0x9, 0x7, 0x2, 0x400, 0x5, 0x5, 0x6, 0x2, 0xfffffff4, 0x8000, 0xe9, 0xb53, 0x53e, 0x6e, 0x6, 0x3, 0x4, 0xb5a3, 0x1, 0x2, 0x3, 0x2, 0x400, 0xfb1, 0x1ff, 0x2]}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x45c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x7, 0x5, 0x80000001, 0xcb15, 0x7, 0x10001, 0xe, 0x0, 0x7, 0x2, 0xffffff5a, 0x1, 0x6, 0xed, 0x1, 0x80000000, 0x2, 0x5, 0x2fc, 0x8, 0x8, 0x1, 0x6302, 0x30, 0x20000000, 0x5, 0x1e5f, 0x6, 0xf, 0xffff, 0xfffff5d5, 0x5, 0x4, 0x7d6, 0x3, 0x80000000, 0x0, 0x9, 0x7, 0xffffd668, 0x4, 0x6, 0x4, 0x0, 0x8000, 0x4, 0x3, 0x80, 0xa7, 0x8, 0x14e5b25a, 0x9, 0xb4c2, 0xfffffff1, 0x9, 0x53, 0x4, 0x8, 0x1, 0x3, 0x1af5, 0x6, 0x4, 0xf00000, 0xffff, 0x0, 0x6, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x3f, 0x400, 0x4, 0x6, 0x5, 0x5, 0x6, 0xf, 0xa832, 0x0, 0x6, 0x9, 0x6, 0x5, 0x800, 0x5, 0x1, 0xe5, 0x5, 0x9, 0x6, 0x4, 0xa54c, 0x6, 0xf98, 0x6, 0xdb050000, 0xb88, 0x70, 0xfa, 0x2, 0x3, 0x6, 0x7, 0x8, 0x27, 0xe, 0x10, 0xb, 0x100, 0x842, 0x53a9, 0x6, 0x3, 0x80000000, 0x0, 0x1ff, 0x9, 0x8, 0x7, 0x8, 0x4, 0x2, 0xf48f049, 0x800, 0x2, 0xbcb2, 0x4, 0x7644, 0x6, 0xfffffffd, 0x6, 0x7, 0x3, 0x5, 0x8001, 0x800, 0xff, 0x0, 0x1000, 0xff0, 0x8, 0x6, 0x3a, 0x51, 0x8, 0x2b, 0x6, 0x0, 0x5, 0x50, 0xff, 0x892, 0x4, 0x43f3, 0x80000000, 0x56, 0x80000001, 0x2, 0x5daefff, 0x80, 0x7fffffff, 0x0, 0x5e73, 0x6, 0x7f, 0x7, 0x9fd2, 0x5, 0xa8, 0xff, 0x8, 0x70, 0x5, 0x40, 0x9, 0x31ed, 0xb8, 0x7, 0xfff, 0x4, 0xc, 0x6, 0x72, 0x9, 0x7, 0x83d, 0x200, 0x28, 0x9, 0x1, 0x5, 0x101, 0x3, 0xfffff20a, 0x40, 0x10000, 0x7, 0x9, 0x10000, 0xb92, 0x3, 0x2, 0x0, 0x41b, 0x3ff, 0x401, 0x9, 0x96f, 0x6, 0x6, 0x0, 0xa, 0x0, 0x1, 0xfffffffb, 0x8, 0x1, 0x2, 0xfffffffe, 0xe, 0x8000, 0x0, 0x10001, 0x8001, 0xae, 0x7b541ca2, 0x8, 0x0, 0x100, 0x7, 0x88, 0x8, 0x87f6, 0x8001, 0x7, 0x4, 0x78, 0x200000, 0x4, 0x7fff, 0x5, 0x7, 0x1, 0x6, 0x6, 0x0, 0x6, 0x1, 0x8020000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0xcdf2, 0x8, 0x1546, {0x7, 0x0, 0x101, 0x1, 0x32, 0x4}, {0x2, 0x1, 0x99d, 0xa, 0x6, 0xd2}, 0x9f4, 0xcd}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x3, 0x7a, 0x5, 0xfffffe35}, {0x56ec, 0x92, 0x1, 0x8}, {0x400, 0x27, 0x4}, {0x6, 0x9, 0x0, 0xfab}, {0x4, 0xf9, 0x5, 0x1}, {0x5, 0x4, 0x9, 0x6}]}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2304}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, &(0x7f0000000000), &(0x7f0000000040)=r11}, 0x20) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r11, r9}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x115, &(0x7f0000000f00)=ANY=[], 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00000c0002800600010000001000c0a9d36edcda9a1e84b08877ccf00630"], 0x6c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000240)) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba189", 0x8, 0xfa068fc268af028d, 0x0, 0x0) r12 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000003f00)={0x0, 0x1, 0x5, 0x5}) socket(0x27, 0xa, 0x0) 10.743825595s ago: executing program 4 (id=4515): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x40094) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, 0x0) (async) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010004190001000000000000000000e00000020000000000000900000000000000000000000000000001000000000000000000000000000a00000033000000cdb2fee5644806", @ANYRESOCT=r0, @ANYRES16, @ANYBLOB="00000000000000000000000000000000090000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff070000000000000000010000000000008400050064010101000016000000000000000000000004d232000005000000007f00000100000000000000000000000006350000010008001d0f00000000010007000000fc000000000000000000000000000001000004d66c00000002000000fc020000000000000000000000000000023500003901d000050000000300000005000000"], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010004190001000000000000000000e00000020000000000000900000000000000000000000000000001000000000000000000000000000a00000033000000cdb2fee5644806", @ANYRESOCT=r0, @ANYRES16, @ANYBLOB="00000000000000000000000000000000090000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff070000000000000000010000000000008400050064010101000016000000000000000000000004d232000005000000007f00000100000000000000000000000006350000010008001d0f00000000010007000000fc000000000000000000000000000001000004d66c00000002000000fc020000000000000000000000000000023500003901d000050000000300000005000000"], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 9.943754211s ago: executing program 4 (id=4518): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x6c, 0x2e, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe}, {0xffff, 0x6}, {0x7, 0xfff2}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x9f8}, {0x8, 0xb, 0x3}, {0x8}, {0x8, 0xb, 0x867}, {0x8, 0xb, 0x16a}, {0x8, 0xb, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) socket(0x25, 0x2, 0x66fec9eb) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000380)={0xbc, r5, 0x47918d5eb2b4e5e9, 0xf0bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd1}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xcac9d556c6b69d50}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2ad8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040004) 8.633290524s ago: executing program 4 (id=4526): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'syzkaller0\x00', 0xffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 7.81395018s ago: executing program 4 (id=4529): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={r1, 0x9, 0xffff1e0d, 0xa01, 0x200, 0xb5, 0xc91b, 0x3ff, {r1, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x7a9, 0x8, 0x400, 0x4}}, &(0x7f0000000180)=0xb0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x4}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'veth1_to_bridge\x00', &(0x7f0000000140)=@ethtool_gfeatures}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x88000) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.81309272s ago: executing program 6 (id=4543): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x402}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xf1c1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "629fe25e06f600", "2fd672a2d0ffff00", "ace06e88"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x303}, "63a970f9c96b9919", "68c9fa3999daf8c4c237c8b534397b2d", "f8cb0071", "a664d6946aab5f1e"}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, &(0x7f0000000100)="02c0bac63597cf8109adae8e21a6f8a33a965151944bbf925370ee84c118d1a1ec7df7241c83c84c958e6df0829a8d07f6d9d908097edd3ab043071dcf4817764900"/76, 0x0, 0x2, 0x0, 0x1}, 0x33) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x169}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0) 4.682205433s ago: executing program 2 (id=4544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r1, 0x6ff, 0x0, 0x25dfdbfc, {0x52}}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x5, 0x0, 0x9, 0xfffffff1, 0x8e, 0x3, 0xff, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) 4.389515623s ago: executing program 5 (id=4545): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x5, 0x45) 4.137029751s ago: executing program 6 (id=4547): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000002d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff3d1401000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c4e704000000000000a04d1ffc187fa1a2ba7ba0c0d507b92de00435fd233cc0f0d9b2c312b68856656ca9caa2ee4dc258d72e690098804de235cf020e35245c9f5526d35df627a64ac7efde50fd7f1d8bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6f902b261848d74096636ab6d8c63c8d62861cbc38d1e6bef45e672ac3d3d5243b85b3b15c7499ff39a3dadcbfbea9e050fb6940344dfbeebbf3e7e37d0a9a387518f926fba75479eacd4f51aeb28b6c56a75144ef6df55a275799897ca000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x9, 0x2, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, 0x8, 0x700, 0x3ff, 0x6}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x2, 0x1, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r10, 0x25, 0x10, @val=@tcx={@void, @value=r3, @void, @void, r11}}, 0x1c) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.887671063s ago: executing program 5 (id=4548): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x54, 0xd, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a0000000000000800000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}}, 0x20008040) 3.561850001s ago: executing program 6 (id=4549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@enum={0x0, 0x200001c4}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @func={0x2, 0x0, 0x0, 0xc, 0x4}, @func_proto]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x50}, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3.315782138s ago: executing program 5 (id=4550): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x80800) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002fc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003000)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003000)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) bind$nfc_llcp(r6, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r6, 0x118, 0x2, 0x0, &(0x7f00000003c0)) (async) getsockopt$inet_buf(r6, 0x118, 0x2, 0x0, &(0x7f00000003c0)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xe43b, 0x4b}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000016) 3.274042658s ago: executing program 1 (id=4551): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r0, &(0x7f0000002800)="25eed0aee8c79f49b53c108367401019c41e56367aa3f23916ddf42df6a5ca47adc0f14939ee362a401f6425b5933ed45ac2e4089f33e87ea4fa53cb6f37fa25746f5805cefb6f78a3d525962f72cff39e3fd9074e3260c84fdfced1c00ba3c8cfcd6220a22b568b9ea6d0e366394ae3490b19d046c22e484b0aa11954836b45d4047ab5007b7b758a16f51f05661f02e1cc365db0bf3b54c3c468a8b5462008bc5ffb9db10bed599639774620b78184ad", 0xb1, 0x48899, 0x0, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/162, 0xa2}, {0x0}, {&(0x7f0000000900)=""/42, 0x2a}, {0x0}], 0x4}, 0x40000001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xffbffffe, @mcast1, 0x9}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r1, 0x0) accept$inet6(r1, 0x0, 0x0) 3.263912266s ago: executing program 2 (id=4552): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 64) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004880)=[{{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000002480)="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", 0x589}], 0x1, &(0x7f0000004940)=ANY=[], 0x12d8}}], 0x1, 0x0) (async) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x800) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000080)=""/39, &(0x7f00000000c0)=0x27) 2.766405103s ago: executing program 5 (id=4553): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000540)={r2}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x6c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e21, 0x5, @empty}, @in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f00000001c0)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd26, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) 2.757010327s ago: executing program 1 (id=4554): socket(0x11, 0xa, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 2.49133377s ago: executing program 6 (id=4555): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0x5}]}]}, 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 2.325018077s ago: executing program 2 (id=4556): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x15, 0xa9, @random="ad93002848d07e00a9fd2a47532dddaadb"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x10011, 0x2, 0x2, 0x5, 0xc}, 0x20) (rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x40, 0x9, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x40, 0x7800, 0x9, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002900)={'team0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xf470, @private2, 0x67}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000001c0)="e6dfe92a01f760d9bd3e72bce9cfdbfd65b157098eedc101e0c60de19be6a7b074a8f1d5e6bc97eacb20355f3b7cd0fd660226c139140b9b7335baa12a984e045e5ad9788f838c0d28c6ea7264294fb032c42725673d7278a925df6e5e65f16a15ae3acad639cbab", 0x68}, {&(0x7f0000000240)="504d53afaa4a4d303adebda980f844f76f0636a86cd4e67fca620f033ad5af539571475555d041cc17fa9ef5277ef3a393fa6d203219068de4cf3a6f8e68560f913f86e9c084ea0cc38916a781c92731cf8ba9509dcdc39308c9ad5ef0aeada773b49c44c3279ea2384af5be8cff2c905ccd14ad76e74f5415140786cc1781cb3f7a65d7de9a7043e8537f365f0e8ea8d6b9663ae584a564903f98bcbf266fdedb03f74d844014c98bb216c7efb7833a156f6b9b0694b11ea907c301e21018f57dbc50224d6553f7fa158feeddc57989cd4ff03895d1439cb7ba7dace7478f4ebe20ac72e6bbb02a1778b05c3d8345a0ff1ef0865aebda8d", 0xf8}], 0x2, &(0x7f0000000dc0)=[@hopopts_2292={{0x258, 0x29, 0x36, {0xa2, 0x47, '\x00', [@generic={0x9, 0xef, "54153625eb1896ef75bb2b6d23f29bb8d04688b0459f52a5f2416af2e020883a7156afe5e5539a741e1ea636f93d17ccd726bc2c540fb8fdb5697147fa048c3b5cde0717ce759ec459e235b7c4201a1bcf5954127aa0622602d9a2bb68d0fc72020f4e4982970c589d4685655a265f6bfda66b5b2f0a1544b0ee2a83f3ddbae43ba109496106407483f75d2ca9dc8173d37ee4aacfd75c1a9d9835aed4c28d3709c95d81f4e310921c36a1013466e4935edd0a83d015862537ee1ed22780c4fcac95f540995f9f5cdbd1f57454432ba4c5b52ea0e76ae00a205e7ba80bb886d0491559c5a5db2b0fd9891a7bf5028a"}, @enc_lim={0x4, 0x1, 0xd}, @ra, @calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x9, [0x6, 0x5dc, 0x9, 0x2]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0x1, [0xffffffff, 0x7fffffff, 0x100, 0x9, 0xd4]}}, @pad1, @generic={0x4, 0xe0, "ea0728554808545c6dd9da79ae332650c33c2d3a91440272293caf520efd4243c758df8f159991ab4ec5c47909ee20cc8b2fc071e813d94fb33f568093851c40cefc26f3552490561c05c1845d78672bc3704ca73dd7a00a788e46e3554776297bccf1fb232c2e0651a836cd929033f941d5c55ad8e6298dab03069f9e66fa29d48b30668382b21f933bdf831c2afc92dfaa3ad40577aa78c6e085ea86e6bc7d1dce556d8e308e42d7c9419db60b71f56bff839e29eceadee4a2e2162a91593bf0b97087c63d82dde515570d74d2f61a065424bfd40366cf57e358beafe5e4ca"}]}}}, @dstopts_2292={{0xb8, 0x29, 0x4, {0x73, 0x13, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0x1, [0x5, 0xe, 0x401]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x3, 0xff, [0xf45f628, 0x4, 0x9, 0x8000000000000000, 0xfffffffffffffffb, 0x5, 0xffff]}}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @pad1, @hao={0xc9, 0x10, @remote}]}}}, @hopopts={{0xa8, 0x29, 0x36, {0x4, 0x11, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x12, [0x10000, 0x549f, 0xffff, 0x4]}}, @pad1, @calipso={0x7, 0x58, {0x1, 0x14, 0x0, 0x2, [0x6, 0x3d, 0x0, 0xa5, 0x7, 0x4, 0xa150, 0x7, 0x9, 0x1]}}, @jumbo={0xc2, 0x4, 0x4}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r4}}}, @dstopts={{0x58, 0x29, 0x37, {0x21, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x40}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x30, {0x2, 0xa, 0x5, 0x3ff, [0xffffffffffff326b, 0x4, 0x4b3, 0x401, 0x8]}}]}}}], 0x438}}, {{&(0x7f0000001200)={0xa, 0x4e22, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff9}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000001240)="dbd2911050177f14bf8860601e19083e3ede18d257198099991932f1d02ab6fc19123cd975", 0x25}, {&(0x7f0000001280)="c961405d6b93e14d6d0ad657dfe4a0233d9991387673767fa61452ae455d063793dfa698d05c3adc3dbd25d4a1137091186291024b7d8b98852e998e5ea5d74d3156660909fb83d42dd468b3bd114a32b3d4fd356c4165bf7b88daaaeaa1842351176ae9c3193c31fbc86d3e08b5427841ba5170f67713c5fe800c765cf3077042644e1e312e7b268fe2d73306a953a65423e05a923d186ae7ee8c7ace97e9546f82a7e487ed4bd9297c4be514da0c5148d95bcc068465f3f54e6f20173357d57df5cdac5a99", 0xc6}, {&(0x7f0000001380)="68f0091038b5a7c15fa35f252cf8f540c6bb0f23e1f0e5ab30f80edd3cdb1ad5a4c68cce0638390bb3cfbc759fbb1acdf7039f23dc394112b7ee46e5391e9fe65264f9601a3b94fe4d7ac323b233dff05125210693365a9d7662a7ab0aa3fb4bf2eb613f38500268338bd78d344a65b6ba93acce1e6cbbc7e33f6693b84081cf9c1f0017be43751d", 0x88}, {&(0x7f0000001440)="13b55e141c3ed0f70d6a2468f8fb4f4d7fbde1286af400a520ee3c23f4248ded3d77c94e53c8cae2489fa3d07e139f4b79dcddae24ad5b9623ad937e2c119944295be389aebdb562967de009d534229290c477c97b513b77f380f395bed5a79734ce0a30a3856ed69733dfd6e948480da249a5ffeb149def55915bb5cf766626241a58c5e962b0ea77d2c2329a8c9cd3d65835b41136e5801c06da3aa88154e458adda630f1e36869df459d5b145e3827fa9074ff5bd3c3966beb339", 0xbc}], 0x4}}, {{&(0x7f0000001540)={0xa, 0x4e21, 0xfffffff8, @mcast1, 0x648}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000001580)="7ab38accdb6e8fbbd3b82f7ecedc033c78be4c0f8ac894aaf196728844cf8cebc54eb705d4fad510914ab45a940b7694c419850cd75ea0844ff403cb1ff395afdbae8e62018a33c6c0f63d873dbda246032625d0039bbd5d497754070b799c6cf6b930bc321015ebc8047563dcbd3cba3bfafac5d4931ba23fac30105d16717373e1b094ddd3698fd3f583f25256fb261978a4", 0x93}, {&(0x7f0000001640)="be6bb171ff05f810c4778bd9ab21903ab83e85b60ea480f78bf9e35d019d1a1d9497559f41e8a8c0", 0x28}, {&(0x7f0000001680)="cb7916567ae72e11eec31da29db0b318055a4abc5065dbd1a48603df5a034a60aa46a1af0d12e906e59cfc9d65de536cbd94302eba3e59b3ddd77fd7e6b2766819c1a7628fd125fad1243d0cc1e009756a9935fdd37d6cf8afd205239569d243b0f858c25a840949acb14080476eafc7ff90c9bdc341ba49b0e99aadf905d6afffad835a5122c33783d3f31c44149c4311082cd8", 0x94}, {&(0x7f0000001740)="d064f18879281ee27e53298d038f724a9294dc0ac19f256b8a6275f7a07277a8a309864400fbbe54787f6f1808ee4f2f589dc14c4e2d0d7ede9849a88f2d20e94cb51eeee652fb1b14559b99693a16fbe27abf53cdc3f30d162faa2a343085311b63643352db8daea677db2eafb362bef23829f0a65e222c3374d44e4a780d77f388b73e6ede15a3340c9b191f64e89aa9dcd429894e309b7d3f8030e9f71bb533ace587113a5434e5c87364a795e163740ca3c1e287d029492a4c5b34ff63a77d2f853573f242fc104fa442b651b8d61ad212e123591b06c69c86aa9ea6", 0xde}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="69e8d91948c06c1593a346513dda", 0xe}], 0x6, &(0x7f0000002940)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r5}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x80000000}}], 0x88}}, {{&(0x7f0000002a00)={0xa, 0x4e21, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3b}, 0x1c, &(0x7f0000002c40)=[{&(0x7f0000002a40)="7231a71276b388e7ee87a5bec29c6b87743910e7414e7b9771bfd61a97ca568bb26ecfaf8825c9253d921815e412a70c2ef559d591893a23ea009c2cbf0187a8dfa832faca6be29f27920d8e8cc461b681423692c817ab90faa591bb9d1b86d8216ec2f4e1fee68f16afdea55e8df9fa2b5d9408dc0bd227448d36a4ead4f35cd0f20b6673c46075cb319e92f168a8c5eb3814308dcbef83ed7d333b473d02801cc5639ee0246ead0c414b9b4b6acbff3effaacc7b477458a37a6965385517a0f3eec26527c6332db9d8d9bfba4a9e1a971148fa1a1b8704c946d1cb3c252982c296d51565618bcf238a", 0xea}, {&(0x7f0000002b40)="a738d0a525b24d6a7c88b19d4a9af6768be5ba4dc436321df4a27511ddec828a8d1791610f6805992e413df037d7e51cdc0567fd8daf4a1f60f734597f80599f9ed48f3c2ca8b1daea7ea17ba8db38d492044734fc997d7f34dfb693d8aa4ec110feb93541530a653646609264da84b9488603a7b9097006", 0x78}, {&(0x7f0000002bc0)="86048659dda564f1ecff823873d7ec163ffdbc58c34504fbca094dbbed5f6cab5ed9720e314f0c0b5e861ceb0d9edc4bbd2e55a05a70e655fe8e7a21e395b78f93dff52335ecb158d6129acd4c28237314d7", 0x52}], 0x3, &(0x7f0000002c80)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x0, 0x6, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0x28}}, {{&(0x7f0000002cc0)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000002d00)="2febfedc3eb4c38acc59bc1511fc7a5bd46562cbe60a070b092e2b0b8b9fc3e10a8aad0b0b60dca5dc065656178d22e426b353b4f2d237b883f5460c0e", 0x3d}, {&(0x7f0000002d40)="ddb02010a3bb663d27b46fae1acb71c77d4882d2af677542158cdf69a302ee9cb6d0cd3c58ea55eb81fa70eadd53cabeee1d34e837239c2125d0fb3cb7a04bbf8106e7115c1e1d2433311660bbae0b5e3dfc29a85812a16a6a5132f123dfdf44288357acfb053110b8f8ecb49081e657ef3e03decabde264bc266798342142388e25b235259b933ebcc4d2c699067bcc33b83923f37dda1993fb491f9bf26ef6eb63265630c528f1ee62b4291b", 0xad}], 0x2, &(0x7f0000002e40)=[@rthdrdstopts={{0x60, 0x29, 0x37, {0x3b, 0x8, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x6, 0x4, [0x0, 0x88, 0xffffffffffffffff, 0x3, 0x2, 0x7, 0x2]}}, @ra={0x5, 0x2, 0x7f}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x2, 0xe, 0x1, 0x9a, 0x0, [@loopback, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x29, 0x2, 0x1, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}], 0x140}}], 0x5, 0x4) (async, rerun: 64) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0)='4', 0x1) (async, rerun: 32) tee(r7, r6, 0xffffffffffffffff, 0x2) (async, rerun: 32) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000040)=0xfffffffb, 0x4) (async, rerun: 32) sendto$inet6(r3, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1450, 0x5de, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) (async, rerun: 32) readv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 32) ioctl(r2, 0x8b32, &(0x7f0000000040)) (rerun: 32) 2.170730727s ago: executing program 5 (id=4557): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0xf, 0x6, 0x301, 0x0, 0x0, {0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x240040c5) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x8, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x4000002b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x87, 0x4) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, @tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x1}, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x7f, &(0x7f00000000c0), 0xb1, 0x9b9, 0x4}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000001340)=[{&(0x7f0000000340)="a272252e0538609eebff320965e838f376fc08388818567eb6182f65e9b636e9f581d8bdb5014619cc5a6aeb3e671cf9cf5f03910d05a1ca48d707d4ca41b9b249e11391ab2cf3098ea7144b2b2e0e08b6e12d2531da42957bb8a50460b2770cb6ca186bf53d95452c541bbed7117f4f9ada020f6d7eb66444395fc7edb7ef711425507165065194b2df06156f9b737b75020d4770db7786609d4ee22e9aff1ea6de97524de147d9e11bf0c367a52ea0bd8f61ad02e83eed760a86735e19dcbe4eb5117220836ab3461a337630df15f5f4746d7acdb69db27bed0d31a0d9920a06e487cd0fbab852", 0xe8}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ppoll(&(0x7f0000000340)=[{r3, 0x11}, {r1, 0x4204}, {r1, 0x2086}, {r0, 0x504}, {r2, 0x2000}, {r2, 0x1001}, {r1, 0x2041}, {r4, 0x9001}], 0x8, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x100000000]}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) 2.170275718s ago: executing program 1 (id=4558): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, @hci={0x1f, 0x3, 0x4}, @hci={0x1f, 0x4, 0x3}, @can, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xa, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r3, 0x65, 0x2, 0x0, 0x20000028) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x4, 0x1}, 0x10) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000006380)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001500)={r6, "0a660dcdfbf99357b2678f45d7038384"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000680)={r6, 0x8, 0x5}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="336b2dfd7000040000000200003e6c7b9e2ed58dadaf9938f8140008000300", @ANYRES32=r8, @ANYBLOB="0c009900470000004d00000008002600501400000800270002000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a80)={0x64, r9, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffffffff, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x7f}, {0x8, 0x0, 0x7ffffffd}, {0x8, 0x0, 0x100}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x408c0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42304822a5347abc11fb5664dc79199a73e7d", 0x49}, {&(0x7f0000000480)="2c64e36df11764f28e87161c1c", 0xd}], 0x2}, 0x2400800c) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, 0x0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) socket$can_bcm(0x1d, 0x2, 0x2) 1.911632083s ago: executing program 6 (id=4559): r0 = socket$inet(0x2, 0x80008, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000009000000010001000900000001000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00g', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000280)) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vlan0\x00', 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f5ffffffffffffff"], 0x50) ioctl$FIONCLEX(r4, 0x5450) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005", 0x2b}], 0x1}, 0x48000) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000048}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x1c, r9, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8c0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r6, @ANYRESOCT=r5], 0x34}, 0x1, 0x0, 0x0, 0x4c444}, 0x4000140) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r12, @ANYBLOB="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"], 0x60}, 0x1, 0x400000000000000}, 0x40010) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) 1.710679478s ago: executing program 2 (id=4560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x83}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', r3, 0x4, 0x4, 0x82, 0x1, 0x84, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1, 0x8000, 0x7, 0x7}}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x4c, 0x2e, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0x3}, {0x0, 0x6}, {0x4, 0x2}}, [{0x8, 0xb, 0x29}, {0x8, 0xb, 0x80}, {0x42, 0xb, 0x6a0f}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) 1.012853424s ago: executing program 5 (id=4561): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018010000202070250000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec59080600010800"], 0x0) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x1) writev(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)="2406e068c7645204743f9a6e95c2bf8b875bd985448077deb041f2127d443fa320266810c8116530def2f6ef11f3c66a76802b5d95b2ce1502f7b4d487c7c8b0efb6c917ed3cffab7b5a3e690fa4dc40247ee070252e9537f73b9f3171e7eb12318229f405c1987169d7ce159b0527199eb5760fb5d47ebb13a60706fe48c46e3a6903a10ae066e629656fd5677f526e471e63293c2f0915ab5fb023f53b3b09258b58423b16ef7d8d28ac29df6aeff2cccd0394add5de7644ae0ea5496b36ee4ebc440bba8e75fb9ac5b9e1265c0c29dd4b80926439393ead120e6786ab4804d36452baeef974b1ef2d38ab51", 0xed}, {&(0x7f0000000340)="748db681c64f306b0715258ab89ead69475ca53130d89100e45e0899727b6b64f8e66cc4bd9eed44562cb92a78efdd14394e480e0f0adf3b64bb23f00bc846991bf3644875d6c4be4c25042cc5721b18190ca80f31b35d593c4ea87d43cd5113a659f18d81a5a1efabea1ea77f822582e0f8bb62a992574c30cfd0cda1e94f29219cb13f146e7a158b3a8e63d4cdcde8b1a3c18f63e23322979d53cc770b3993d17de5117c2420d7c2020738755eb8603744bcfca56528280cee4e7a0571610b77f3bab53bccaab36aec109e26ecf5101e23b9f2", 0xd4}], 0x2) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r7, @ANYBLOB="1000018004"], 0x28}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000003680)=""/82, 0x52}], 0x2}, 0x8}], 0x2, 0x40000140, 0x0) 892.229734ms ago: executing program 1 (id=4562): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @local, @multicast1, @multicast, @rand_addr=0x64010100}}}}, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18006d000002007bf94c0bb6a7c6c50822", @ANYRES8=r2, @ANYRESOCT=r3], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x48080) 730.080789ms ago: executing program 2 (id=4563): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x8c, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x40}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xe}, @NFC_ATTR_VENDOR_ID={0x8}, @NFC_ATTR_VENDOR_DATA={0x50, 0x1f, "d58672d317a0f5b3a6094c1ad04dcd1d416eb1ec2d9a56431e35c7a54e14abdf80aa59d2de3f00c6794de0c8ff57d2cb386c7e39c4bb0791e185b13c4a452d155cf08ab197fcc7913463d027"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x252}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x8c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)=ANY=[@ANYBLOB="240000002500090122bd7000fcffffff5c000000080003004700000008006b80"], 0x24}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) 398.944971ms ago: executing program 1 (id=4564): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) 323.243194ms ago: executing program 2 (id=4565): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005800000000005000400000000000c00078008000600000000010d000300686173683a6d616300"], 0x54}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000100)="b9ffddc1ddcccdde75537d538906dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x80}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40d0}, 0x40000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000bc0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@empty, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'vmac(tnepres-generic)\x00'}}}]}, 0x184}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffff9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000c40)={r7, 0xca60, 0xfffa}) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x10) bpf$MAP_UPDATE_BATCH(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000) r9 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_pressure(r10, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r11, &(0x7f0000000080)={'full', 0x20, 0x7, 0x20, 0xfffdfffffffffff5}, 0x2f) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 250.886606ms ago: executing program 6 (id=4566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711009000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 0s ago: executing program 1 (id=4567): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fc000000fe880000000000000000000000000000b100000000000000bd1142d300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080010000800000000000c0015"], 0xe0}}, 0x0) r3 = socket(0x23, 0x5, 0x0) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000200fc02009254649dc4499316a729269c66"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): 1001 length: 249 > 9 [ 481.692079][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 481.700166][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 482.552684][T17821] netlink: 'syz.2.3106': attribute type 1 has an invalid length. [ 482.693648][T17827] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.3106'. [ 483.815495][ T5634] Bluetooth: hci1: command tx timeout [ 485.814254][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 485.900770][ T5634] Bluetooth: hci1: command tx timeout [ 487.210633][T17821] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 487.214153][T17824] ip_vti0: entered promiscuous mode [ 487.411801][T17839] batadv1: entered allmulticast mode [ 487.974403][ T5634] Bluetooth: hci1: command tx timeout [ 488.091354][T17878] syzkaller0: entered promiscuous mode [ 488.097381][T17878] syzkaller0: entered allmulticast mode [ 488.155479][T17790] vxcan1 speed is unknown, defaulting to 1000 [ 488.297086][T17897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3121'. [ 488.322171][T17897] openvswitch: netlink: Flow actions attr not present in new flow. [ 488.377346][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 488.719872][T17910] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3124'. [ 490.058862][ T5634] Bluetooth: hci1: command tx timeout [ 492.120501][T17930] sctp: [Deprecated]: syz.5.3130 (pid 17930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.120501][T17930] Use struct sctp_sack_info instead [ 492.291086][T17941] netlink: 'syz.5.3130': attribute type 21 has an invalid length. [ 492.307995][T17941] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3130'. [ 492.331147][T17943] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3134'. [ 492.349327][T17948] netlink: 'syz.5.3130': attribute type 21 has an invalid length. [ 492.370135][T17948] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3130'. [ 492.402668][T17941] netlink: 'syz.5.3130': attribute type 4 has an invalid length. [ 492.412040][T17941] netlink: 'syz.5.3130': attribute type 5 has an invalid length. [ 492.420407][T17941] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3130'. [ 492.450026][T17950] bond2: Removing last ns target with arp_interval on [ 492.462150][T17948] netlink: 'syz.5.3130': attribute type 4 has an invalid length. [ 492.472172][T17948] netlink: 'syz.5.3130': attribute type 5 has an invalid length. [ 492.483446][T17948] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3130'. [ 492.847755][T17971] Cannot find set identified by id 0 to match [ 492.891242][T17971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3139'. [ 492.985059][T17971] vlan2: entered allmulticast mode [ 492.990578][T17971] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 493.030134][T17971] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 493.161064][T17790] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.170941][T17790] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.178817][T17790] bridge_slave_0: entered allmulticast mode [ 493.187998][T17790] bridge_slave_0: entered promiscuous mode [ 493.198630][T17790] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.208609][T17790] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.216642][T17790] bridge_slave_1: entered allmulticast mode [ 493.229369][T17790] bridge_slave_1: entered promiscuous mode [ 493.481978][T17790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.550306][T17790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.553327][T18002] netlink: 'syz.4.3147': attribute type 1 has an invalid length. [ 493.614231][T18003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3147'. [ 493.620984][T18007] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3146'. [ 493.660737][T18002] 8021q: adding VLAN 0 to HW filter on device bond9 [ 493.682827][T18006] netlink: 'syz.2.3148': attribute type 1 has an invalid length. [ 493.700598][T18000] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3146'. [ 493.714872][T17790] team0: Port device team_slave_0 added [ 493.724401][T18000] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3146'. [ 493.764228][T18000] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3146'. [ 493.799981][T17790] team0: Port device team_slave_1 added [ 493.877450][T18000] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3146'. [ 493.890831][T17790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.899762][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.953334][T17790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.980887][T18000] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3146'. [ 493.991020][T18000] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3146'. [ 494.000009][T18022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3152'. [ 494.004183][T17790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.018124][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.047682][T17790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.077046][T18000] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3146'. [ 494.222889][T17790] hsr_slave_0: entered promiscuous mode [ 494.231282][T17790] hsr_slave_1: entered promiscuous mode [ 494.239931][T17790] debugfs: 'hsr0' already exists in 'hsr' [ 494.248096][T17790] Cannot create hsr debugfs directory [ 494.843372][T18049] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 495.169697][ T9694] IPVS: starting estimator thread 0... [ 495.267701][T18073] IPVS: using max 31 ests per chain, 74400 per kthread [ 495.286935][T18064] vxcan1 speed is unknown, defaulting to 1000 [ 495.291019][T18077] netlink: 'syz.4.3166': attribute type 58 has an invalid length. [ 495.981246][T18100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.209676][T18106] netlink: 'syz.5.3174': attribute type 1 has an invalid length. [ 496.412402][T18117] netlink: 'syz.4.3176': attribute type 11 has an invalid length. [ 496.471711][T18106] 8021q: adding VLAN 0 to HW filter on device bond7 [ 496.589783][T18117] vlan4: entered allmulticast mode [ 497.084405][T17790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 497.103285][T17790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.140857][T18135] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 497.155247][T18135] bond8 (unregistering): Released all slaves [ 497.191385][T17790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 497.258842][T17790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.271859][T17790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 497.286234][T17790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.296350][T17790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 497.322756][T17790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 497.629914][T17790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.724589][T17790] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.777727][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.785232][ T8752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.859640][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.867053][ T8749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.595691][T18190] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 498.877042][T18209] __nla_validate_parse: 45 callbacks suppressed [ 498.877064][T18209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3201'. [ 499.279531][T18226] macvlan2: entered promiscuous mode [ 499.301663][T18226] macvlan2: entered allmulticast mode [ 499.329465][T18226] team0: Device macvlan2 is already an upper device of the team interface [ 499.726613][T18240] tipc: Enabling of bearer rejected, failed to enable media [ 499.882682][T17790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.505924][T18279] x_tables: unsorted entry at hook 3 [ 500.510227][T17790] veth0_vlan: entered promiscuous mode [ 500.642426][T18282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3221'. [ 500.687180][T18282] bond0: entered promiscuous mode [ 500.692680][T18282] bond_slave_0: entered promiscuous mode [ 500.699858][T18279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3221'. [ 500.734505][T18282] bond_slave_1: entered promiscuous mode [ 500.746962][T18282] gretap0: entered promiscuous mode [ 500.758212][T18282] hsr1: entered promiscuous mode [ 500.778427][T17790] veth1_vlan: entered promiscuous mode [ 500.999292][T17790] veth0_macvtap: entered promiscuous mode [ 501.042306][T17790] veth1_macvtap: entered promiscuous mode [ 501.083377][T17790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.126153][T17790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.156339][ T8756] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.182882][ T8756] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.230321][ T8756] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.278703][ T8756] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.515421][T18308] xt_hashlimit: size too large, truncated to 1048576 [ 501.523335][ T8746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.562182][ T8746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.632163][T18306] xt_hashlimit: size too large, truncated to 1048576 [ 501.700148][ T8752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.743343][ T8752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.837460][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.025343][T18322] syzkaller0: entered promiscuous mode [ 502.059879][T18322] syzkaller0: entered allmulticast mode [ 502.440349][T18341] netlink: 'syz.0.3237': attribute type 13 has an invalid length. [ 502.472489][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3238'. [ 502.490144][T18341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3237'. [ 502.529564][T18345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3237'. [ 502.733014][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 502.755550][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 502.761659][T18353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3240'. [ 502.777559][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 502.791106][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 502.802953][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 502.932085][ T149] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.125089][T18341] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 503.139308][T18341] bond1 (unregistering): Released all slaves [ 503.180578][ T149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.228865][ T149] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.289680][ T149] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.451520][T18379] netlink: 'syz.0.3246': attribute type 10 has an invalid length. [ 503.543251][T18379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.604584][T18379] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 503.626751][T18379] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 503.862897][T18402] vcan1: entered promiscuous mode [ 503.868946][T18402] vcan1: entered allmulticast mode [ 503.894318][ T5636] Bluetooth: hci5: command 0x0406 tx timeout [ 503.960337][T18350] vxcan1 speed is unknown, defaulting to 1000 [ 503.970508][T18402] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3250'. [ 504.155964][T18409] netlink: 'syz.1.3252': attribute type 1 has an invalid length. [ 504.176295][T18410] netlink: 'syz.2.3253': attribute type 1 has an invalid length. [ 504.240297][T18411] tipc: Started in network mode [ 504.250467][T18411] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 504.269836][T18411] tipc: Enabled bearer , priority 10 [ 504.458431][ T9694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.614813][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.854753][ T50] Bluetooth: hci3: command tx timeout [ 504.891124][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3258'. [ 505.188281][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.264212][T18350] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.283379][T18350] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.292392][T18350] bridge_slave_0: entered allmulticast mode [ 505.300838][T18350] bridge_slave_0: entered promiscuous mode [ 505.311295][T18350] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.319813][T18350] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.335132][T18350] bridge_slave_1: entered allmulticast mode [ 505.353596][T18350] bridge_slave_1: entered promiscuous mode [ 505.420868][ T9695] tipc: Node number set to 10136234 [ 505.534918][T18350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.601350][T18350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.657816][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.666504][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.677029][ T9696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.697898][T18449] netlink: 412 bytes leftover after parsing attributes in process `syz.5.3263'. [ 505.756683][T18350] team0: Port device team_slave_0 added [ 505.768006][T18350] team0: Port device team_slave_1 added [ 505.782912][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.815282][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.834262][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.867027][T18350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.876651][T18452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.891201][T18350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.950920][T18350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.954769][T18453] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3264'. [ 505.991001][T18350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.011731][T18350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.107317][T18350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.237310][T18350] hsr_slave_0: entered promiscuous mode [ 506.277368][T18350] hsr_slave_1: entered promiscuous mode [ 506.295844][T18350] debugfs: 'hsr0' already exists in 'hsr' [ 506.309039][T18350] Cannot create hsr debugfs directory [ 506.364558][T18464] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3268'. [ 506.939222][ T50] Bluetooth: hci3: command tx timeout [ 507.024216][T18350] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.049519][T18350] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 507.062728][T18350] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 507.078082][T18488] netlink: 'syz.1.3274': attribute type 1 has an invalid length. [ 507.256307][T18350] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.302541][T18350] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 507.325602][T18350] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 507.448070][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3277'. [ 507.486421][T18350] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.510926][T18501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3277'. [ 507.510993][T18350] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 507.563314][T18350] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 507.703615][T18502] bridge1: port 1(vlan3) entered blocking state [ 507.712997][T18502] bridge1: port 1(vlan3) entered disabled state [ 507.721017][T18502] vlan3: entered allmulticast mode [ 507.729549][T18502] bridge1: entered allmulticast mode [ 507.739676][T18502] vlan3: left allmulticast mode [ 507.744783][T18502] bridge1: left allmulticast mode [ 507.845701][T18350] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.886412][T18350] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 507.912516][T18350] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 508.089891][T18519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3284'. [ 508.175267][T18521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.199791][T18521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.258683][T18524] netlink: 'syz.5.3286': attribute type 39 has an invalid length. [ 508.292027][T18521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.314151][T18521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.457640][T18526] IPVS: set_ctl: invalid protocol: 135 172.20.20.15:21 [ 509.010787][T18350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 509.019724][ T50] Bluetooth: hci3: command tx timeout [ 509.048895][T18350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.066420][T18350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 509.089153][T18350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.109079][T18350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 509.156426][T18350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.202170][T18350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 509.240557][T18350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.287393][ T29] audit: type=1107 audit(1777750810.074:6): pid=18536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<7ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍ‚ç›' [ 509.476481][T18544] syzkaller0: entered promiscuous mode [ 509.500815][T18544] syzkaller0: entered allmulticast mode [ 509.584576][T18559] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3293'. [ 509.791447][T18350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.817630][ T9687] net_ratelimit: 15 callbacks suppressed [ 509.817651][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.899213][T18350] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.942447][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.949815][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.077537][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.084896][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.202065][T18577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3296'. [ 510.858661][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.901461][T18350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.100534][ T50] Bluetooth: hci3: command tx timeout [ 511.139669][T18350] veth0_vlan: entered promiscuous mode [ 511.152309][T18350] veth1_vlan: entered promiscuous mode [ 511.187229][T18350] veth0_macvtap: entered promiscuous mode [ 511.200999][T18350] veth1_macvtap: entered promiscuous mode [ 511.226750][T18350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.241654][T18350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.261982][ T1037] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.271382][ T1037] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.285918][ T1037] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.296476][ T1037] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.456964][T18609] syzkaller0: entered promiscuous mode [ 511.463075][T18609] syzkaller0: entered allmulticast mode [ 511.744233][ T9697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.894314][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.062280][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.859418][T18565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.943597][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.002818][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.039724][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.152284][T18623] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3306'. [ 513.197517][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.217098][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.218611][T18628] x_tables: duplicate underflow at hook 2 [ 513.335380][ T9697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.337897][T18631] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3309'. [ 513.975592][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.065469][T18671] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3320'. [ 514.288539][T18680] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3322'. [ 514.531780][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3326'. [ 514.614722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.624294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.954331][T18718] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3335'. [ 515.017274][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.032797][T18719] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3335'. [ 515.095036][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.256261][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.284082][T18734] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 515.300937][T18735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.311798][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'. [ 515.319085][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3338'. [ 515.347074][T18738] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3339'. [ 515.438234][T18747] bond3: entered promiscuous mode [ 515.456834][T18747] bond3: entered allmulticast mode [ 515.699145][T18759] netlink: 'syz.1.3345': attribute type 10 has an invalid length. [ 515.707478][T18759] netlink: 396 bytes leftover after parsing attributes in process `syz.1.3345'. [ 516.054192][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.095087][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.134225][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.294564][ T9697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.174502][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.216279][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.254389][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.334974][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.299240][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.335378][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.219299][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.374324][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.382765][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.414962][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.494833][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.454485][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.494559][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.534346][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.542807][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.574727][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.974076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.985444][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.616628][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.584675][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.654517][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.545490][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.556238][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.694253][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.734402][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.775374][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.481868][T18784] netlink: 740 bytes leftover after parsing attributes in process `syz.1.3347'. [ 535.581903][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.814144][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.856518][T18793] SET target dimension over the limit! [ 535.891792][T18790] netlink: 'syz.5.3351': attribute type 3 has an invalid length. [ 536.101572][T18800] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3355'. [ 536.295936][T18806] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3358'. [ 536.325469][T18806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.337896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.378089][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3360'. [ 536.499066][T18815] tipc: Enabling of bearer rejected, failed to enable media [ 536.561252][T18814] tipc: Enabling of bearer rejected, failed to enable media [ 536.856246][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.039101][T18847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3368'. [ 537.316889][T18864] netlink: 'syz.4.3373': attribute type 7 has an invalid length. [ 537.443557][ T8752] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.446840][T18864] netlink: 'syz.4.3373': attribute type 7 has an invalid length. [ 537.469432][T18871] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3376'. [ 537.492459][ T8752] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.517057][ T8752] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.526602][ T8752] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.561128][T18876] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 537.895695][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.947963][T18895] syzkaller0: entered promiscuous mode [ 537.955095][T18895] syzkaller0: entered allmulticast mode [ 538.007597][T18899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.053144][T18899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.073572][T18899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.618313][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.937195][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.999772][T18932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3388'. [ 539.225433][T18944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3392'. [ 539.362422][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3395'. [ 539.377612][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3395'. [ 539.509508][ T8756] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.525759][T18952] netlink: 'syz.5.3394': attribute type 30 has an invalid length. [ 539.530576][ T8756] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.568855][ T8756] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.638780][ T8756] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.912486][T18979] sctp: [Deprecated]: syz.1.3403 (pid 18979) Use of int in max_burst socket option. [ 539.912486][T18979] Use struct sctp_assoc_value instead [ 540.189977][T18992] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 540.776161][T19019] __nla_validate_parse: 11 callbacks suppressed [ 540.776183][T19019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3416'. [ 540.912974][T19021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3417'. [ 541.014444][ T5739] net_ratelimit: 9 callbacks suppressed [ 541.014465][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.381818][T19011] infiniband syz1: set active [ 541.412872][T19011] infiniband syz1: added bond_slave_1 [ 541.492159][T19011] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 541.537751][T19011] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 541.559109][T19011] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 541.655759][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.659397][T19011] RDS/IB: syz1: added [ 541.685736][T19011] smc: adding ib device syz1 with port count 1 [ 541.702071][T19011] smc: ib device syz1 port 1 has no pnetid [ 541.734880][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.770420][T19051] syzkaller1: entered promiscuous mode [ 541.783496][T19051] syzkaller1: entered allmulticast mode [ 542.023186][T19061] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3429'. [ 542.054091][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.137123][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.333132][T19070] netlink: 'syz.5.3432': attribute type 2 has an invalid length. [ 542.513638][T19070] bond8: option miimon: invalid value (18446744073709551585) [ 542.545259][T19070] bond8: option miimon: allowed values 0 - 2147483647 [ 542.564609][T19087] netlink: 'syz.4.3436': attribute type 7 has an invalid length. [ 542.588538][T19087] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3436'. [ 542.589359][T19089] netlink: 'syz.5.3432': attribute type 8 has an invalid length. [ 542.626818][T19070] bond8 (unregistering): Released all slaves [ 542.776477][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.785085][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.095038][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.254255][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.346692][T19113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3443'. [ 543.351938][T19115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3444'. [ 543.539478][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3446'. [ 543.610287][T19124] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3447'. [ 543.627227][T19124] openvswitch: netlink: Flow key attr not present in new flow. [ 543.637635][T19122] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3446'. [ 543.657020][T19122] netlink: 'syz.0.3446': attribute type 1 has an invalid length. [ 543.684709][T19122] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3446'. [ 544.441808][T19153] xt_hashlimit: size too large, truncated to 1048576 [ 544.976289][T19170] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 545.017547][T19170] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 545.216396][T19174] netlink: 'syz.5.3462': attribute type 1 has an invalid length. [ 545.230688][T19172] syzkaller0: entered promiscuous mode [ 545.234188][T19174] netlink: 'syz.5.3462': attribute type 2 has an invalid length. [ 545.243586][T19172] syzkaller0: entered allmulticast mode [ 545.279244][T19174] netlink: 'syz.5.3462': attribute type 1 has an invalid length. [ 545.649480][T19183] syzkaller0: entered promiscuous mode [ 545.661986][T19183] syzkaller0: entered allmulticast mode [ 545.683940][T19183] tc action pedit offset must be on 32 bit boundaries [ 545.819817][T19189] __nla_validate_parse: 11 callbacks suppressed [ 545.819839][T19189] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3467'. [ 545.873534][T19188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3467'. [ 545.925036][T19188] netlink: 'syz.4.3467': attribute type 7 has an invalid length. [ 545.945672][T19188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3467'. [ 546.215760][ T1744] net_ratelimit: 6 callbacks suppressed [ 546.215780][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.304974][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.337935][T19205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.398061][T19205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.415411][T19208] IPVS: length: 192 != 24 [ 546.424036][T19205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.441139][T19211] netlink: 'syz.1.3473': attribute type 83 has an invalid length. [ 546.463282][T19205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.504262][T19205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.555418][T19205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.594101][T19205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.639801][T19205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.058001][T19236] tls_set_device_offload_rx: netdev not found [ 547.076574][T19237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3483'. [ 547.172974][T19237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3483'. [ 548.289677][T19282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3494'. [ 548.549941][T19290] 8021q: VLANs not supported on gre0 [ 548.903137][T19295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3499'. [ 549.192233][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3503'. [ 549.340489][T19307] 8021q: adding VLAN 0 to HW filter on device bond4 [ 549.508440][T19323] x_tables: duplicate underflow at hook 3 [ 550.043617][T19351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3516'. [ 550.457947][T19372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3520'. [ 550.504909][T19372] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 550.514646][T19370] netlink: 'syz.2.3519': attribute type 32 has an invalid length. [ 550.595771][T19384] bond0: entered promiscuous mode [ 550.622404][T19384] bond_slave_0: entered promiscuous mode [ 550.642093][T19384] bond_slave_1: entered promiscuous mode [ 550.678860][T19384] batadv0: entered promiscuous mode [ 550.719187][T19384] debugfs: 'hsr1' already exists in 'hsr' [ 550.743417][T19384] Cannot create hsr debugfs directory [ 550.755823][T19384] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 550.780871][T19384] bond0: left promiscuous mode [ 550.786821][T19384] bond_slave_0: left promiscuous mode [ 550.797109][T19384] bond_slave_1: left promiscuous mode [ 550.819005][T19384] batadv0: left promiscuous mode [ 551.149146][T19413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3529'. [ 551.360079][T19419] netlink: 'syz.1.3532': attribute type 1 has an invalid length. [ 551.402851][T19420] netlink: 'syz.4.3533': attribute type 1 has an invalid length. [ 551.421037][ T9687] net_ratelimit: 49 callbacks suppressed [ 551.421056][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.441100][T19424] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3532'. [ 551.518741][T19423] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 551.628741][T19434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.646141][T19420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.735275][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.842643][T19430] vlan2: entered promiscuous mode [ 551.881230][T19430] bond1: entered promiscuous mode [ 551.896703][ T9696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.914285][T19430] vlan2: entered allmulticast mode [ 551.943812][T19430] bond1: entered allmulticast mode [ 551.999110][T19454] tipc: Started in network mode [ 552.009569][T19454] tipc: Node identity 9ed9d202a47c, cluster identity 4711 [ 552.021307][T19454] tipc: Enabled bearer , priority 0 [ 552.052010][T19437] syzkaller0: entered promiscuous mode [ 552.058602][T19437] syzkaller0: entered allmulticast mode [ 552.210109][T19457] syzkaller0: entered promiscuous mode [ 552.220269][T19457] syzkaller0: entered allmulticast mode [ 552.229678][T19427] tipc: Resetting bearer [ 552.331132][T19427] tipc: Disabling bearer [ 552.456473][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.495078][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.535175][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.950065][ T9696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.582342][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.822472][T19474] IPVS: Unknown mcast interface: vcan0 [ 555.835794][T19486] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3545'. [ 555.991828][T19490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3546'. [ 556.110184][T19500] netlink: 'syz.1.3549': attribute type 39 has an invalid length. [ 556.276327][T19504] netlink: 'syz.5.3550': attribute type 1 has an invalid length. [ 556.328578][T19509] IPv6: NLM_F_CREATE should be specified when creating new route [ 556.342937][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 556.438369][T19510] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3552'. [ 556.489808][T19509] team0: Failed to send options change via netlink (err -105) [ 556.507187][T19515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.507922][T19509] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 556.518145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.569514][T19509] team0: Port device team_slave_0 removed [ 556.610482][T19526] openvswitch: netlink: Flow actions attr not present in new flow. [ 556.624220][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.930198][T19541] xt_connbytes: Forcing CT accounting to be enabled [ 556.939188][T19539] netlink: 'syz.4.3560': attribute type 4 has an invalid length. [ 557.142698][T19541] xt_CT: No such helper "netbios-ns" [ 557.488323][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3568'. [ 557.488323][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3568'. [ 557.488363][T19566] netlink: 'syz.2.3568': attribute type 5 has an invalid length. [ 557.600271][T19567] netlink: 'syz.2.3568': attribute type 5 has an invalid length. [ 557.634419][T19566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3568'. [ 557.656475][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.686142][T19567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3568'. [ 557.846552][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3574'. [ 557.975503][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.094851][T19598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3576'. [ 558.133984][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.208654][T19600] netlink: 'syz.0.3577': attribute type 11 has an invalid length. [ 558.217334][T19600] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3577'. [ 558.485632][T19617] sock: sock_timestamping_bind_phc: sock not bind to device [ 558.521247][T19617] netlink: 'syz.2.3583': attribute type 2 has an invalid length. [ 558.562805][T19617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3583'. [ 558.613480][T19617] tipc: Invalid UDP bearer configuration [ 558.613540][T19617] tipc: Enabling of bearer rejected, failed to enable media [ 558.696968][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.819172][T19633] syzkaller0: entered promiscuous mode [ 559.734579][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.777712][T19682] netlink: 'syz.0.3596': attribute type 12 has an invalid length. [ 559.800760][T19682] netlink: 'syz.0.3596': attribute type 11 has an invalid length. [ 559.906273][T19682] netlink: 'syz.0.3596': attribute type 12 has an invalid length. [ 559.933848][T19682] netlink: 'syz.0.3596': attribute type 11 has an invalid length. [ 560.054162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.112579][T19692] tipc: Can't bind to reserved service type 2 [ 560.218437][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 560.647385][T19712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.668623][T19712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.751563][T19712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.760882][T19712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.789510][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.114380][T19730] IPv6: sit3: Disabled Multicast RS [ 561.400721][T19748] __nla_validate_parse: 140 callbacks suppressed [ 561.400744][T19748] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3614'. [ 561.444575][T19748] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3614'. [ 561.467007][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3614'. [ 561.669732][T19760] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3617'. [ 561.814847][ T1744] net_ratelimit: 2 callbacks suppressed [ 561.814867][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.901183][T19769] syzkaller0: entered promiscuous mode [ 561.907069][T19769] syzkaller0: entered allmulticast mode [ 561.918193][T19769] validate_nla: 131 callbacks suppressed [ 561.918214][T19769] netlink: 'syz.4.3620': attribute type 21 has an invalid length. [ 561.932550][T19769] netlink: 'syz.4.3620': attribute type 1 has an invalid length. [ 561.958985][T19775] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 561.991958][T19777] netlink: 'syz.5.3623': attribute type 1 has an invalid length. [ 562.029252][T19777] 8021q: adding VLAN 0 to HW filter on device bond8 [ 562.046197][T19780] x_tables: unsorted underflow at hook 4 [ 562.100302][T19777] bond8: (slave veth5): Enslaving as an active interface with a down link [ 562.149186][T19777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.187590][T19777] netlink: 'syz.5.3623': attribute type 1 has an invalid length. [ 562.196261][T19777] netlink: 'syz.5.3623': attribute type 2 has an invalid length. [ 562.235867][T19782] bond8: (slave veth0_to_bond): making interface the new active one [ 562.255868][T19782] veth0_to_bond: entered promiscuous mode [ 562.263505][T19782] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 562.415453][T19793] ipvlan1: entered promiscuous mode [ 562.421576][T19793] ipvlan1: entered allmulticast mode [ 562.427681][T19793] veth0_vlan: entered allmulticast mode [ 562.539973][T19806] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20002 [ 562.548879][T19803] openvswitch: netlink: EtherType 0 is less than min 600 [ 562.619534][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.789433][T19817] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3632'. [ 562.854859][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.930402][T19814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3631'. [ 562.958156][T19814] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3631'. [ 563.143415][T19826] netlink: 'syz.5.3635': attribute type 28 has an invalid length. [ 563.171964][T19826] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3635'. [ 563.208622][T19825] netlink: 'syz.5.3635': attribute type 28 has an invalid length. [ 563.256391][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 563.258360][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.302333][T19836] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 563.322403][T19825] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3635'. [ 563.896091][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.919818][T19858] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3645'. [ 563.969037][T19859] bond0: entered promiscuous mode [ 563.984017][T19859] bond_slave_0: entered promiscuous mode [ 563.999275][T19859] bond_slave_1: entered promiscuous mode [ 564.097666][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.152848][T19863] netlink: 'syz.5.3648': attribute type 6 has an invalid length. [ 564.553469][T19873] netlink: 'syz.5.3652': attribute type 4 has an invalid length. [ 564.728691][T19884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.834482][T19888] syzkaller0: entered promiscuous mode [ 564.853479][T19888] syzkaller0: entered allmulticast mode [ 564.927258][T19895] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 564.941730][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.256536][T19906] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 565.269240][T19906] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 565.392198][T19909] macvlan2: entered promiscuous mode [ 565.398071][T19909] macvlan2: entered allmulticast mode [ 565.410080][T19909] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 565.434211][T19912] netlink: 'syz.1.3665': attribute type 12 has an invalid length. [ 565.974922][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.021278][T19940] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.196461][T19949] bridge3: port 1(vlan3) entered blocking state [ 566.203310][T19949] bridge3: port 1(vlan3) entered disabled state [ 566.216320][T19949] vlan3: entered allmulticast mode [ 566.222274][T19949] bridge3: entered allmulticast mode [ 566.230605][T19949] vlan3: left allmulticast mode [ 566.236049][T19949] bridge3: left allmulticast mode [ 566.322836][T19959] 8021q: VLANs not supported on ip6_vti0 [ 566.542618][T19964] __nla_validate_parse: 16 callbacks suppressed [ 566.542639][T19964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3680'. [ 566.796705][T19976] macsec1: entered promiscuous mode [ 566.986465][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3688'. [ 567.016003][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.094890][ T9696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.262091][T20003] bridge0: entered allmulticast mode [ 567.609730][T20018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3696'. [ 567.628522][T20021] IPv6: NLM_F_CREATE should be specified when creating new route [ 567.684080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.839397][T20034] syzkaller0: entered promiscuous mode [ 567.860788][T20034] syzkaller0: entered allmulticast mode [ 568.055231][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.294140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.387268][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.094196][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.308243][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3705'. [ 569.364130][T20059] team_slave_1: Caught tx_queue_len zero misconfig [ 570.134817][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.143020][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.565880][T20018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 571.151937][T20099] Cannot find map_set index 135 as target [ 571.175298][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.297591][T20099] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3715'. [ 571.452170][T20112] validate_nla: 3 callbacks suppressed [ 571.452192][T20112] netlink: 'syz.5.3721': attribute type 4 has an invalid length. [ 571.547582][T20112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3721'. [ 571.710166][T20129] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 571.812709][T20133] netlink: 'syz.2.3725': attribute type 12 has an invalid length. [ 571.828032][T20135] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3726'. [ 571.843966][T20133] netlink: 'syz.2.3725': attribute type 29 has an invalid length. [ 571.862393][T20133] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3725'. [ 571.880802][T20133] netlink: 'syz.2.3725': attribute type 1 has an invalid length. [ 571.889413][T20133] netlink: 47 bytes leftover after parsing attributes in process `syz.2.3725'. [ 571.907441][T20145] netlink: 'syz.0.3728': attribute type 1 has an invalid length. [ 572.023969][T20150] net_ratelimit: 52 callbacks suppressed [ 572.023991][T20150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.041703][T20150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.050519][T20150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.059413][T20150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.069559][T20150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.079205][T20150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.087900][T20150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.090167][T20145] bond2: (slave bridge4): Enslaving as a backup interface with an up link [ 572.109233][T20150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.143629][T20150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.155478][T20150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.194982][T20145] macvlan3: entered promiscuous mode [ 572.200474][T20145] macvlan3: entered allmulticast mode [ 572.208963][T20145] bond2: entered promiscuous mode [ 572.218243][T20145] bridge4: entered promiscuous mode [ 572.252960][T20145] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 572.288644][T20145] bond2: left promiscuous mode [ 572.305135][T20145] bridge4: left promiscuous mode [ 573.060541][T20204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3744'. [ 573.118644][ T5636] block nbd1: Receive control failed (result -1) [ 573.659238][ T48] veth0_to_bond: left promiscuous mode [ 573.814437][ T5636] Bluetooth: hci3: command tx timeout [ 574.134279][T20239] netlink: 440 bytes leftover after parsing attributes in process `syz.2.3750'. [ 574.625851][T20262] batadv_slave_0: Caught tx_queue_len zero misconfig [ 575.072113][T20276] netlink: 'syz.4.3757': attribute type 1 has an invalid length. [ 575.130947][T20276] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.3757'. [ 575.221400][T20280] netlink: 'syz.0.3759': attribute type 5 has an invalid length. [ 575.370508][ T9696] IPVS: starting estimator thread 0... [ 575.397006][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3759'. [ 575.421419][T20291] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3759'. [ 575.473886][T20289] IPVS: using max 25 ests per chain, 60000 per kthread [ 575.548865][T20293] ip6gre1: entered allmulticast mode [ 576.571702][T20350] netlink: 'syz.2.3776': attribute type 4 has an invalid length. [ 576.681996][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3777'. [ 576.700084][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3777'. [ 577.335350][ T9687] net_ratelimit: 205 callbacks suppressed [ 577.335371][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.339031][T20392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.414000][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.758286][T20415] xt_hashlimit: size too large, truncated to 1048576 [ 577.978719][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.135506][T20432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3790'. [ 578.171278][T20432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.252762][T20432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.454955][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.629185][T20451] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3794'. [ 578.644203][T20451] lo: Caught tx_queue_len zero misconfig [ 578.764927][T20459] syzkaller0: entered promiscuous mode [ 578.795175][T20459] syzkaller0: entered allmulticast mode [ 579.272153][T20472] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 579.288280][T20478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3800'. [ 579.291628][T20472] bond9 (unregistering): Released all slaves [ 579.347745][T20477] ip6tnl0: Caught tx_queue_len zero misconfig [ 579.427611][T20478] hsr_slave_0: left promiscuous mode [ 579.462112][T20478] hsr_slave_1: left promiscuous mode [ 579.508636][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.686825][T20485] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 579.806035][T20493] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 579.861884][T20498] netlink: 'syz.1.3805': attribute type 1 has an invalid length. [ 579.902791][T20498] netlink: 'syz.1.3805': attribute type 4 has an invalid length. [ 579.969736][T20498] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.3805'. [ 580.150242][T20506] netlink: 41 bytes leftover after parsing attributes in process `syz.5.3808'. [ 580.195383][T20506] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3808'. [ 580.214188][T20506] netlink: 41 bytes leftover after parsing attributes in process `syz.5.3808'. [ 580.376221][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.536022][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.838879][T20527] netlink: 'syz.5.3813': attribute type 9 has an invalid length. [ 581.101688][T20534] syzkaller0: entered promiscuous mode [ 581.131362][T20534] syzkaller0: entered allmulticast mode [ 581.174898][T20540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3817'. [ 581.253291][T20540] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 581.349207][T20540] team1: entered promiscuous mode [ 581.368261][T20540] team1: entered allmulticast mode [ 581.575205][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.604877][T20549] netlink: 'syz.5.3819': attribute type 10 has an invalid length. [ 581.646907][T20549] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 581.683240][T20549] ieee802154 phy1 wpan1: encryption failed: -22 [ 582.021328][T20563] __nla_validate_parse: 1 callbacks suppressed [ 582.021353][T20563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3821'. [ 582.170517][T20563] hsr_slave_1 (unregistering): left promiscuous mode [ 582.241426][T20572] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3823'. [ 582.588186][T20587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3828'. [ 582.614210][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.673527][T20589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3828'. [ 583.335476][T20598] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 583.359472][T20627] netlink: 'syz.5.3835': attribute type 1 has an invalid length. [ 583.418983][ T9695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.519229][T20627] 8021q: adding VLAN 0 to HW filter on device bond9 [ 583.577680][T20624] bridge9: entered promiscuous mode [ 583.583138][T20624] bridge9: entered allmulticast mode [ 583.595500][T20624] bond9: (slave bridge9): making interface the new active one [ 583.616045][T20624] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 583.655582][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.695980][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3837'. [ 583.706655][T20630] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 583.719958][T20644] netlink: get zone limit has 4 unknown bytes [ 583.745084][T20630] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 583.843308][T20641] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3838'. [ 584.502666][T20674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3845'. [ 584.694155][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.751441][T20694] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3849'. [ 584.865567][T20682] syzkaller0: entered promiscuous mode [ 584.871522][T20682] syzkaller0: entered allmulticast mode [ 584.898245][T20682] tc_dump_action: action bad kind [ 584.973078][T20701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 585.020153][T20702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 585.735661][ T1744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.463632][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.782394][ T9687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.820191][ T5739] net_ratelimit: 1 callbacks suppressed [ 587.820212][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.811455][T20729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.160102][T20745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3860'. [ 589.202496][T20745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3860'. [ 589.279690][T20750] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 589.327360][T20745] veth0: entered promiscuous mode [ 589.374897][T20742] veth0: left promiscuous mode [ 596.056748][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 606.294584][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 608.664033][T20905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3864'. [ 608.957974][T20919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3869'. [ 608.981795][T20922] openvswitch: netlink: Key type 30 is not supported [ 608.992035][T20920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3869'. [ 609.016389][T20925] netlink: 'syz.0.3870': attribute type 15 has an invalid length. [ 609.028156][T20915] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3867'. [ 609.050612][T20927] nbd: must specify a device to reconfigure [ 609.060212][T20925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3870'. [ 609.297729][T20936] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 609.479178][T20945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3876'. [ 609.615826][T20954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.750040][T20966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 609.770750][T20967] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3882'. [ 609.824527][T20967] netlink: 'syz.5.3882': attribute type 2 has an invalid length. [ 609.835779][T20966] bond3: (slave erspan0): Device is not bonding slave [ 609.858049][T20966] bond3: option active_slave: invalid value (erspan0) [ 609.890395][T20966] bond3 (unregistering): Released all slaves [ 609.893380][T20974] xt_hashlimit: size too large, truncated to 1048576 [ 609.933536][T20973] xt_hashlimit: size too large, truncated to 1048576 [ 610.562432][T21005] netlink: 'syz.5.3892': attribute type 21 has an invalid length. [ 610.577425][T21005] netlink: 'syz.5.3892': attribute type 6 has an invalid length. [ 610.587335][T21005] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3892'. [ 610.599658][T21005] syzkaller0: entered promiscuous mode [ 610.611042][T21005] syzkaller0: entered allmulticast mode [ 610.628512][T21008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3894'. [ 610.745868][T21013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3893'. [ 610.866958][T21020] netlink: 'syz.2.3895': attribute type 39 has an invalid length. [ 611.799706][T21049] team0: Port device team_slave_0 removed [ 611.890823][T21058] bond5 (unregistering): Released all slaves [ 612.293490][T21076] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 612.329400][T21076] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 612.367230][T21076] gretap1: entered promiscuous mode [ 612.373924][T21076] gretap1: entered allmulticast mode [ 612.375479][T21083] openvswitch: netlink: Flow key attr not present in new flow. [ 612.522556][T21089] macsec1: entered promiscuous mode [ 612.538266][T21089] bridge0: entered promiscuous mode [ 612.554788][T21089] macsec1: entered allmulticast mode [ 612.561469][T21089] bridge0: entered allmulticast mode [ 612.570345][T21089] bridge0: port 3(macsec1) entered blocking state [ 612.578904][T21089] bridge0: port 3(macsec1) entered disabled state [ 612.598992][T21089] bridge0: left allmulticast mode [ 612.634073][ T5739] bridge0: left promiscuous mode [ 612.655777][T21094] syzkaller0: entered promiscuous mode [ 612.670942][T21094] syzkaller0: entered allmulticast mode [ 612.812102][T21096] tipc: Enabled bearer , priority 0 [ 612.884999][T21096] syzkaller0: entered promiscuous mode [ 612.890962][T21096] syzkaller0: entered allmulticast mode [ 612.898227][T21096] tipc: Resetting bearer [ 612.916454][T21095] tipc: Resetting bearer [ 613.134773][T21108] netlink: 'syz.0.3923': attribute type 1 has an invalid length. [ 616.637643][T21095] tipc: Disabling bearer [ 616.754383][T21108] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 617.138998][T21138] : entered promiscuous mode [ 617.235525][T21146] __nla_validate_parse: 8 callbacks suppressed [ 617.235549][T21146] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3933'. [ 617.273277][T21146] IPVS: set_ctl: invalid protocol: 86 172.20.20.64:20004 [ 617.407050][T21149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3934'. [ 617.434754][T21151] netlink: 'syz.5.3935': attribute type 1 has an invalid length. [ 617.650579][T21161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3938'. [ 617.682334][T21165] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3939'. [ 617.759422][T21175] xt_ecn: cannot match TCP bits for non-tcp packets [ 618.111751][T21188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3944'. [ 618.362268][T21178] syzkaller0: entered promiscuous mode [ 618.385366][T21178] syzkaller0: entered allmulticast mode [ 618.869190][T21211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3947'. [ 619.268921][T21254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3950'. [ 619.372621][T21263] syz.1.3951: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 619.389005][T21263] CPU: 1 UID: 0 PID: 21263 Comm: syz.1.3951 Not tainted syzkaller #0 PREEMPT(full) [ 619.389033][T21263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.389045][T21263] Call Trace: [ 619.389052][T21263] [ 619.389061][T21263] dump_stack_lvl+0xe8/0x150 [ 619.389089][T21263] warn_alloc+0x249/0x340 [ 619.389116][T21263] ? stack_trace_save+0xa9/0x100 [ 619.389146][T21263] ? __pfx_warn_alloc+0x10/0x10 [ 619.389183][T21263] ? kasan_save_track+0x4f/0x80 [ 619.389206][T21263] ? kasan_save_track+0x3e/0x80 [ 619.389227][T21263] ? __kasan_kmalloc+0x93/0xb0 [ 619.389249][T21263] ? __kmalloc_cache_noprof+0x31c/0x660 [ 619.389282][T21263] ? xskq_create+0x56/0x170 [ 619.389302][T21263] ? xsk_setsockopt+0x54c/0x990 [ 619.389318][T21263] ? do_sock_setsockopt+0x17c/0x1b0 [ 619.389339][T21263] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 619.389360][T21263] ? do_syscall_64+0x15f/0xf80 [ 619.389386][T21263] __vmalloc_node_range_noprof+0x132/0x1750 [ 619.389446][T21263] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 619.389480][T21263] ? __kasan_kmalloc+0x93/0xb0 [ 619.389511][T21263] vmalloc_user_noprof+0xad/0xe0 [ 619.389536][T21263] ? xskq_create+0xbf/0x170 [ 619.389556][T21263] xskq_create+0xbf/0x170 [ 619.389578][T21263] xsk_init_queue+0x8a/0xe0 [ 619.389601][T21263] xsk_setsockopt+0x54c/0x990 [ 619.389623][T21263] ? __pfx_xsk_setsockopt+0x10/0x10 [ 619.389642][T21263] ? __pfx_aa_sk_perm+0x10/0x10 [ 619.389670][T21263] ? aa_sock_opt_perm+0xff/0x1a0 [ 619.389697][T21263] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 619.389721][T21263] ? __pfx_xsk_setsockopt+0x10/0x10 [ 619.389742][T21263] do_sock_setsockopt+0x17c/0x1b0 [ 619.389770][T21263] __x64_sys_setsockopt+0x13d/0x1b0 [ 619.389795][T21263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.389816][T21263] do_syscall_64+0x15f/0xf80 [ 619.389837][T21263] ? trace_irq_disable+0x3b/0x140 [ 619.389864][T21263] ? clear_bhb_loop+0x40/0x90 [ 619.389888][T21263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.389905][T21263] RIP: 0033:0x7ff34e19cdd9 [ 619.389924][T21263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.389940][T21263] RSP: 002b:00007ff34f01f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 619.389962][T21263] RAX: ffffffffffffffda RBX: 00007ff34e415fa0 RCX: 00007ff34e19cdd9 [ 619.389976][T21263] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 619.389988][T21263] RBP: 00007ff34e232d69 R08: 0000000000000004 R09: 0000000000000000 [ 619.389999][T21263] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.390011][T21263] R13: 00007ff34e416038 R14: 00007ff34e415fa0 R15: 00007ffd1a5dd7b8 [ 619.390045][T21263] [ 619.390071][T21263] Mem-Info: [ 619.674226][T21263] active_anon:6260 inactive_anon:0 isolated_anon:0 [ 619.674226][T21263] active_file:2824 inactive_file:40133 isolated_file:0 [ 619.674226][T21263] unevictable:768 dirty:30 writeback:0 [ 619.674226][T21263] slab_reclaimable:12032 slab_unreclaimable:125105 [ 619.674226][T21263] mapped:36528 shmem:1298 pagetables:3539 [ 619.674226][T21263] sec_pagetables:0 bounce:0 [ 619.674226][T21263] kernel_misc_reclaimable:0 [ 619.674226][T21263] free:1264638 free_pcp:25586 free_cma:0 [ 619.725216][T21263] Node 0 active_anon:25040kB inactive_anon:0kB active_file:11296kB inactive_file:160332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:80576kB dirty:120kB writeback:0kB shmem:3656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16528kB pagetables:14016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 619.764636][T21263] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:65536kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 619.812400][T21263] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 619.864243][T21263] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 619.871225][T21263] Node 0 DMA32 free:1307604kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25040kB inactive_anon:0kB active_file:11296kB inactive_file:160332kB unevictable:1536kB writepending:120kB zspages:0kB present:3129332kB managed:2552656kB mlocked:0kB bounce:0kB free_pcp:43728kB local_pcp:19000kB free_cma:0kB [ 619.909182][T21263] lowmem_reserve[]: 0 0 0 0 0 [ 619.928213][T21263] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 619.958428][T21263] lowmem_reserve[]: 0 0 0 0 0 [ 619.963412][T21263] Node 1 Normal free:3739700kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58804kB local_pcp:28456kB free_cma:0kB [ 620.000144][T21263] lowmem_reserve[]: 0 0 0 0 0 [ 620.005183][T21263] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11248kB [ 620.022855][T21263] Node 0 DMA32: 9667*4kB (UME) 5717*8kB (UE) 3250*16kB (UME) 254*32kB (UME) 807*64kB (UM) 1529*128kB (UM) 867*256kB (UM) 497*512kB (UME) 269*1024kB (UME) 80*2048kB (UM) 0*4096kB = 1307604kB [ 620.043593][T21263] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 620.070833][T21263] Node 1 Normal: 7*4kB (UM) 15*8kB (UM) 6*16kB (UM) 8*32kB (UM) 15*64kB (UM) 7*128kB (UM) 11*256kB (UM) 10*512kB (UM) 8*1024kB (UM) 7*2048kB (U) 905*4096kB (UM) = 3739700kB [ 620.088958][T21263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 620.099237][T21263] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 620.112633][T21263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 620.122945][T21263] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 620.134699][T21263] 44253 total pagecache pages [ 620.139583][T21263] 2 pages in swap cache [ 620.145162][T21263] Free swap = 124988kB [ 620.149513][T21263] Total swap = 124996kB [ 620.154278][T21263] 2097051 pages RAM [ 620.158187][T21263] 0 pages HighMem/MovableOnly [ 620.163011][T21263] 427104 pages reserved [ 620.177904][T21263] 0 pages cma reserved [ 623.418042][T21210] veth1_macvtap: entered allmulticast mode [ 623.424556][T21210] veth1_macvtap: left allmulticast mode [ 623.508852][T21269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3952'. [ 623.579840][T21272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3952'. [ 623.633609][T21273] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3953'. [ 623.678306][T21269] xfrm1: entered promiscuous mode [ 623.694433][T21269] xfrm1: entered allmulticast mode [ 623.903318][T21283] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 623.905375][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3955'. [ 623.926733][T21286] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3956'. [ 623.980966][T21287] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3958'. [ 624.018298][T21290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3959'. [ 624.091331][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3955'. [ 624.115294][T21296] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3960'. [ 624.386054][T21314] Bluetooth: MGMT ver 1.23 [ 624.485388][T21302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3960'. [ 624.582060][T21324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.700374][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.758344][T21326] netlink: 'syz.4.3968': attribute type 21 has an invalid length. [ 624.787690][T21329] ip6gre2: entered allmulticast mode [ 625.071221][T21335] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 625.831168][T21335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.468173][T21408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.769325][T21431] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 630.821202][T21431] bond6 (unregistering): Released all slaves [ 631.326589][T21476] __nla_validate_parse: 9 callbacks suppressed [ 631.326614][T21476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4005'. [ 631.582040][T21486] netlink: 368 bytes leftover after parsing attributes in process `syz.0.4003'. [ 631.582443][T21450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 631.607198][T21476] netlink: 'syz.4.4005': attribute type 23 has an invalid length. [ 632.156395][T21509] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4015'. [ 632.167506][T21515] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4016'. [ 632.359942][T21520] netlink: 'syz.2.4018': attribute type 21 has an invalid length. [ 632.386677][T21520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4018'. [ 632.643282][T21535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4023'. [ 633.083891][T21562] netlink: 'syz.4.4031': attribute type 4 has an invalid length. [ 633.099132][T21562] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4031'. [ 633.126826][T21562] .`¹: renamed from bond0 (while UP) [ 633.221382][T21575] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4033'. [ 633.952392][T21619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4043'. [ 633.977208][T21622] netlink: 'syz.2.4044': attribute type 12 has an invalid length. [ 633.985913][T21619] netlink: 'syz.0.4043': attribute type 7 has an invalid length. [ 633.997424][T21619] netlink: 'syz.0.4043': attribute type 8 has an invalid length. [ 634.025730][T21619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4043'. [ 634.322985][T21636] bond5: entered promiscuous mode [ 634.329873][T21636] 8021q: adding VLAN 0 to HW filter on device bond5 [ 634.364929][T21637] netlink: get zone limit has 4 unknown bytes [ 634.449660][T21636] 8021q: adding VLAN 0 to HW filter on device bond5 [ 634.459244][T21636] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 634.490558][T21636] bond5: (slave sit1): Error -95 calling set_mac_address [ 635.282233][T21688] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.290299][T21688] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.340551][T21688] bond0: left promiscuous mode [ 635.349043][T21688] bond_slave_0: left promiscuous mode [ 635.361829][T21688] bond_slave_1: left promiscuous mode [ 635.577647][T21688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.609709][T21688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.751560][ T3387] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.762413][ T3387] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.889495][ T3387] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.921070][ T3387] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.017147][T21727] netlink: 'syz.2.4072': attribute type 39 has an invalid length. [ 636.752828][T21747] __nla_validate_parse: 8 callbacks suppressed [ 636.752851][T21747] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.4076'. [ 637.324650][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4079'. [ 637.347644][T21768] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 637.865523][T21777] netlink: 'syz.2.4085': attribute type 49 has an invalid length. [ 637.890506][T21776] netlink: 'syz.0.4084': attribute type 13 has an invalid length. [ 638.139054][T21777] bond0: (slave bond_slave_0): Releasing backup interface [ 638.280004][T21777] bond_slave_0: entered promiscuous mode [ 638.315310][T21777] bond_slave_0: entered allmulticast mode [ 638.429873][T21784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4087'. [ 639.890161][T21819] netlink: 'syz.4.4095': attribute type 1 has an invalid length. [ 639.911640][T21819] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4095'. [ 640.600773][T21825] syzkaller0: entered promiscuous mode [ 640.647902][T21825] syzkaller0: entered allmulticast mode [ 640.861705][T21827] bridge8: entered promiscuous mode [ 640.891165][T21827] bridge8: entered allmulticast mode [ 641.638860][T21846] pimreg: entered allmulticast mode [ 641.750184][T21850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4102'. [ 641.922906][T21852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4104'. [ 642.151623][T21856] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 643.352645][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4112'. [ 643.467087][T21895] netem: change failed [ 643.473282][T21896] nbd: illegal input index 2958377 [ 643.975470][T21905] Cannot find del_set index 49151 as target [ 644.169727][T21914] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 645.987978][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 646.022829][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 646.059465][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 646.114655][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 646.126032][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 646.771208][T21969] lo: entered allmulticast mode [ 646.819667][T21969] lo: left allmulticast mode [ 647.986175][T21980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 648.222685][ T5636] Bluetooth: hci0: command tx timeout [ 649.091807][T21245] IPVS: starting estimator thread 0... [ 649.103019][T21948] vxcan1 speed is unknown, defaulting to 1000 [ 649.112101][T22028] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 649.230376][T22029] IPVS: using max 24 ests per chain, 57600 per kthread [ 649.621967][T22035] syzkaller0: entered promiscuous mode [ 649.667833][T22035] syzkaller0: entered allmulticast mode [ 649.702489][T22038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4148'. [ 649.893440][T22045] netlink: 'syz.2.4149': attribute type 4 has an invalid length. [ 649.946099][T22045] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4149'. [ 650.304164][ T5636] Bluetooth: hci0: command tx timeout [ 650.676755][T22061] netlink: 'syz.2.4154': attribute type 1 has an invalid length. [ 650.847770][T22067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4154'. [ 651.236908][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4154'. [ 651.810549][T22061] 8021q: adding VLAN 0 to HW filter on device bond6 [ 652.012480][T22071] : entered promiscuous mode [ 652.374863][ T5636] Bluetooth: hci0: command tx timeout [ 652.596737][T22106] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4160'. [ 652.640097][T22106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4160'. [ 652.829138][T22095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4159'. [ 653.084992][ T29] audit: type=1804 audit(1777750953.874:7): pid=22118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4164" name="/newroot/225/cgroup.controllers" dev="tmpfs" ino=1167 res=1 errno=0 [ 653.216600][ T29] audit: type=1800 audit(1777750953.874:8): pid=22118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4164" name="cgroup.controllers" dev="tmpfs" ino=1167 res=0 errno=0 [ 654.454063][ T5636] Bluetooth: hci0: command tx timeout [ 654.996922][T22154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4170'. [ 655.643614][T22154] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 655.929572][T22167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4175'. [ 656.113275][T22167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4175'. [ 656.652776][T22183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4176'. [ 656.859386][T21948] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.899406][T22183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4176'. [ 656.942940][T21948] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.992152][T21948] bridge_slave_0: entered allmulticast mode [ 657.065714][T21948] bridge_slave_0: entered promiscuous mode [ 657.241305][T21948] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.297593][T22189] Bluetooth: MGMT ver 1.23 [ 657.306129][T21948] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.360000][T21948] bridge_slave_1: entered allmulticast mode [ 657.437272][T21948] bridge_slave_1: entered promiscuous mode [ 657.533949][T22160] tc_dump_action: action bad kind [ 657.580672][T22191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4177'. [ 657.615184][T22197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4178'. [ 657.687032][T22191] netlink: get zone limit has 4 unknown bytes [ 657.720379][T22197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4178'. [ 657.846939][T22197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4178'. [ 658.011218][T21948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.176209][T21948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.599772][T22211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 658.693351][T21948] team0: Port device team_slave_0 added [ 658.785295][T21948] team0: Port device team_slave_1 added [ 659.335261][ T5636] Bluetooth: hci0: command tx timeout [ 659.372203][T21948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.408982][T22227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4185'. [ 659.429828][T21948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.556341][T21948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.906052][T22229] bridge3: port 1(bond6) entered blocking state [ 659.947787][T22229] bridge3: port 1(bond6) entered disabled state [ 659.998591][T22229] bond6: entered allmulticast mode [ 660.058114][T22229] bond6: entered promiscuous mode [ 660.169301][T21948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.231695][T21948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.420130][T21948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.882407][T22247] __nla_validate_parse: 1 callbacks suppressed [ 660.882429][T22247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4189'. [ 661.036487][T22254] netlink: get zone limit has 4 unknown bytes [ 661.152614][T21948] hsr_slave_0: entered promiscuous mode [ 661.223390][T21948] hsr_slave_1: entered promiscuous mode [ 661.286403][T21948] debugfs: 'hsr0' already exists in 'hsr' [ 661.343853][T21948] Cannot create hsr debugfs directory [ 662.188009][T22275] netlink: 'syz.2.4195': attribute type 1 has an invalid length. [ 662.270144][T22279] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4196'. [ 662.368079][T22275] 8021q: adding VLAN 0 to HW filter on device bond7 [ 662.396188][T22291] syz_tun: entered allmulticast mode [ 662.522638][T22284] syz_tun: left allmulticast mode [ 662.667376][T22299] netlink: 'syz.2.4199': attribute type 39 has an invalid length. [ 662.689378][T22298] netlink: 'syz.2.4199': attribute type 39 has an invalid length. [ 662.711460][T22300] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4197'. [ 663.032851][T21948] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.052498][T21948] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.172311][T22314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4202'. [ 663.223247][T22314] netlink: get zone limit has 4 unknown bytes [ 663.365540][T21948] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.404570][T21948] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.669501][T22341] netlink: 'syz.1.4209': attribute type 1 has an invalid length. [ 663.722314][T21948] bond0: (slave netdevsim1): Releasing backup interface [ 663.748483][T21948] netdevsim netdevsim5 netdevsim1 (unregistering): left allmulticast mode [ 663.791403][T21948] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.827756][T21948] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.839827][T22358] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4212'. [ 663.920615][T22341] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 663.927388][T22360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4213'. [ 664.039405][T21948] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.081022][T21948] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.104929][T22369] netlink: 'syz.1.4215': attribute type 2 has an invalid length. [ 664.156751][T22369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4215'. [ 664.446738][T22386] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.4219'. [ 664.587192][T22390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4220'. [ 664.931336][T22412] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4223'. [ 664.983041][T22406] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 665.141750][T22407] vxcan1 speed is unknown, defaulting to 1000 [ 665.590663][T21948] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 665.711070][T21948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 665.786672][T21948] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 665.882290][T21948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 665.920812][T21948] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 665.978533][T22433] Unsupported ieee802154 address type: 0 [ 665.987843][T21948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 666.018794][T21948] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 666.089581][T22439] __nla_validate_parse: 1 callbacks suppressed [ 666.089603][T22439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4229'. [ 666.182191][T21948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 666.357773][T22440] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4229'. [ 666.438297][T22433] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 666.483924][T22449] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4232'. [ 666.723581][T22451] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4232'. [ 667.724605][T22470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4238'. [ 667.788697][T22474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4238'. [ 667.837478][T22475] sctp: [Deprecated]: syz.2.4236 (pid 22475) Use of int in max_burst socket option. [ 667.837478][T22475] Use struct sctp_assoc_value instead [ 668.468708][T21948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.829125][T21948] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.904342][ T8747] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.911648][ T8747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.039795][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'. [ 669.080498][ T8747] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.088006][ T8747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.227416][T22495] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4243'. [ 671.660705][T22519] syz.2.4247 (22519) used obsolete PPPIOCDETACH ioctl [ 671.711816][T21948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.358968][T21948] veth0_vlan: entered promiscuous mode [ 672.391753][T21948] veth1_vlan: entered promiscuous mode [ 672.443206][T21948] veth0_macvtap: entered promiscuous mode [ 672.473566][T21948] veth1_macvtap: entered promiscuous mode [ 672.508042][T21948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.529564][T21948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.553438][ T8747] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.608921][ T8747] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.627742][ T8747] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.658252][ T8747] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.584606][ T8752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.619324][ T8752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.719568][T22535] netlink: 'syz.4.4250': attribute type 1 has an invalid length. [ 673.731541][T22534] vlan3: entered promiscuous mode [ 673.737581][T22534] bridge0: entered promiscuous mode [ 673.773256][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.789229][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.577947][T22546] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4252'. [ 675.465718][T22564] netlink: 'syz.4.4257': attribute type 11 has an invalid length. [ 675.651397][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4257'. [ 675.670008][T22565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4257'. [ 675.874017][T22569] netlink: 'syz.2.4258': attribute type 1 has an invalid length. [ 675.965588][T22569] 8021q: adding VLAN 0 to HW filter on device bond8 [ 676.031516][T22572] bond8: (slave geneve3): making interface the new active one [ 676.047571][T22572] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 676.103456][T22571] vlan0: entered allmulticast mode [ 676.112073][T22571] bond8: entered allmulticast mode [ 676.119716][T22571] geneve3: entered allmulticast mode [ 676.452307][T22576] netlink: 'syz.2.4260': attribute type 75 has an invalid length. [ 677.165328][T22581] netlink: 'syz.5.4261': attribute type 1 has an invalid length. [ 677.548408][T22587] netlink: 'syz.1.4264': attribute type 1 has an invalid length. [ 677.747298][T22593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.829072][T22588] bond7: (slave bridge5): making interface the new active one [ 677.865677][T22588] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 677.939654][T22589] macvlan2: entered promiscuous mode [ 677.961643][T22589] macvlan2: entered allmulticast mode [ 677.988254][T22589] bond7: entered promiscuous mode [ 678.005159][T22589] bridge5: entered promiscuous mode [ 678.019286][T22589] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 678.046134][T22589] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 678.092792][T22589] bond7: left promiscuous mode [ 678.100067][T22589] bridge5: left promiscuous mode [ 680.145258][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 680.163468][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 680.178267][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 680.188499][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 680.208422][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 681.162891][T22608] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 681.214349][T22608] bond9 (unregistering): Released all slaves [ 681.248501][T22611] netlink: 'syz.4.4270': attribute type 1 has an invalid length. [ 681.450091][T22615] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address [ 681.490832][T22615] bond0: (slave vxcan5): Error -95 calling set_mac_address [ 681.821737][T22618] bond0: (slave bridge3): Enslaving as an active interface with a down link [ 681.855325][T22611] macvlan2: entered promiscuous mode [ 681.860844][T22611] macvlan2: entered allmulticast mode [ 681.869686][T22611] bond0: entered promiscuous mode [ 681.881155][T22611] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 681.923852][T22611] bond0: left promiscuous mode [ 682.295412][ T5636] Bluetooth: hci5: command tx timeout [ 682.810729][T22602] vxcan1 speed is unknown, defaulting to 1000 [ 684.020216][T22643] openvswitch: netlink: IP tunnel dst address not specified [ 684.091071][T22642] openvswitch: netlink: IP tunnel dst address not specified [ 684.374177][ T5636] Bluetooth: hci5: command tx timeout [ 685.233821][T22666] netlink: 'syz.2.4282': attribute type 10 has an invalid length. [ 685.349541][T22602] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.392124][T22602] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.439567][T22602] bridge_slave_0: entered allmulticast mode [ 685.490324][T22602] bridge_slave_0: entered promiscuous mode [ 685.768047][T22666] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.855070][T22666] bond0: (slave team0): Enslaving as an active interface with an up link [ 685.903831][T22602] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.916518][T22680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4285'. [ 685.936782][T22602] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.970790][T22602] bridge_slave_1: entered allmulticast mode [ 686.020952][T22602] bridge_slave_1: entered promiscuous mode [ 686.137233][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.454262][ T5636] Bluetooth: hci5: command tx timeout [ 686.489199][T22602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.657208][T22602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.836360][T22695] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4288'. [ 686.945233][T22695] openvswitch: netlink: Flow key attr not present in new flow. [ 687.137204][T22602] team0: Port device team_slave_0 added [ 687.229327][T22602] team0: Port device team_slave_1 added [ 688.058095][T22602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.100905][T22602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.211044][T22602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.425613][T22602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.437342][T22730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4294'. [ 688.465868][T22602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.531342][T22602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.544278][ T5636] Bluetooth: hci5: command tx timeout [ 688.557778][T22720] IPVS: length: 8 != 1152 [ 692.573046][T22602] hsr_slave_0: entered promiscuous mode [ 692.596785][T22602] hsr_slave_1: entered promiscuous mode [ 692.618531][T22602] debugfs: 'hsr0' already exists in 'hsr' [ 692.630121][T22602] Cannot create hsr debugfs directory [ 693.940853][T22799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4310'. [ 694.022483][T22798] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 694.121517][T22602] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 694.192288][T22602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 694.211586][T22602] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 694.260253][T22602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 694.280320][T22602] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 694.322571][T22602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.365914][T22602] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 694.419393][T22602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 694.710091][T22841] bridge0: entered allmulticast mode [ 694.828556][T22848] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 694.862395][T22848] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4322'. [ 694.889931][T22848] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4322'. [ 694.932127][T22856] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 694.933076][T22602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.012501][T22602] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.068850][T22860] netlink: 'syz.4.4325': attribute type 21 has an invalid length. [ 695.079397][ T8747] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.086649][ T8747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.190159][T22864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4326'. [ 695.261505][T21256] IPVS: starting estimator thread 0... [ 695.364751][T22870] IPVS: using max 24 ests per chain, 57600 per kthread [ 695.391246][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.398534][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.487283][T22873] netlink: 'syz.1.4329': attribute type 1 has an invalid length. [ 695.506065][T22873] netlink: 'syz.1.4329': attribute type 11 has an invalid length. [ 695.522859][T22873] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4329'. [ 696.104426][T22882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4330'. [ 696.138047][T22882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4330'. [ 696.165014][T22882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4330'. [ 696.184187][T22882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4330'. [ 696.203720][T22882] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4330'. [ 698.359584][T22602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.686520][T22945] __nla_validate_parse: 1 callbacks suppressed [ 699.686545][T22945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4343'. [ 700.431542][T22602] veth0_vlan: entered promiscuous mode [ 700.571624][T22602] veth1_vlan: entered promiscuous mode [ 700.843307][T22969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4348'. [ 700.860192][T22966] netlink: 'syz.4.4347': attribute type 39 has an invalid length. [ 701.549894][T22967] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode [ 702.307069][T22602] veth0_macvtap: entered promiscuous mode [ 702.429589][T22602] veth1_macvtap: entered promiscuous mode [ 702.859557][T22602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.986480][T22602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.138489][ T3344] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.208009][ T3344] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.288835][T22993] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4353'. [ 703.330122][ T3344] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.400760][ T3344] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.576472][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 704.034118][ T3344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.116520][ T3344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.234098][T23004] netlink: 476 bytes leftover after parsing attributes in process `syz.5.4357'. [ 704.282119][T23006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4358'. [ 704.358606][T23008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4358'. [ 704.490892][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.577160][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.799066][T23014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4359'. [ 704.851106][T23017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4360'. [ 704.908795][T23017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4360'. [ 704.970819][T23019] IPVS: Unknown mcast interface: vcan0 [ 704.988636][T23017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4360'. [ 705.042090][T23017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4360'. [ 705.768596][T23035] veth0_to_bridge: entered promiscuous mode [ 705.829122][T23038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4365'. [ 705.880237][T23034] netlink: 'syz.1.4364': attribute type 1 has an invalid length. [ 705.935149][T23039] pim6reg1: entered promiscuous mode [ 705.970171][T23039] pim6reg1: entered allmulticast mode [ 706.035051][T23032] veth0_to_bridge: left promiscuous mode [ 706.612565][T23046] syzkaller0: entered promiscuous mode [ 706.620578][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 706.630038][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 706.717048][T23046] syzkaller0: entered allmulticast mode [ 706.769037][T23061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4369'. [ 707.578646][T23076] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4371'. [ 711.373196][ C0] sched: DL replenish lagged too much [ 716.203762][T23095] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 718.159081][T23139] pim6reg: entered allmulticast mode [ 719.308316][T23170] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4391'. [ 719.376564][ T5636] block nbd3: Receive control failed (result -32) [ 719.409304][ T5636] block nbd3: Receive control failed (result -32) [ 719.440993][T23148] nbd3: detected capacity change from 0 to 63 [ 719.621798][T23084] block nbd3: Dead connection, failed to find a fallback [ 719.742240][T23084] block nbd3: shutting down sockets [ 719.786003][T23177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4393'. [ 719.802069][T23084] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 719.930519][T23177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4393'. [ 719.952599][T23084] Buffer I/O error on dev nbd3, logical block 0, async page read [ 720.010411][T23084] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 720.090594][T23180] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4394'. [ 720.125568][T23084] Buffer I/O error on dev nbd3, logical block 1, async page read [ 720.207207][T23084] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 720.247789][T23175] bond8 (unregistering): Released all slaves [ 720.272273][T23084] Buffer I/O error on dev nbd3, logical block 2, async page read [ 720.313540][T23187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4393'. [ 720.350611][T23084] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 720.453283][T23084] Buffer I/O error on dev nbd3, logical block 3, async page read [ 720.548235][T23084] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 720.647202][T23084] Buffer I/O error on dev nbd3, logical block 0, async page read [ 720.716641][T23084] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 720.815196][T23084] Buffer I/O error on dev nbd3, logical block 1, async page read [ 720.920328][T23084] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 720.998609][T23084] Buffer I/O error on dev nbd3, logical block 2, async page read [ 721.041296][T23084] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 721.136975][T23084] Buffer I/O error on dev nbd3, logical block 3, async page read [ 721.226624][T23084] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 721.309919][T23203] tc action pedit 'at' offset -2147483648 out of bounds [ 721.349685][T23084] Buffer I/O error on dev nbd3, logical block 0, async page read [ 721.418646][T23084] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 721.516590][T23084] Buffer I/O error on dev nbd3, logical block 1, async page read [ 721.676998][T23084] ldm_validate_partition_table(): Disk read failed. [ 721.812977][T23084] Dev nbd3: unable to read RDB block 0 [ 721.910005][T23084] nbd3: unable to read partition table [ 722.179762][T23084] ldm_validate_partition_table(): Disk read failed. [ 722.269193][T23084] Dev nbd3: unable to read RDB block 0 [ 722.318512][T23220] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4407'. [ 722.354812][T23084] nbd3: unable to read partition table [ 723.156096][T23229] bridge6: entered promiscuous mode [ 723.202231][T23229] bridge6: entered allmulticast mode [ 723.241868][T23234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4412'. [ 723.259188][T23234] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4412'. [ 723.269011][T23234] openvswitch: netlink: Flow key attr not present in new flow. [ 723.289842][T23234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4412'. [ 723.308526][T23233] openvswitch: netlink: IPv4 tun info is not correct [ 724.275738][T23249] syzkaller0: entered promiscuous mode [ 724.308512][T23249] syzkaller0: entered allmulticast mode [ 724.368034][T23254] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4416'. [ 725.837275][T23284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4424'. [ 726.410021][T23297] Cannot find add_set index 0 as target [ 726.466028][T21255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.477181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.536052][ T8754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.589356][ T8754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.762136][T23304] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4433'. [ 726.797519][T23304] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4433'. [ 726.808881][T23304] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4433'. [ 726.847581][T23308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4435'. [ 727.148771][T23302] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 727.191414][T23302] bond8 (unregistering): Released all slaves [ 727.496464][T21255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.505243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.610536][T23308] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4435'. [ 727.905486][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.971170][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.294126][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 728.565971][T23347] netdevsim netdevsim6: Firmware load for '..' refused, path contains '..' component [ 728.579715][T21255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.588300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.669876][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.680849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.167464][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.227456][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.406118][T21236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.597842][T23371] syzkaller1: entered promiscuous mode [ 729.642116][T23371] syzkaller1: entered allmulticast mode [ 729.659238][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.669879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.975035][T21251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.996479][T23378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4450'. [ 730.133274][T23381] nbd: nbd1 already in use [ 730.219890][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4452'. [ 730.312863][T23386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4452'. [ 730.477458][T23384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4452'. [ 731.040140][T23398] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4457'. [ 731.136846][T23401] netlink: 'syz.1.4458': attribute type 1 has an invalid length. [ 731.481669][T23413] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4460'. [ 732.569316][T23437] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4466'. [ 733.968439][ T8747] net_ratelimit: 15 callbacks suppressed [ 733.968461][ T8747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.056497][ T8747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.124665][T23467] bond3: (slave bond_slave_1): Device is not our slave [ 734.132048][T23467] bond3: option active_slave: invalid value (bond_slave_1) [ 734.175115][T23469] netlink: 'syz.1.4473': attribute type 16 has an invalid length. [ 734.212085][T23467] bond3 (unregistering): Released all slaves [ 734.245456][T23469] netlink: 'syz.1.4473': attribute type 17 has an invalid length. [ 734.270844][T21255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.279599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.301446][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.310332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.352078][T23475] netlink: 'syz.5.4475': attribute type 1 has an invalid length. [ 734.939693][T23469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.977081][T23469] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.139949][T23469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.245070][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.310526][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.368406][T21251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.377685][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.148159][T23469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.162091][T23469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.187032][T23469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 736.197977][T23469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 736.221042][T23469] veth1_vlan: left promiscuous mode [ 736.229992][T23469] veth0_vlan: left promiscuous mode [ 736.239006][T23469] veth0_vlan: entered promiscuous mode [ 736.255995][T23469] veth1_vlan: entered promiscuous mode [ 736.283117][T23469] tipc: Resetting bearer [ 736.300000][T23469] tipc: Resetting bearer [ 736.310294][T23469] veth1_macvtap: left promiscuous mode [ 736.323978][T23469] veth0_macvtap: left promiscuous mode [ 736.332917][T23469] veth0_macvtap: entered promiscuous mode [ 736.342134][T23469] veth1_macvtap: entered promiscuous mode [ 736.362200][T23469] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 736.370506][T23469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 736.404318][T23469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.415421][T23469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 736.429295][T23469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 736.457335][T23469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 736.490194][T23469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 736.515105][T23469] 8021q: adding VLAN 0 to HW filter on device bond3 [ 736.559311][T23469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 736.576350][T23469] 8021q: adding VLAN 0 to HW filter on device bond5 [ 736.601464][T23469] 8021q: adding VLAN 0 to HW filter on device bond6 [ 736.669556][T23469] 8021q: adding VLAN 0 to HW filter on device bond7 [ 736.704842][T23469] 8021q: adding VLAN 0 to HW filter on device bond8 [ 736.718107][T23475] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 736.721239][T23476] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 736.769901][T23482] bridge1: entered promiscuous mode [ 736.801394][T23482] bridge1: entered allmulticast mode [ 736.984609][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.992033][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.088383][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.095696][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.597788][T23514] xt_cluster: node mask cannot exceed total number of nodes [ 737.987651][ T8749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.042667][ T8749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.644721][ T8749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.721672][ T8749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.035115][ T8749] net_ratelimit: 37 callbacks suppressed [ 739.035139][ T8749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.100792][T21236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.138664][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.174157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.249163][ T8749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.816555][T21235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.826121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.893990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.906941][ T8746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.915864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.218022][T23563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4494'. [ 741.364986][T23579] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 742.932510][T23625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4510'. [ 744.245342][T21236] net_ratelimit: 11 callbacks suppressed [ 744.245364][T21236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.374818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.383000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.433300][T23655] netlink: 'syz.1.4517': attribute type 1 has an invalid length. [ 744.725130][T23659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4518'. [ 745.311837][T23658] macvlan2: entered promiscuous mode [ 745.320963][T23658] macvlan2: entered allmulticast mode [ 745.330322][T23658] bond9: entered promiscuous mode [ 745.343288][T23658] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 745.375914][T23658] bond9: left promiscuous mode [ 745.426159][T21250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.925931][T23682] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4524'. [ 746.455744][T21235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.512518][T23696] netlink: 'syz.6.4527': attribute type 1 has an invalid length. [ 746.567047][T23696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4527'. [ 746.752130][T23699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4528'. [ 746.852717][T23707] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4530'. [ 746.956468][T21237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.254719][T21237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.552193][T21252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.581293][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.645781][T23718] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4534'. [ 747.696899][T23718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4534'. [ 747.779631][T23718] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4534'. [ 747.839521][T23718] netlink: 'syz.2.4534': attribute type 3 has an invalid length. [ 747.868597][T23718] netlink: 'syz.2.4534': attribute type 2 has an invalid length. [ 747.892917][T23718] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4534'. [ 748.630830][T21256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.704541][T23732] xt_hashlimit: size too large, truncated to 1048576 [ 748.772918][T23735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4537'. [ 748.782918][T23740] netlink: 'syz.6.4538': attribute type 10 has an invalid length. [ 748.802877][T23740] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4538'. [ 749.073556][T23740] dummy0: entered promiscuous mode [ 749.112927][T23740] bridge0: port 3(dummy0) entered blocking state [ 749.150079][T23740] bridge0: port 3(dummy0) entered disabled state [ 749.186406][T23740] dummy0: entered allmulticast mode [ 749.235566][T23740] bridge0: port 3(dummy0) entered blocking state [ 749.242291][T23740] bridge0: port 3(dummy0) entered forwarding state [ 749.654420][T21256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.167956][T23755] syzkaller0: entered promiscuous mode [ 750.173511][T23755] syzkaller0: entered allmulticast mode [ 750.351983][T21238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.360832][T21238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.382071][T23760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.436635][T23760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.497129][T23760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.562491][T23760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.694851][T21252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.801736][T23759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.122230][T23775] __nla_validate_parse: 3 callbacks suppressed [ 751.122250][T23775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4549'. [ 751.326644][T23774] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4549'. [ 751.367205][T23779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.119807][T23792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4555'. [ 753.217400][T23813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4560'. [ 753.874224][T23830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4561'. [ 753.966476][T23830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4561'. [ 754.435787][ T8747] [ 754.438234][ T8747] ====================================================== [ 754.445452][ T8747] WARNING: possible circular locking dependency detected [ 754.452495][ T8747] syzkaller #0 Not tainted [ 754.457036][ T8747] ------------------------------------------------------ [ 754.464163][ T8747] kworker/u8:12/8747 is trying to acquire lock: [ 754.470518][ T8747] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 754.480579][ T8747] [ 754.480579][ T8747] but task is already holding lock: [ 754.487963][ T8747] ffff8880a1130260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 754.497242][ T8747] [ 754.497242][ T8747] which lock already depends on the new lock. [ 754.497242][ T8747] [ 754.507672][ T8747] [ 754.507672][ T8747] the existing dependency chain (in reverse order) is: [ 754.516746][ T8747] [ 754.516746][ T8747] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 754.524688][ T8747] lock_sock_nested+0x41/0x100 [ 754.530030][ T8747] mptcp_connect+0x4c3/0x830 [ 754.535186][ T8747] __inet_stream_connect+0x25a/0xdd0 [ 754.541033][ T8747] inet_stream_connect+0x66/0xa0 [ 754.546610][ T8747] __sys_connect+0x312/0x450 [ 754.551747][ T8747] __x64_sys_connect+0x7a/0x90 [ 754.557063][ T8747] do_syscall_64+0x15f/0xf80 [ 754.562238][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.568847][ T8747] [ 754.568847][ T8747] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 754.576706][ T8747] lock_sock_nested+0x41/0x100 [ 754.582113][ T8747] inet_shutdown+0x6a/0x390 [ 754.587290][ T8747] nbd_mark_nsock_dead+0x2e9/0x560 [ 754.592953][ T8747] recv_work+0x1c2e/0x1d40 [ 754.597923][ T8747] process_scheduled_works+0xb5d/0x1860 [ 754.604034][ T8747] worker_thread+0xa53/0xfc0 [ 754.609169][ T8747] kthread+0x388/0x470 [ 754.613794][ T8747] ret_from_fork+0x514/0xb70 [ 754.619037][ T8747] ret_from_fork_asm+0x1a/0x30 [ 754.624560][ T8747] [ 754.624560][ T8747] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 754.632259][ T8747] __mutex_lock+0x1a3/0x1550 [ 754.637426][ T8747] nbd_queue_rq+0x37b/0x1100 [ 754.642678][ T8747] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 754.648797][ T8747] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 754.655707][ T8747] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 754.662341][ T8747] blk_mq_run_hw_queue+0x348/0x4f0 [ 754.668095][ T8747] blk_mq_dispatch_list+0xd16/0xe10 [ 754.673849][ T8747] blk_mq_flush_plug_list+0x48d/0x570 [ 754.679862][ T8747] __blk_flush_plug+0x3ed/0x4d0 [ 754.685288][ T8747] __submit_bio+0x28d/0x580 [ 754.690564][ T8747] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 754.696865][ T8747] block_read_full_folio+0x599/0x830 [ 754.702714][ T8747] filemap_read_folio+0x137/0x3b0 [ 754.708298][ T8747] do_read_cache_folio+0x358/0x590 [ 754.714052][ T8747] read_part_sector+0xb6/0x2b0 [ 754.719547][ T8747] adfspart_check_ICS+0xb1/0x960 [ 754.725042][ T8747] bdev_disk_changed+0x817/0x1770 [ 754.730620][ T8747] blkdev_get_whole+0x380/0x510 [ 754.736110][ T8747] bdev_open+0x31e/0xd30 [ 754.741094][ T8747] blkdev_open+0x470/0x610 [ 754.746062][ T8747] do_dentry_open+0x785/0x14e0 [ 754.751673][ T8747] vfs_open+0x3b/0x340 [ 754.756572][ T8747] path_openat+0x2e08/0x3860 [ 754.761735][ T8747] do_file_open+0x23e/0x4a0 [ 754.766901][ T8747] do_sys_openat2+0x113/0x200 [ 754.772306][ T8747] __x64_sys_openat+0x138/0x170 [ 754.777932][ T8747] do_syscall_64+0x15f/0xf80 [ 754.783076][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.789521][ T8747] [ 754.789521][ T8747] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 754.796775][ T8747] __mutex_lock+0x1a3/0x1550 [ 754.801918][ T8747] nbd_queue_rq+0xc6/0x1100 [ 754.807011][ T8747] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 754.813128][ T8747] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 754.820139][ T8747] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 754.826714][ T8747] blk_mq_run_hw_queue+0x348/0x4f0 [ 754.832377][ T8747] blk_mq_dispatch_list+0xd16/0xe10 [ 754.838127][ T8747] blk_mq_flush_plug_list+0x48d/0x570 [ 754.844053][ T8747] __blk_flush_plug+0x3ed/0x4d0 [ 754.849549][ T8747] __submit_bio+0x28d/0x580 [ 754.854693][ T8747] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 754.860875][ T8747] block_read_full_folio+0x599/0x830 [ 754.866709][ T8747] filemap_read_folio+0x137/0x3b0 [ 754.872894][ T8747] do_read_cache_folio+0x358/0x590 [ 754.878731][ T8747] read_part_sector+0xb6/0x2b0 [ 754.884048][ T8747] adfspart_check_ICS+0xb1/0x960 [ 754.889533][ T8747] bdev_disk_changed+0x817/0x1770 [ 754.895110][ T8747] blkdev_get_whole+0x380/0x510 [ 754.900613][ T8747] bdev_open+0x31e/0xd30 [ 754.905498][ T8747] blkdev_open+0x470/0x610 [ 754.910495][ T8747] do_dentry_open+0x785/0x14e0 [ 754.915802][ T8747] vfs_open+0x3b/0x340 [ 754.920422][ T8747] path_openat+0x2e08/0x3860 [ 754.925567][ T8747] do_file_open+0x23e/0x4a0 [ 754.930624][ T8747] do_sys_openat2+0x113/0x200 [ 754.935850][ T8747] __x64_sys_openat+0x138/0x170 [ 754.941248][ T8747] do_syscall_64+0x15f/0xf80 [ 754.946385][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.953089][ T8747] [ 754.953089][ T8747] -> #3 (set->srcu){.+.+}-{0:0}: [ 754.960266][ T8747] __synchronize_srcu+0xca/0x300 [ 754.965758][ T8747] elevator_switch+0x1e8/0x7a0 [ 754.971343][ T8747] elevator_change+0x2cc/0x450 [ 754.976747][ T8747] elevator_set_default+0x36c/0x430 [ 754.982587][ T8747] blk_register_queue+0x3e9/0x4e0 [ 754.988259][ T8747] __add_disk+0x677/0xd50 [ 754.993308][ T8747] add_disk_fwnode+0xfb/0x480 [ 754.998528][ T8747] nbd_dev_add+0x72c/0xb50 [ 755.003492][ T8747] nbd_init+0x168/0x1f0 [ 755.008282][ T8747] do_one_initcall+0x250/0x870 [ 755.013593][ T8747] do_initcall_level+0x104/0x190 [ 755.019079][ T8747] do_initcalls+0x59/0xa0 [ 755.023955][ T8747] kernel_init_freeable+0x2a6/0x3e0 [ 755.029715][ T8747] kernel_init+0x1d/0x1d0 [ 755.034687][ T8747] ret_from_fork+0x514/0xb70 [ 755.040341][ T8747] ret_from_fork_asm+0x1a/0x30 [ 755.045667][ T8747] [ 755.045667][ T8747] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 755.053699][ T8747] __mutex_lock+0x1a3/0x1550 [ 755.059049][ T8747] elevator_change+0x1b3/0x450 [ 755.064369][ T8747] elevator_set_none+0xb5/0x140 [ 755.069945][ T8747] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 755.076475][ T8747] nbd_start_device+0x17f/0xb10 [ 755.081879][ T8747] nbd_genl_connect+0x165b/0x1cf0 [ 755.087460][ T8747] genl_family_rcv_msg_doit+0x22a/0x330 [ 755.093821][ T8747] genl_rcv_msg+0x61c/0x7a0 [ 755.099024][ T8747] netlink_rcv_skb+0x232/0x4b0 [ 755.104338][ T8747] genl_rcv+0x28/0x40 [ 755.108869][ T8747] netlink_unicast+0x75c/0x8e0 [ 755.114183][ T8747] netlink_sendmsg+0x813/0xb40 [ 755.119503][ T8747] ____sys_sendmsg+0x972/0x9f0 [ 755.124816][ T8747] ___sys_sendmsg+0x2a5/0x360 [ 755.130042][ T8747] __x64_sys_sendmsg+0x1bd/0x2a0 [ 755.135535][ T8747] do_syscall_64+0x15f/0xf80 [ 755.140682][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.147153][ T8747] [ 755.147153][ T8747] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 755.155808][ T8747] blk_alloc_queue+0x546/0x680 [ 755.161131][ T8747] __blk_mq_alloc_disk+0x197/0x390 [ 755.167068][ T8747] nbd_dev_add+0x499/0xb50 [ 755.172243][ T8747] nbd_init+0x168/0x1f0 [ 755.177153][ T8747] do_one_initcall+0x250/0x870 [ 755.182733][ T8747] do_initcall_level+0x104/0x190 [ 755.188414][ T8747] do_initcalls+0x59/0xa0 [ 755.193343][ T8747] kernel_init_freeable+0x2a6/0x3e0 [ 755.199242][ T8747] kernel_init+0x1d/0x1d0 [ 755.204140][ T8747] ret_from_fork+0x514/0xb70 [ 755.209365][ T8747] ret_from_fork_asm+0x1a/0x30 [ 755.214714][ T8747] [ 755.214714][ T8747] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 755.222058][ T8747] __lock_acquire+0x15a5/0x2cf0 [ 755.227481][ T8747] lock_acquire+0x106/0x350 [ 755.232718][ T8747] fs_reclaim_acquire+0x71/0x100 [ 755.238400][ T8747] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 755.244891][ T8747] __alloc_skb+0x1d0/0x7d0 [ 755.250046][ T8747] tcp_send_active_reset+0x8a/0x5a0 [ 755.256552][ T8747] tcp_disconnect+0x171/0x1ea0 [ 755.261876][ T8747] __tcp_close+0x679/0xfe0 [ 755.266883][ T8747] tcp_close+0x28/0x110 [ 755.271848][ T8747] inet_release+0x143/0x190 [ 755.277006][ T8747] sock_release+0x85/0x150 [ 755.281984][ T8747] rds_tcp_accept_one+0x641/0xd70 [ 755.287558][ T8747] rds_tcp_accept_worker+0x1d/0x70 [ 755.293315][ T8747] process_scheduled_works+0xb5d/0x1860 [ 755.299427][ T8747] worker_thread+0xa53/0xfc0 [ 755.304573][ T8747] kthread+0x388/0x470 [ 755.309211][ T8747] ret_from_fork+0x514/0xb70 [ 755.314359][ T8747] ret_from_fork_asm+0x1a/0x30 [ 755.319770][ T8747] [ 755.319770][ T8747] other info that might help us debug this: [ 755.319770][ T8747] [ 755.330026][ T8747] Chain exists of: [ 755.330026][ T8747] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 755.330026][ T8747] [ 755.343112][ T8747] Possible unsafe locking scenario: [ 755.343112][ T8747] [ 755.350777][ T8747] CPU0 CPU1 [ 755.356302][ T8747] ---- ---- [ 755.361781][ T8747] lock(k-sk_lock-AF_INET6); [ 755.366595][ T8747] lock(sk_lock-AF_INET6); [ 755.373668][ T8747] lock(k-sk_lock-AF_INET6); [ 755.380986][ T8747] lock(fs_reclaim); [ 755.385001][ T8747] [ 755.385001][ T8747] *** DEADLOCK *** [ 755.385001][ T8747] [ 755.393204][ T8747] 4 locks held by kworker/u8:12/8747: [ 755.398643][ T8747] #0: ffff8880318ce940 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 755.409697][ T8747] #1: ffffc9000594fc40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 755.422678][ T8747] #2: ffff8880a92f5e60 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xa9/0xd70 [ 755.433450][ T8747] #3: ffff8880a1130260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 755.442826][ T8747] [ 755.442826][ T8747] stack backtrace: [ 755.448741][ T8747] CPU: 1 UID: 0 PID: 8747 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 755.448769][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 755.448783][ T8747] Workqueue: krdsd rds_tcp_accept_worker [ 755.448811][ T8747] Call Trace: [ 755.448818][ T8747] [ 755.448827][ T8747] dump_stack_lvl+0xe8/0x150 [ 755.448852][ T8747] print_circular_bug+0x2e1/0x300 [ 755.448880][ T8747] check_noncircular+0x12e/0x150 [ 755.448909][ T8747] __lock_acquire+0x15a5/0x2cf0 [ 755.448933][ T8747] ? __lock_acquire+0x6b5/0x2cf0 [ 755.448958][ T8747] ? kasan_quarantine_put+0xbb/0x1f0 [ 755.448986][ T8747] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 755.449012][ T8747] lock_acquire+0x106/0x350 [ 755.449031][ T8747] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 755.449058][ T8747] ? lock_acquire+0x106/0x350 [ 755.449082][ T8747] fs_reclaim_acquire+0x71/0x100 [ 755.449109][ T8747] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 755.449134][ T8747] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 755.449265][ T8747] ? __alloc_skb+0x1d0/0x7d0 [ 755.449287][ T8747] ? __local_bh_enable_ip+0xd0/0x130 [ 755.449310][ T8747] __alloc_skb+0x1d0/0x7d0 [ 755.449333][ T8747] tcp_send_active_reset+0x8a/0x5a0 [ 755.449363][ T8747] tcp_disconnect+0x171/0x1ea0 [ 755.449385][ T8747] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 755.449412][ T8747] __tcp_close+0x679/0xfe0 [ 755.449430][ T8747] ? __local_bh_enable_ip+0xd0/0x130 [ 755.449451][ T8747] tcp_close+0x28/0x110 [ 755.449471][ T8747] inet_release+0x143/0x190 [ 755.449499][ T8747] sock_release+0x85/0x150 [ 755.449527][ T8747] rds_tcp_accept_one+0x641/0xd70 [ 755.449550][ T8747] ? process_scheduled_works+0xa70/0x1860 [ 755.449570][ T8747] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 755.449597][ T8747] rds_tcp_accept_worker+0x1d/0x70 [ 755.449617][ T8747] ? process_scheduled_works+0xa70/0x1860 [ 755.449636][ T8747] process_scheduled_works+0xb5d/0x1860 [ 755.449670][ T8747] ? __pfx_process_scheduled_works+0x10/0x10 [ 755.449693][ T8747] ? assign_work+0x3d5/0x5e0 [ 755.449715][ T8747] worker_thread+0xa53/0xfc0 [ 755.449747][ T8747] kthread+0x388/0x470 [ 755.449772][ T8747] ? __pfx_worker_thread+0x10/0x10 [ 755.449791][ T8747] ? __pfx_kthread+0x10/0x10 [ 755.449816][ T8747] ret_from_fork+0x514/0xb70 [ 755.449837][ T8747] ? __pfx_ret_from_fork+0x10/0x10 [ 755.449856][ T8747] ? __switch_to+0xc79/0x1410 [ 755.449885][ T8747] ? __pfx_kthread+0x10/0x10 [ 755.449909][ T8747] ret_from_fork_asm+0x1a/0x30 [ 755.449940][ T8747] [ 755.747559][T23840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4567'. [ 756.057822][T21235] net_ratelimit: 17 callbacks suppressed [ 756.057847][T21235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.576145][T21231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.604673][T21237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.100742][T21235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.135444][T21252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.258026][T21235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.676980][T21237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.300042][T21252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.335629][T21252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.387607][T21235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.701778][T21237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.421640][T21235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog