last executing test programs: 2.171164225s ago: executing program 1 (id=7699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddb8579339e0000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8080) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000040)={'pimreg\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) close(r6) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x3, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYBLOB="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", @ANYRESOCT=r7, @ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x5c, '\x00', r5, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="23000000008300001000"/21], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r10}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x15, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000003000000000000000000007064001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000009a1010005000000a7644000100000001831000005000000000000000000000018470000050000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x5, 0x0, 0x0, 0x1f00, 0x11, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x4, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x4, 0x2, 0x4, 0x7}, {0x2, 0x2, 0x8, 0x2428bed0a71a041a}, {0x4, 0x4, 0x4, 0x9}, {0x2, 0x5, 0xe, 0x4}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r9, 0x2f, 0x12, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) r11 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00000}, {0x16}]}, 0x10) sendto$inet6(r11, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r7) 2.091752694s ago: executing program 2 (id=7700): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) (async) socket$netlink(0x10, 0x3, 0x400000000000004) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) 1.979613876s ago: executing program 2 (id=7703): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="d035744442723da11446d9ce15f0c917b3288e7f3273843d86137fad735383512cc2c072d3580436cd1991bd9b16f968a7a23b0ca2f9748a", 0x38}, {0x0}, {0x0}], 0x3}, 0x4048081) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r5 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x11d, 0x70, 0x0, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x4}, {0x6}]}, 0x10) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0x9, 0x2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c00000032ba99c76db352e800e5defbdc8960b3d989621e0c77bdcb5384e4e06283", @ANYRES16=r6, @ANYBLOB="00022bbd7000fddbdf2506000000060028000300000008002c008c761654050030000100000008003b000900000008003900ff03000005002d00010000000600280001000000050037000000000008003b0009000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.916315377s ago: executing program 1 (id=7705): r0 = socket$inet6(0xa, 0x3, 0x38) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) recvmmsg(r1, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10122, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000007e00), r3) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000464dff64573167f217e8bdab6a4b5ce57291e2533777ed6028577db6e1119eeaa39fab3cd8aea7dcdb60187414e5b828c1b784a01cf3e1b34eaa36beaf739088a168f1f232b3959d2426f25b523f1281a7760900000000000000b3a246e4ea4cf2b895892033b2f00e5630f8b852c48499dea7fc6b98b423c4e653abeefd7a96c59343bb2cb3a66c1cf0622ee630eb4465ee20d33ff207d72ff5dfab69e10e0fcc646ed35674f1a6b2720dda2ede525992e85ce10bfa94dc57ae4c793adbcdaaa967d0d0f2c3f1e2a8a7391b0000000000000000", @ANYRESHEX=r0, @ANYRESHEX=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYRES8=r2, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="190300000000000000004a0000000e0002"], 0x34}}, 0x0) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x10}, &(0x7f0000000040)=0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x24040084) 1.792387875s ago: executing program 2 (id=7708): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) socket$unix(0x1, 0x1, 0x0) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (async, rerun: 32) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000640)="09520f00", 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffe99}, 0x94) 1.563612764s ago: executing program 2 (id=7714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004f80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x25, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) unshare(0x20000400) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x3}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r8, 0x11, 0x0, 0x3}, 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x20000004) close(0x3) connect$unix(r12, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r10, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x8, 0x9, 0xe, 0x9f}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x40880) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r5, @ANYBLOB="08000300ac1e00"], 0x44}}, 0x40848c0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0x8001) 1.391286223s ago: executing program 3 (id=7717): syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018000103010100000000000015000400000014001680100008800c00028008000180"], 0x38}}, 0x10) 1.360684213s ago: executing program 0 (id=7718): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="420e26c200000000000000000080000000000000", @ANYRES32, @ANYBLOB="b9cfa0f2b9080b923ecbfa7408f975d000000000", @ANYRES32=r0, @ANYRESHEX=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080016a10000007b8af81ffc50ffd05a2cd6ffecffffffb72169e9e6ea730865eb301900007b8af0ff00000000bfbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x94) 1.308753492s ago: executing program 3 (id=7719): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x3f, 0x8, "1925b0501580f4a3c5b5ad197cf78484313103f8dc3803954b4bd14e8f82dc04b92bf2723a93d43c3113182c7f055914fed42fd49388572cb6a61b"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0xf34265bdd23c9b68}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.151412074s ago: executing program 2 (id=7720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) close(r1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c000180090001007866726d000000001c0002800800024000000000080001400000001305000300020000000900010073797a30000000000900020073797a3200000000001100010000000000000000000000000a0000000ac77fb6f9ade4d2c8f0785b9c7548ea01801de615f6afe5ed395438239db7a66169485b451541d285780bcfa64e6ff68589874e09f5b040b6460df6e926002e2b9d43838070aed18fb1ca289d45870d7f2df82b87fdc5e35053c15af1674bdb7c54d9dd365b00"], 0x84}}, 0x0) 1.124082306s ago: executing program 0 (id=7721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_ts_info}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000), 0xe) recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/4064, 0xfe0}], 0x1}, 0x9}], 0x1, 0x40012020, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) 971.578198ms ago: executing program 0 (id=7723): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=@nat={'nat\x00', 0x670, 0x5, 0xb68, 0x0, 0xa00, 0xffffffff, 0x8b0, 0x958, 0xad0, 0xad0, 0xffffffff, 0xad0, 0xad0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {0xff}, {0xff}, 0x16}, 0x0, 0x878, 0x8b0, 0x48, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x400, 0x1}, {0x5, 0x1}, {0x5, 0x31ad6b86d1e81068}, {0x92}, {0x1d3, 0x2}, {0x3}, {0x1, 0x2}, {}, {0x5, 0x1}, {0x80000001, 0x1}, {0xffffffff, 0x3}], [{0x3, 0x9}, {0x6, 0x1}, {0x7, 0x5}, {0x7, 0x7}, {0x200, 0x6}, {0x420, 0x89f}, {0x3, 0xffffffff}, {0x4, 0x7}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x7}], 0x6, 0x3}, {[{0x5}, {0x40, 0x2}, {0xf37b, 0x3}, {0x6, 0x3}, {0x9, 0x2}, {0xd175}, {0xb, 0x3}, {0x80000000, 0x3}, {0x7, 0x1}, {0x80000000, 0x3}, {0x9, 0x1}], [{0xfffff915, 0x7}, {0x4, 0x7fff}, {0x7, 0x6}, {0x5, 0x1}, {0x7, 0x3}, {0x9, 0x3}, {0xfffffffe, 0x6}, {0x9, 0x3}, {0x5fd42ece, 0x5}, {0x1, 0x6}, {0xfffffff9, 0xe}], 0x4, 0x4}, {[{0x1000, 0x2}, {0x80000001}, {0x4, 0x2}, {0x1}, {0x2, 0x1}, {0x8001}, {0x0, 0x1}, {0x80000001, 0x3}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x1}], [{0x7f, 0x4}, {0xa, 0x6}, {0x80, 0x400}, {0x6, 0xbcdd}, {0xe, 0x40}, {0x2, 0x1}, {0x0, 0x7ff}, {0x40, 0x1}, {0x5, 0x7}, {0x7, 0x7f}, {0x7, 0x5}], 0x9, 0x2}, {[{0xdb, 0x1}, {0x4}, {0x9, 0x1}, {0xfd0f, 0x1}, {0x4, 0x1}, {0x85bf, 0x2}, {0x5, 0x3}, {0x8}, {0x1000, 0x3}, {0x6, 0x3}, {0x9e20, 0x2}], [{0x9, 0x4}, {0xfffffff8, 0x1}, {0x3ff, 0x800}, {0x3, 0xd2}, {0x9, 0x400}, {0x6, 0xcf7}, {0x3, 0x7}, {0x5, 0x3}, {0x275, 0x3}, {0x9, 0x4}, {0x1, 0x59a}], 0x7, 0x9}, {[{0x8, 0x1}, {0x1, 0x26cf73c538c095eb}, {0xff}, {0x8, 0x3}, {0x100, 0x2}, {0x7f}, {0x8}, {0x821a, 0x1}, {0x10, 0x1}, {0x39c, 0x1}, {0x2, 0x3}], [{0x4c2a, 0xffff}, {0x1, 0x4}, {0x0, 0x9}, {0x9, 0x3ff}, {0x8, 0x3c}, {0x4, 0x2}, {0x80000001, 0x7}, {0x69, 0x2}, {0xfe4, 0x944a}, {0x3}, {0x9, 0xe8b7}], 0x9, 0x3}, {[{0x0, 0x2}, {0x98}, {0xea}, {0x970c, 0x2}, {0xf}, {0x8001, 0x1}, {0x9}, {0x8000, 0x3}, {0x3}, {0x9, 0x1}, {0x5}], [{0xb, 0x247}, {0x1, 0x9}, {}, {0x581, 0x3}, {0x2}, {0x4, 0x33}, {0x6, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x7ff, 0xffffffff}, {0x8, 0x1}], 0x6, 0x1}, {[{0x89, 0x1}, {0xfcd, 0x3}, {0x2, 0x2}, {0xdd, 0x1}, {0x5ec6, 0x2}, {0xfffffffd, 0x3}, {0x7f, 0x2}, {0x8}, {0x7fff, 0x1}, {0x8, 0x1}, {0x4, 0x1}], [{0x1, 0x81}, {0x7fff, 0x8}, {0x0, 0x3}, {0x4, 0x1000}, {0x0, 0x1}, {0x3c, 0x80000000}, {0xff, 0x2}, {0x6, 0xe4}, {0x1cc43331, 0x80000000}, {0x8, 0x3}, {0x6bf9, 0x7}], 0xb, 0x7}, {[{0xe, 0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x4de7, 0x2}, {0x3}, {0x56}, {0x7, 0x3}, {0xdc6}, {0x5, 0x2}], [{0x200000, 0x9}, {0xffff, 0xca}, {0x1, 0x4}, {0x9, 0xd3}, {0x7fffffff}, {0x6, 0x7}, {0x1400, 0x1}, {0x8, 0x2}, {0x7, 0x9}, {0x6, 0xa37}, {0x9, 0x6}], 0x7, 0x3}, {[{0xffff, 0x3}, {0x6, 0x2}, {}, {0x3ff, 0x2}, {0x9b09, 0x2}, {0x80000001, 0x1}, {0xb, 0x3}, {0x4}, {0x46d1ae2e, 0x1}, {0x0, 0x2}, {0x8, 0x3}], [{0x6, 0x81}, {0x1, 0x8001}, {0x4, 0x80}, {0x4, 0x4}, {0xdd, 0x8}, {0x10000, 0xfff}, {0x8, 0x3}, {0x3, 0x4}, {0x45db, 0x6}, {0x200, 0x9}, {0x80, 0x7}], 0x6, 0x6}, {[{0x2, 0x2}, {0x2a, 0x2}, {0x8, 0x2}, {0x6, 0x1}, {0xc82, 0x3}, {0x4, 0x3}, {0x9}, {0x10001, 0x3}, {0xaa31, 0x1}, {0x9, 0x3}, {0x2, 0x1}], [{0x2a, 0x3}, {0x2, 0x9e}, {}, {0x5, 0xfffff001}, {0x5, 0x8}, {0x8, 0x2}, {0x10, 0x7}, {0xff, 0x5}, {0x1, 0x400}, {0x4f, 0xf2b2}, {0x6, 0x1}], 0x6, 0x1}, {[{0x48, 0x2}, {0x3, 0x3}, {0xffe, 0x1}, {0x2, 0x1}, {0x6}, {0x40, 0x1}, {0x5, 0x2}, {0x7ff, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x51}], [{0x7ec7, 0xf}, {0x3, 0x954}, {0xbe}, {0x57, 0x663}, {0x2, 0x3}, {0x5, 0x9}, {0xd}, {0x40, 0x1000}, {0x1101, 0x6}, {0x800, 0x8}, {0x5, 0x92}], 0xb, 0x1}], 0x9}}, @common=@icmp={{0x28}, {0x5, 'qt'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @broadcast, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x59}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @rand_addr=0x64010100, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@multicast2, @private=0xa010102, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @port=0x4e23, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xbc8) socket$inet6_sctp(0xa, 0x5, 0x84) 807.224318ms ago: executing program 4 (id=7725): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000180)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030428bd02000000000000000000", @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) 806.588481ms ago: executing program 0 (id=7726): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000001c0)={{0x87, @private=0xa010100, 0x4e24, 0x0, 'fo\x00', 0x2, 0x83, 0x10}, {@multicast2, 0x4e22, 0x0, 0x6, 0x4, 0xea}}, 0x44) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000001b000000000000000018130000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000c000000095"], &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="9e36d4fd3108451a7818d854b388", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x7a, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd60fec00000403afffc000000000000000000000000000000ff02000000000000000000000000000102009078577a000000006010b1a00000cb0200000000090000000000000000000000fe8000000000000000000000000000aa2b0004000408aaadfafb17c133d1"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}, 0x48) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000600)="ad56b6c5820fae9d6dcd3292ea54c7be857600004c90c200d63d8da40fa5e94dab", 0x21) 803.597592ms ago: executing program 1 (id=7727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="520000001000010000000000000000000300000a000000000000"], 0x28}}, 0x4000004) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg(r3, &(0x7f00000014c0)={&(0x7f0000001100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x3, {0xa, 0x4e20, 0x7, @mcast2, 0x6}}}, 0x80, 0x0}, 0x20008000) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840) 663.59906ms ago: executing program 4 (id=7728): r0 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r2, 0x5, 0x70bd2e, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x60000810}, 0x0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd5e}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x198}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x8080) 663.224517ms ago: executing program 3 (id=7729): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010700000000000000000d"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x44) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000000010000080000fcffff33b85851415b11d100000000"], 0x1c}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000340)={&(0x7f0000000140)=0x234d172, 0x1, &(0x7f00000006c0)=[{}, {}, {}], &(0x7f0000000280)}) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="f0ff00a0f59500000000009819711afd3cbcb213", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0x58, &(0x7f0000000600)}, 0x10) 637.617529ms ago: executing program 4 (id=7730): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000240)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r4, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000003"], 0x20}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x6], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r7, 0x1, 0x0, 0x3, {0x3}}, 0x14}}, 0x4090) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xffffff22, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x39, &(0x7f00000006c0)}, 0x2c) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r9) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r10, 0x5, 0x0, 0x0, {0x7, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r13, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000003640)={0x40, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) recvmmsg(r12, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200), 0x1f}}], 0x2, 0x40010000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=r0, @ANYBLOB='\b\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000010000130300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) 573.72833ms ago: executing program 0 (id=7731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0xffe4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) 490.66145ms ago: executing program 4 (id=7732): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000003f80)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x1, 0x4, 0x1, 0x2}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="fc940b7469040813d95c0830dcbcd34e97ae6538024f53322258a97ba2704b7f585bf1203ee0a2044685fa4dd2d9e13a04b6493b7cbeec3c30b1a4762a1c488eac09729c00610dba385f6da0f70bb6dbc22295ce8c0882ffa578c724b6fa457e2638f58db77242d18c46156c3ca649fc89f9b110e5e9381f62674b24d4ab08305d0c0ece29ab26a66c27767ec8aa7c5eb09ff2380e2d21ec5a63a55dffc14f214a303f025ef60a93639b1b591f4d3c01c5e6930553f11457d4b6d9df93b91271d48a0faed6bfff187aaad73392f99cd7288ae8b748e3d24a61166acf41af3e92ed960a9b675000fca7c6e6cfb0904e163f0930e99344", 0xf6}, {&(0x7f00000001c0)="ffd3e7d7a732ee7a721469fb6f2503041d7f3caa7a81f030b4749a876d25b04ce609c90326030ceb7cc5e40356abadf5c980c1e1b0920051a207d5e6ebc99d025137751f8318eac2220b911adad8ee11662d74bc254edf365da9c6ccc8e6", 0x5e}, {&(0x7f0000000240)="92", 0x1}], 0x3, &(0x7f00000002c0)=[{0x50, 0x29, 0x3, "fa9936e32d8fc220a041ae2c288246356340b4dd5009fd5aa91a8f653977d1a302799191734b681e2e16966251c82f2bd3e8d415a4ff3a0302040252409e26"}, {0x60, 0x10b, 0x0, "04c88eda04e505293bd0ddd313f3bdf608cfb397e3a12917571ebe94ee6ec8b3af5d133a286a59cb73488e550c59124f68ac3579d4251eb58fc1cae90187ba1dc67b3acd38984138eaced0"}], 0xb0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="35b8fe7380c533c4d56adde44d8aa7ac16f1078bab41d4ece206a702e89607c4fccc0c2ea83e1d26220f7c7db2145c0a1c1044b4a4ad0b5603163565bec7d2bfe2ad49586af31e8e2820c7d8e486fb38c519489acf89", 0x56}, {&(0x7f0000000400)="d992cf1c4a7342d112cad5dcc0209c326f3177ddd5e419385102749ad697a414d854780e1a7b9261ed0ccb868cba5d8e86b631430110f3550c2326b30154a6efbcadbbd91527a0b296c45e82678b4189cc215adbfc2697d38f5bc39dcc9f124fb3c5818e5e38409280001cd5724b3fa80c841c107cb6a818b59dcf030490627bf26a9d1eccd5c27e86be60cfd68141f11139d26a0ab241a0ba639bc07f", 0x9d}, {&(0x7f00000004c0)="c08b3923d2ea5dc8d931d7cbfbdd5344ed1d6ab85f43b15c88aa13ca547c0ca46924f0552115b65aedb006a325ecab2074ff44d91120f07b44afdf78095488f664beba10a0aa66a5836044b04c73f225b4a6837cfdd103a875f15360c9f3f176ffc8f9c75ff80fa1c0896e9ed4a63a64475313c04cffe8dc5880ef8628a62a6536953584c951aafe3ba7ae21909f1765f689e6785fbd836848d9d66989ddf1d3ad09cf1c06241b8470e6fb14c467821babe2fb9a1072d0677f5faa2316691db52d5b5e908ffc764af3f70f029865d5f67c4287a22fa0e76cba02475239b2ff1cf8158176b997460d522c6e7305", 0xed}], 0x3}}, {{&(0x7f0000000600)=@xdp={0x2c, 0x7, 0x0, 0x1}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)="0cab7e2629d0c3396ed7b3eba3de17ddf537ae3117011128ae671364f36c4c3ce2ac9acb385792b909d073ca94161a5f6f99353a758059572879cd26f518d5fd2e991652df6546752e6625a172bcf986e83742c2536a3fe0995407bca7e87119948ec95b53e315846f0b0f00a84c34b073c089410c493baac710fbb4e987282ea34fc839e2b44849e0d36dba42f04c5b2de6a32d9b5b47ae4b1f9f30b2a144ca871705129a85ee55183ee935cd0bb685d0ed045bad7afe460d5243e231543b6a44b3", 0xc2}, {&(0x7f0000000780)="a5393375a834c74c6892e6993c7aae4af450a21ec201d5798689d30d974086d32a598387aced523078e06fc7ab6ddea1aa17e9e2ed9602e92ed15517e4492178f0ec70fc04e244f0a5f656611efa32ebab5f2172af6934ecbfb4892934dfbab534118dde5780c801c36f50cd45278d36d5765f8ecb4ffa88f5e5f1e0b08a467448eb63096a1a878990d9557f8986d6de1888195f8b2fffd24a87f4633b7b30e0be229f244ab19066bab3c695a132337f4438369a2566fcb1aeef5a9d1ee0fd4051234ccab88c3f64c8ff31832c452df89dc5e8f34678f11b86a099cf1f0c58d31ed7457f4ec8", 0xe6}, {&(0x7f0000000880)="020dbe798d", 0x5}, {&(0x7f00000008c0)="4d4d4e28e0aabe3ba98a2b0a514cafc13b4b45f62f9c6321da64116e18d2221b2902851fa6706ffb892386b1a27037316db05fa12a4aae4ff013b1ff6aee90a24760a7a3315d392b8da5d74ac618c09d44275bb35415619451e8bf349a767cd6817b6c724ed63cffa78ebc36147774734e8fc15a1c24373312ed3c2950d8d036abca242565d3f5703674ceef3916cb0a90c343f9", 0x94}, {&(0x7f0000000980)="768188b036072057e81e5872befffce01453e500feb0b0a7a152f6f01377d2deea287d2c116d9331f1e7d10737afa5fcb2f79572306d6a8a12fd42070df0fa12cc0e5ff3d259567e9a", 0x49}], 0x5}}, {{&(0x7f0000000a80)=@caif, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b00)="cb997e25923e12f34f19e8ebad140d88d011e260c213ff719a870a6ffd931f969b87d4e1e8f019bc595d2889f6f3", 0x2e}, {&(0x7f0000000b40)="b54b5e96ea6b035c41aa18238b4f7eb3daa8fa866b6509d5f2dae960bc57b60a29df3dcb7fdfb8cfffd1dcebf21a772ab71105747ef85f9f90d9fe68efb15d92dca67393bfe352799f9686", 0x4b}, {&(0x7f0000000bc0)="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", 0xff}, {&(0x7f0000000cc0)="e4285535ce0a2948a93bf9a744021005b32ee49d45b88f16ca11a996c8f26bf36da61c90d975760d7b0ddde59bd4b81eee6b3fc6498a61d6a86fb0c1d97bb749e6548f7705094f2606ef5e6e9f038ccd0770d55692bfc58eab2a40ee496526eb1972a50faa96841f", 0x68}, {&(0x7f0000000d40)="97a57fb07b02e39d59720da4eb8e5af5219fe0d1b413b088aed0c5b585fe7550ef71816d25179f71b5bdc17070b5ddff7d66179044680117ff90114885f651f7a55eb2358231df73b406b7ba5b6bf113232247cce5a439456623642ec0d2b96da64645415b948331265705fdcd9a6bd948a751886b291e99dfaa3fa27239", 0x7e}, {&(0x7f0000000dc0)="7d892538b87744c65c", 0x9}, {&(0x7f0000000e00)="1208128701849b60c59aa5ddb37e24a4b008318b242ec592b342be40a0d1666af3c15f84f7c3b6ebadaeb44f024f8d82f0b37266ee7efc95d2ab729b6f924575df57f9d0ff12fe6f30f4e0bdbfa929f1afa6d8a072360d93ef5ae74e5b5883eebc8c59fb6d359ee78f888c8b6089e367c847690fd48b305dd078de6a2616e7484e57293f9fc4032e2a26e6c713a584b66323a6ca019e000d82ee716ba143768f82d8c26bbc0aee677d97b0b50ed91ec574a47fd5e81b1c8b75045d1ec255b7a3cc5ae48919b064404e53a7b633cce0415b1c5a7f27e72266a3487947d8af7285c84ba9656335", 0xe6}], 0x7, &(0x7f0000000f80)=[{0x1010, 0x10e, 0x4, "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"}, {0x90, 0x10b, 0xff, "e576bed057524e8edf295b78f628fea4d5c387f6579976222886dfd6738a4e0a68804f7d58bac5df62c96dbd494395f89fb5bef8b13989bbbfa8e82dfe185ce91687bcdb45f7e17cb2ee00b99594dcc8a0f594c97dac276ed9aa1a4696fe2e0938e25bba77ef49458d6dc6e76176fd4e70570cf371cc9751554f8a"}, {0x30, 0x0, 0x2, "6b6c1fcf19101b90a7cf2ffae31a8c9514cad333072c616ab6209628"}, {0x28, 0xff, 0x6, "2e0bf01f7ebd008f8801fb56ea4d00ec131f4c"}, {0x18, 0x84, 0x3, "9d"}, {0xb0, 0x146, 0x6, "e18b9814045abfc2d398d48b1b8b10bdaf41dd940dff803f39275ffa52de2123551d16251dd44794b9437adb4f6eb5f594ce8d387c2db85e836d6ee1c5b8fb5769fec0a056240657180983fef2c55d2e5c8ecc08b45706494aa8227866b72d805fd99cefb160896714d481d91f2d7da3460533749a364761bdde7ae593288be88fd673397da797f8ae03f65a2b5889044ee38e14542bcda66f"}, {0x20, 0x29, 0x2, "ec9afe6a295247864b5f4c"}, {0xf0, 0x113, 0xb008, "d23e29363f9b8629731ac282eee5ca16b4034dd937acc766538e5ad226a1fe2bd6ca7a296b74a2767ab76e666ee2f6561cb182aacf752367347f23c75c23e011514b6f8bcc038678bbb0b54ba3f487afcda2dc19f3501fa892315e027e1b1a6e6140e64e7c8c897c43e1676e0958dd5b0ebda72c8ebcf98f0678691d75c71a55cc5634892c188080074db12d7a8703a1c91e97262651179bc39840f25d0f79b65c2c702eb4073b24315323ccecb4725f75cf9a1c88cb20da6b96d748376b26d068fe57d81c3c2e311970f9ce581578f007bbae6bbe0361c243e5"}, {0xa8, 0x0, 0x6, "26240cf4e18b9f20c36328644253ca5d4068d6b1852605973e67c8113b6e17cbc60c36602580351c575848abe9437cd69ab532acfd1d3d65d5145c417114c09823c4b5c4e567c5986d957d2c1a0523693bb9ec25d18bd2db02c6702dcc12519fa41d4b4f0bb8dc27f713197eadd942ed9aaecf55c76c7b2bf3546eeca94c2d225b10c710ef5f91061d15c54b8ee73b8facd5503613261bee"}, {0x48, 0x112, 0x6, "675fdaf50b5d270cc5d1de9e4ebe1e1a0cf5974d804b68e73a6bb878b2be661cf6825a138b319a94426dea1f70919b4824b1935cf34bae"}], 0x13c0}}, {{&(0x7f0000002340)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x80, &(0x7f0000002500)=[{&(0x7f00000023c0)="7c3cc7f63ea8031318697fa4b7e74a3d41f0f906b08097bb7e858ea1db7b133d2c33c2992a1b56e5a22c674cf2c9601899fa86705d9545b581744b4060427ec1e35fb001eb80d493791af00f175dcaa4ac2033c0006ce646c0f74ead78f0826a55f19f05122fe7c9792d2e55d6b8564f23d258266113de8b0344810d644d38bbaa630d01c95143b5ed75c8160ec991d7b5524541a757bcc5e0f8f489af9e21e216008f32f3df3f74f95bdd05268dbe9c81081244f5e5b8ba2a2937aacab78a273719eb6e7958345caba2d436d9cb", 0xce}, {&(0x7f00000024c0)="4108fb368a1685acc9d267f84e5485d92fa5a0fcd529bc66acf90edf298c209cb4d1a7bd82e5c381ac332ef6b517cfa058a60812cc73a7200426", 0x3a}], 0x2}}, {{&(0x7f0000002540)=@generic={0x27, "4029396a811b684f273d9a5169b062ddf1c66f85c0b3d32f9fdf2ae0a6210efab5736d6d4c41b889a0a850042157d85cec1dd1bea27c5ad13c4d1af8d7a009a72f3f527c7bb353fd85b11ab3deeefa8d8fdd08591e73b96cd20e0a75b5032e77723a94d66e972c873d7c54ba10c0ef734e4ca3ce0b8d44c472b9f1c6bb66"}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000025c0)="c30f7e49bac6af141b275a9de9c9d085791cb93e738488a8af6d25af1ff94598629697f14c5e496f5c0ad9b423b2cb0cc9", 0x31}, {&(0x7f0000002600)="1ac343045e10fe88f7050e9f983d83062f922ebc66355c69223363b2ce25e22e093eb317df4cba65476310f7f559cf5e153db23b8b8e05decddd99d7c5426a96558f0cdbfd80b3cee4aa12f5df224137728f5e80936c27a32b15b9dcf8d09d11eaaa3bc8ccecfef2d0c71036012109d884c3fbd3758f6b5fa5eda4ac0c5d89f06ab43235024b9696f550d8c47b344cdc2d9fb889e1ef16490cba47a9d120339a9d3ac7a213b98f6f91480d6397faf9eeccaafe42cc0edf1e855c1467fb2360608c9fd777db2b6e553428cfc1ee0f6ccfc3865518a1c8a7e61e08b4a122d227db145f72cf47db27c6833089c7d42695a9c1ded97a48b5", 0xf6}, {&(0x7f0000002700)="e87272c7b86d50489b811cc7836cec93aeb50f8dd732a12ed56da7115fda50cbacf28368af4b4d9807478001a8ddb426e7135ca658d58050eb54b4a712409aa5bb5c6bd5fb805c1db2bebb4dd084eb968708c30e700d21207dc626c76cf90b024055b4ca15fc0cf9b3c99f898ea3b1bab0c183ae5fc9eb6670836b6d6ce8d31c8c2dbd2f0f003364a45fb0a41d4cee45696f50df3b53", 0x96}], 0x3, &(0x7f0000002800)=[{0xb8, 0x108, 0xffffffff, "b044ed2ce7bdca4aaf728a36f3b22aed8883c2dad5180cc31c6c6057b892234bcd288dacd4dfe8ee1dd9d4f8ca81b43cdbe90135f0dc983203cb4151fa8e646b6a3d0b10a04df042d14e165e5a311dd5262561c57926ae36d5b4566138e2e547e0027bcfe94e2f4be3f7c8d17c49e05ee5f48dc5ef3c2c8772df3adf52841b1b1cf714e8c6346278aa4e8c52deb593e6f80513471c62a75b46c77df66c8d785f964904d993"}], 0xb8}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000028c0)="ea54bf026dedccba66211bc62685a79d6193d191636627e464812536c6f4f11011e0eef14e1b2b9e27702fd5e5f8c5e51d6390a9908ed22a1a8863b728d12f372c842316fe6e167017e0eb3eaafb19cbdf4035934ad1a9ce1415520a8fd9420d1c9250ff2bdc23d34bad7b2af1eddb874413ec83c8fe732dfea2a1040bb6ed34718ebab32d2352eb89804a6e534dc3c779a5d7", 0x93}, {&(0x7f0000002980)="469e336af3272fc9f91b1a1575c2b04897dcc49a823d068bde085e072b515070c35f29688cdf3da667fd63c4d0", 0x2d}], 0x2, &(0x7f0000002a00)=[{0x50, 0x0, 0x80000000, "786c41be7194653cca679bdda7080aa1419387eadf7d690068fc095ec85641f30088bbc20c658617643ecf22caf706be41b40e095728dd53db"}, {0x48, 0x10d, 0x8001, "673c82e99f32131856527121a9c40595fd520b92851016c09d0394489d3d9bb432e6a871d8b29a1fadf87909e87e11debd7ece2f75"}, {0x10, 0x6, 0x401}, {0x80, 0x6, 0xe380, "f226953adcbf049adc8363d15c65fb37d5d79ceb360acda3a78c49c7c14b4cb465e4b169100eedded27a622ebdc9b46088f74b3a2567ba42932d37ca8413327d3480f3be46fe8692d3968cf7001b72f535c3c48264cced791614fc103218dad3339d35427450fcaa07bfb6f6"}, {0xb8, 0x0, 0x6, "7be83e611f5eeeb5482bc0a68441d5fd6a661ef8029805acfdc4f6f01eb7f1aace587526b07211d6aee023d2deacc59a1383782b2fe9a48894108526112c82279d99ea2ac54f3d795d644bfa5678af7111124df8a8d68c3cc5bb197dc4866e0b2f5fa3127cb9282e9542aefb4e494fcd1e7918151a86f2697ec715b85183f0fc365856613f539ac60b6315f2ea4a9855406a33f434a534b20cc75156a7ba71a2b3f5ab"}], 0x1e0}}, {{&(0x7f0000002c00)=@x25, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002c80)="ccc01c029388c5efd97052d91ede7f6c142138e01c15fffe8545bc37cad0a0d73678cf63d30d726e6c5dcfe4db4c499646c8d5d8c8a0ef28dcf72cf896c881713fac56b9c8015a", 0x47}, {&(0x7f0000002d00)="fa174e013140d7477f07eadf784d70aa153ffcf34ddacbc84ef13eb0b806f63d2ce28ec9f311786805c66482390e785ab6f494a1bb8aa0f5f836ac60d32edcc36147723f4d3a6b8c02417b81dcf000c583be42bd0038c789919106edc7633ebc7f38cef8b03721df4b4eb81a5799e96a1427a438837e2c82786af7b6e4067d42e3f0a2a73513b2871ef0e8701fd45b3a0073d6", 0x93}, {&(0x7f0000002dc0)="2c3c921f8fa15dbd5bcc0a", 0xb}, {&(0x7f0000002e00)="5174d4e9cb6858c08565554ff8b8a1c5a3623a3f81b97493ae82abf0ff46355abca5b8a473b62141813ef9c1ef64b8dc5d4e9b8a19fb5608a99758a4dc17c393ff7306f23b65f574e115bd12fd3bd702e1847305cd70b44c04c08542f264cd6d656ca7497afa61554a22e933e0ae7d32b29b50e5345ed96441a70b3a5e76c7f43f87ff338390856ce7828b096fa9170fbcb15776ef9899fa0f300f94cdab2a58653def6ce2714cc15ce461f59e357a0f758faebb89ad483a38d2d91b708c839c3e5a326b057ad0680d26", 0xca}, {&(0x7f0000002f00)="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", 0x1000}], 0x5}}], 0x8, 0xc000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000004180)={0x6, 0xe80, 0x56, 0x8}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000042c0)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004280)={&(0x7f0000004200)={0x78, 0xd, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040d0}, 0x20000000) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000004300)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000004440)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x8014) r5 = accept(r3, &(0x7f0000004480)=@alg, &(0x7f0000004500)=0x80) accept4$netrom(r5, &(0x7f0000004540)={{}, [@netrom, @remote, @null, @bcast, @default, @netrom, @bcast]}, &(0x7f00000045c0)=0x48, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000004600)='rdma.current\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000004700)={&(0x7f0000004640), 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x2, 0x8001, @l2={'ib', 0x3a, 'nicvf0\x00'}}}}, ["", ""]}, 0x34}}, 0x4004010) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004780), r4) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f00000048c0)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x80a20450}, 0xc, &(0x7f0000004880)={&(0x7f00000047c0)={0x88, r8, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000880) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r9, &(0x7f00000049c0)={&(0x7f0000004900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004980)={&(0x7f0000004940)={0x30, 0x140a, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000045}, 0x4000000) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000004a00)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000004a80), &(0x7f0000004ac0)=0x4) splice(0xffffffffffffffff, &(0x7f0000004b00)=0x1ff, r7, &(0x7f0000004b40)=0x9, 0x7, 0x9) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004bc0), r4) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r10, &(0x7f0000004c80)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004c40)={&(0x7f0000004c00)={0x14, r11, 0x220, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x24040805) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000004cc0), &(0x7f0000004d00)=0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000005d40)={r12, r7, 0x8, 0x1000, &(0x7f0000004d40)="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", 0xb, 0x0, 0x20, 0x401, 0x3ff, 0x0, 0x5, 'syz1\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r10, &(0x7f0000005ec0)={&(0x7f0000005e00)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000005e80)={&(0x7f0000005e40)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x20000004) sendmsg$nl_generic(r7, &(0x7f0000006040)={&(0x7f0000005f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000006000)={&(0x7f0000005fc0)={0x40, 0x23, 0x20, 0x70bd2b, 0x25dfdbfd, {0x17}, [@nested={0x2c, 0xdb, 0x0, 0x1, [@typed={0x8, 0xa5, 0x0, 0x0, @pid}, @typed={0xc, 0x62, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0xd4, 0x0, 0x0, @fd=r6}, @nested={0x4, 0xb9}, @nested={0x4, 0xef}, @nested={0x4, 0x12d}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 426.690981ms ago: executing program 3 (id=7733): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x9c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b402000000050000611100000000001c000000950000b8f3e83c00000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x77, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) (async, rerun: 32) r0 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x20, 0x700, 0xd67f, 0x6, {{0x30, 0x4, 0x2, 0x2b, 0xc0, 0x68, 0x0, 0x6, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@rr={0x7, 0x1f, 0x3d, [@dev={0xac, 0x14, 0x14, 0x22}, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x86, 0x1, 0x7, [{@broadcast}, {@private=0xa010100, 0x80000001}, {@loopback, 0x3ff}, {@loopback, 0x80}, {@empty, 0x592}, {@remote, 0x7}]}, @timestamp={0x44, 0xc, 0xd1, 0x0, 0xa, [0x3b98, 0xd]}, @timestamp_prespec={0x44, 0x3c, 0x55, 0x3, 0x9, [{@multicast2, 0x6}, {@empty, 0x1}, {@local, 0x1}, {@multicast2, 0x3}, {@rand_addr=0x64010101, 0x80000001}, {@rand_addr=0x64010102}, {@empty, 0xf6}]}, @cipso={0x86, 0xb, 0x0, [{0x1, 0x5, "bd2737"}]}]}}}}}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x5, @vifc_lcl_ifindex=r1, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 426.339767ms ago: executing program 1 (id=7734): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000088000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d"], 0xfdef) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x1, 0x6) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x209, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x4, 0x6, "f01851", 0x1d3, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x15}, @dev={0xfe, 0x80, '\x00', 0x24}, {[@routing={0x2c, 0x6, 0x0, 0x2, 0x0, [@mcast1, @mcast1, @empty]}, @routing={0x2f, 0x2, 0x2, 0x2, 0x0, [@remote]}, @srh={0x78, 0x8, 0x4, 0x4, 0x7, 0x10, 0xc9, [@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}]}, @routing={0x3b, 0x4, 0x1, 0xb, 0x0, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x29, 0xc, 0x4, 0x6, 0x78, 0x8, 0x144a, [@private0={0xfc, 0x0, '\x00', 0x1}, @remote, @remote, @rand_addr=' \x01\x00', @private1, @mcast1]}, @dstopts={0x37, 0x1, '\x00', [@ra={0x5, 0x2, 0x9}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x5}]}], {{0x4e21, 0x4e22, r3, r4, 0x1, 0x0, 0x9, 0x2, 0x1000, 0x0, 0x9, {[@generic={0x0, 0xa, "4b0c30eb97c09f11"}, @window={0x3, 0x3, 0x3}]}}, {"07d3aa5d9a24c6c8ba08912ac8c1ef1d13511ed0a6a0b699d992298f3c4a55b9235169666449f942860377ab8cd3a4785dcddbc5fb34262c3f3ef17cc0dd0d475d536b1bcef0924d769502093f4c0f31d3c580f2cf847eb5ab74f5cfcdd542a48069405e7319b7ebdc824938a94901"}}}}}}}, 0x0) 321.299994ms ago: executing program 0 (id=7735): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x8) connect$netrom(r0, &(0x7f0000000140)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) r5 = socket(0x1e, 0x5, 0x0) getsockname$packet(r5, 0x0, 0x0) listen(r4, 0x80) accept$netrom(r4, &(0x7f0000000000)={{0x3, @rose}, [@rose, @default, @default, @default, @remote, @null, @rose, @rose]}, &(0x7f0000000080)=0x48) 310.301407ms ago: executing program 3 (id=7736): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x85}]}}}]}, 0x3c}}, 0x40800) 251.985834ms ago: executing program 2 (id=7737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @dev}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000004800)=@delchain={0x1ac4, 0x65, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xe, 0x2}, {0xfff3, 0x9}, {0x2, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x148, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_ACT={0x12c, 0x9, 0x0, 0x1, [@m_bpf={0x128, 0x0, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0xef, 0x6, "ea366b0f5bfc3eb7ce7def25c6cfa32d26b28a1a4696d21e31b44d2cc80983b715a0a5fcbef41719a26087d74480e9848c1ae2df11bf1cf60e8a5dacd56fcea81f301bdb5c2920c7fd3908e5e4d261db977ef140f3aee3082cb83e7c58a59c9d838d24f310c91dff92150b276d9dfd0fbe44255ab0548eca1749c4f49bdb8d478c6cab80e7b017ffa2ab3ea92509c00bc1b25dd1763e0e870fe3a13757447ee581b3963c6597d16fbbb8540e1efb68efe3f5f49a440028d91d9802287e132ec54507d6733ef67e5e4d6d1bde03b50d37b2ccb100710726acf436adb86f60d5bc689b72ceb4e02c05fc98f1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_MASK={0x8, 0x6, 0xff}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_cgroup={{0xb}, {0x1930, 0x2, [@TCA_CGROUP_ACT={0x11bc, 0x1, [@m_ctinfo={0x134, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x10}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffffd}]}, {0xc7, 0x6, "7f6dc5b2b50cfc0884c56d4914fff67122e3c291d6af7d8169fdc127a0b095efd8c2514293c5d3a4f27c5a790e3454dda80f058f2a53bdc6010f270e8fe7466ef3013eac735a2e29c2ea6c2bc776bb97566c6ddab0df12139722bbd08aa656c150ee4c5fcf150cfcf17a92463fce3d663de19e3c4b2de00f69fc2304868951eae9df06372efcca9bbc66ebbd1e579b11fb76c006c699717b943c96cfeece3145687757bba9937b955fe3d1536be8d1c542005f17b578631c41dfd3f2f37c66d365c8ae"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x1084, 0x0, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x20000000, 0x5, 0x6}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x5, 0xb2f}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x2, 0x7cb, 0x2}, 0x2d}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_ACT={0x3e8, 0x1, [@m_skbmod={0xec, 0xf, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0xb2, 0x6, "7f2e56323d70d17022a3b3e9f8dfa82e6f5c137e868a22495153ed46193735fcb3005105a02e7e63038ec4983095cad488341501c53f70991b8dbaa7dc438b71806cf156c9bae06af0c3c49bf4defac36938d3c115d6f300b5e49638bde7d2449dd143c120b26bbde73b99b8d106a22a4087080fe2158ec711581bebc8374a0cbe164c99b8f18bda71768f3a8c5f87e3a3a135095ca1c2ad285194849c350f92c8e39900beeb5a398e299ced1da5"}, {0xc}, {0xc, 0x8, {0x2, 0xc6f40fd74c018c96}}}}, @m_nat={0x290, 0x16, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0xcbe6, 0x8, 0xb, 0x9}, @multicast1, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x6, 0x1, 0x8, 0x4}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x2, 0x3, 0x7, 0xbd14}, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x10000000, 0x7, 0x4}, @empty, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x2, 0x20000000, 0x6, 0x9}, @rand_addr=0x64010100, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x8, 0x8, 0x659b}, @broadcast, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8c80, 0x37ec35fc, 0xffffffffffffffff, 0x2, 0x768}, @loopback, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x40, 0x6, 0xb, 0xb}, @private=0xa010100, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xbfb5, 0x7, 0x401, 0x3}, @multicast1, @private=0xa010101, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x0, 0xb4c1fa8ff0ea4531, 0x5, 0x7}, @empty, @multicast1}}]}, {0xd7, 0x6, "b3ca39cb94e525432511da2c67a6afa1294e58ed97826bd1ceb8b1e470bbd6bbb015b0e6b3317561d92ae17094945caab63780a33df4eb7103df2bde64ff0dba3b32d8e38463b2cc8cf40da370a249008fdb94ce1fab798b8e1818acee0948112735a78989d408fd33bf1af2d0b19b7be1fb514255bf6f972121c6bf760934c5d3df5ef75fc72cfe1dac5ac7574ffcc85b6121c12b6ad9f390d55d86e80c713594ccf01b75de280d32cc2a64abcaabc440160730c70a793b7aa3172ded83484d5f441e182b3d3e995d4644268478cc61f02b6a"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x68, 0x12, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfff, 0xb, 0x7, 0xfffffff9, 0x832a}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc90, 0x2}}]}, {0x16, 0x6, "0457d77ea1a0e599e939fd5d3cec9146e98a"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x388, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x906}, {0x3, 0x3, 0x0, "4472a5"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0xc}, {0x6, 0x0, 0x6, 0xffffff01}}}, @TCF_EM_CONTAINER={0xf0, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x8}, "e42edf3b94bc3c8d0869de93e2b4e0e06d6ed6fb99c9c201b8d70c5c1969571e8b8e3e81e7a6c0a529f566a0029a5eae7786215b5731986916b0514e5118c80cf6b43c313dd6b53c094076299582e3e73d375515c92873197c2803b9f220b38e96eb6b4bd48152c403e1de61e1074af301298e926f18c3f9f4c42510652d3e5697f3120415cca4553b03a67c55261464c790be2d6bfceb484aecdbaaff80cebdf798369bd8223120a205ae40b0f31166814ac89f30ec4eeda2ff8e484642931243fdab870afb87719565b98e155653a35a9117c798420f6d9f0fccff69ee96b894"}}]}, @TCA_EMATCH_TREE_LIST={0x260, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0xaa5}, {0x0, 0x4, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x2, 0xfffd}, {0x3, 0xa, 0x2, "9c683c38dbc3189d6e74"}}}, @TCF_EM_CONTAINER={0x34, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7296}, "a7344ed4ec727b3e84446114cf8b6aeb94eb1f699db6d957b3c73139e73517f166ebe83c069f9813"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7ff, 0x7, 0x3629}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_IPT={0x1e8, 0x1, 0x0, 0x0, {{0x6554, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_DATA={0xf5, 0x5, "54c700bbba0d382581a34e9abad6feba5d1e9df1797b48f82ef640a7a0cb4c315e72f21cc2ffd718c481c8b82d0a8008ecfc43f6ee825b760f919ba0b8a38eed917327e4b690bcf06867c75cc8c6953103fb90e3b776173359e5f8dac07cbd9f2e2715b2366f85f66173fb5f589788c929154ee5da2a63ccee65dfe4fd7f2784350e9d38906e30de17248be4e3c2573dca065df36524ce82a58704b557ecd841a913f2c00ae5bdc726b6ff98279111316c3f9bad98830ddb5856382eac48684f7ddbe28efa874930b3eefd99082139c850da91ceb15f3515b56f5676027b0212233cbb72a44f2059a43506d10e80c2526e"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xb1, 0x5, "d2f8157597d11c27d01fd4c9e4af0e4b860221eb96081e1ebf3672e12ec9ce62d8c06d51e09f22e62e288022e063b2b5061aac7f963443868a00c55821969c96272938f3a620887d385aea4d072fff096b3565a5fe03657f7a700add806e3628b483852345a125d36d840cc1f86785613cdf4f9d74db1820ceca787674425deb3924c6a8c3e380ba4fceaee4d25b29c5443f7394aaa9a811cc7048501181e145f089236d6feaffa00dd2822504"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xe3}]}}]}]}]}}]}, 0x1ac4}, 0x1, 0x0, 0x0, 0x8044}, 0x20000801) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x4, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x8}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) setsockopt(r8, 0x8, 0x0, &(0x7f0000000640)="602ff4a529be593f0c7fd220915b2497d54c0962a6f9f6d6cc80a2a23854bf57be7b3f9599732295a92f4e1a9336dd10ffb1cbcaea8c9ad82f2eb0cc9155be187312591c07c00635679cc3861bff9859681d8b255e987bdda3b0319d30e028ebaec045a1f6b9e82b4ab53883afd7a67edaf74db22098109faaaa7d203107f07e5022c3781e06b7ed7f511017e64fe5df7bf21f69ceec90e92a72f4c5495ddf4939", 0xa1) socket(0x26, 0x800, 0x7) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r16, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 251.637385ms ago: executing program 4 (id=7738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0103000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380"], 0xd8}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000400007012bbd7000fedbdf25037c00000400c280150009800c00ff8008000d00", @ANYRES32, @ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c080) 76.744015ms ago: executing program 4 (id=7739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3, 0x4}]}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x103, @empty, 0xf}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001680)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1000, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4015) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'nicvf0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) accept4$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x3c4692f85b579c65, @hyper}, 0x10, 0x80000) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0xfff2}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'syzkaller1\x00', 0x200}) 76.103859ms ago: executing program 1 (id=7740): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r2, 0x0) ppoll(&(0x7f0000000000)=[{r1}, {r2, 0x1008}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=@dstopts={0x29, 0x2, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0x0, [0x0]}}]}, 0x20) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) unshare(0x22020600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r4, 0x4f6, 0x10}, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7, 0x80}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r5, 0x0, 0x0, 0x4}, 0x20) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6aabd95500462ffffc000000000000000000000000000001ff0200000000000000000000000000010c"], 0x0) 75.509726ms ago: executing program 3 (id=7741): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff970001001000000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x4c}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001500)="a76e3ba7f87ed94e8b20c3d2ebc535d9439d", 0x12}], 0x1}}], 0x1, 0x4040894) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) (async) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0xffc}, {&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c28c8dc0d", 0x13}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000520001ff0f000000000000001c"], 0x14}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) (async) socket(0x400000000010, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x437, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r7, 0x5394b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x24000010) (async) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 0s ago: executing program 1 (id=7742): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="084f00000400000008000000020000000000000075ba1ee6722de3eee6803e6f9c6dc02ad50b24361c715f123681d16f0ca67e2769de7de5bcbda194fae72a051265ac73f26f46bd9164a6c53305b2f80dcaeae0bb43a9d908d19a5e09a61fdf86f1f27e5fbe5481f2913498dbcf13232424faa9d3b9ae5d43508346", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {}, {0x2, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x100}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x65}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008804}, 0x2) close(r3) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) (async) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff880000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7df8184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="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", 0xca1}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde15", 0xb4}, {&(0x7f00000007c0)="1da19d23fdff85b98167af7726547120df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132d115fd9988c00b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b651ec19cedc69367ba0093c404d4ac7409ae7f612cd45bc475f1f4b47ba45ec376c3a98a06da61124f2650b53b15c87c3e6ea7734e44835fcd6d23a0d7e", 0xdd}, {&(0x7f00000009c0)="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", 0x12f}], 0x5}, 0x8bb3a321efc09a) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x3}, 0x20) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff8, 0x9}}}, 0x24}}, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x4020) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x7ffeedc0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x8, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61158c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) (async) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 55426][T29083] ? do_sock_setsockopt+0x17c/0x1b0 [ 567.055455][T29083] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 567.055484][T29083] ? do_syscall_64+0x14d/0xf80 [ 567.055514][T29083] __vmalloc_node_range_noprof+0x132/0x1730 [ 567.055568][T29083] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 567.055597][T29083] ? __kasan_kmalloc+0x93/0xb0 [ 567.055626][T29083] vmalloc_user_noprof+0xad/0xe0 [ 567.055648][T29083] ? xskq_create+0xbf/0x170 [ 567.055676][T29083] xskq_create+0xbf/0x170 [ 567.055708][T29083] xsk_init_queue+0x8a/0xe0 [ 567.055738][T29083] xsk_setsockopt+0x54c/0x990 [ 567.055767][T29083] ? __pfx_xsk_setsockopt+0x10/0x10 [ 567.055793][T29083] ? __pfx_aa_sk_perm+0x10/0x10 [ 567.055824][T29083] ? aa_sock_opt_perm+0xff/0x1a0 [ 567.055853][T29083] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 567.055877][T29083] ? __pfx_xsk_setsockopt+0x10/0x10 [ 567.055904][T29083] do_sock_setsockopt+0x17c/0x1b0 [ 567.055961][T29083] __x64_sys_setsockopt+0x13d/0x1b0 [ 567.055997][T29083] do_syscall_64+0x14d/0xf80 [ 567.056015][T29083] ? trace_irq_disable+0x3b/0x150 [ 567.056057][T29083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.056079][T29083] ? clear_bhb_loop+0x40/0x90 [ 567.056104][T29083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.056124][T29083] RIP: 0033:0x7fe11799c799 [ 567.056144][T29083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.056163][T29083] RSP: 002b:00007fe118790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 567.056184][T29083] RAX: ffffffffffffffda RBX: 00007fe117c15fa0 RCX: 00007fe11799c799 [ 567.056199][T29083] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 567.056212][T29083] RBP: 00007fe117a32c99 R08: 0000000000000004 R09: 0000000000000000 [ 567.056225][T29083] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.056238][T29083] R13: 00007fe117c16038 R14: 00007fe117c15fa0 R15: 00007ffeb18cef48 [ 567.056270][T29083] [ 567.056279][T29083] Mem-Info: [ 567.350313][T19417] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.377945][T19417] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.387897][T16550] IPVS: starting estimator thread 0... [ 567.397735][T29083] active_anon:6694 inactive_anon:0 isolated_anon:0 [ 567.397735][T29083] active_file:3283 inactive_file:40135 isolated_file:0 [ 567.397735][T29083] unevictable:768 dirty:63 writeback:0 [ 567.397735][T29083] slab_reclaimable:13447 slab_unreclaimable:116782 [ 567.397735][T29083] mapped:30861 shmem:1695 pagetables:1726 [ 567.397735][T29083] sec_pagetables:0 bounce:0 [ 567.397735][T29083] kernel_misc_reclaimable:0 [ 567.397735][T29083] free:1235949 free_pcp:24863 free_cma:0 [ 567.449788][T29090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6255'. [ 567.469307][ T5830] Bluetooth: hci0: command tx timeout [ 567.513690][T29067] syzkaller0: entered promiscuous mode [ 567.521115][T29067] syzkaller0: entered allmulticast mode [ 567.531357][T29083] Node 0 active_anon:29976kB inactive_anon:0kB active_file:13132kB inactive_file:160336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85884kB dirty:248kB writeback:0kB shmem:8744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15792kB pagetables:6660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 567.564904][T29092] IPVS: using max 37 ests per chain, 88800 per kthread [ 567.584439][T29090] hsr_slave_0 (unregistering): left promiscuous mode [ 567.609563][T29083] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 567.634067][T28987] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.657203][T29083] Node 0 DMA free:11176kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:88kB local_pcp:12kB free_cma:0kB [ 567.664891][T28987] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.737681][T28987] bridge_slave_0: entered allmulticast mode [ 567.740067][T29083] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 567.746764][T28987] bridge_slave_0: entered promiscuous mode [ 567.777205][T29083] Node 0 DMA32 free:1333860kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35676kB inactive_anon:0kB active_file:13132kB inactive_file:160336kB unevictable:1536kB writepending:248kB zspages:0kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:28652kB local_pcp:13796kB free_cma:0kB [ 567.784570][T28987] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.848562][T29083] lowmem_reserve[]: 0 0 0 0 0 [ 567.859981][T29083] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 567.871349][T28987] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.897975][T28987] bridge_slave_1: entered allmulticast mode [ 567.905101][T29083] lowmem_reserve[]: 0 0 0 0 0 [ 567.910546][T29083] Node 1 Normal free:3632284kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:67020kB local_pcp:33272kB free_cma:0kB [ 567.946614][T28987] bridge_slave_1: entered promiscuous mode [ 568.018515][T29083] lowmem_reserve[]: 0 0 0 0 0 [ 568.029438][T29083] Node 0 DMA: 2*4kB (U) 0*8kB 2*16kB (U) 2*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11176kB [ 568.068497][T29083] Node 0 DMA32: 7730*4kB (UM) 6694*8kB (UE) 3463*16kB (UME) 822*32kB (UME) 226*64kB (UME) 309*128kB (UME) 688*256kB (UM) 519*512kB (UME) 345*1024kB (UE) 151*2048kB (UM) 2*4096kB (U) = 1332776kB [ 568.108398][T29083] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 568.139348][T29083] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 19*16kB (UM) 12*32kB (UM) 10*64kB (UM) 6*128kB (UM) 7*256kB (UM) 6*512kB (UM) 4*1024kB (UM) 4*2048kB (U) 888*4096kB (UM) = 3656540kB [ 568.187197][T29083] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 568.207412][T29083] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 568.227659][T29083] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 568.258399][T29083] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 568.277934][T29083] 47638 total pagecache pages [ 568.282813][T29083] 0 pages in swap cache [ 568.286979][T29083] Free swap = 124996kB [ 568.298451][T29083] Total swap = 124996kB [ 568.308526][T29083] 2097051 pages RAM [ 568.312406][T29083] 0 pages HighMem/MovableOnly [ 568.326853][T29083] 427026 pages reserved [ 568.338406][T29083] 0 pages cma reserved [ 568.839775][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.847796][ C1] lec:lec_tx_timeout: lec0 [ 568.853752][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 569.187244][T29117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6261'. [ 569.559901][ T5830] Bluetooth: hci0: command tx timeout [ 570.446907][T28987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.457173][T29125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6263'. [ 570.566981][T28987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.662262][T29134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.691159][T29132] ip6tnl1: entered allmulticast mode [ 570.696876][T19417] bridge_slave_1: left allmulticast mode [ 570.706639][T19417] bridge_slave_1: left promiscuous mode [ 570.713857][T19417] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.723911][T19417] bridge_slave_0: left allmulticast mode [ 570.730102][T19417] bridge_slave_0: left promiscuous mode [ 570.736525][T19417] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.765874][T29147] netlink: 'syz.3.6270': attribute type 1 has an invalid length. [ 570.957488][T19417] .` (unregistering): (slave bridge0): Releasing backup interface [ 571.132784][T19417] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 571.141233][T19417] bridge4 (unregistering): left promiscuous mode [ 571.182994][T19417] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.194886][T19417] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.205016][T19417] .` (unregistering): Released all slaves [ 571.214563][T19417] bond0 (unregistering): Released all slaves [ 571.230888][T19417] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 571.238955][T19417] vcan1: left promiscuous mode [ 571.245006][T19417] bond1 (unregistering): Released all slaves [ 571.258229][T19417] bond2 (unregistering): Released all slaves [ 571.275197][T19417] bond3 (unregistering): Released all slaves [ 571.287729][T19417] bond4 (unregistering): Released all slaves [ 571.301776][T19417] bond5 (unregistering): Released all slaves [ 571.319723][T19417] bond6 (unregistering): Released all slaves [ 571.340235][T19417] bond7 (unregistering): Released all slaves [ 571.416584][T29141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6268'. [ 571.530022][T29148] bond1: (slave ip6gretap1): making interface the new active one [ 571.539857][T29148] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 571.542399][T29154] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6272'. [ 571.555164][T29148] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 571.567003][T29148] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 571.591946][T28987] team0: Port device team_slave_0 added [ 571.598115][T19417] 9: left promiscuous mode [ 571.630566][ T5830] Bluetooth: hci0: command tx timeout [ 571.679466][T28987] team0: Port device team_slave_1 added [ 571.703423][T29165] netlink: 'syz.3.6274': attribute type 1 has an invalid length. [ 571.807215][T29172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6273'. [ 571.837017][T29165] bond2: entered promiscuous mode [ 571.851469][T29177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.866681][T29165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.895681][T19417] tipc: Left network mode [ 571.916812][T28987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.924097][T28987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.964262][T28987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.065691][T29177] bond2: (slave bridge2): making interface the new active one [ 572.088397][T29177] bridge2: entered promiscuous mode [ 572.114912][T29177] bridge2: left promiscuous mode [ 572.164377][T29190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6278'. [ 572.219298][T28987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.226388][T28987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.257138][T28987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.469939][T29204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6280'. [ 572.481147][T28987] hsr_slave_0: entered promiscuous mode [ 572.496409][T28987] hsr_slave_1: entered promiscuous mode [ 572.555627][T29208] : entered promiscuous mode [ 572.753224][T29219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.893488][T19417] hsr_slave_0: left promiscuous mode [ 572.911054][T19417] hsr_slave_1: left promiscuous mode [ 572.936165][T19417] veth1_macvtap: left promiscuous mode [ 572.947275][T29232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6284'. [ 572.957168][T19417] veth0_macvtap: left promiscuous mode [ 572.965539][T19417] veth1_vlan: left promiscuous mode [ 572.971428][T19417] veth0_vlan: left promiscuous mode [ 573.127708][T19417] pim6reg527 (unregistering): left allmulticast mode [ 573.440206][T29243] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6290'. [ 573.566909][T29248] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 573.709002][ T5830] Bluetooth: hci0: command tx timeout [ 573.868550][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 573.876583][ C1] lec:lec_tx_timeout: lec0 [ 573.882403][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 574.105660][T29277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6297'. [ 574.150855][T29279] netlink: 'syz.4.6299': attribute type 1 has an invalid length. [ 574.256296][T29285] RDS: rds_bind could not find a transport for 600:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 574.438993][T29296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6302'. [ 574.448747][T29296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6302'. [ 574.515361][T19417] IPVS: stop unused estimator thread 0... [ 574.733469][T28987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 574.785423][T28987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 574.814669][T28987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 574.851914][T28987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 575.141382][T28987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.195761][T28987] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.222465][T25384] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.229665][T25384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.282008][T25384] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.289199][T25384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.987885][T28987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.021744][T29418] netlink: 'syz.4.6326': attribute type 1 has an invalid length. [ 576.083135][T29420] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 576.133100][T29423] netlink: 'syz.1.6328': attribute type 11 has an invalid length. [ 576.150493][T28987] veth0_vlan: entered promiscuous mode [ 576.157956][T29423] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6328'. [ 576.206185][T28987] veth1_vlan: entered promiscuous mode [ 576.318142][T29434] vlan2: entered allmulticast mode [ 576.325662][T29434] hsr0: entered allmulticast mode [ 576.331970][T29434] hsr_slave_1: entered allmulticast mode [ 576.341440][T28987] veth0_macvtap: entered promiscuous mode [ 576.381500][T29437] syzkaller1: entered promiscuous mode [ 576.387010][T29437] syzkaller1: entered allmulticast mode [ 576.407015][T28987] veth1_macvtap: entered promiscuous mode [ 576.446155][T28987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.454979][T29441] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 576.482786][T28987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.522382][T19417] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.539553][T19417] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.568274][T19417] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.605289][T19417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.652291][T29454] netlink: 'syz.3.6336': attribute type 10 has an invalid length. [ 576.672797][T29455] netlink: 'syz.3.6336': attribute type 10 has an invalid length. [ 576.753242][T29454] team0: Device ipvlan1 failed to register rx_handler [ 576.780191][T29455] team0: Device ipvlan1 failed to register rx_handler [ 576.988950][T25393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.996826][T25393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.124286][T25393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.156550][T25393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.297697][T29490] IPVS: ip_vs_edit_dest(): server weight less than zero [ 577.309320][ T797] IPVS: starting estimator thread 0... [ 577.399444][T29491] IPVS: using max 35 ests per chain, 84000 per kthread [ 577.436821][T29502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6229'. [ 577.480506][T29502] netlink: 'syz.0.6229': attribute type 5 has an invalid length. [ 577.529710][T29502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6229'. [ 577.686523][T29513] netlink: 'syz.4.6350': attribute type 3 has an invalid length. [ 577.687573][T29515] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6351'. [ 577.715475][T29513] netlink: 'syz.4.6350': attribute type 3 has an invalid length. [ 577.772140][T29515] netlink: 'syz.3.6351': attribute type 1 has an invalid length. [ 577.839182][T29515] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6351'. [ 577.900437][T29253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 577.912272][T29253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 577.922493][T29253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 577.928707][T29519] netlink: 'syz.0.6352': attribute type 4 has an invalid length. [ 577.958880][T29253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 577.973018][T29253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 578.080850][T29536] sctp: [Deprecated]: syz.1.6355 (pid 29536) Use of int in max_burst socket option. [ 578.080850][T29536] Use struct sctp_assoc_value instead [ 578.182991][T17953] bond0: (slave syz_tun): Releasing backup interface [ 578.234530][T29546] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6358'. [ 578.307093][T29546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6358'. [ 578.442916][T29536] syzkaller0: entered promiscuous mode [ 578.448529][T29536] syzkaller0: entered allmulticast mode [ 578.622757][T29568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6362'. [ 578.899881][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 578.907955][ C1] lec:lec_tx_timeout: lec0 [ 578.913208][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 580.042029][ T5830] Bluetooth: hci3: command tx timeout [ 580.382986][T29587] netlink: 'syz.4.6363': attribute type 3 has an invalid length. [ 580.740486][T29611] netlink: 816 bytes leftover after parsing attributes in process `syz.3.6370'. [ 580.762752][T29527] chnl_net:caif_netlink_parms(): no params data found [ 581.030648][T29527] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.037815][T29527] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.180652][T29527] bridge_slave_0: entered allmulticast mode [ 581.196954][T29527] bridge_slave_0: entered promiscuous mode [ 581.227344][T29527] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.280947][T29527] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.299468][T29527] bridge_slave_1: entered allmulticast mode [ 581.328551][T29527] bridge_slave_1: entered promiscuous mode [ 581.483448][T29527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.564439][T29527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.740546][T29527] team0: Port device team_slave_0 added [ 581.785884][T29527] team0: Port device team_slave_1 added [ 581.956531][T29527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.981162][T29527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.036448][T29527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.100659][T29527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.107635][T29527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.150950][ T5830] Bluetooth: hci3: command tx timeout [ 582.182684][T29527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.200692][T29688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 582.207923][T29688] IPv6: NLM_F_CREATE should be set when creating new route [ 582.215211][T29688] IPv6: NLM_F_CREATE should be set when creating new route [ 582.222480][T29688] IPv6: NLM_F_CREATE should be set when creating new route [ 582.236615][T29527] hsr_slave_0: entered promiscuous mode [ 582.243181][T29527] hsr_slave_1: entered promiscuous mode [ 582.283919][T29527] debugfs: 'hsr0' already exists in 'hsr' [ 582.297413][T29697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6388'. [ 582.301845][T29527] Cannot create hsr debugfs directory [ 582.391517][T29697] bridge0: entered promiscuous mode [ 582.442923][T29697] macsec1: entered promiscuous mode [ 582.469457][T29697] macsec1: entered allmulticast mode [ 582.488492][T29697] bridge0: entered allmulticast mode [ 582.512537][T29697] bridge0: port 3(macsec1) entered blocking state [ 582.545450][T29716] validate_nla: 1 callbacks suppressed [ 582.545467][T29716] netlink: 'syz.1.6391': attribute type 16 has an invalid length. [ 582.558662][T29697] bridge0: port 3(macsec1) entered disabled state [ 582.592597][T29716] netlink: 'syz.1.6391': attribute type 17 has an invalid length. [ 582.617810][T29717] netlink: 'syz.1.6391': attribute type 16 has an invalid length. [ 582.625703][T29717] netlink: 'syz.1.6391': attribute type 17 has an invalid length. [ 582.634001][T29697] bridge0: left allmulticast mode [ 582.645776][T29697] bridge0: left promiscuous mode [ 582.715067][T29729] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 582.888094][T29716] syz_tun: left promiscuous mode [ 582.914995][T29738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6394'. [ 582.920539][T29716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.935522][T29716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 582.952238][T29743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6395'. [ 582.963841][T29717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 583.009455][T29743] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6395'. [ 583.060011][T29743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6395'. [ 583.223270][T29527] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.268915][T29527] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.299091][T29527] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 583.412485][T29527] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.424203][T29527] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.437955][T29527] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 583.507212][T29527] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.523219][T29527] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.533237][T29527] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 583.572897][T29527] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.582745][T29527] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.592790][T29527] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 583.928690][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 583.936783][ C1] lec:lec_tx_timeout: lec0 [ 583.942847][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 584.188524][ T5830] Bluetooth: hci3: command tx timeout [ 585.844732][T29738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.868251][T29527] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 585.950999][T29527] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 585.995365][T29527] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 586.019342][T29819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6405'. [ 586.035461][T29527] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 586.105262][ T29] audit: type=1800 audit(1773777432.325:7): pid=29828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6406" name="memory.events" dev="tmpfs" ino=423 res=0 errno=0 [ 586.142657][T29819] macvtap1: entered promiscuous mode [ 586.150651][T29819] vlan0: entered promiscuous mode [ 586.156034][T29819] macvtap1: entered allmulticast mode [ 586.167623][T29819] vlan0: entered allmulticast mode [ 586.173142][T29819] veth0_vlan: entered allmulticast mode [ 586.195347][T29815] netlink: 'syz.1.6403': attribute type 4 has an invalid length. [ 586.276789][ T5830] Bluetooth: hci3: command tx timeout [ 586.305310][T29841] tipc: Started in network mode [ 586.315345][T29841] tipc: Node identity ac14140f, cluster identity 4711 [ 586.323990][T29841] tipc: New replicast peer: 255.255.255.255 [ 586.330941][T29841] tipc: Enabled bearer , priority 10 [ 586.372245][T29841] bond1: entered promiscuous mode [ 586.387547][T29841] bond1: entered allmulticast mode [ 586.394568][T29841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 586.576001][T29527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.640322][T29527] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.661261][T29865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6415'. [ 586.676637][T25393] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.683851][T25393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.716883][T25393] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.720086][T29868] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 586.724166][T25393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.756778][T29865] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 586.759555][T29877] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6417'. [ 586.915502][T29884] IPVS: Error connecting to the multicast addr [ 587.125826][T29527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.264931][T29909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6426'. [ 587.284161][T29527] veth0_vlan: entered promiscuous mode [ 587.314393][T29527] veth1_vlan: entered promiscuous mode [ 587.384687][T29527] veth0_macvtap: entered promiscuous mode [ 587.396231][T29914] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 587.413556][T29527] veth1_macvtap: entered promiscuous mode [ 587.455851][ T5189] tipc: Node number set to 2886997007 [ 587.493411][T29527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.515411][T29920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.517650][T29527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.543152][T25375] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.581273][T25375] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.610949][T25375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.649928][T25384] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.779095][T25393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.804545][T25393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.813465][T29934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6435'. [ 587.872736][T29936] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6436'. [ 587.881569][T25393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.901208][T25393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.920056][T29936] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.927442][T29936] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.004579][T29945] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6436'. [ 588.242579][T29958] netlink: 'syz.4.6444': attribute type 8 has an invalid length. [ 588.290045][T29958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6444'. [ 588.351191][T29958] bond0: entered promiscuous mode [ 588.413813][T29958] geneve2: entered promiscuous mode [ 588.453427][T29958] gretap0: entered promiscuous mode [ 588.501413][T29958] bond0: left promiscuous mode [ 588.506243][T29958] geneve2: left promiscuous mode [ 588.534730][T29253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 588.545099][T29958] gretap0: left promiscuous mode [ 588.553110][T29253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 588.562841][T29253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 588.573583][T29253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 588.584004][T29253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 588.837443][T29991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6451'. [ 588.851467][T29991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6451'. [ 588.860765][T29991] netlink: 'syz.4.6451': attribute type 12 has an invalid length. [ 588.869959][T29991] netlink: 'syz.4.6451': attribute type 11 has an invalid length. [ 588.960104][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 588.968142][ C1] lec:lec_tx_timeout: lec0 [ 588.974275][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 588.994334][ T5830] Bluetooth: hci3: command tx timeout [ 589.096683][T25394] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.129522][T25394] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.210745][T30011] pim6reg: entered allmulticast mode [ 589.245599][T30019] pim6reg: left allmulticast mode [ 589.269364][T25394] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.279281][T25394] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.377136][T25394] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.455375][T25394] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.539848][T25394] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.562039][T25394] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.810889][T30056] sctp: [Deprecated]: syz.0.6467 (pid 30056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 589.810889][T30056] Use struct sctp_sack_info instead [ 589.857998][T30067] netlink: 'syz.2.6470': attribute type 10 has an invalid length. [ 589.877501][T29973] chnl_net:caif_netlink_parms(): no params data found [ 589.885395][T30056] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 589.942557][T30067] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 590.180291][T30077] netlink: 'syz.0.6472': attribute type 1 has an invalid length. [ 590.680397][ T5830] Bluetooth: hci1: command tx timeout [ 590.838000][T25394] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 590.846725][T25394] bond0 (unregistering): Released all slaves [ 590.857177][T25394] bond1 (unregistering): Released all slaves [ 590.874326][T25394] bond2 (unregistering): Released all slaves [ 590.887220][T25394] bond3 (unregistering): Released all slaves [ 590.900559][T25394] bond4 (unregistering): Released all slaves [ 590.916356][T25394] bond5 (unregistering): Released all slaves [ 590.934708][T25394] bond6 (unregistering): Released all slaves [ 590.947625][T25394] bond7 (unregistering): Released all slaves [ 590.961175][T25394] bond8 (unregistering): Released all slaves [ 590.977032][T25394] bond9 (unregistering): Released all slaves [ 591.000217][T25394] bond10 (unregistering): (slave vxcan3): Releasing backup interface [ 591.010469][T25394] bond10 (unregistering): Released all slaves [ 591.075405][T30090] netlink: 'syz.3.6474': attribute type 1 has an invalid length. [ 591.135665][T30102] __nla_validate_parse: 3 callbacks suppressed [ 591.135685][T30102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6475'. [ 591.175125][T30101] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6475'. [ 591.216193][T30101] netlink: 21 bytes leftover after parsing attributes in process `syz.0.6475'. [ 591.235952][T30101] netlink: 21 bytes leftover after parsing attributes in process `syz.0.6475'. [ 591.284703][T25394] tipc: Disabling bearer [ 591.290473][T25394] tipc: Left network mode [ 591.326655][T29973] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.336022][T29973] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.343529][T29973] bridge_slave_0: entered allmulticast mode [ 591.356774][T29973] bridge_slave_0: entered promiscuous mode [ 591.376817][T29973] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.384908][T29973] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.407551][T29973] bridge_slave_1: entered allmulticast mode [ 591.415714][T29973] bridge_slave_1: entered promiscuous mode [ 591.450538][T30106] bond1: Removing last ns target with arp_interval on [ 591.494655][T29973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.512869][T29973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.724637][T29973] team0: Port device team_slave_0 added [ 591.797105][T29973] team0: Port device team_slave_1 added [ 591.816769][T30128] ipt_ECN: cannot use operation on non-tcp rule [ 592.115451][T29973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.147674][T29973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.160804][T30150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6484'. [ 592.210933][T29973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.281885][T30158] netlink: 'syz.2.6486': attribute type 21 has an invalid length. [ 592.300637][T30156] xt_l2tp: wrong L2TP version: 0 [ 592.318831][T30158] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6486'. [ 592.387291][T29973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.395713][T29973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.424961][T30161] netlink: 'syz.3.6487': attribute type 9 has an invalid length. [ 592.441430][T29973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.466616][T30158] netlink: 'syz.2.6486': attribute type 5 has an invalid length. [ 592.476649][T30158] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6486'. [ 592.523164][T30166] netlink: 5072 bytes leftover after parsing attributes in process `syz.4.6488'. [ 592.621626][T30171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6489'. [ 592.623130][T30173] sctp: [Deprecated]: syz.4.6490 (pid 30173) Use of int in max_burst socket option. [ 592.623130][T30173] Use struct sctp_assoc_value instead [ 592.663718][T30170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6491'. [ 592.717317][T29973] hsr_slave_0: entered promiscuous mode [ 592.745613][T29973] hsr_slave_1: entered promiscuous mode [ 592.756546][T29973] debugfs: 'hsr0' already exists in 'hsr' [ 592.758456][ T5830] Bluetooth: hci1: command tx timeout [ 592.782391][T29973] Cannot create hsr debugfs directory [ 593.026595][T25394] hsr_slave_0: left promiscuous mode [ 593.042538][T25394] hsr_slave_1: left promiscuous mode [ 593.141746][T25394] pimreg3 (unregistering): left allmulticast mode [ 593.390963][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.868821][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.165794][T30239] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 594.434092][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.476921][T25394] IPVS: stop unused estimator thread 0... [ 594.490972][T30251] veth1_macvtap: left promiscuous mode [ 594.505472][T30251] macsec0: entered promiscuous mode [ 594.529936][T30251] macsec0: entered allmulticast mode [ 594.587958][T30250] veth1_macvtap: entered promiscuous mode [ 594.604872][T30250] veth1_macvtap: entered allmulticast mode [ 594.617072][T30250] macsec0: left promiscuous mode [ 594.622433][T30250] macsec0: left allmulticast mode [ 594.627605][T30250] veth1_macvtap: left allmulticast mode [ 594.742660][T30254] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 594.748371][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 594.758639][ C1] lec:lec_tx_timeout: lec0 [ 594.764406][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 594.765270][T30254] syzkaller0: entered promiscuous mode [ 594.791145][T30254] syzkaller0: entered allmulticast mode [ 594.832026][ T5830] Bluetooth: hci1: command tx timeout [ 594.985519][T25376] tipc: Subscription rejected, illegal request [ 595.355418][T29973] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 595.404809][T29973] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 595.415099][T30297] netlink: 'syz.0.6515': attribute type 61 has an invalid length. [ 595.435757][T29973] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 595.459752][T29973] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 595.470054][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.517801][T30300] netlink: 'syz.4.6516': attribute type 1 has an invalid length. [ 595.602581][T16549] IPVS: starting estimator thread 0... [ 595.721212][T30312] IPVS: using max 45 ests per chain, 108000 per kthread [ 595.826659][T29973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.927143][T29973] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.995793][T25384] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.003007][T25384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.077612][T25375] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.084801][T25375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.310742][T30339] netlink: 'syz.0.6525': attribute type 3 has an invalid length. [ 596.508811][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.852476][T30367] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 596.908656][ T5830] Bluetooth: hci1: command tx timeout [ 596.917141][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.029441][T30377] __nla_validate_parse: 8 callbacks suppressed [ 597.029462][T30377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6529'. [ 597.090676][T29973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.142766][T30377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6529'. [ 597.162234][T30386] openvswitch: netlink: IP tunnel dst address not specified [ 597.217444][T29973] veth0_vlan: entered promiscuous mode [ 597.291575][T29973] veth1_vlan: entered promiscuous mode [ 597.403320][T29973] veth0_macvtap: entered promiscuous mode [ 597.421039][T29973] veth1_macvtap: entered promiscuous mode [ 597.505765][T29973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.549449][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.570085][T29973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.637438][T25384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.655303][T25384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.681593][T25384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.765008][T25384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.790322][T30420] netlink: 'syz.4.6539': attribute type 3 has an invalid length. [ 597.813735][T30422] sctp: [Deprecated]: syz.3.6540 (pid 30422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.813735][T30422] Use struct sctp_sack_info instead [ 597.960008][T30422] netlink: 'syz.3.6540': attribute type 1 has an invalid length. [ 598.004458][T25384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.030358][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.050905][T25384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.113996][T19417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.138171][T19417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.347307][T30453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6547'. [ 598.378883][T30453] block nbd0: Unsupported socket: should be TCP or UNIX. [ 598.452685][T30458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6549'. [ 598.541913][T30465] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6549'. [ 598.589040][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.629298][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.788490][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 599.796529][ C1] lec:lec_tx_timeout: lec0 [ 599.801561][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 600.679899][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.070517][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.229996][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.710379][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.749210][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.790751][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.268830][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.808517][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 604.816531][ C1] lec:lec_tx_timeout: lec0 [ 604.821513][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 604.832543][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.868794][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.908986][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.309142][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.948742][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.988656][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.828431][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 609.836553][ C1] lec:lec_tx_timeout: lec0 [ 609.841754][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 610.029239][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.359181][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.068871][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.473522][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.111036][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.148995][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.199223][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.511287][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.848739][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 614.856807][ C1] lec:lec_tx_timeout: lec0 [ 614.861396][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 615.228776][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.269728][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.308720][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.550252][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.349026][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.148701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.388680][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.868941][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 619.876979][ C1] lec:lec_tx_timeout: lec0 [ 619.881759][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 620.439477][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.589071][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.468767][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.340543][T30538] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 622.409516][T30532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6554'. [ 622.500935][T30556] netlink: 'syz.3.6559': attribute type 3 has an invalid length. [ 622.509190][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.627142][T30566] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 622.635860][T30567] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 622.649632][T30567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6562'. [ 622.731213][T30576] netlink: 'syz.1.6565': attribute type 23 has an invalid length. [ 622.839588][T30586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6567'. [ 622.853052][T30586] netlink: 'syz.1.6567': attribute type 16 has an invalid length. [ 622.862587][T30586] netlink: 'syz.1.6567': attribute type 17 has an invalid length. [ 622.892193][T30586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.935907][T30591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6569'. [ 623.344138][T30608] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 623.352147][T30608] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 623.360050][T30608] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 623.367927][T30608] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 623.375852][T30608] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 623.486914][T30616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6579'. [ 623.519405][T30616] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6579'. [ 623.673754][T30626] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 623.833042][T30640] macsec1: entered promiscuous mode [ 623.994166][T30644] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6588'. [ 624.044296][T30649] netlink: 'syz.0.6590': attribute type 1 has an invalid length. [ 624.109729][T30658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6592'. [ 624.150775][T30649] bond2: (slave gretap1): making interface the new active one [ 624.159691][T30649] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 624.255314][T30667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6595'. [ 624.291537][T30659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6592'. [ 624.302018][T25384] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.378521][T25384] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.395388][T25384] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.407654][T25384] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.737093][T30701] netlink: 'syz.3.6607': attribute type 3 has an invalid length. [ 624.749967][T30701] netlink: 'syz.3.6607': attribute type 3 has an invalid length. [ 624.898851][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 624.906938][ C1] lec:lec_tx_timeout: lec0 [ 624.912326][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 624.924124][T30714] netlink: 'syz.3.6611': attribute type 1 has an invalid length. [ 625.070728][T30720] netlink: 'syz.3.6611': attribute type 1 has an invalid length. [ 625.080119][T30720] netlink: 'syz.3.6611': attribute type 2 has an invalid length. [ 625.788938][T25384] wlan1: Trigger new scan to find an IBSS to join [ 625.954256][T30780] netlink: 'syz.4.6631': attribute type 11 has an invalid length. [ 626.514286][T30827] syzkaller0: entered promiscuous mode [ 626.520303][T30827] syzkaller0: entered allmulticast mode [ 626.671125][ T5189] net_ratelimit: 56 callbacks suppressed [ 626.671144][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.684926][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.779962][T30847] openvswitch: netlink: Unknown nsh attribute 0 [ 627.163970][T30869] tipc: Enabling of bearer rejected, failed to enable media [ 627.388915][T30882] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 627.476846][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.575816][T30894] __nla_validate_parse: 17 callbacks suppressed [ 627.575836][T30894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6662'. [ 627.709428][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.842448][T30908] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6665'. [ 627.886152][T30913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6664'. [ 627.896799][T30913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6664'. [ 627.960236][T30906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6664'. [ 628.060951][T30922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6668'. [ 628.247549][T30934] bridge_slave_0: left allmulticast mode [ 628.271624][T30934] bridge_slave_0: left promiscuous mode [ 628.280894][T30934] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.330621][T30934] bridge_slave_1: left allmulticast mode [ 628.336497][T30934] bridge_slave_1: left promiscuous mode [ 628.356032][T30934] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.368269][T30945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6676'. [ 628.405007][T30934] bond0: (slave bond_slave_0): Releasing backup interface [ 628.434334][T30934] bond0: (slave bond_slave_1): Releasing backup interface [ 628.552765][T30934] team0: Port device team_slave_0 removed [ 628.570530][T30934] team0: Port device team_slave_1 removed [ 628.585808][T30934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.603712][T30934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.615578][T30934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.624554][T30934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.634860][T30934] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 628.681279][T30938] team0: Mode changed to "loadbalance" [ 628.752237][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.757733][T25384] wlan1: Trigger new scan to find an IBSS to join [ 628.862097][T30976] validate_nla: 2 callbacks suppressed [ 628.862116][T30976] netlink: 'syz.2.6682': attribute type 13 has an invalid length. [ 628.939729][T30976] gretap0: refused to change device tx_queue_len [ 628.947388][T30976] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 629.001566][T30984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.041618][T30987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6686'. [ 629.062304][T30991] netlink: 'syz.4.6687': attribute type 1 has an invalid length. [ 629.082698][T30987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6686'. [ 629.092412][T30987] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6686'. [ 629.110683][T30994] x_tables: duplicate underflow at hook 1 [ 629.121940][T30996] ip6gre1: entered allmulticast mode [ 629.799102][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.928363][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 629.936522][ C1] lec:lec_tx_timeout: lec0 [ 629.942502][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 630.005318][T31046] netlink: 'syz.2.6702': attribute type 3 has an invalid length. [ 630.022577][T31046] netlink: 'syz.2.6702': attribute type 3 has an invalid length. [ 630.341910][T31059] netlink: 'syz.3.6705': attribute type 1 has an invalid length. [ 630.414000][T25394] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 630.818933][T31093] xt_ecn: cannot match TCP bits for non-tcp packets [ 630.870167][T31096] netlink: 'syz.3.6714': attribute type 3 has an invalid length. [ 630.878192][T31096] netlink: 'syz.3.6714': attribute type 3 has an invalid length. [ 631.015365][T31104] syzkaller0: entered promiscuous mode [ 631.023774][T31104] syzkaller0: entered allmulticast mode [ 631.736342][T31122] sctp: [Deprecated]: syz.4.6722 (pid 31122) Use of int in maxseg socket option. [ 631.736342][T31122] Use struct sctp_assoc_value instead [ 631.790628][T25375] wlan1: Trigger new scan to find an IBSS to join [ 631.868754][ T797] net_ratelimit: 2 callbacks suppressed [ 631.868772][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.698928][T19417] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 632.909276][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.560013][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.599822][T31077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.776501][T31136] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 633.786937][T31136] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 633.793000][T31137] netlink: 'syz.1.6727': attribute type 3 has an invalid length. [ 633.804629][T31137] netlink: 'syz.1.6727': attribute type 3 has an invalid length. [ 633.824955][T31136] __nla_validate_parse: 12 callbacks suppressed [ 633.824982][T31136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6725'. [ 633.949344][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.956569][T31142] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 633.975112][T31142] bond2 (unregistering): Released all slaves [ 634.032707][T31143] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 634.055639][T31143] bond2 (unregistering): Released all slaves [ 634.202468][T31149] syzkaller0: entered promiscuous mode [ 634.208140][T31149] syzkaller0: entered allmulticast mode [ 634.260692][T31164] syzkaller0: entered promiscuous mode [ 634.267593][T31164] syzkaller0: entered allmulticast mode [ 634.289615][T31164] FAULT_INJECTION: forcing a failure. [ 634.289615][T31164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.307277][T31164] CPU: 1 UID: 0 PID: 31164 Comm: syz.4.6735 Not tainted syzkaller #0 PREEMPT(full) [ 634.307302][T31164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.307323][T31164] Call Trace: [ 634.307331][T31164] [ 634.307339][T31164] dump_stack_lvl+0xe8/0x150 [ 634.307369][T31164] should_fail_ex+0x412/0x560 [ 634.307398][T31164] _copy_from_user+0x2d/0xb0 [ 634.307426][T31164] __copy_msghdr+0x3c5/0x5b0 [ 634.307449][T31164] ___sys_sendmsg+0x213/0x360 [ 634.307473][T31164] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.307523][T31164] ? __fget_files+0x2a/0x420 [ 634.307549][T31164] ? __fget_files+0x3a0/0x420 [ 634.307582][T31164] __x64_sys_sendmsg+0x1bd/0x2a0 [ 634.307603][T31164] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.307630][T31164] ? __pfx_ksys_write+0x10/0x10 [ 634.307660][T31164] do_syscall_64+0x14d/0xf80 [ 634.307677][T31164] ? trace_irq_disable+0x3b/0x150 [ 634.307701][T31164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.307719][T31164] ? clear_bhb_loop+0x40/0x90 [ 634.307742][T31164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.307758][T31164] RIP: 0033:0x7fe11799c799 [ 634.307776][T31164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.307791][T31164] RSP: 002b:00007fe118790028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.307810][T31164] RAX: ffffffffffffffda RBX: 00007fe117c15fa0 RCX: 00007fe11799c799 [ 634.307823][T31164] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000005 [ 634.307835][T31164] RBP: 00007fe118790090 R08: 0000000000000000 R09: 0000000000000000 [ 634.307846][T31164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.307857][T31164] R13: 00007fe117c16038 R14: 00007fe117c15fa0 R15: 00007ffeb18cef48 [ 634.307885][T31164] [ 634.504033][T31176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6734'. [ 634.958370][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 634.966494][ C1] lec:lec_tx_timeout: lec0 [ 634.971571][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 634.991978][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.028937][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.573571][T31190] netlink: 'syz.2.6742': attribute type 3 has an invalid length. [ 636.575692][T31205] Bluetooth: MGMT ver 1.23 [ 636.589116][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.589490][T31190] netlink: 'syz.2.6742': attribute type 3 has an invalid length. [ 636.623809][T31198] netlink: 'syz.4.6745': attribute type 10 has an invalid length. [ 636.644298][T31208] syzkaller0: entered promiscuous mode [ 636.652263][T31208] syzkaller0: entered allmulticast mode [ 636.666338][T31208] TC_ACT_REPEAT abuse ? [ 636.684272][T31198] syz_tun: entered promiscuous mode [ 636.706852][T31198] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 637.070376][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.159325][T31240] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 637.173913][T31240] syzkaller0: entered promiscuous mode [ 637.179543][T31240] syzkaller0: entered allmulticast mode [ 637.186656][T31242] netlink: 'syz.0.6760': attribute type 1 has an invalid length. [ 637.232532][T31242] 8021q: adding VLAN 0 to HW filter on device bond3 [ 637.264192][T31242] bond3: (slave veth0_to_bond): making interface the new active one [ 637.274302][T31242] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 637.307557][T31242] netlink: 'syz.0.6760': attribute type 10 has an invalid length. [ 637.316751][T31257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6761'. [ 637.331449][T31257] bridge_slave_1: left allmulticast mode [ 637.337715][T31257] bridge_slave_1: left promiscuous mode [ 637.346575][T31257] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.357143][T31257] bridge_slave_0: left allmulticast mode [ 637.368251][T31257] bridge_slave_0: left promiscuous mode [ 637.375040][T31257] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.375124][T31260] netlink: 'syz.4.6764': attribute type 1 has an invalid length. [ 637.409947][T31260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6764'. [ 637.460525][T31242] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 637.471602][T31261] netlink: 'syz.1.6762': attribute type 3 has an invalid length. [ 637.481509][T31261] netlink: 'syz.1.6762': attribute type 3 has an invalid length. [ 637.712719][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.732327][T31269] vlan2: entered promiscuous mode [ 637.745092][T31269] geneve1: entered promiscuous mode [ 637.760577][T31269] vlan2: entered allmulticast mode [ 637.772621][T31269] geneve1: entered allmulticast mode [ 638.002292][T31289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6774'. [ 638.018077][T31294] syzkaller0: entered promiscuous mode [ 638.024083][T31294] syzkaller0: entered allmulticast mode [ 638.032203][T31291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6774'. [ 638.106284][T31298] openvswitch: netlink: IP tunnel dst address not specified [ 638.117706][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.133748][T31301] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6773'. [ 638.465649][T31300] syzkaller0: entered promiscuous mode [ 638.497909][T31300] syzkaller0: entered allmulticast mode [ 638.516099][T31303] netlink: 'syz.4.6778': attribute type 3 has an invalid length. [ 638.524487][T31303] netlink: 'syz.4.6778': attribute type 3 has an invalid length. [ 639.148699][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.193814][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.381658][T31338] syzkaller0: entered promiscuous mode [ 640.387162][T31338] syzkaller0: entered allmulticast mode [ 640.649869][T31360] syzkaller0: entered promiscuous mode [ 640.661251][T31360] syzkaller0: entered allmulticast mode [ 640.690793][T31360] FAULT_INJECTION: forcing a failure. [ 640.690793][T31360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.715431][T31364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6793'. [ 640.729029][T31360] CPU: 0 UID: 0 PID: 31360 Comm: syz.2.6792 Not tainted syzkaller #0 PREEMPT(full) [ 640.729055][T31360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 640.729066][T31360] Call Trace: [ 640.729074][T31360] [ 640.729082][T31360] dump_stack_lvl+0xe8/0x150 [ 640.729115][T31360] should_fail_ex+0x412/0x560 [ 640.729144][T31360] _copy_from_iter+0x1d3/0x1670 [ 640.729171][T31360] ? sock_alloc_send_pskb+0x896/0x990 [ 640.729195][T31360] ? __pfx__copy_from_iter+0x10/0x10 [ 640.729222][T31360] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 640.729244][T31360] skb_copy_datagram_from_iter+0xf5/0x710 [ 640.729359][T31360] ? dev_get_by_index+0x22/0x2e0 [ 640.729402][T31360] ? skb_put+0x11b/0x210 [ 640.729429][T31360] packet_sendmsg+0x37e4/0x50f0 [ 640.729502][T31360] ? __lock_acquire+0x6b5/0x2cf0 [ 640.729549][T31360] ? aa_sk_perm+0x6d5/0x900 [ 640.729570][T31360] ? __pfx_packet_sendmsg+0x10/0x10 [ 640.729599][T31360] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 640.729658][T31360] ? aa_sock_msg_perm+0xf1/0x1b0 [ 640.729682][T31360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 640.729706][T31360] ____sys_sendmsg+0x972/0x9f0 [ 640.729732][T31360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 640.729757][T31360] ? import_iovec+0x73/0xa0 [ 640.729783][T31360] ___sys_sendmsg+0x2a5/0x360 [ 640.729804][T31360] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.729851][T31360] ? __fget_files+0x2a/0x420 [ 640.729876][T31360] ? __fget_files+0x3a0/0x420 [ 640.729917][T31360] __x64_sys_sendmsg+0x1bd/0x2a0 [ 640.729936][T31360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 640.729961][T31360] ? __pfx_ksys_write+0x10/0x10 [ 640.729991][T31360] do_syscall_64+0x14d/0xf80 [ 640.730009][T31360] ? trace_irq_disable+0x3b/0x150 [ 640.730031][T31360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.730049][T31360] ? clear_bhb_loop+0x40/0x90 [ 640.730069][T31360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.730087][T31360] RIP: 0033:0x7f155a19c799 [ 640.730105][T31360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.730120][T31360] RSP: 002b:00007f155afbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.730139][T31360] RAX: ffffffffffffffda RBX: 00007f155a415fa0 RCX: 00007f155a19c799 [ 640.730152][T31360] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000005 [ 640.730163][T31360] RBP: 00007f155afbb090 R08: 0000000000000000 R09: 0000000000000000 [ 640.730174][T31360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.730185][T31360] R13: 00007f155a416038 R14: 00007f155a415fa0 R15: 00007ffcd0028608 [ 640.730213][T31360] [ 640.748363][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 641.004539][ C1] lec:lec_tx_timeout: lec0 [ 641.011041][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 641.023363][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.085322][T31383] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6796'. [ 641.146475][T31364] macsec1: entered promiscuous mode [ 641.154444][T31364] bridge0: entered promiscuous mode [ 641.161670][T31364] macsec1: entered allmulticast mode [ 641.166983][T31364] bridge0: entered allmulticast mode [ 641.173203][T31364] bridge0: port 3(macsec1) entered blocking state [ 641.179923][T31364] bridge0: port 3(macsec1) entered disabled state [ 641.190973][T31364] bridge0: left allmulticast mode [ 641.196101][T31364] bridge0: left promiscuous mode [ 641.210049][T31378] tipc: Enabled bearer , priority 0 [ 641.231662][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.285481][T31379] syzkaller0: entered promiscuous mode [ 641.291786][T31379] syzkaller0: entered allmulticast mode [ 641.305569][T31379] tipc: Resetting bearer [ 641.363690][T31361] tipc: Resetting bearer [ 641.432816][T31401] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6801'. [ 641.445126][T31401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6801'. [ 642.274532][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.143292][T31361] tipc: Disabling bearer [ 643.155132][T31401] bridge_slave_1: left allmulticast mode [ 643.166578][T31401] bridge_slave_1: left promiscuous mode [ 643.172964][T31401] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.211613][T31401] bridge_slave_0: left allmulticast mode [ 643.217541][T31401] bridge_slave_0: left promiscuous mode [ 643.239819][T31401] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.293443][T31418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6804'. [ 643.323684][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.355919][T31416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6803'. [ 643.487083][T31429] syzkaller0: entered promiscuous mode [ 643.493284][T31429] syzkaller0: entered allmulticast mode [ 643.542852][T31432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6808'. [ 643.553948][T31429] TC_ACT_REPEAT abuse ? [ 643.562548][T31429] FAULT_INJECTION: forcing a failure. [ 643.562548][T31429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.583929][T31429] CPU: 1 UID: 0 PID: 31429 Comm: syz.3.6807 Not tainted syzkaller #0 PREEMPT(full) [ 643.583953][T31429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.583964][T31429] Call Trace: [ 643.583972][T31429] [ 643.583980][T31429] dump_stack_lvl+0xe8/0x150 [ 643.584010][T31429] should_fail_ex+0x412/0x560 [ 643.584038][T31429] _copy_to_user+0x31/0xb0 [ 643.584058][T31429] simple_read_from_buffer+0xe1/0x170 [ 643.584086][T31429] proc_fail_nth_read+0x1bb/0x230 [ 643.584112][T31429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 643.584139][T31429] ? rw_verify_area+0x2a6/0x4d0 [ 643.584157][T31429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 643.584181][T31429] vfs_read+0x20c/0xa70 [ 643.584197][T31429] ? fdget_pos+0x246/0x320 [ 643.584224][T31429] ? __pfx___mutex_lock+0x10/0x10 [ 643.584241][T31429] ? __pfx_vfs_read+0x10/0x10 [ 643.584259][T31429] ? __fget_files+0x2a/0x420 [ 643.584287][T31429] ? __fget_files+0x3a0/0x420 [ 643.584308][T31429] ? __fget_files+0x2a/0x420 [ 643.584340][T31429] ksys_read+0x150/0x270 [ 643.584360][T31429] ? __pfx_ksys_read+0x10/0x10 [ 643.584389][T31429] do_syscall_64+0x14d/0xf80 [ 643.584404][T31429] ? trace_irq_disable+0x3b/0x150 [ 643.584443][T31429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.584462][T31429] ? clear_bhb_loop+0x40/0x90 [ 643.584483][T31429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.584499][T31429] RIP: 0033:0x7f174c75cfce [ 643.584515][T31429] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 643.584528][T31429] RSP: 002b:00007f174d5edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 643.584548][T31429] RAX: ffffffffffffffda RBX: 00007f174d5ee6c0 RCX: 00007f174c75cfce [ 643.584561][T31429] RDX: 000000000000000f RSI: 00007f174d5ee0a0 RDI: 000000000000000a [ 643.584571][T31429] RBP: 00007f174d5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 643.584582][T31429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.584593][T31429] R13: 00007f174ca16038 R14: 00007f174ca15fa0 R15: 00007ffffdc9a688 [ 643.584623][T31429] [ 643.951029][T31442] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6810'. [ 644.030085][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.249151][T31460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6814'. [ 644.353977][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.455450][T31469] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6817'. [ 644.795404][T31499] validate_nla: 1 callbacks suppressed [ 644.795426][T31499] netlink: 'syz.0.6828': attribute type 83 has an invalid length. [ 645.042414][T31518] Cannot find add_set index 0 as target [ 645.264651][T31535] xt_l2tp: v2 tid > 0xffff: 1114244 [ 645.295092][T31546] netlink: 'syz.0.6839': attribute type 3 has an invalid length. [ 645.330570][T31546] netlink: 'syz.0.6839': attribute type 1 has an invalid length. [ 645.389565][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.545789][T31568] syzkaller1: entered promiscuous mode [ 645.580778][T31568] syzkaller1: entered allmulticast mode [ 645.612358][T31571] veth3: entered promiscuous mode [ 645.617456][T31571] veth3: entered allmulticast mode [ 645.913336][T31598] __nla_validate_parse: 6 callbacks suppressed [ 645.913356][T31598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6854'. [ 646.028235][T31605] netlink: 'syz.3.6857': attribute type 4 has an invalid length. [ 646.046873][T31605] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6857'. [ 646.080138][T31605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6857'. [ 646.146110][T31612] IPVS: set_ctl: invalid protocol: 180 172.30.1.5:19999 [ 646.209274][T31619] netlink: 'syz.2.6863': attribute type 8 has an invalid length. [ 646.429573][T31629] netlink: 'syz.1.6867': attribute type 1 has an invalid length. [ 646.437680][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.446743][T31629] netlink: 212 bytes leftover after parsing attributes in process `syz.1.6867'. [ 646.456275][T31629] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6867'. [ 646.597453][T31641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6871'. [ 646.607155][T31641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6871'. [ 646.683610][T31646] netlink: 'syz.1.6874': attribute type 4 has an invalid length. [ 646.698124][T31646] netlink: 'syz.1.6874': attribute type 4 has an invalid length. [ 646.748350][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 646.756398][ C1] lec:lec_tx_timeout: lec0 [ 646.761858][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 646.849796][T31656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6877'. [ 646.992232][T31662] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6880'. [ 647.071295][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.159224][T31679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6887'. [ 647.175551][T31679] syzkaller0: entered promiscuous mode [ 647.181541][T31679] syzkaller0: entered allmulticast mode [ 647.190750][T31679] TC_ACT_REPEAT abuse ? [ 647.472355][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.598234][T31699] can: request_module (can-proto-0) failed. [ 647.816201][T31714] tipc: Started in network mode [ 647.821349][T31714] tipc: Node identity , cluster identity 4711 [ 647.837029][T31714] tipc: Started in network mode [ 647.843979][T31715] netlink: 'syz.4.6895': attribute type 2 has an invalid length. [ 647.846725][T31714] tipc: Node identity 0d0085a168216b462e5f002d, cluster identity 4711 [ 647.884224][T31715] v: entered promiscuous mode [ 648.262500][T31741] wlan0 speed is unknown, defaulting to 1000 [ 648.270031][T31741] wlan0 speed is unknown, defaulting to 1000 [ 648.276860][T31741] wlan0 speed is unknown, defaulting to 1000 [ 648.316340][T31741] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 648.377929][T31741] wlan0 speed is unknown, defaulting to 1000 [ 648.420279][T31741] wlan0 speed is unknown, defaulting to 1000 [ 648.474786][T31741] wlan0 speed is unknown, defaulting to 1000 [ 648.503590][T31741] wlan0 speed is unknown, defaulting to 1000 [ 648.521748][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.524063][T31741] wlan0 speed is unknown, defaulting to 1000 [ 648.572553][T31741] wlan0 speed is unknown, defaulting to 1000 [ 648.581339][T31741] wlan0 speed is unknown, defaulting to 1000 [ 648.595461][T31741] wlan0 speed is unknown, defaulting to 1000 [ 648.603208][T31741] wlan0 speed is unknown, defaulting to 1000 [ 648.932436][T31792] batadv1: entered allmulticast mode [ 648.948676][T31793] syzkaller1: entered promiscuous mode [ 648.954357][T31793] syzkaller1: entered allmulticast mode [ 649.548920][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.109051][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.590029][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.312078][T31747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 651.342136][T31825] netlink: 'syz.4.6927': attribute type 11 has an invalid length. [ 651.368810][T31825] __nla_validate_parse: 7 callbacks suppressed [ 651.368828][T31825] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6927'. [ 651.601660][T31838] netlink: 'syz.2.6931': attribute type 13 has an invalid length. [ 651.639154][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.724266][T31848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6935'. [ 651.789157][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 651.797262][ C1] lec:lec_tx_timeout: lec0 [ 651.803208][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 652.016276][T31866] syzkaller0: entered promiscuous mode [ 652.022605][T31866] syzkaller0: entered allmulticast mode [ 652.035141][T31870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6940'. [ 652.102369][T31876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6942'. [ 652.230058][T31881] netlink: 'syz.2.6942': attribute type 1 has an invalid length. [ 652.247602][T31881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6942'. [ 652.683745][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.154932][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.721915][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.910460][T31876] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 654.090656][T31905] tipc: Enabling of bearer rejected, media not registered [ 654.221883][T31912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6951'. [ 654.476925][T31937] netlink: 'syz.0.6960': attribute type 11 has an invalid length. [ 654.566557][T31943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6961'. [ 654.857629][T31950] sctp: [Deprecated]: syz.1.6962 (pid 31950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.857629][T31950] Use struct sctp_sack_info instead [ 655.053344][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.091816][T31955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6964'. [ 655.136542][T31958] syzkaller0: entered promiscuous mode [ 655.142586][T31958] syzkaller0: entered allmulticast mode [ 655.164078][T31963] netlink: 'syz.4.6967': attribute type 8 has an invalid length. [ 655.166328][T31964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.172016][T31963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6967'. [ 655.205857][T31963] bond0: entered promiscuous mode [ 655.233621][T31963] geneve2: entered promiscuous mode [ 655.254715][T31963] gretap0: entered promiscuous mode [ 655.261290][T31963] hsr1: entered promiscuous mode [ 655.271169][T31958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6965'. [ 655.388090][T31981] netlink: 'syz.4.6973': attribute type 3 has an invalid length. [ 655.495429][T31974] IPv6: sit1: Disabled Multicast RS [ 655.513512][T31977] tipc: Enabled bearer , priority 17 [ 655.780129][T32005] netlink: 'syz.4.6979': attribute type 1 has an invalid length. [ 655.828215][T32005] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 656.031425][T16553] wlan0 speed is unknown, defaulting to 1000 [ 656.054724][T16553] syz1: Port: 1 Link DOWN [ 656.114041][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.199596][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.467851][T32058] netlink: 'syz.3.6995': attribute type 21 has an invalid length. [ 656.526185][T32058] __nla_validate_parse: 10 callbacks suppressed [ 656.526204][T32058] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6995'. [ 656.601789][T32072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.611831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.634639][ T797] tipc: Node number set to 1266609866 [ 656.663459][T32064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6996'. [ 656.678758][T32071] vlan2: entered allmulticast mode [ 656.683914][T32071] bridge_slave_0: entered allmulticast mode [ 656.688390][T32064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6996'. [ 656.715135][T32076] syzkaller1: entered promiscuous mode [ 656.721423][T32076] syzkaller1: entered allmulticast mode [ 656.735753][T32072] netlink: 'syz.0.6997': attribute type 3 has an invalid length. [ 656.818354][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 656.826474][ C1] lec:lec_tx_timeout: lec0 [ 656.831369][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 656.932697][T32090] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7002'. [ 656.946553][T32095] openvswitch: netlink: Missing key (keys=40, expected=100) [ 656.969022][T32091] tipc: Enabling of bearer rejected, failed to enable media [ 657.075572][T32102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7006'. [ 657.164104][T32105] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7007'. [ 657.204943][T32107] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7005'. [ 657.216303][T32105] ip6gre1: entered promiscuous mode [ 657.251376][T32105] ip6gre1: entered allmulticast mode [ 657.319589][T32113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7010'. [ 657.373745][T32113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7010'. [ 657.406606][T32113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7010'. [ 657.597614][T32140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.696157][T32151] net_ratelimit: 2 callbacks suppressed [ 657.696175][T32151] openvswitch: netlink: IPv6 tunnel dst address is zero [ 657.696447][T32152] netlink: 'syz.1.7019': attribute type 1 has an invalid length. [ 657.774851][T32157] bond2: (slave bridge1): making interface the new active one [ 657.790421][T32157] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 657.819534][T32160] syzkaller0: entered promiscuous mode [ 657.825317][T32160] syzkaller0: entered allmulticast mode [ 657.993533][T32170] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 658.065891][T32168] sctp: [Deprecated]: syz.0.7023 (pid 32168) Use of int in max_burst socket option deprecated. [ 658.065891][T32168] Use struct sctp_assoc_value instead [ 658.093480][ T5830] Bluetooth: hci1: link tx timeout [ 658.099734][ T5830] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 658.111337][ T5830] Bluetooth: hci1: link tx timeout [ 658.116566][ T5830] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 658.196255][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.334192][T32190] netlink: zone id is out of range [ 658.342652][T32190] netlink: zone id is out of range [ 658.347894][T32190] netlink: zone id is out of range [ 658.361193][T32190] netlink: zone id is out of range [ 658.366365][T32190] netlink: zone id is out of range [ 658.372500][T32190] netlink: zone id is out of range [ 658.377635][T32190] netlink: zone id is out of range [ 658.494234][T32205] netlink: 'syz.3.7033': attribute type 3 has an invalid length. [ 658.563218][T32205] 0: renamed from hsr_slave_1 (while UP) [ 658.595278][T32214] tipc: Enabled bearer , priority 0 [ 658.689629][T32214] syzkaller0: entered promiscuous mode [ 658.695225][T32214] syzkaller0: entered allmulticast mode [ 658.716097][T32219] netlink: 'syz.1.7035': attribute type 4 has an invalid length. [ 658.716473][T32214] tipc: Resetting bearer [ 658.780028][T32217] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 658.791451][T32217] bond2 (unregistering): Released all slaves [ 658.815323][T32211] tipc: Resetting bearer [ 660.207243][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 660.564697][T32211] tipc: Disabling bearer [ 660.711515][T32242] pim6reg: entered allmulticast mode [ 661.027737][T32270] netlink: 'syz.4.7048': attribute type 4 has an invalid length. [ 661.221298][T32285] netlink: 'syz.3.7052': attribute type 2 has an invalid length. [ 661.837576][T32344] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 661.858353][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 661.866450][ C1] lec:lec_tx_timeout: lec0 [ 661.872002][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 661.997481][T32353] __nla_validate_parse: 12 callbacks suppressed [ 661.997500][T32353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7068'. [ 662.270753][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 662.598775][T32340] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 663.115205][T32388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7072'. [ 663.249120][T32398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7076'. [ 663.278142][T32398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7076'. [ 663.292384][T32398] netlink: 'syz.0.7076': attribute type 12 has an invalid length. [ 663.306690][T32398] netlink: 'syz.0.7076': attribute type 11 has an invalid length. [ 663.406968][T16549] net_ratelimit: 13 callbacks suppressed [ 663.406987][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.527727][T32416] ip6gretap0: entered promiscuous mode [ 663.531439][T32410] xt_l2tp: missing protocol rule (udp|l2tpip) [ 663.544102][T32416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7080'. [ 663.665191][T32424] x_tables: duplicate underflow at hook 2 [ 663.688271][T32416] ip6gretap0 (unregistering): left promiscuous mode [ 663.788703][T29253] Bluetooth: hci0: command 0x0401 tx timeout [ 663.891782][T32430] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7082'. [ 663.930446][T32430] netlink: 'syz.0.7082': attribute type 2 has an invalid length. [ 663.954645][T32430] netlink: 'syz.0.7082': attribute type 1 has an invalid length. [ 664.124468][T32442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7084'. [ 664.171127][T32442] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7084'. [ 664.171230][T32445] netlink: 'syz.3.7085': attribute type 11 has an invalid length. [ 664.252505][T32445] netlink: 'syz.3.7085': attribute type 11 has an invalid length. [ 664.387941][T32462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.439342][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.534890][T32472] sctp: [Deprecated]: syz.2.7089 (pid 32472) Use of int in max_burst socket option deprecated. [ 664.534890][T32472] Use struct sctp_assoc_value instead [ 664.582523][T32477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.688198][T32484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.916946][T32504] macvtap1: entered allmulticast mode [ 664.924153][T32508] xt_cluster: node mask cannot exceed total number of nodes [ 664.927523][T32504] veth0_macvtap: entered allmulticast mode [ 664.961666][T32508] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 664.985186][T32512] nftables ruleset with unbound chain [ 665.026872][T32512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7102'. [ 665.049779][T32512] No such timeout policy "syz0" [ 665.060632][T32512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7102'. [ 665.094409][T32510] syzkaller0: entered promiscuous mode [ 665.095377][T32512] netlink: 'syz.3.7102': attribute type 5 has an invalid length. [ 665.122124][T32510] syzkaller0: entered allmulticast mode [ 665.231412][T25394] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 665.309089][T16554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.482088][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.514672][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.888326][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 666.896785][ C1] lec:lec_tx_timeout: lec0 [ 666.902074][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 667.557658][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.708609][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 667.926912][T16550] IPVS: starting estimator thread 0... [ 667.934967][T32605] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 667.943927][T32606] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 668.029404][T32607] IPVS: using max 38 ests per chain, 91200 per kthread [ 668.067119][T32617] __nla_validate_parse: 4 callbacks suppressed [ 668.067139][T32617] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7112'. [ 668.168982][T32628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 668.224479][T32628] syzkaller1: entered promiscuous mode [ 668.231585][T32628] syzkaller1: entered allmulticast mode [ 668.302025][T32637] syzkaller1: entered promiscuous mode [ 668.313448][T32637] syzkaller1: entered allmulticast mode [ 668.351667][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.460411][T32642] netlink: 'syz.1.7121': attribute type 1 has an invalid length. [ 668.483251][T32642] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7121'. [ 668.532850][T32642] can: request_module (can-proto-0) failed. [ 668.593292][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.713135][T32652] netlink: 'syz.1.7124': attribute type 12 has an invalid length. [ 668.758598][T32652] bond3: option primary_reselect: invalid value (255) [ 668.766588][T32652] bond3 (unregistering): Released all slaves [ 668.801383][T32610] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 669.113656][T32678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7128'. [ 669.151096][T32667] netlink: 'syz.1.7128': attribute type 15 has an invalid length. [ 669.184815][T32667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7128'. [ 669.286373][T32681] syzkaller0: entered promiscuous mode [ 669.298602][T32681] syzkaller0: entered allmulticast mode [ 669.307018][T32681] TC_ACT_REPEAT abuse ? [ 669.390494][T32689] netlink: 'syz.3.7134': attribute type 7 has an invalid length. [ 669.406534][T32691] netlink: 'syz.3.7134': attribute type 7 has an invalid length. [ 669.634154][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.661840][T32713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7139'. [ 669.715484][T32707] netlink: 'syz.0.7139': attribute type 4 has an invalid length. [ 669.715693][T32715] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7142'. [ 669.733319][T32715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7142'. [ 669.743400][T32715] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7142'. [ 669.753207][T32715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7142'. [ 669.764377][T32715] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7142'. [ 669.864139][T32724] veth0_to_bridge: entered promiscuous mode [ 669.865834][T32722] sctp: [Deprecated]: syz.1.7144 (pid 32722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 669.865834][T32722] Use struct sctp_sack_info instead [ 669.935842][T32723] veth0_to_bridge: left promiscuous mode [ 669.967748][T32730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.005024][T32732] syzkaller0: entered promiscuous mode [ 670.011009][T32732] syzkaller0: entered allmulticast mode [ 670.314035][T32745] syzkaller0: entered promiscuous mode [ 670.319752][T32745] syzkaller0: entered allmulticast mode [ 670.674332][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.955862][ T329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.981620][ T331] netlink: 'syz.4.7169': attribute type 3 has an invalid length. [ 671.371617][ T365] netlink: 'syz.3.7179': attribute type 3 has an invalid length. [ 671.389495][T16554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.721044][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.908849][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 671.916999][ C1] lec:lec_tx_timeout: lec0 [ 671.921635][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 672.581001][ T420] syzkaller1: entered promiscuous mode [ 672.593215][ T420] syzkaller1: entered allmulticast mode [ 672.634178][ T422] sctp: [Deprecated]: syz.1.7196 (pid 422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 672.634178][ T422] Use struct sctp_sack_info instead [ 672.749239][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.849215][ T432] netlink: 'syz.0.7198': attribute type 1 has an invalid length. [ 672.929374][ T443] ip6t_srh: unknown srh match flags 4000 [ 673.016139][ T432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 673.109911][ T451] __nla_validate_parse: 14 callbacks suppressed [ 673.109931][ T451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7203'. [ 673.164793][ T451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7203'. [ 673.239216][ T451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7203'. [ 673.256212][ T451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7203'. [ 673.323458][ T451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7203'. [ 673.334045][ T462] netlink: 'syz.0.7207': attribute type 1 has an invalid length. [ 673.335344][ T451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7203'. [ 673.378101][ T451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7203'. [ 673.382137][ T462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7207'. [ 673.410966][ T451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7203'. [ 673.478955][ T451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7203'. [ 673.492459][ T468] pim6reg1: entered promiscuous mode [ 673.505570][ T468] pim6reg1: entered allmulticast mode [ 673.794190][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.800814][ T476] syzkaller0: entered promiscuous mode [ 673.826317][ T476] syzkaller0: entered allmulticast mode [ 673.961086][ T479] netlink: 'syz.1.7216': attribute type 3 has an invalid length. [ 674.078254][ T498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.429166][T16554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.832960][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.840908][ T480] syzkaller0: entered promiscuous mode [ 675.846550][ T480] syzkaller0: entered allmulticast mode [ 675.874918][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.223915][ T544] netlink: 'syz.2.7228': attribute type 178 has an invalid length. [ 676.355780][ T551] tunl0: entered promiscuous mode [ 676.366397][ T551] netlink: 'syz.4.7232': attribute type 3 has an invalid length. [ 676.429750][ T559] veth0: entered promiscuous mode [ 676.913945][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.928358][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 676.936415][ C1] lec:lec_tx_timeout: lec0 [ 676.953269][ T575] syzkaller0: entered promiscuous mode [ 676.958885][ T575] syzkaller0: entered allmulticast mode [ 677.186825][ T549] veth0: left promiscuous mode [ 677.392041][ T604] sctp: [Deprecated]: syz.1.7244 (pid 604) Use of int in maxseg socket option. [ 677.392041][ T604] Use struct sctp_assoc_value instead [ 677.399828][ T595] netlink: 'syz.4.7242': attribute type 11 has an invalid length. [ 677.448694][ T606] sctp: [Deprecated]: syz.0.7246 (pid 606) Use of int in max_burst socket option. [ 677.448694][ T606] Use struct sctp_assoc_value instead [ 677.469633][T16554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.507381][ T613] openvswitch: netlink: Actions may not be safe on all matching packets [ 677.530905][ T29] audit: type=1107 audit(1773777523.745:8): pid=605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 677.548811][T29253] Bluetooth: hci4: command 0x0406 tx timeout [ 677.664822][ T616] netlink: 'syz.1.7248': attribute type 3 has an invalid length. [ 677.711464][ T616] netlink: 'syz.1.7248': attribute type 3 has an invalid length. [ 677.796331][ T620] gretap0: entered promiscuous mode [ 677.815573][ T620] gretap0: left promiscuous mode [ 677.981536][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.782278][ T642] __nla_validate_parse: 66 callbacks suppressed [ 678.782295][ T642] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7257'. [ 678.824685][ T642] geneve2: entered promiscuous mode [ 678.830624][ T642] geneve2: entered allmulticast mode [ 678.849976][T25394] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 678.866634][T25394] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 678.888909][ T648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7258'. [ 678.907733][ T650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7258'. [ 678.915679][ T651] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7259'. [ 678.971650][T25394] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 678.990612][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.001791][T25394] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 679.012903][ T648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7258'. [ 679.045369][ T645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.053952][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.209152][ T666] syzkaller0: entered promiscuous mode [ 679.214880][ T666] syzkaller0: entered allmulticast mode [ 679.225435][ T666] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7264'. [ 679.881088][ T686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7269'. [ 680.034186][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.093997][ T702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 680.509373][T16553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.610571][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.660270][ T744] netlink: 512 bytes leftover after parsing attributes in process `syz.4.7285'. [ 680.687243][ T746] xt_TPROXY: Can be used only with -p tcp or -p udp [ 680.762933][ T750] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7287'. [ 681.074551][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.211723][ T790] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7296'. [ 681.224115][ T775] syzkaller0: entered promiscuous mode [ 681.237530][ T775] syzkaller0: entered allmulticast mode [ 681.324652][ T799] netlink: 'syz.3.7300': attribute type 1 has an invalid length. [ 681.403941][ T799] bond3: entered promiscuous mode [ 681.421867][ T799] bond3: entered allmulticast mode [ 681.444676][ T799] 8021q: adding VLAN 0 to HW filter on device bond3 [ 681.822351][ T845] syzkaller0: entered promiscuous mode [ 681.827951][ T845] syzkaller0: entered allmulticast mode [ 682.062421][ T864] netlink: 'syz.3.7312': attribute type 26 has an invalid length. [ 682.071337][ T864] netlink: 'syz.3.7312': attribute type 26 has an invalid length. [ 682.113358][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.668535][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 683.153115][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.629876][T16553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.116885][ T776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 684.197375][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.243378][ T868] wireguard0: entered promiscuous mode [ 684.249424][ T868] wireguard0: entered allmulticast mode [ 684.270168][ T868] team0: Device wireguard0 is of different type [ 684.289198][ T872] __nla_validate_parse: 3 callbacks suppressed [ 684.289220][ T872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7315'. [ 684.365487][ T879] veth0: entered promiscuous mode [ 684.378681][ T879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7319'. [ 684.586460][ T894] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7324'. [ 684.606962][ T894] openvswitch: netlink: Flow key attr not present in new flow. [ 684.672342][ T894] bond2: option min_links: invalid value (18446744073709551614) [ 684.680462][ T894] bond2: option min_links: allowed values 0 - 2147483647 [ 684.692762][ T894] bond2 (unregistering): Released all slaves [ 684.737349][ T904] netlink: 'syz.3.7328': attribute type 10 has an invalid length. [ 684.741091][ T902] syzkaller0: entered promiscuous mode [ 684.752108][ T902] syzkaller0: entered allmulticast mode [ 684.780227][ T904] netlink: 'syz.3.7328': attribute type 10 has an invalid length. [ 684.885526][ T914] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7329'. [ 684.963035][ T914] bond6: option fail_over_mac: invalid value (16) [ 684.997639][ T914] bond6 (unregistering): Released all slaves [ 685.177685][ T946] netlink: 'syz.4.7337': attribute type 23 has an invalid length. [ 685.233687][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.374257][ T964] netlink: 'syz.4.7343': attribute type 1 has an invalid length. [ 685.414380][ T964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 685.440276][ T971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7345'. [ 685.504527][ T976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7346'. [ 685.514404][ T968] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7344'. [ 685.612797][ T985] syz_tun: entered allmulticast mode [ 685.620077][ T977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7346'. [ 685.620268][ T985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.651760][ T984] syz_tun: left allmulticast mode [ 685.718526][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 685.731121][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 685.832275][ T1001] netlink: 'syz.4.7355': attribute type 2 has an invalid length. [ 685.846661][ T998] netlink: 'syz.2.7353': attribute type 1 has an invalid length. [ 685.862991][ T1004] netlink: 'syz.1.7354': attribute type 1 has an invalid length. [ 685.872593][ T1001] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7355'. [ 685.919509][ T998] 8021q: adding VLAN 0 to HW filter on device bond2 [ 685.922614][ T1010] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7356'. [ 686.006380][ T1004] bond3: entered promiscuous mode [ 686.023086][ T1004] bond3: entered allmulticast mode [ 686.039868][ T1004] 8021q: adding VLAN 0 to HW filter on device bond3 [ 686.074288][ T1014] bond2: (slave geneve3): making interface the new active one [ 686.086330][ T1014] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 686.124970][ T1016] macvlan2: entered promiscuous mode [ 686.170303][ T1016] macvlan2: entered allmulticast mode [ 686.182318][ T1016] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 686.253599][T25385] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 686.262851][T25385] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 686.272592][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.347427][ T1021] validate_nla: 3 callbacks suppressed [ 686.347449][ T1021] netlink: 'syz.0.7358': attribute type 1 has an invalid length. [ 686.363200][T25385] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 686.378495][T25385] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 686.425638][ T29] audit: type=1800 audit(1773777532.645:9): pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7362" name="memory.events" dev="tmpfs" ino=896 res=0 errno=0 [ 686.455035][ T29] audit: type=1804 audit(1773777532.675:10): pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7362" name="/newroot/172/memory.events" dev="tmpfs" ino=896 res=1 errno=0 [ 686.516445][ T1035] netlink: 'syz.4.7360': attribute type 21 has an invalid length. [ 686.679932][T16553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.755964][ T1072] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 686.905794][ T1091] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 687.311752][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.351282][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.120108][ T1025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 689.383703][ T1148] 8021q: VLANs not supported on caif0 [ 689.400293][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.443924][ T1151] bond4: Removing last ns target with arp_interval on [ 689.510164][ T1163] __nla_validate_parse: 6 callbacks suppressed [ 689.510185][ T1163] netlink: 212024 bytes leftover after parsing attributes in process `syz.0.7394'. [ 689.527567][ T1166] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7395'. [ 689.547227][ T1163] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7394'. [ 689.672621][ T1176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7398'. [ 689.709571][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.753011][ T1176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 690.116377][ T1206] netlink: 'syz.2.7402': attribute type 3 has an invalid length. [ 690.166136][ T1214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7406'. [ 690.269200][ T1218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7407'. [ 690.429332][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.748435][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 690.756568][ C1] lec:lec_tx_timeout: lec0 [ 690.831198][T16550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.159923][ T1224] netlink: 'syz.0.7408': attribute type 1 has an invalid length. [ 691.181437][ T1224] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7408'. [ 691.200607][ T1224] netlink: 'syz.0.7408': attribute type 1 has an invalid length. [ 691.252226][ T1224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7408'. [ 691.299537][ T1240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7411'. [ 691.474063][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.596532][ T1254] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7418'. [ 691.618452][ T1257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.627506][ T1257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.635793][ T1257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.644095][ T1257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.310794][ T1278] pim6reg1: entered allmulticast mode [ 692.440645][ T1293] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 692.469591][ T1293] netlink: 'syz.3.7429': attribute type 8 has an invalid length. [ 692.485649][ T1293] sch_fq: defrate 0 ignored. [ 693.006960][ T1334] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 693.230086][ T1352] team0 (unregistering): Port device team_slave_0 removed [ 693.258191][ T1357] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 693.260324][ T1352] team0 (unregistering): Port device team_slave_1 removed [ 693.481330][ T1377] netlink: 'syz.1.7452': attribute type 1 has an invalid length. [ 693.558125][ T1382] bond5: entered promiscuous mode [ 693.564358][ T1382] bond5: entered allmulticast mode [ 693.570271][ T1382] 8021q: adding VLAN 0 to HW filter on device bond5 [ 693.594993][ T1377] bridge2: entered promiscuous mode [ 693.600670][ T1377] bridge2: entered allmulticast mode [ 693.606602][ T1377] bond5: (slave bridge2): Enslaving as a backup interface with an up link [ 693.642322][ T1377] bridge3: entered promiscuous mode [ 693.647820][ T1377] bridge3: entered allmulticast mode [ 693.654949][ T1377] bond5: (slave bridge3): Enslaving as a backup interface with a down link [ 693.714522][ T1384] netlink: 'syz.0.7454': attribute type 3 has an invalid length. [ 693.983133][ T1408] netlink: 'syz.4.7459': attribute type 1 has an invalid length. [ 694.048221][ T1418] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 694.076262][ T1418] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 694.091163][ T1418] bond3: (slave ip6gre1): making interface the new active one [ 694.101473][ T1418] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 694.192955][ T1422] lo: Caught tx_queue_len zero misconfig [ 694.743082][ T1469] __nla_validate_parse: 18 callbacks suppressed [ 694.743100][ T1469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7475'. [ 694.947182][ T1481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7477'. [ 694.960970][ T1481] syzkaller0: entered promiscuous mode [ 694.966965][ T1481] syzkaller0: entered allmulticast mode [ 695.033223][ T1484] syzkaller1: entered promiscuous mode [ 695.041332][ T1484] syzkaller1: entered allmulticast mode [ 695.060002][ T1484] tipc: Started in network mode [ 695.064967][ T1484] tipc: Node identity ac14140f, cluster identity 4711 [ 695.073655][ T1484] tipc: New replicast peer: 255.255.255.255 [ 695.081506][ T1484] tipc: Enabled bearer , priority 10 [ 695.181835][ T1495] veth0: entered promiscuous mode [ 695.304333][ T1502] gre1: entered promiscuous mode [ 695.311826][ T1502] gre1: entered allmulticast mode [ 695.326088][ T1501] netlink: 'syz.0.7483': attribute type 1 has an invalid length. [ 695.946021][ T1489] veth0: left promiscuous mode [ 696.300776][ T797] tipc: Node number set to 2886997007 [ 696.362591][T25384] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x18 [ 696.403770][ T1566] netlink: 'syz.0.7500': attribute type 6 has an invalid length. [ 696.500061][ T1569] xt_hashlimit: size too large, truncated to 1048576 [ 696.551411][ T1572] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 696.613860][ T1575] netlink: 'syz.3.7504': attribute type 2 has an invalid length. [ 696.819362][ T1588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7506'. [ 696.837555][ T1588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7506'. [ 696.868063][ T1588] net_ratelimit: 3366 callbacks suppressed [ 696.868084][ T1588] openvswitch: netlink: Message has 584 unknown bytes. [ 696.889201][ T1588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.932302][ T1588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7506'. [ 696.974770][ T1592] wlan0 speed is unknown, defaulting to 1000 [ 697.254843][ T1604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7509'. [ 697.289145][ T1604] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7509'. [ 697.319221][ T1604] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7509'. [ 697.362040][ T1604] netlink: 'syz.3.7509': attribute type 5 has an invalid length. [ 697.387079][ T1604] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7509'. [ 697.655377][ T1620] netlink: 512 bytes leftover after parsing attributes in process `syz.2.7512'. [ 697.702324][ T1620] netlink: 'syz.2.7512': attribute type 10 has an invalid length. [ 697.838643][ T1630] hsr0 speed is unknown, defaulting to 1000 [ 697.844707][ T1630] hsr0 speed is unknown, defaulting to 1000 [ 697.859155][ T1630] hsr0 speed is unknown, defaulting to 1000 [ 697.872235][ T1628] syz_tun: entered promiscuous mode [ 697.882121][T25375] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 697.884281][ T1630] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 697.950480][ T1630] hsr0 speed is unknown, defaulting to 1000 [ 697.959633][ T1630] hsr0 speed is unknown, defaulting to 1000 [ 697.971629][ T1630] hsr0 speed is unknown, defaulting to 1000 [ 697.980719][ T1630] hsr0 speed is unknown, defaulting to 1000 [ 698.003247][ T1630] hsr0 speed is unknown, defaulting to 1000 [ 698.035836][ T1630] hsr0 speed is unknown, defaulting to 1000 [ 698.046755][ T1641] netlink: 'syz.2.7521': attribute type 11 has an invalid length. [ 698.056752][ T1644] netlink: 'syz.2.7521': attribute type 1 has an invalid length. [ 698.067015][ T1630] hsr0 speed is unknown, defaulting to 1000 [ 698.101219][ T1630] hsr0 speed is unknown, defaulting to 1000 [ 698.114026][ T1630] hsr0 speed is unknown, defaulting to 1000 [ 698.121695][ T1647] netlink: 'syz.0.7520': attribute type 13 has an invalid length. [ 698.263028][ T1652] netlink: 'syz.2.7523': attribute type 1 has an invalid length. [ 698.294192][ T1652] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 698.396877][ T1660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.472057][ T1660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.504380][ T1663] ip6_vti0: entered promiscuous mode [ 698.663726][ T1673] ipt_ECN: cannot use operation on non-tcp rule [ 698.760090][ T1680] sit0: entered allmulticast mode [ 698.913806][ T1691] x_tables: unsorted underflow at hook 2 [ 699.579583][ T1740] bond4: entered promiscuous mode [ 699.585157][ T1740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 699.617166][ T1740] bridge5: entered promiscuous mode [ 699.639681][ T1740] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 699.719051][ T1740] macvlan2: entered promiscuous mode [ 699.724394][ T1740] macvlan2: entered allmulticast mode [ 699.732917][ T1740] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 699.843921][ T1758] netlink: 'syz.3.7551': attribute type 10 has an invalid length. [ 699.891872][ T1758] team0 (unregistering): Port device team_slave_0 removed [ 699.914666][ T1758] team0 (unregistering): Port device team_slave_1 removed [ 700.175601][ T1781] syzkaller0: entered promiscuous mode [ 700.182260][ T1781] syzkaller0: entered allmulticast mode [ 702.392183][ T1722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.527448][ T1786] netlink: 'syz.2.7560': attribute type 9 has an invalid length. [ 702.667020][ T1798] netlink: 'syz.1.7564': attribute type 3 has an invalid length. [ 702.688588][ T1798] netlink: 'syz.1.7564': attribute type 3 has an invalid length. [ 702.704743][ T1801] __nla_validate_parse: 9 callbacks suppressed [ 702.704761][ T1801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7561'. [ 702.779499][ T1803] nbd4: detected capacity change from 0 to 63 [ 702.791712][T29253] block nbd4: Receive control failed (result -32) [ 702.793739][ T1558] block nbd4: Send control failed (result -32) [ 702.819208][ T1558] block nbd4: Request send failed, requeueing [ 702.888378][ T1558] block nbd4: Dead connection, failed to find a fallback [ 702.895505][ T11] block nbd4: Dead connection, failed to find a fallback [ 702.904646][ T11] block nbd4: shutting down sockets [ 702.911720][ T11] blk_print_req_error: 138 callbacks suppressed [ 702.911949][ T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.930041][ T11] buffer_io_error: 138 callbacks suppressed [ 702.930057][ T11] Buffer I/O error on dev nbd4, logical block 0, async page read [ 702.968455][ T1558] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.996032][ T1558] Buffer I/O error on dev nbd4, logical block 1, async page read [ 703.004914][ T1558] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.017648][ T1558] Buffer I/O error on dev nbd4, logical block 2, async page read [ 703.027597][ T1558] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.038228][ T1558] Buffer I/O error on dev nbd4, logical block 3, async page read [ 703.049328][ T1558] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.059451][ T1558] Buffer I/O error on dev nbd4, logical block 0, async page read [ 703.067265][ T1558] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.086459][ T1558] Buffer I/O error on dev nbd4, logical block 1, async page read [ 703.119880][ T1558] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.136798][ T1558] Buffer I/O error on dev nbd4, logical block 2, async page read [ 703.143360][ T1832] syzkaller0: entered promiscuous mode [ 703.153948][ T1558] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.173754][ T1832] syzkaller0: entered allmulticast mode [ 703.198093][ T1558] Buffer I/O error on dev nbd4, logical block 3, async page read [ 703.212783][ T1834] syzkaller0: entered promiscuous mode [ 703.220820][ T1558] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.230150][ T1834] syzkaller0: entered allmulticast mode [ 703.292704][ T1558] Buffer I/O error on dev nbd4, logical block 0, async page read [ 703.312546][ T1558] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.336316][ T1558] Buffer I/O error on dev nbd4, logical block 1, async page read [ 703.364920][ T1558] ldm_validate_partition_table(): Disk read failed. [ 703.386687][ T1558] Dev nbd4: unable to read RDB block 0 [ 703.396258][ T1558] nbd4: unable to read partition table [ 703.442100][ T1558] ldm_validate_partition_table(): Disk read failed. [ 703.450429][ T1558] Dev nbd4: unable to read RDB block 0 [ 703.456834][ T1558] nbd4: unable to read partition table [ 703.485115][ T1852] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7580'. [ 703.570926][ T1852] bond3 (unregistering): Released all slaves [ 703.814904][ T1871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.036511][ T1887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7590'. [ 704.208055][ T1903] syzkaller0: entered promiscuous mode [ 704.214555][ T1903] syzkaller0: entered allmulticast mode [ 704.223655][ T1899] TC_ACT_REPEAT abuse ? [ 704.229612][ T1906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7591'. [ 704.761859][ T1929] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 704.895621][ T1942] block nbd0: not configured, cannot reconfigure [ 704.998260][ T1948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7607'. [ 705.325511][ T1976] syzkaller0: entered promiscuous mode [ 705.331334][ T1976] syzkaller0: entered allmulticast mode [ 705.492624][ T1989] syz_tun: entered allmulticast mode [ 705.500268][ T1986] syz_tun: left allmulticast mode [ 705.649273][T23462] lec:lec_start_xmit: lec0:No lecd attached [ 705.702339][ T2007] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7623'. [ 705.753229][ T2008] tipc: Failed to remove unknown binding: 66,1,1/1266609866:3250033255/3250033257 [ 705.857837][ T2020] x_tables: duplicate underflow at hook 1 [ 705.879700][ T2022] xt_hashlimit: size too large, truncated to 1048576 [ 705.931667][ T2028] x_tables: duplicate underflow at hook 1 [ 706.280654][ T2040] syzkaller0: entered promiscuous mode [ 708.251903][ T2072] netlink: 'syz.4.7638': attribute type 1 has an invalid length. [ 708.283392][ T2083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7644'. [ 708.591975][ T2101] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 708.821347][ T2118] netlink: 'syz.0.7651': attribute type 1 has an invalid length. [ 708.925015][ T2125] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7653'. [ 708.937340][ T2118] 8021q: adding VLAN 0 to HW filter on device bond7 [ 709.015408][ T2128] bond7: (slave ip6erspan0): making interface the new active one [ 709.033760][ T2132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7655'. [ 709.043856][ T2128] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 709.073624][ T2129] netlink: 81 bytes leftover after parsing attributes in process `syz.3.7654'. [ 709.114571][ T2138] netlink: 'syz.2.7656': attribute type 9 has an invalid length. [ 709.125535][ T2137] netlink: 'syz.2.7656': attribute type 9 has an invalid length. [ 709.305466][ T2152] netlink: 'syz.0.7660': attribute type 12 has an invalid length. [ 709.332239][ T2154] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7659'. [ 709.377186][ T2147] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7659'. [ 709.583969][ T2171] geneve2: entered promiscuous mode [ 709.587102][ T2174] netlink: 'syz.0.7667': attribute type 8 has an invalid length. [ 709.591053][T19417] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 47955 - 0 [ 709.610697][T19417] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 47955 - 0 [ 709.625994][ T2174] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7667'. [ 709.635907][T19417] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 47955 - 0 [ 709.650762][T19417] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 47955 - 0 [ 709.776724][ T2183] netlink: 392 bytes leftover after parsing attributes in process `syz.4.7671'. [ 710.050461][ T2202] xt_l2tp: v2 doesn't support IP mode [ 710.267568][ T2220] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7684'. [ 710.287871][ T2220] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7684'. [ 710.502983][ T2232] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 710.523923][ T2232] syzkaller0: entered promiscuous mode [ 710.530069][ T2232] syzkaller0: entered allmulticast mode [ 710.698920][ T2249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.748561][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 710.756589][ C1] lec:lec_tx_timeout: lec0 [ 710.866232][ T2258] team0: Device ip6gre1 is of different type [ 711.191591][T29253] block nbd0: Receive control failed (result -107) [ 711.706057][ T2325] tipc: Enabled bearer , priority 0 [ 711.754237][ T2324] tipc: Disabling bearer [ 712.239472][ T2355] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 712.331786][ T2357] netlink: 'syz.4.7725': attribute type 1 has an invalid length. [ 712.367494][ T2357] bond4: entered promiscuous mode [ 712.374419][ T2357] 8021q: adding VLAN 0 to HW filter on device bond4 [ 712.574609][ T2368] sctp: [Deprecated]: syz.4.7730 (pid 2368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.574609][ T2368] Use struct sctp_sack_info instead [ 712.692136][ T2373] netlink: 'syz.0.7731': attribute type 3 has an invalid length. [ 712.713569][ T2373] netlink: 'syz.0.7731': attribute type 3 has an invalid length. [ 712.812065][ T2382] syzkaller1: entered promiscuous mode [ 712.826842][ T2382] syzkaller1: entered allmulticast mode [ 712.960748][ T2396] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 712.969413][ T2396] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 712.987502][ T2389] bond5: option mode: invalid value (133) [ 712.995992][ T2389] bond5 (unregistering): Released all slaves [ 713.078071][ T2395] syzkaller0: entered promiscuous mode [ 713.094503][ T2395] syzkaller0: entered allmulticast mode [ 713.414610][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 713.441831][T29253] [ 713.444217][T29253] ====================================================== [ 713.451231][T29253] WARNING: possible circular locking dependency detected [ 713.458351][T29253] syzkaller #0 Not tainted [ 713.462752][T29253] ------------------------------------------------------ [ 713.469755][T29253] kworker/u9:0/29253 is trying to acquire lock: [ 713.476062][T29253] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 713.486642][T29253] [ 713.486642][T29253] but task is already holding lock: [ 713.494002][T29253] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 713.504251][T29253] [ 713.504251][T29253] which lock already depends on the new lock. [ 713.504251][T29253] [ 713.514637][T29253] [ 713.514637][T29253] the existing dependency chain (in reverse order) is: [ 713.523721][T29253] [ 713.523721][T29253] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 713.531847][T29253] down_write+0x96/0x200 [ 713.536623][T29253] kernfs_add_one+0x41/0x5c0 [ 713.541734][T29253] kernfs_create_dir_ns+0xde/0x130 [ 713.547360][T29253] internal_create_group+0x425/0x1180 [ 713.553241][T29253] cpuhp_invoke_callback+0x445/0x860 [ 713.559039][T29253] cpuhp_issue_call+0x430/0x7a0 [ 713.564397][T29253] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 713.570972][T29253] __cpuhp_setup_state+0x3f/0x60 [ 713.576417][T29253] do_one_initcall+0x250/0x8d0 [ 713.581686][T29253] do_initcall_level+0x104/0x190 [ 713.587180][T29253] do_initcalls+0x59/0xa0 [ 713.592030][T29253] kernel_init_freeable+0x2a6/0x3e0 [ 713.597739][T29253] kernel_init+0x1d/0x1d0 [ 713.602575][T29253] ret_from_fork+0x51e/0xb90 [ 713.607669][T29253] ret_from_fork_asm+0x1a/0x30 [ 713.612942][T29253] [ 713.612942][T29253] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 713.620758][T29253] [ 713.620758][T29253] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 713.628514][T29253] cpus_read_lock+0x42/0x160 [ 713.633627][T29253] static_key_disable+0x12/0x20 [ 713.638990][T29253] __inet_hash_connect+0x2430/0x2440 [ 713.644886][T29253] tcp_v4_connect+0xd5f/0x19b0 [ 713.650208][T29253] __inet_stream_connect+0x25a/0xdd0 [ 713.655995][T29253] inet_stream_connect+0x66/0xa0 [ 713.661435][T29253] __sys_connect+0x312/0x450 [ 713.666578][T29253] __x64_sys_connect+0x7a/0x90 [ 713.671850][T29253] do_syscall_64+0x14d/0xf80 [ 713.676944][T29253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.683344][T29253] [ 713.683344][T29253] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 713.690973][T29253] lock_sock_nested+0x48/0x100 [ 713.696245][T29253] inet_shutdown+0x6a/0x390 [ 713.701249][T29253] nbd_mark_nsock_dead+0x2e9/0x560 [ 713.706955][T29253] recv_work+0x1c7f/0x1d90 [ 713.711912][T29253] process_scheduled_works+0xb02/0x1830 [ 713.717963][T29253] worker_thread+0xa50/0xfc0 [ 713.723059][T29253] kthread+0x388/0x470 [ 713.727648][T29253] ret_from_fork+0x51e/0xb90 [ 713.732745][T29253] ret_from_fork_asm+0x1a/0x30 [ 713.738022][T29253] [ 713.738022][T29253] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 713.745657][T29253] __mutex_lock+0x19f/0x1300 [ 713.750759][T29253] nbd_queue_rq+0x37b/0x1100 [ 713.755859][T29253] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 713.761986][T29253] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 713.768853][T29253] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 713.775337][T29253] blk_mq_run_hw_queue+0x348/0x4f0 [ 713.780993][T29253] blk_mq_dispatch_list+0xd16/0xe10 [ 713.786703][T29253] blk_mq_flush_plug_list+0x48d/0x570 [ 713.792591][T29253] __blk_flush_plug+0x3ed/0x4d0 [ 713.797989][T29253] __submit_bio+0x28d/0x580 [ 713.803003][T29253] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 713.809138][T29253] block_read_full_folio+0x599/0x830 [ 713.814943][T29253] filemap_read_folio+0x137/0x3b0 [ 713.820470][T29253] do_read_cache_folio+0x358/0x590 [ 713.826090][T29253] read_part_sector+0xb6/0x2b0 [ 713.831414][T29253] adfspart_check_ICS+0xa5/0xa40 [ 713.836857][T29253] bdev_disk_changed+0x7ba/0x1550 [ 713.842384][T29253] blkdev_get_whole+0x380/0x510 [ 713.847797][T29253] bdev_open+0x31e/0xd30 [ 713.852540][T29253] blkdev_open+0x470/0x610 [ 713.857467][T29253] do_dentry_open+0x785/0x14e0 [ 713.862749][T29253] vfs_open+0x3b/0x340 [ 713.867324][T29253] path_openat+0x2e08/0x3860 [ 713.872433][T29253] do_file_open+0x23e/0x4a0 [ 713.877439][T29253] do_sys_openat2+0x113/0x200 [ 713.882620][T29253] __x64_sys_openat+0x138/0x170 [ 713.887977][T29253] do_syscall_64+0x14d/0xf80 [ 713.893070][T29253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.899472][T29253] [ 713.899472][T29253] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 713.906682][T29253] __mutex_lock+0x19f/0x1300 [ 713.911878][T29253] nbd_queue_rq+0xc6/0x1100 [ 713.916890][T29253] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 713.922938][T29253] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 713.929772][T29253] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 713.936252][T29253] blk_mq_run_hw_queue+0x348/0x4f0 [ 713.941871][T29253] blk_mq_dispatch_list+0xd16/0xe10 [ 713.947573][T29253] blk_mq_flush_plug_list+0x48d/0x570 [ 713.953446][T29253] __blk_flush_plug+0x3ed/0x4d0 [ 713.958802][T29253] __submit_bio+0x28d/0x580 [ 713.963832][T29253] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 713.969973][T29253] block_read_full_folio+0x599/0x830 [ 713.975764][T29253] filemap_read_folio+0x137/0x3b0 [ 713.981292][T29253] do_read_cache_folio+0x358/0x590 [ 713.986911][T29253] read_part_sector+0xb6/0x2b0 [ 713.992262][T29253] adfspart_check_ICS+0xa5/0xa40 [ 713.997701][T29253] bdev_disk_changed+0x7ba/0x1550 [ 714.003227][T29253] blkdev_get_whole+0x380/0x510 [ 714.008584][T29253] bdev_open+0x31e/0xd30 [ 714.013328][T29253] blkdev_open+0x470/0x610 [ 714.018331][T29253] do_dentry_open+0x785/0x14e0 [ 714.023608][T29253] vfs_open+0x3b/0x340 [ 714.028181][T29253] path_openat+0x2e08/0x3860 [ 714.033274][T29253] do_file_open+0x23e/0x4a0 [ 714.038278][T29253] do_sys_openat2+0x113/0x200 [ 714.043524][T29253] __x64_sys_openat+0x138/0x170 [ 714.048883][T29253] do_syscall_64+0x14d/0xf80 [ 714.053974][T29253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.060373][T29253] [ 714.060373][T29253] -> #4 (set->srcu){.+.+}-{0:0}: [ 714.067479][T29253] __synchronize_srcu+0xca/0x3e0 [ 714.072938][T29253] elevator_switch+0x1e8/0x7a0 [ 714.078285][T29253] elevator_change+0x2cc/0x450 [ 714.083563][T29253] elevator_set_default+0x36c/0x430 [ 714.089280][T29253] blk_register_queue+0x366/0x430 [ 714.094826][T29253] __add_disk+0x677/0xd50 [ 714.099689][T29253] add_disk_fwnode+0xfb/0x480 [ 714.104904][T29253] nbd_dev_add+0x72c/0xb50 [ 714.109832][T29253] nbd_init+0x168/0x1f0 [ 714.114597][T29253] do_one_initcall+0x250/0x8d0 [ 714.119868][T29253] do_initcall_level+0x104/0x190 [ 714.125311][T29253] do_initcalls+0x59/0xa0 [ 714.130235][T29253] kernel_init_freeable+0x2a6/0x3e0 [ 714.135940][T29253] kernel_init+0x1d/0x1d0 [ 714.140863][T29253] ret_from_fork+0x51e/0xb90 [ 714.145962][T29253] ret_from_fork_asm+0x1a/0x30 [ 714.151233][T29253] [ 714.151233][T29253] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 714.159120][T29253] __mutex_lock+0x19f/0x1300 [ 714.164213][T29253] elevator_change+0x1b3/0x450 [ 714.169476][T29253] elevator_set_none+0xb5/0x140 [ 714.174826][T29253] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 714.181140][T29253] nbd_start_device+0x17f/0xb10 [ 714.186497][T29253] nbd_genl_connect+0x165b/0x1cf0 [ 714.192028][T29253] genl_family_rcv_msg_doit+0x22a/0x330 [ 714.198151][T29253] genl_rcv_msg+0x61c/0x7a0 [ 714.203153][T29253] netlink_rcv_skb+0x232/0x4b0 [ 714.208425][T29253] genl_rcv+0x28/0x40 [ 714.212906][T29253] netlink_unicast+0x80f/0x9b0 [ 714.218260][T29253] netlink_sendmsg+0x813/0xb40 [ 714.223534][T29253] ____sys_sendmsg+0x972/0x9f0 [ 714.228819][T29253] ___sys_sendmsg+0x2a5/0x360 [ 714.234003][T29253] __x64_sys_sendmsg+0x1bd/0x2a0 [ 714.239449][T29253] do_syscall_64+0x14d/0xf80 [ 714.244541][T29253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.250935][T29253] [ 714.250935][T29253] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 714.259521][T29253] blk_alloc_queue+0x546/0x680 [ 714.264802][T29253] __blk_mq_alloc_disk+0x197/0x390 [ 714.270417][T29253] nbd_dev_add+0x499/0xb50 [ 714.275340][T29253] nbd_init+0x168/0x1f0 [ 714.280004][T29253] do_one_initcall+0x250/0x8d0 [ 714.285321][T29253] do_initcall_level+0x104/0x190 [ 714.290774][T29253] do_initcalls+0x59/0xa0 [ 714.295617][T29253] kernel_init_freeable+0x2a6/0x3e0 [ 714.301326][T29253] kernel_init+0x1d/0x1d0 [ 714.306178][T29253] ret_from_fork+0x51e/0xb90 [ 714.311291][T29253] ret_from_fork_asm+0x1a/0x30 [ 714.316569][T29253] [ 714.316569][T29253] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 714.323762][T29253] fs_reclaim_acquire+0x71/0x100 [ 714.329208][T29253] kmem_cache_alloc_noprof+0x40/0x650 [ 714.335091][T29253] __kernfs_iattrs+0xdf/0x340 [ 714.340275][T29253] kernfs_iop_setattr+0xea/0x3f0 [ 714.345722][T29253] notify_change+0xc1a/0xf40 [ 714.350818][T29253] do_truncate+0x1c2/0x250 [ 714.355744][T29253] path_openat+0x2f89/0x3860 [ 714.360837][T29253] do_file_open+0x23e/0x4a0 [ 714.365842][T29253] do_sys_openat2+0x113/0x200 [ 714.371030][T29253] __x64_sys_openat+0x138/0x170 [ 714.376490][T29253] do_syscall_64+0x14d/0xf80 [ 714.381595][T29253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.388011][T29253] [ 714.388011][T29253] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 714.396513][T29253] __lock_acquire+0x15a5/0x2cf0 [ 714.401879][T29253] lock_acquire+0xf0/0x2e0 [ 714.406802][T29253] down_write+0x96/0x200 [ 714.411809][T29253] kernfs_unlink_sibling+0x71/0x180 [ 714.417549][T29253] __kernfs_remove+0x3e7/0x660 [ 714.422998][T29253] kernfs_remove_by_name_ns+0xaf/0x130 [ 714.428962][T29253] sysfs_unmerge_group+0xd4/0x140 [ 714.435013][T29253] dpm_sysfs_remove+0x76/0xd0 [ 714.440283][T29253] device_del+0x250/0x8f0 [ 714.445176][T29253] device_unregister+0x21/0xf0 [ 714.450464][T29253] hci_conn_del+0xc36/0x1230 [ 714.455610][T29253] hci_abort_conn_sync+0xdd0/0x1190 [ 714.461456][T29253] hci_cmd_sync_work+0x213/0x400 [ 714.466936][T29253] process_scheduled_works+0xb02/0x1830 [ 714.473096][T29253] worker_thread+0xa50/0xfc0 [ 714.478211][T29253] kthread+0x388/0x470 [ 714.482793][T29253] ret_from_fork+0x51e/0xb90 [ 714.487906][T29253] ret_from_fork_asm+0x1a/0x30 [ 714.493226][T29253] [ 714.493226][T29253] other info that might help us debug this: [ 714.493226][T29253] [ 714.503816][T29253] Chain exists of: [ 714.503816][T29253] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 714.503816][T29253] [ 714.518240][T29253] Possible unsafe locking scenario: [ 714.518240][T29253] [ 714.525719][T29253] CPU0 CPU1 [ 714.531070][T29253] ---- ---- [ 714.536438][T29253] lock(&root->kernfs_rwsem); [ 714.541194][T29253] lock(cpuhp_state_mutex); [ 714.548294][T29253] lock(&root->kernfs_rwsem); [ 714.555607][T29253] lock(&root->kernfs_iattr_rwsem); [ 714.560878][T29253] [ 714.560878][T29253] *** DEADLOCK *** [ 714.560878][T29253] [ 714.569001][T29253] 5 locks held by kworker/u9:0/29253: [ 714.574365][T29253] #0: ffff8880257da948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 714.585421][T29253] #1: ffffc900048ffc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 714.597954][T29253] #2: ffff88805f804ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 714.607870][T29253] #3: ffff88805f8040c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 714.617609][T29253] #4: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 714.628383][T29253] [ 714.628383][T29253] stack backtrace: [ 714.634259][T29253] CPU: 1 UID: 0 PID: 29253 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 714.634276][T29253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 714.634286][T29253] Workqueue: hci3 hci_cmd_sync_work [ 714.634310][T29253] Call Trace: [ 714.634318][T29253] [ 714.634327][T29253] dump_stack_lvl+0xe8/0x150 [ 714.634348][T29253] print_circular_bug+0x2e1/0x300 [ 714.634370][T29253] check_noncircular+0x12e/0x150 [ 714.634392][T29253] __lock_acquire+0x15a5/0x2cf0 [ 714.634412][T29253] ? __lock_acquire+0x6b5/0x2cf0 [ 714.634433][T29253] lock_acquire+0xf0/0x2e0 [ 714.634448][T29253] ? kernfs_unlink_sibling+0x71/0x180 [ 714.634466][T29253] down_write+0x96/0x200 [ 714.634481][T29253] ? kernfs_unlink_sibling+0x71/0x180 [ 714.634494][T29253] ? __pfx_down_write+0x10/0x10 [ 714.634508][T29253] ? kernfs_root+0x1c/0x230 [ 714.634526][T29253] ? kernfs_root+0x1c/0x230 [ 714.634542][T29253] ? kernfs_root+0x1c/0x230 [ 714.634560][T29253] ? kernfs_root+0x1ea/0x230 [ 714.634583][T29253] kernfs_unlink_sibling+0x71/0x180 [ 714.634599][T29253] __kernfs_remove+0x3e7/0x660 [ 714.634613][T29253] kernfs_remove_by_name_ns+0xaf/0x130 [ 714.634627][T29253] sysfs_unmerge_group+0xd4/0x140 [ 714.634648][T29253] dpm_sysfs_remove+0x76/0xd0 [ 714.634665][T29253] device_del+0x250/0x8f0 [ 714.634680][T29253] ? klist_iter_exit+0xc1/0x100 [ 714.634764][T29253] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 714.634782][T29253] ? __pfx_device_del+0x10/0x10 [ 714.634799][T29253] device_unregister+0x21/0xf0 [ 714.634814][T29253] hci_conn_del+0xc36/0x1230 [ 714.634832][T29253] ? hci_abort_conn_sync+0xa7b/0x1190 [ 714.634849][T29253] hci_abort_conn_sync+0xdd0/0x1190 [ 714.634868][T29253] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 714.634885][T29253] ? abort_conn_sync+0x26/0x210 [ 714.634905][T29253] ? abort_conn_sync+0x26/0x210 [ 714.634922][T29253] ? abort_conn_sync+0x19c/0x210 [ 714.634940][T29253] ? __pfx_abort_conn_sync+0x10/0x10 [ 714.634959][T29253] hci_cmd_sync_work+0x213/0x400 [ 714.634980][T29253] ? process_scheduled_works+0xa25/0x1830 [ 714.634998][T29253] process_scheduled_works+0xb02/0x1830 [ 714.635024][T29253] ? __pfx_process_scheduled_works+0x10/0x10 [ 714.635043][T29253] ? assign_work+0x3d5/0x5e0 [ 714.635060][T29253] worker_thread+0xa50/0xfc0 [ 714.635087][T29253] kthread+0x388/0x470 [ 714.635100][T29253] ? __pfx_worker_thread+0x10/0x10 [ 714.635116][T29253] ? __pfx_kthread+0x10/0x10 [ 714.635128][T29253] ret_from_fork+0x51e/0xb90 [ 714.635147][T29253] ? __pfx_ret_from_fork+0x10/0x10 [ 714.635163][T29253] ? __switch_to+0xc7d/0x1450 [ 714.635192][T29253] ? __pfx_kthread+0x10/0x10 [ 714.635204][T29253] ret_from_fork_asm+0x1a/0x30 [ 714.635230][T29253]