last executing test programs: 7.835463866s ago: executing program 0 (id=2107): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000f40)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000ec0)="c9df04cd8ce4f37656ffabb858c02ee95c69ff108ad5b76475bf8916734cbd57c84685f29a99074838097ed28b3d45bd4f24b1ad5ed7661fcf04c5f4e9fbfcebef046540294bb08de607993d1594343d19b89e6da0c4d2f7d7b92a2222268aa59e3113070d539092c09406c9", 0x6c}], 0x2}, 0x24004880) pselect6(0x0, 0x0, &(0x7f0000000000)={0x8000021000000022, 0x0, 0x0, 0x100000000, 0x0, 0x3fc, 0x0, 0x6}, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r2, &(0x7f0000002e80)=[{{&(0x7f0000000180)=@ieee802154={0x24, @long={0x3, 0x3}}, 0x80, 0x0}}], 0x1, 0x24050070) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r6 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x6a, 0x3, 0x0, &(0x7f0000000440)) sendto$inet(r4, &(0x7f00000001c0)="f5191cc44a636ea320ea2e8366544709052e0e711bc2227e20b6a4eef458181b65e76fa4ef6b0c9ce6a4ed7647f2a9185b6bd7487023110cedacd2aad4754c288db2e6906c3b72c903450679431a7b25ba32eca5ecd45e27339fa874e3e14c6bfa98bb1919e36b493a9cc6e819f1789c3ff4d04680f503a24bf532dd159e", 0x7e, 0x40, &(0x7f00000002c0)={0x2, 0x4e24, @private=0xa010101}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x108, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}, {0xe, 0xe}}, [@TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0x13, 0x5, 0x0, 0x5, 0x9, 0x4}}, {0xc, 0x2, [0x8, 0x1, 0x5, 0x9]}}, {{0x1c, 0x1, {0x3, 0xc, 0x9, 0xe, 0x2, 0x7, 0x3, 0x9}}, {0x16, 0x2, [0x806d, 0x800, 0x3bf, 0x100, 0x1, 0x0, 0x8, 0x1, 0x0]}}, {{0x1c, 0x1, {0x0, 0x9, 0x7, 0x27d1, 0x2, 0x8000, 0x6, 0x7}}, {0x12, 0x2, [0x6, 0x8, 0x800, 0x0, 0x0, 0x7, 0x5]}}, {{0x1c, 0x1, {0x9, 0x4, 0x6, 0x6, 0x1, 0x7, 0x9, 0x2}}, {0x12, 0x2, [0x6518, 0x1ff, 0x4, 0x8, 0x9, 0x5d, 0x2]}}]}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x9, 0xa, 0x1, 0x6, 0x1}}, {0x4}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000010) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 6.284933107s ago: executing program 0 (id=2115): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000001c0)=""/151, 0x0) 5.700477253s ago: executing program 3 (id=2119): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000010000000000000803000000000000000000000200000000010000000000001202070000002e"], 0x0, 0x3f, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x1}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="d172e1526b3f75c88baf73b93b70", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0xffff, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}]}, &(0x7f0000000140)=0x10) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e21, 0x9, @mcast2, 0x6}}}, 0x84) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f00000003c0)={&(0x7f0000000300)=[{0x4, 0x1, 0x0, {0x6f03, 0x9, 0x1}}, {0x4f08da64, 0x2, 0x0, {0x0, 0x6, 0x1}}, {0x7, 0x0, 0x0, {0x5, 0x680, 0x2}}, {0x4, 0x0, 0x0, {0x5, 0x2, 0x1}}, {0x2, 0x2, 0x0, {0xffff, 0x1}}], 0x5, 0x20, 0x8000, 0x8}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0xd, 0x9, 0x9, 0x34, @private0, @empty, 0x80, 0x8000, 0x6, 0xf2}}) r5 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r1, r4, 0x25, 0x1a, @val=@uprobe_multi={&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=[0xe, 0x7ff], &(0x7f0000000800)=[0x2, 0x2, 0x0, 0x2], 0xfffffffffffffe01, 0x2, 0x0, r5}}, 0x40) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000500)="ff74e01db7df635a6597a6ddf92608863f5a23ba0e66ca28b4219d8a49add8d52442346288092d053384e9512649111bcda3f357d22719bb940d1a13a4103ba24cfe4978313d01119d5c3b26f0") r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @local, 0x2}, @ax25={0x3, @default, 0x1}, @ax25={0x3, @bcast, 0x5}, 0x6, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000080)='pimreg1\x00', 0xffffffffffffffff, 0x5, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket(0x1, 0x803, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x7, 0x6, "0f0d29", 0x7, 0x33, 0x0, @private1, @empty}}}}}}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000214010028bd7000fedbdf2505005400fce70000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80d0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000007140100", @ANYRES32=r9], 0x30}}, 0x94) 5.19388294s ago: executing program 0 (id=2122): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000280), 0x12) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200400c4) setsockopt$sock_int(r4, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendfile(0xffffffffffffffff, r3, 0x0, 0xffffffff000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c055}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0xe, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x21dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno', 0xa) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000340)=0x20008) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r7, &(0x7f0000000140)=[{&(0x7f00000003c0)="00214717a707040000004306000000e6b308f60feb56", 0x16}], 0x1, 0x7c53, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="480100001a00560600000000fddbdf25b16e0101000000000000000000000000ffffffff000000000000000000000000000040004e2480010000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe80000000000000000000000000000b230300000000000001000080000000000000000000000000c0000000000000000040000000000000000000000000000000000000000000000800000000000000000001000000000000000000000000000000000002000000000000000000000000000000000000000000000029bd7000033500000a000500000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005002100020000000800290001800000"], 0x148}}, 0x200080d4) 5.089263561s ago: executing program 2 (id=2123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x41, 0x3, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0x1f0, 0x1f0, 0x208, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0xff, 'sit0\x00', 'wg1\x00', {}, {0xff}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@set={{0x40}, {{0x2, [0x1, 0x3, 0x4, 0x4, 0x0, 0x4], 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x3, 0x1, 'pptp\x00', {0x80}}}}, {{@ip={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'pim6reg\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x6, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x9, 0x7, 'pptp\x00', 'syz1\x00', {0xb96}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="c62fdf4c8c3ef25387e81e2bdade280000020a2fec8c101e05899ab7f6efdb002f00090067"], 0x28}, 0x1, 0x0, 0x0, 0x20046004}, 0x0) 4.667427555s ago: executing program 2 (id=2124): socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x1, @local}, 0x1c, 0x0}}, {{&(0x7f0000002440)={0xa, 0x4e24, 0x5, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x67, 0x0, 0x1, 0x7}}}], 0x18}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x2}, &(0x7f00000002c0)=0x8) r3 = socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, &(0x7f0000000680)) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, &(0x7f0000000680)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) (async) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x0, 0x8, 0xc9cd, 0x7f, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x2, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x7fff, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x400, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0x1417, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0xf, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0xffffffff, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0xa, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x270, 0x2, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x80000000, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffc, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r14, {0x10}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r2, 0x3, 0xb680, 0x8001, 0x9, 0x5}, 0x14) sendmsg$NFQNL_MSG_CONFIG(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x11}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x8000) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 4.631341382s ago: executing program 3 (id=2125): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fe5000000071101d000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x40, 0x5, 0x4420, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001500010000000000000000002d000000", @ANYRES32, @ANYBLOB='\b'], 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x58, &(0x7f00000014c0)}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000880)=ANY=[], 0x32600) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x61800, 0x30, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20114}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001740)={0xffffffffffffffff, 0x20, &(0x7f0000001700)={&(0x7f0000001600)=""/34, 0x22, 0x0, &(0x7f0000001640)=""/156, 0x9c}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1, 0x0, 0x12}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="09000300010001", 0x7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r6, 0x1, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r8}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r9, 0x26, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001880)={0x0, 0x8efd, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000018c0), 0x4) 4.18577189s ago: executing program 0 (id=2127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x8000}, &(0x7f0000000080)=0x8) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r3, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000440)=0x80) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00012bbd7000ffdbdf050000000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000240)=[{r0, 0x86}], 0x1, 0x9) 4.076778246s ago: executing program 1 (id=2128): unshare(0x28000600) r0 = socket$kcm(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xfd, &(0x7f0000000400)={&(0x7f0000000440)={0x30, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xb9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc22}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7d}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$sock_attach_bpf(r0, 0x114, 0x3, 0x0, 0x10) 4.025482965s ago: executing program 4 (id=2129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 3.531231351s ago: executing program 1 (id=2130): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r0, &(0x7f0000000080)="16b565a0cbf8e1c28aba844e", 0xc, 0x0, &(0x7f00000000c0), 0x12) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x4924924924925c1, 0x8801) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001080)={r3, 0x4}, &(0x7f00000010c0)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="f000000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e2003ff000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000004d66c000000ac1414bb000000002100000000000000fdffffffffffffff09000000000000000600100000000000ffff0000000000001c250800000000000900000000000000f8fff8ffffffffea0000000000000000060000000000000000000000000000000f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a00010e200000000000000027abcd1d004d6a6d71eaa3b4e4e4dc440c8119b168d517974e4b2508cb8ebc622d93bfaa0a8d4e5c2320201f093f8e0625020606c40b18226c971c555b4461becdaf7481"], 0xf0}, 0x1, 0x0, 0x0, 0x4845}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000002fc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002f80)={&(0x7f0000003000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf25050000005c0007800c00040005000000000000000c00040006000000000000000c0004000000000001000000080002009d0000000c00040003000000000000000c00030001000100000000000800020045a100000c000400040000db17e6fa2ccbc1c64fc0d97b2e0000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000880) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000100001040100000000000000000000000000000000000000000000000900030069666232000000000c00128008000100696662"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$bt_hci(r4, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x12, &(0x7f00000001c0)=0x5, 0x4) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x2200, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) sendmmsg$sock(r9, &(0x7f0000001b80)=[{{&(0x7f0000000580)=@ax25={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000400)="ad73ba016586a0d91cc84a44c721882b726930c3781e6b15e7aa77112f18264aa922c231ed23ddbe14639db23c7342d2896594b887413a8e91c530a5985a6b7d2860311504643d7a7f0a1713108c6065894db188076997994c2459a4734fd73527339f27a0da1e25a701d2aff133301fadfdc1ab1132403dda592976d10dd7be3c7f9747185ce7c928ce047e9a3e89cfa8e40264599c758ba30eeb37", 0x9c}, {&(0x7f00000004c0)="966c8b76da7fcea1158f6f32b124bf29bc71b5efbd06405f638e8438da65850f696c437fa88e8581f739c2012436e7d8ace0472a62e9f86889cd316382a6304d239ee031bbe75dce1ae3e9d7123595a2371114527c1ca5fade1219234ea6d9517345a19f0ec559fde8cdbeb6cad1f2a48f651c08b5525c6a5a0afa3584a334eab6f70f93c2756997ad8362d9715a901e2f8b392a30adfc28188d7f768e57a15870516abb56d09084891db53a484f5e05d2c574efbad1054a8c84425f356134", 0xbf}, {&(0x7f0000003140)="ab448da31aa88ac76872b4455ac02765444907bc5493d355c1060b79353e38e245394aacbd0d8708cca408d19932bd9273c65c62ac740a10af59cc324db99924d95294113991255fc45af3982a415358cfbf048db3ca2f279a5269110c241064f442dc7d1aa3e15c59d671b61ce87f06dbab094b62eee7ee8ac069f1059cc3c746f9faecce616033b0866b29c4edfe2adfffc360d011d17bae3334a48229cf684265a2735e5cabdbd57153e35a0ba3c60e1a1a7bb75bef34dc76af7d61ca53", 0xbf}, {&(0x7f0000000640)="bb0d91047f8d9416525709a1352cd8363c9a59f629b7b5415f3cdcf86cfc53d0efcc5ffa225016ebe019478e62148c0086b2285bd6f3b4e209e77b19396c9bea470a0a5f6bf76a65a0da573b49f3af0c353857b0", 0x54}, {&(0x7f00000002c0)="b790a0acfbb3457f75544072de6754cf862756e95fd4c2cf6ebcac0f3090343f79a2cd6ba4694a2775372b9a13a837f374437fbb07c79d77fdc18be74b9e4d38713c633d175b1dc489cac1a026f31527c3695892b242e7d5625afe", 0x5b}, {&(0x7f0000001880)="49b968ce4270606987f8f660dfabd87230fa4a449d422cd20e259f540ebd587d3a86d0a77f8eda25ff9e22c465332b16b5f3095aa77acd85091dbaba07955a056f1ee745b7e85b5a89a1b97f9201e6a041ae6057f3cd3e9b855e325afc6cf49303c56e7bd767730d78ac80c5c21c5030ecb8da77471489d9b427b6b9e735e9c754b4999111676a2d434648e7e481423ebfcac6179e89b22a4ebf1707ed04e871851bb90c792cca81eb93bed28e36407db44d268983443b60cf4d35c8b1aacce96289542a5b40a057e35692e32643bdb3f30eb0d332eb9b30a375572333", 0xdd}], 0x6, &(0x7f0000001a00)=[@txtime={{0x18, 0x1, 0x3d, 0x160a000}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001a40)="8781c09b690fdccf0c7e5ad00c2dab36745c249ebbec52ed2b630574a7339945bc6ead290298c5add1ffb3b4737f2e333706c379db7a0e18476f4c111c456049df8ea241b24b6d99c5fb8570da3d3bc60fbf3c", 0x53}], 0x1, &(0x7f0000001b00)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0xf039}}, @timestamping={{0x14, 0x1, 0x25, 0x32b}}], 0x60}}], 0x2, 0x100) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x26e1, 0x0) close(r10) sendmsg$kcm(r10, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x2, {0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x6}}}, 0x80, 0x0}, 0x2004b761) ioctl$SIOCSIFHWADDR(r10, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4d83020004010000140003006e657464657673696d30000000000000180000001400018010000600030000008663000086230000"], 0x4c}, 0x1, 0x0, 0x0, 0x40c1}, 0x8840) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x200}, 0xc) 3.440072435s ago: executing program 3 (id=2131): socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000080) write$cgroup_subtree(r0, 0x0, 0x10448) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x3, 0xff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @loopback, @remote}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'tunl0\x00', r2, 0x10, 0x80, 0x8, 0x0, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x66, 0x0, 0x7, 0x2f, 0x0, @loopback, @remote}}}}) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) socket(0x10, 0x3, 0x0) 3.421631321s ago: executing program 4 (id=2132): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x3ff}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x4}]}}}]}, 0x44}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffcf1, @private1, 0x8001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0xc000, @local, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)}], 0x1}}], 0x2, 0x42) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x82, &(0x7f00000002c0)="1af3050013000000", 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = accept4(r0, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000200)=0x80, 0x800) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x2, @empty, 0x8c6}}, 0x7ff, 0x6, 0x8001, 0x1b6, 0x9}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000440)={0x4000, 0x5, 0x7, 0xffffffff, r4}, &(0x7f0000000480)=0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x19, &(0x7f0000001880)=ANY=[@ANYBLOB="b7070000000000007b7af0ff00000000bfa200000000000007020000f0ffffff18260000", @ANYRES32=r6, @ANYBLOB="00000000fcffffffb704000000000000b7050000ffffffff85000000630000001500020000000000bf01000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7052caeb2e2e9a728670000a5000000d5f5ff0000000000"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r8, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg(r7, &(0x7f00000000c0), 0x0, 0x20000884) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="8c", 0x1, 0x45, &(0x7f0000000100)={0x2, 0x4e02, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001500)={r5, 0x2}, &(0x7f0000001540)=0x8) recvmsg(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000500)=""/4087, 0xff7}], 0x2}, 0x10000) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000001780)={{{@in=@local, @in6=@private1}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000000c0)=0x58) socket$key(0xf, 0x3, 0x2) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100)) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1128000, 0x1000, 0x4}, 0x20) writev(r9, &(0x7f0000000400)=[{&(0x7f0000000280)="2dc3864b5a685a3b01920ed55065aef827447dd83db4b5bee0c25dbf08609c3884db32d48019010b287bad540e2d05ef99c29e8a1daba41420685a17f72e0d0db5d3994c4082b7ba23534f4985a5ddd5b132dd23717c57fb6a1939b0e021924e0a31f9dfcb0c", 0x66}], 0x1) 3.056858539s ago: executing program 2 (id=2133): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/ipc\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x1}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r4) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 2.895326933s ago: executing program 0 (id=2134): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x102, 0x0) 2.765727046s ago: executing program 3 (id=2135): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)={0x2000}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) unshare(0x20000400) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x81}}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000d080)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f00000004c0)={0x81c, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) listen(r0, 0x0) syz_emit_ethernet(0x75, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x3f, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"43943dcfc26104897fbf779b02e68dd984cdab6041f484e3207fa0e33e52b9184f175b39108c2d12c61ebd"}}}}}}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f000000cfc0)={{r4, &(0x7f00000002c0)='\x00', 0x101000, &(0x7f0000000340)={@align=0x1, {0x1000, 0x5, 0x1b1, 0x40}}, 0x800, &(0x7f0000000380), &(0x7f00000003c0)=0x2}, 0x7, &(0x7f000000cec0)=[{0x2, 0x5, &(0x7f000000c840)='nat\x00', &(0x7f000000c880)="1157a5fc39920bcd6917c4fbabce13ea57688fe5cac3bc0490ac6201aadd8a28e76a5beddf793a8f23c0203330d0324e1fa70712157253b3ef479ab8d936a1afaeb65ef4b547182652298198864512613cb2d6e12ad4086796af6a921de8a4e9645e2ececcb352c6773e396dc6e380d93eb32b492dd5c93046bfd22e3161eb07b8ed81f5cf18093749105a0fa9032778d0550e0881fc2af947078821563ae698bb6b29bceea081c1c9cc19fb14c191c754a917308f8dcdbfe7fa37599da5d21e354c9e09c2ee2956ec5928a872db2e8fc4da9ef582cffd699f54ab0d2c68835c5d02d8af1c035259fb812e", 0xeb}, {0x1, 0x81, &(0x7f000000c980)='\xaa\xaa\xaa\xaa\xaa', &(0x7f000000c9c0)="34613cf0219debab45316d9f6888c411f8ba80b4c53437bfa0ab8a8df33e896548fea06ce908690022ebc8d7f93223ec8918c417c26470cab46f82a3f9d7be0aed03358493e56336ebee36b518807598a02f18d475c86924896d81771a7f6e31ce79dd4ed9c7829be1ab4a1d99dffd32102b43c74dd228be90248c4e2a64429f18ae3e9c447b", 0x86, 0x2}, {0x1, 0x6, &(0x7f000000ca80)='syz0\x00', &(0x7f000000cac0)="13a825d9198873e1ee8a32eb2a5836af5f8cc0c60928d04d0effc5b1eb257db05cb158719e781763eba84fd47fe95a2e4bb27fae4b3275b9c70b14d5f18939bed2dc269ea86d7228e41d0d9043903f063fead36de750e10e9b8c5049caf7492b5d40f1f4615f18f4a805bb", 0x6b, 0x8}, {0x3, 0xd22b, &(0x7f000000cb40)='\xaa\xaa\xaa\xaa\xaa', &(0x7f000000cb80)="80130afb5696ba91b9eb03c5cb8a6bb5a13af076f6327430bbb8a44860bc1874bb895bfd21a15d0fbaa6f95952e3bb1a2a2c1bc5a2b7943beb8edf7a19ffe26334b668ac4d5e9db0dac9fbe1a80f9a532a32a9bf0738cbb4af0f4b97726f4afc5e434c8e9b135f4ee5dd7f23a2a56a0bd13641b826d0b5605f3f651ad4ee521f4be09bc646425474401a7d3a42c2be72d7401d59fe9e7c1faeed98fa87aa89010e003949f387b556c3702edf89d28a80d0516d9d1fec8920a33ea5c228b172ab450ed51396d11c8281c55afd7cd88e052e940ed9fb31c45208d359e5e72f791835b7b2bce0d797b631259499", 0xec, 0x10}, {0x2, 0x2, &(0x7f000000cc80)='\'%((#+\x00', &(0x7f000000ccc0)="e9148c3b1993b4bc78e86072a0f3c4a87d1dac8b522b7dc1f9099558750742520ffc78426a0a510c646fe05e64da654d42222e291844c3179f4e4c3c2069cf392775aa0dede86bc0d4b2168ea3737477ba6ead87cd558576a5cf", 0x5a, 0x8}, {0x2, 0xa, &(0x7f000000cd40)='[\x00', &(0x7f000000cd80)="6236a8f28c710e2018b04a6d0585bfa969dc", 0x12, 0x20}, {0x3, 0x10000, &(0x7f000000cdc0)='^\'+\\]\x00', &(0x7f000000ce00)="03258d4e02e7c0a0702a2a4360a37b879529eb3416054b70f4b8c6f903546873b195941fef10ffc626357d64a806544813e27e063807b1976af5901a8e67b4e84c9a5c93f17eb7169128c79c2473a12c144f253db5967b2b8268907cfda899f054770e877a059d8683ecc2eabebbf2a87aec7c478cdcd9edb19a14e198ed4d92b9751dd1398b653c981ec6fb4b3e21ec162d26b8c404042061573877008a", 0x9e}]}) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f000000d040)={0x3a, @multicast1, 0x4e20, 0x4, 'sh\x00', 0x2d, 0x4, 0x16}, 0x2c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={r8, 0x9c, &(0x7f000000c780)=[@in6={0xa, 0x4621, 0xfee, @dev={0xfe, 0x80, '\x00', 0x10}, 0x6}, @in6={0xa, 0x4e21, 0x2, @private0, 0x9}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x800}, @in6={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x2}, @in6={0xa, 0x4e22, 0x6c02, @empty, 0x4}]}, &(0x7f0000000440)=0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000140600fe8000000000000000000000000000aafe8000000000000000000000000000aafffc4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70c200059078f500"], 0x0) 2.710640619s ago: executing program 2 (id=2136): sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x14) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020afc000700000028bdc16bafccdf2505001a0000000000000000000000000000000000ac14bf194c2fbd5114890000000000000a0049"], 0x38}}, 0x40408c0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0xe4, @mcast2, 0x9}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xfffffffd}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r4, 0xfffe}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.631834253s ago: executing program 0 (id=2137): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0xd0, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x9c, 0x2, [@TCA_MATCHALL_ACT={0x44, 0x2, [@m_ct={0x40, 0x18, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x48, 0x2, [@m_bpf={0x44, 0x1f, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x9, 0x6, "eb8d4e3027"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0xd0}}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0)=[0x1], &(0x7f0000000700), 0x4, 0x100000}}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x10, 0x10012, r5, 0x0) getsockopt$inet_buf(r5, 0x0, 0x11, 0x0, 0x0) write$ppp(r0, &(0x7f0000000200)="724d2b1f", 0x4) 2.447961943s ago: executing program 1 (id=2138): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000a050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x114, 0x20, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x5a, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic='\x00\x00\x00\x00\x00\x00\x00', @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd", @typed={0xc, 0x0, 0x0, 0x0, @u64=0x79}]}]}, 0x114}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r8, r5, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[], 0x0) syz_genetlink_get_family_id$nl802154(0x0, r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, 0x0, 0x20000000) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000140003002bbd700600dbdf250a019cc8402324c096f85bf75fa65792dd758b9f6ed0453b012a15f1a34b4796d2f7af6a29e9c845e835edb2063906cf2e3321490849cd8db0685a72b77ed25952c450bec38d783560be655adc052126704a9fa5938d9e9d66a4fc485ca734a41ed40a43c5ff5bf5dc5e6878189466e560439c009e169346be2eceff79ade3b403f9d4df388d31be6e20ba6b83d64549a7922e9d5c650046d5f16cbe17176632", @ANYRES32=r9, @ANYBLOB="14000200fe8000000000000000000000000000aa08000a00010000000800090000000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$kcm(0x21, 0x2, 0xa) 2.021443394s ago: executing program 4 (id=2139): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = socket(0xa, 0x3, 0xff) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x45ba, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x8, 0xfef, &(0x7f00000014c0)=""/4079, 0x0, 0x47}, 0x94) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xa, 0x4, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x11}}}], 0x18}, 0x922bac8556bdad8e) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r4, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x888e, r5, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x4000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) 1.516005478s ago: executing program 2 (id=2140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000200)=[@mss, @window={0x3, 0x7d1, 0xfffe}, @window={0x3, 0x7}, @timestamp, @window={0x3, 0x3, 0x401}, @window={0x3, 0x1157, 0x800}, @sack_perm, @window={0x3, 0x3, 0x1}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000240)="a87b918e0d96505a91e25b907f14e64e147532648fce7de3c4efcdc67cc2adb1758fc72f05d6abfe50450409bb83b6db3a2cb291899734fc6bdd0398709d6088506a1972d670e974975486375ddf479e60e142d1593f614e6594e43dd44ae3e80f6d2abe0ba8a4a5e655b6142f8dff9e3aeda8f2c014bb247f9ed195f3869e00f67c1d78a38bf8ee58ea8a9ac31d1aeb6df7acad85e7adc5c48d583f1ae634", 0x9f, 0x8010, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.283519856s ago: executing program 4 (id=2141): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, 0x0, 0x205, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8200}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x13fea3995e811172}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0xfffffffe, 0x7, 0x5646, 0x151, 0x10000101}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c00"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@security={'security\x00', 0x64, 0x4, 0x320, 0x100000c, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @empty, 0x7f7fffff, 0xff, 'pim6reg\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7e}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0xff, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xe8, 0x158, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x4}, {{0x42}, 0x5a}, {{0x4}, 0xa}, 0x3}}, @common=@icmp={{0x28}, {0x4, "be45"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0x4, 0x1, 0x0, "edeefc7a46ef3cea9319261fc16bf346b02017e99505b0c7009c97ca57e52d700c2a13d2f6801ec1f9e235d607748a457ab960a3c75db8c7a293fee516de6c61"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@security={'security\x00', 0x64, 0x4, 0x320, 0x100000c, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @empty, 0x7f7fffff, 0xff, 'pim6reg\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7e}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0xff, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xe8, 0x158, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x4}, {{0x42}, 0x5a}, {{0x4}, 0xa}, 0x3}}, @common=@icmp={{0x28}, {0x4, "be45"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0x4, 0x1, 0x0, "edeefc7a46ef3cea9319261fc16bf346b02017e99505b0c7009c97ca57e52d700c2a13d2f6801ec1f9e235d607748a457ab960a3c75db8c7a293fee516de6c61"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={r2, r3/1000+60000}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) shutdown(r0, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c00000010001fff000000000100000400000000", @ANYRES32, @ANYBLOB="08002900e814010008002900c36e020008002e000300000008001c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c00000010001fff000000000100000400000000", @ANYRES32, @ANYBLOB="08002900e814010008002900c36e020008002e000300000008001c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.097591695s ago: executing program 3 (id=2142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 834.379586ms ago: executing program 4 (id=2143): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=r0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00420040000000060000000c003900ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES64=r1], 0x8c}, 0x1, 0xba01, 0x0, 0x400c085}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x200048d4}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0xcc, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x8, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_SEL={0x94, 0x5, {0xd, 0x32, 0x8, 0x23, 0xa16, 0xc869, 0x4, 0xffff8001, [{0x8, 0x1, 0x1000, 0x69}, {0x6, 0x3, 0x3, 0xc}, {0x9, 0x4, 0x6, 0x8}, {0xe, 0x3, 0xffffe50c, 0x2}, {0x8, 0x4, 0x79, 0x9}, {0x1, 0xfffffe00, 0x5, 0x3}, {0x7ff, 0x7, 0x3, 0x7}, {0x3, 0x3d5, 0x3431, 0x9}]}}]}}]}, 0xcc}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000000017000018110000", @ANYRES32=r3, @ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000000017000018110000", @ANYRES32=r3, @ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 659.678447ms ago: executing program 3 (id=2144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xffffffa7}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x1f580}], 0x8}], 0x1, 0x20040800) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001bc0)={0x68, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) 609.53191ms ago: executing program 1 (id=2145): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000600), 0x0, 0x4000c014) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffff}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80005}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 484.835934ms ago: executing program 4 (id=2146): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="0004000000c398b156b64d149f8bd76b8ba8b8346df669758615829e09dc144a8f16e02b8d5ef7dd83b0694dc7d77b3712cb905a1848def1660271638e683d17e783824464e2d7c87e01c0f668b070df05b5ed49148c591d03decafa41e46924b74bfca0a8e71ca5c5f6b0ae3800ac68d4658f8a58c21c0444d005f7d1450055dfdc9e1c9ada553d3f8f8841d455d49987e645115978286de6a4ba4f6f6cf6704f4951e68de0c2a3d9255b0c54bed51715e63380fcf43a4f8f8ca86437bf31dcc31ab8e7d6d66b880e5cf1c25d7ef960c3ea11ea74f54a9f426177c48b2801c4a7d4309df7abfebf07"], 0x5) close(0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000800)=ANY=[@ANYRESOCT=r2, @ANYRES32=r0, @ANYRESHEX=0x0, @ANYRES64=r3, @ANYRESHEX, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYBLOB="da99677551a1b35ac71a9178e189ee8224fee46c782c249b26bf9aa8a377654049a58375f19affb6bfc7c68c2979bf533801d30509a6d34825db5d8d028f6a3f323d14e6e8d8849eee3560f91ab440349129278bb19a09e328ff680a73fbfe218fb83c12594c7259e9eb9c8dae1121d52a8989fb1b3578e9f54795321b2c55fac80300bfdec5", @ANYRES64=r2], &(0x7f00000000c0)='GPL\x00', 0x0, 0x38, 0x0, 0x41000}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYBLOB='\a'], 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x5e21, @empty}, 0x10) close(r5) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdc02, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc) socket(0x10, 0x803, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast1, 0x9}}, [0x7, 0x4, 0x8000000000000001, 0x4, 0x400, 0x6, 0x2a, 0xf4ed, 0x4, 0x7, 0x1, 0x1d, 0x3, 0x0, 0x100]}, &(0x7f00000005c0)=0x100) 392.099596ms ago: executing program 2 (id=2147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async) r1 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 64) r2 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async, rerun: 32) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) r3 = accept(r2, &(0x7f00000001c0)=@generic, &(0x7f0000000240)=0x80) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x7, @private0, 0x9}}, [0x8a, 0x28, 0x200, 0x0, 0x2, 0x4, 0x10001, 0x29, 0x5, 0x0, 0x8000, 0xfffffffffffffffe, 0x10001, 0x1, 0x10]}, &(0x7f0000000380)=0x100) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e23, @local}}}, 0x84) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x8050) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) (async) close(r0) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r6, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r6, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580020007"], 0x4a) (async) syz_emit_ethernet(0xa2, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tipc={{0xd, 0x4, 0x2, 0x30, 0x94, 0x68, 0x0, 0x8, 0x6, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @end, @end, @ssrr={0x89, 0x1b, 0x11, [@broadcast, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty]}, @noop]}}, @name_distributor={{0x60, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x6, 0x0, 0x1, 0xffff, 0x1, 0x0, 0x4e21, 0x4e22, 0x4, 0x3}, [{0x3, 0x5, 0x3, 0x80000001, 0x7ff, 0xb9af, 0x0, 0xb540}, {0x100000, 0x2, 0xfffffffb, 0xbf, 0x4, 0x100, 0xa, 0x7ff}]}}}}}, 0x0) 212.964355ms ago: executing program 1 (id=2148): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FITHAW(r0, 0xc0045878) syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) socket$key(0xf, 0x3, 0x2) 0s ago: executing program 1 (id=2149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1e}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x12, &(0x7f0000000700)=@framed={{}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff90}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): `syz.2.722'. [ 168.148640][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.246258][ T8802] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 168.520074][ T8811] syzkaller1: entered promiscuous mode [ 168.520095][ T8811] syzkaller1: entered allmulticast mode [ 169.356434][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.414130][ T8841] netlink: 3560 bytes leftover after parsing attributes in process `syz.1.732'. [ 169.420102][ T8842] netlink: 3560 bytes leftover after parsing attributes in process `syz.1.732'. [ 169.556448][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 169.641106][ T8852] x_tables: duplicate underflow at hook 2 [ 170.038985][ T8873] netlink: 'syz.1.742': attribute type 83 has an invalid length. [ 170.065749][ T8866] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 170.455068][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.555502][ C0] bridge0: port 3(vlan0) entered learning state [ 170.853916][ T8892] netlink: 64 bytes leftover after parsing attributes in process `syz.4.747'. [ 171.005013][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'. [ 171.196735][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 171.196988][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 171.349503][ T8906] syzkaller0: entered promiscuous mode [ 171.349525][ T8906] syzkaller0: entered allmulticast mode [ 171.372355][ T8906] tipc: Started in network mode [ 171.372386][ T8906] tipc: Node identity de9e77dbef59, cluster identity 4711 [ 171.373784][ T8907] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:21 [ 171.386403][ T8907] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 171.401423][ T8906] tipc: Enabled bearer , priority 0 [ 171.415476][ T8906] tipc: Resetting bearer [ 171.429319][ T8905] tipc: Resetting bearer [ 171.468207][ T8905] tipc: Disabling bearer [ 171.597659][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.785389][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 171.930218][ T8924] xt_connbytes: Forcing CT accounting to be enabled [ 171.930439][ T8924] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 172.682030][ T8956] netlink: 52 bytes leftover after parsing attributes in process `syz.2.759'. [ 172.718841][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.948825][ T8965] netlink: 'syz.0.760': attribute type 4 has an invalid length. [ 173.016857][ T8966] netlink: 'syz.0.760': attribute type 4 has an invalid length. [ 173.369945][ T8977] netlink: 72 bytes leftover after parsing attributes in process `syz.4.765'. [ 173.386248][ T8977] netlink: 84 bytes leftover after parsing attributes in process `syz.4.765'. [ 173.639419][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 173.639504][ T8981] veth0_virt_wifi: left allmulticast mode [ 173.639525][ T8981] veth0_virt_wifi: left promiscuous mode [ 173.639749][ T8981] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 173.687351][ T8981] bridge_slave_1: left allmulticast mode [ 173.687379][ T8981] bridge_slave_1: left promiscuous mode [ 173.690907][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.767'. [ 173.717997][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.722217][ T8981] bridge_slave_0: left allmulticast mode [ 173.722242][ T8981] bridge_slave_0: left promiscuous mode [ 173.722442][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.854154][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.364552][ T9008] ip_tables: iptables: counters copy to user failed while replacing table [ 174.366545][ T9008] C: renamed from lo [ 174.372256][ T9005] netlink: 'syz.4.772': attribute type 2 has an invalid length. [ 174.402160][ T9008] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 174.541040][ T9005] : entered promiscuous mode [ 174.548671][ T9005] netlink: 'syz.4.772': attribute type 2 has an invalid length. [ 174.566016][ T9013] syzkaller0: entered promiscuous mode [ 174.566043][ T9013] syzkaller0: entered allmulticast mode [ 174.611643][ T9005] netlink: 'syz.4.772': attribute type 2 has an invalid length. [ 174.631904][ T9005] netlink: 'syz.4.772': attribute type 2 has an invalid length. [ 174.684245][ T9005] netlink: 'syz.4.772': attribute type 2 has an invalid length. [ 174.693628][ T9005] netlink: 'syz.4.772': attribute type 2 has an invalid length. [ 174.720850][ T9005] netlink: 'syz.4.772': attribute type 2 has an invalid length. [ 174.752087][ T9017] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.852720][ T9019] : renamed from vlan0 (while UP) [ 174.964268][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.033415][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 175.033706][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.046647][ T9005] validate_nla: 17 callbacks suppressed [ 175.046668][ T9005] netlink: 'syz.4.772': attribute type 2 has an invalid length. [ 175.063101][ T9005] netlink: 'syz.4.772': attribute type 2 has an invalid length. [ 175.191079][ T9014] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 175.205522][ T9014] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 175.509064][ T9014] Dev vda: unable to read RDB block 8 [ 175.509307][ T9014] vda: unable to read partition table [ 175.739403][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 175.768503][ T9034] netlink: 260 bytes leftover after parsing attributes in process `syz.3.781'. [ 175.788228][ T30] audit: type=1107 audit(1790582663.636:2): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 175.808774][ T9038] netlink: 'syz.2.784': attribute type 1 has an invalid length. [ 176.033296][ T9049] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.785'. [ 176.038579][ T9038] bond2: entered promiscuous mode [ 176.039850][ T9038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.098261][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.396837][ T9059] lo: entered allmulticast mode [ 176.492886][ T9064] netlink: 'syz.1.790': attribute type 1 has an invalid length. [ 176.559955][ T9067] netlink: 'syz.1.790': attribute type 10 has an invalid length. [ 176.597514][ T9064] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.621041][ T9058] lo: left allmulticast mode [ 176.665486][ T9068] netlink: 'syz.1.790': attribute type 10 has an invalid length. [ 176.905024][ T9067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.934219][ T9067] team0: Port device netdevsim1 added [ 176.971889][ T9073] ieee802154 phy0 wpan0: encryption failed: -126 [ 177.059231][ T9080] ieee802154 phy0 wpan0: encryption failed: -126 [ 177.152469][ T9068] team0: Port device netdevsim1 removed [ 177.168535][ T9068] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.206660][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.220999][ T9068] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 177.383058][ T9090] netlink: 44 bytes leftover after parsing attributes in process `syz.0.795'. [ 177.424282][ T9078] bond3: option ad_user_port_key: invalid value (65535) [ 177.424306][ T9078] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 177.471200][ T9078] bond3 (unregistering): Released all slaves [ 177.619336][ T9095] IPVS: length: 235 != 8 [ 177.938804][ T9102] netlink: 'syz.3.799': attribute type 28 has an invalid length. [ 178.134700][ T9106] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.326113][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.310339][ T9150] atomic_op ffff8880686671e0 conn xmit_atomic 0000000000000000 [ 179.456893][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.851516][ T9166] netlink: 140 bytes leftover after parsing attributes in process `syz.3.815'. [ 179.852624][ T9165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.815'. [ 179.892184][ T9168] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 180.227054][ T9179] netlink: 5 bytes leftover after parsing attributes in process `syz.3.819'. [ 180.254308][ T9175] netlink: 'syz.0.817': attribute type 1 has an invalid length. [ 180.315167][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.817'. [ 180.342763][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 180.459838][ T9164] syzkaller0: entered promiscuous mode [ 180.459861][ T9164] syzkaller0: entered allmulticast mode [ 180.472471][ T9190] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 180.472506][ T9190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.574939][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.638270][ T9175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.710525][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 180.903023][ T9189] batadv_slave_1: entered promiscuous mode [ 180.926083][ T9189] macsec0: entered promiscuous mode [ 180.926328][ T9189] macsec0: entered allmulticast mode [ 180.926342][ T9189] batadv_slave_1: entered allmulticast mode [ 180.932075][ T9189] batadv_slave_1: left allmulticast mode [ 180.932306][ T9189] batadv_slave_1: left promiscuous mode [ 181.290439][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 181.511672][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.821'. [ 181.691595][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.809246][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.904058][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.431908][ T9212] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.445984][ T9212] bond3: (slave bond4): Enslaving as an active interface with an up link [ 184.478721][ T9216] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 184.481716][ T9218] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.903105][ T9229] ip6gretap1: entered allmulticast mode [ 184.920165][ T9229] batman_adv: batadv0: Adding interface: ip6gretap1 [ 184.920203][ T9229] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.920232][ T9229] batman_adv: batadv0: Interface activated: ip6gretap1 [ 185.094139][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.371431][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 185.456686][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 185.512195][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 185.637253][ T9248] netlink: zone id is out of range [ 185.637275][ T9248] netlink: zone id is out of range [ 185.637282][ T9248] netlink: zone id is out of range [ 185.637289][ T9248] netlink: zone id is out of range [ 185.637297][ T9248] netlink: zone id is out of range [ 185.637303][ T9248] netlink: zone id is out of range [ 185.638936][ T9248] netlink: zone id is out of range [ 185.638950][ T9248] netlink: zone id is out of range [ 185.638958][ T9248] netlink: zone id is out of range [ 185.922969][ T9262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.834'. [ 185.923203][ T9262] ip_vti0: entered allmulticast mode [ 186.016759][ T9265] xt_hashlimit: size too large, truncated to 1048576 [ 186.440400][ T9281] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 186.458955][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.837'. [ 186.458991][ T9281] netlink: 'syz.4.837': attribute type 8 has an invalid length. [ 186.459003][ T9281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.837'. [ 186.511274][ T9283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.837'. [ 186.511307][ T9283] netlink: 'syz.4.837': attribute type 8 has an invalid length. [ 186.511319][ T9283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.837'. [ 186.586691][ T9282] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 187.225055][ T9305] IPVS: length: 168 != 24 [ 187.775478][ T9323] netlink: 256 bytes leftover after parsing attributes in process `syz.0.849'. [ 187.775506][ T9323] netlink: 32 bytes leftover after parsing attributes in process `syz.0.849'. [ 187.944202][ T9299] netlink: 'syz.4.843': attribute type 10 has an invalid length. [ 188.147284][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.852'. [ 189.022059][ T9369] syzkaller0: entered promiscuous mode [ 189.022083][ T9369] syzkaller0: entered allmulticast mode [ 189.314050][ T9372] tipc: Enabled bearer , priority 0 [ 189.658365][ T9374] tipc: Resetting bearer [ 190.000911][ T9374] tipc: Disabling bearer [ 190.326388][ T9400] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 190.355427][ T9400] bond6 (unregistering): Released all slaves [ 190.675746][ T1120] net_ratelimit: 505 callbacks suppressed [ 190.675767][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.366955][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 191.635281][ T9427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.790716][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.017625][ T9427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.114943][ T9436] netlink: 36 bytes leftover after parsing attributes in process `syz.3.870'. [ 192.115269][ T9438] netlink: 68 bytes leftover after parsing attributes in process `syz.3.870'. [ 192.540909][ T9459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.876'. [ 192.556395][ T9459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.876'. [ 192.558676][ T9459] netlink: 60 bytes leftover after parsing attributes in process `syz.2.876'. [ 192.726472][ T9466] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 192.934463][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.953328][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 193.164158][ T9473] syzkaller1: entered promiscuous mode [ 193.164202][ T9473] syzkaller1: entered allmulticast mode [ 193.293838][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 193.686730][ T9478] netlink: 260 bytes leftover after parsing attributes in process `syz.0.880'. [ 194.160978][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.241814][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.295837][ T9490] netlink: 84 bytes leftover after parsing attributes in process `syz.3.883'. [ 194.516629][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'. [ 195.265150][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.434058][ T9510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.509701][ T9513] macsec1: entered allmulticast mode [ 195.509724][ T9513] ip6gretap0: entered allmulticast mode [ 196.179775][ T9526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.894'. [ 196.415777][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.420687][ T9531] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 196.457712][ T9544] syzkaller1: entered promiscuous mode [ 196.457734][ T9544] syzkaller1: entered allmulticast mode [ 196.957275][ T9552] netlink: 'syz.0.900': attribute type 1 has an invalid length. [ 196.957300][ T9552] netlink: 'syz.0.900': attribute type 12 has an invalid length. [ 197.496363][ T9558] netlink: 'syz.4.902': attribute type 1 has an invalid length. [ 197.524205][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.763306][ T9560] __nla_validate_parse: 3 callbacks suppressed [ 197.763328][ T9560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.903'. [ 197.912035][ T9562] netlink: 'syz.4.904': attribute type 62 has an invalid length. [ 198.015843][ T9565] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.904'. [ 198.625058][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.955776][ T9581] netlink: 56 bytes leftover after parsing attributes in process `syz.3.911'. [ 198.998043][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.909'. [ 198.998721][ T9580] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 199.219335][ T9593] ip_tables: iptables: counters copy to user failed while replacing table [ 199.260416][ T9595] gre0: entered allmulticast mode [ 199.541421][ T9607] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.917'. [ 199.737014][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.073724][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 200.612976][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'. [ 200.613010][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'. [ 200.633308][ C0] bridge0: port 3() entered forwarding state [ 200.633331][ C0] bridge0: topology change detected, propagating [ 200.894099][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.985288][ C1] bridge0: received packet on with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.988450][ C1] bridge0: received packet on with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.988902][ T9617] netlink: 44 bytes leftover after parsing attributes in process `syz.0.921'. [ 200.988921][ T9617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.921'. [ 200.988937][ T9617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.921'. [ 201.273411][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.273436][ C1] bridge0: topology change detected, propagating [ 201.273608][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.273650][ C1] bridge0: topology change detected, propagating [ 201.437867][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 201.437943][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 201.438000][ T4933] Bluetooth: hci1: command 0x0406 tx timeout [ 201.855231][ T9643] net_ratelimit: 3 callbacks suppressed [ 201.855250][ T9643] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 201.995570][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.029980][ T9650] Bluetooth: hci0: unsupported parameter 1280 [ 202.030005][ T9650] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 202.306718][ T9651] dvmrp8: entered allmulticast mode [ 202.733814][ T9676] netlink: 'syz.0.932': attribute type 2 has an invalid length. [ 202.765495][ T9676] : entered promiscuous mode [ 202.979499][ T9670] ip6tnl1: entered allmulticast mode [ 202.993491][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 202.993736][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 203.014892][ T7020] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 203.114537][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.239508][ T9689] __nla_validate_parse: 37 callbacks suppressed [ 203.239531][ T9689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.934'. [ 203.239741][ T9689] netlink: 'syz.1.934': attribute type 8 has an invalid length. [ 203.239753][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.934'. [ 203.304898][ T7020] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 203.460007][ T9701] tipc: Can't bind to reserved service type 1 [ 203.462114][ T9701] netlink: 'syz.4.937': attribute type 1 has an invalid length. [ 203.462132][ T9701] netlink: 84 bytes leftover after parsing attributes in process `syz.4.937'. [ 203.462146][ T9701] netlink: 'syz.4.937': attribute type 2 has an invalid length. [ 203.462157][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.937'. [ 203.509036][ T7020] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 203.605648][ T9689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.934'. [ 203.605684][ T9689] netlink: 52 bytes leftover after parsing attributes in process `syz.1.934'. [ 204.000053][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 204.000076][ T9719] netlink: 2 bytes leftover after parsing attributes in process `syz.1.940'. [ 204.045510][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 204.047842][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'. [ 204.047875][ T9719] netlink: 'syz.1.940': attribute type 30 has an invalid length. [ 204.107048][ T9719] vxlan0: entered promiscuous mode [ 204.107072][ T9719] vxlan0: entered allmulticast mode [ 204.176886][ T9724] Bluetooth: hci0: unsupported parameter 5134 [ 204.176911][ T9724] Bluetooth: hci0: unsupported parameter 8192 [ 204.176935][ T9724] Bluetooth: hci0: unsupported parameter 5134 [ 204.176946][ T9724] Bluetooth: hci0: unsupported parameter 8192 [ 204.221154][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.448900][ T9736] netlink: 'syz.1.945': attribute type 2 has an invalid length. [ 204.602711][ T9745] netlink: 'syz.1.945': attribute type 10 has an invalid length. [ 204.866717][ T9745] team0: Port device dummy0 added [ 205.336075][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.354988][ C1] bridge0: received packet on with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.116493][ T9778] netlink: 'syz.2.950': attribute type 8 has an invalid length. [ 206.142097][ T9769] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 206.188948][ T9769] bond6 (unregistering): Released all slaves [ 206.515477][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.515993][ T9776] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 206.560096][ T9776] bond3 (unregistering): Released all slaves [ 206.821518][ T9783] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 206.821636][ T9783] syzkaller1: linktype set to 769 [ 207.353336][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 207.614336][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.392439][ T9841] xt_CT: No such helper "snmp" [ 208.409423][ T9846] __nla_validate_parse: 5 callbacks suppressed [ 208.409441][ T9846] netlink: 60 bytes leftover after parsing attributes in process `syz.0.962'. [ 208.587404][ T9853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 208.590871][ T9853] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 208.592674][ T9853] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 208.714388][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.964'. [ 208.714423][ T9856] netlink: 'syz.3.964': attribute type 8 has an invalid length. [ 208.714435][ T9856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.964'. [ 208.722391][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.740069][ T9853] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 208.911857][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 208.912089][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 208.946620][ T9870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.964'. [ 208.946656][ T9870] netlink: 52 bytes leftover after parsing attributes in process `syz.3.964'. [ 209.824556][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.935006][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.636131][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.971'. [ 211.637691][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'. [ 211.670277][ T9877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.971'. [ 211.813093][ T9889] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.045826][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.630913][ T9912] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 212.740638][ T9914] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 212.741711][ T9914] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 212.900053][ T9924] netlink: 'syz.4.985': attribute type 8 has an invalid length. [ 212.974069][ T9927] xt_hashlimit: size too large, truncated to 1048576 [ 213.000410][ T9918] syzkaller0: entered promiscuous mode [ 213.000594][ T9918] syzkaller0: entered allmulticast mode [ 213.153880][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.287992][ T9918] tipc: Started in network mode [ 213.288024][ T9918] tipc: Node identity d64207d3d7b3, cluster identity 4711 [ 213.288456][ T9918] tipc: Enabled bearer , priority 0 [ 213.426023][ T9920] team0 (unregistering): Port device team_slave_0 removed [ 213.569534][ T9920] team0 (unregistering): Port device team_slave_1 removed [ 213.609463][ T9916] tipc: Resetting bearer [ 213.821961][ T9916] tipc: Disabling bearer [ 214.160836][ T9962] __nla_validate_parse: 9 callbacks suppressed [ 214.160857][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 214.201086][ T9958] syzkaller0: entered promiscuous mode [ 214.201106][ T9958] syzkaller0: entered allmulticast mode [ 214.251246][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 214.286475][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.719560][ C1] bridge0: received packet on with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.916009][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 214.942625][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.998'. [ 214.942660][ T9989] netlink: 'syz.4.998': attribute type 8 has an invalid length. [ 214.942671][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.998'. [ 215.042358][ T9993] gre0: entered promiscuous mode [ 215.042381][ T9993] gre0: entered allmulticast mode [ 215.050337][ T9991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.998'. [ 215.050369][ T9991] netlink: 52 bytes leftover after parsing attributes in process `syz.4.998'. [ 215.390586][T10000] netlink: 'syz.0.1004': attribute type 1 has an invalid length. [ 215.404732][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.886991][ T30] audit: type=1800 audit(1790582703.736:3): pid=10014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1008" name=680B20 dev="tmpfs" ino=1061 res=0 errno=0 [ 216.051126][T10033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1011'. [ 216.051165][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1011'. [ 216.465575][T10037] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.490473][T10037] bond4: (slave macvlan2): making interface the new active one [ 216.504083][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.526380][T10037] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 216.526823][ T6808] bond_slave_0: entered promiscuous mode [ 216.526858][ T6808] bond_slave_1: entered promiscuous mode [ 216.594607][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1016'. [ 216.594651][T10065] netlink: 'syz.0.1016': attribute type 8 has an invalid length. [ 216.633475][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 217.533265][T10083] netlink: 'syz.2.1021': attribute type 11 has an invalid length. [ 217.664496][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.858537][T10085] syzkaller0: entered promiscuous mode [ 217.858561][T10085] syzkaller0: entered allmulticast mode [ 217.885005][T10097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.764413][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.306225][T10146] __nla_validate_parse: 39 callbacks suppressed [ 219.306249][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'. [ 219.306282][T10146] netlink: 'syz.0.1030': attribute type 8 has an invalid length. [ 219.306294][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1030'. [ 219.913633][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.034356][T10168] netlink: 'syz.1.1032': attribute type 2 has an invalid length. [ 220.412908][T10177] openvswitch: netlink: Flow actions attr not present in new flow. [ 220.507580][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 220.532906][T10184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1035'. [ 220.849170][T10180] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.861883][T10190] netlink: 4704 bytes leftover after parsing attributes in process `syz.3.1034'. [ 221.018476][T10185] vlan0: entered allmulticast mode [ 221.018503][T10185] bond0: entered allmulticast mode [ 221.018516][T10185] bond_slave_0: entered allmulticast mode [ 221.018532][T10185] bond_slave_1: entered allmulticast mode [ 221.030431][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.172376][T10190] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 221.574250][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1039'. [ 221.774201][T10207] sch_tbf: peakrate 3 is lower than or equals to rate 1028049389095745750 ! [ 221.872928][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1039'. [ 221.980283][T10221] sch_tbf: peakrate 3 is lower than or equals to rate 1028049389095745750 ! [ 222.036654][T10218] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1040'. [ 222.304140][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.771305][T10242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1043'. [ 222.771343][T10242] netlink: 'syz.0.1043': attribute type 8 has an invalid length. [ 222.771356][T10242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1043'. [ 223.424168][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.487027][T10252] batman_adv: batadv0: Adding interface: macvlan2 [ 223.487044][T10252] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.488517][T10252] batman_adv: batadv0: Interface activated: macvlan2 [ 223.615393][T10255] batman_adv: batadv0: Adding interface: macvlan3 [ 223.615409][T10255] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.615435][T10255] batman_adv: batadv0: Interface activated: macvlan3 [ 223.666670][T10264] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 224.304756][T10260] bond0: (slave syz_tun): Releasing backup interface [ 224.331382][T10260] syz_tun: left promiscuous mode [ 224.414862][T10268] bridge0: port 1(1x9) entered disabled state [ 224.554401][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.603766][T10268] x9 (unregistering): left allmulticast mode [ 224.604090][T10268] x9 (unregistering): left promiscuous mode [ 224.612843][T10268] bridge0: port 1(1x9) entered disabled state [ 224.697723][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1053'. [ 224.697948][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1053'. [ 224.698150][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1053'. [ 224.698375][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1053'. [ 224.698583][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1053'. [ 224.698778][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1053'. [ 224.698986][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1053'. [ 224.699554][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1053'. [ 224.788951][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1053'. [ 224.789201][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1053'. [ 225.285132][T10310] netlink: 'syz.4.1058': attribute type 8 has an invalid length. [ 225.666388][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.031169][T10332] ip6t_rt: too many addresses specified [ 226.032086][T10330] ipvlan2: entered promiscuous mode [ 226.057727][T10330] bridge0: port 1(ipvlan2) entered blocking state [ 226.059392][T10330] bridge0: port 1(ipvlan2) entered disabled state [ 226.059549][T10330] ipvlan2: entered allmulticast mode [ 226.059565][T10330] bridge0: entered allmulticast mode [ 226.102583][T10330] ipvlan2: left allmulticast mode [ 226.102616][T10330] bridge0: left allmulticast mode [ 226.786203][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.250121][T10347] macsec0: entered promiscuous mode [ 227.250614][T10347] macsec0: left promiscuous mode [ 227.313828][T10346] veth1_macvtap: left promiscuous mode [ 227.548624][T10349] ip6_vti0: left promiscuous mode [ 227.581643][T10352] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 227.848846][T10381] netlink: 'syz.2.1071': attribute type 1 has an invalid length. [ 227.869501][T10371] syzkaller0: entered promiscuous mode [ 227.869525][T10371] syzkaller0: entered allmulticast mode [ 227.895109][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.923998][T10382] netlink: 'syz.4.1074': attribute type 8 has an invalid length. [ 228.163344][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 228.350289][T10399] netlink: 'syz.0.1075': attribute type 4 has an invalid length. [ 228.993994][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.720114][T10461] bond6: option miimon: invalid value (18446744073357230079) [ 229.720141][T10461] bond6: option miimon: allowed values 0 - 2147483647 [ 229.732461][T10461] bond6 (unregistering): Released all slaves [ 229.771634][T10459] __nla_validate_parse: 67 callbacks suppressed [ 229.771655][T10459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1088'. [ 229.771684][T10459] netlink: 'syz.1.1088': attribute type 8 has an invalid length. [ 229.771695][T10459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1088'. [ 230.116629][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.411386][T10479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1089'. [ 230.411413][T10479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1089'. [ 230.783963][T10479] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1089'. [ 230.784057][T10479] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1089'. [ 230.904306][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 231.108283][T10498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1094'. [ 231.221353][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.368452][T10513] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1097'. [ 231.368700][T10513] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1097'. [ 232.043093][T10543] netlink: 'syz.1.1102': attribute type 2 has an invalid length. [ 232.186936][T10543] netlink: 'syz.1.1102': attribute type 4 has an invalid length. [ 232.316400][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.471907][T10558] netlink: 'syz.4.1106': attribute type 2 has an invalid length. [ 232.530083][T10559] ip6gretap0: entered promiscuous mode [ 232.977341][T10566] xt_l2tp: wrong L2TP version: 0 [ 233.273471][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.415990][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.878666][T10592] tc action pedit unable to extract header offset for header type (0x4) [ 233.878690][T10592] tc action pedit unable to extract header offset for header type (0x4) [ 233.878701][T10592] tc action pedit unable to extract header offset for header type (0x4) [ 233.878712][T10592] tc action pedit unable to extract header offset for header type (0x4) [ 233.878723][T10592] tc action pedit unable to extract header offset for header type (0x4) [ 233.878734][T10592] tc action pedit unable to extract header offset for header type (0x4) [ 233.878744][T10592] tc action pedit unable to extract header offset for header type (0x4) [ 233.878755][T10592] tc action pedit unable to extract header offset for header type (0x4) [ 233.878765][T10592] tc action pedit unable to extract header offset for header type (0x4) [ 233.878775][T10592] tc action pedit unable to extract header offset for header type (0x4) [ 233.878796][T10592] 0: reclassify loop, rule prio 0, protocol 800 [ 233.880992][T10592] syzkaller0: entered promiscuous mode [ 233.881168][T10592] syzkaller0: entered allmulticast mode [ 233.890784][T10592] syzkaller0: create flow: hash 2383510104 index 0 [ 233.932311][ C1] bridge0: received packet on with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.384861][T10590] syzkaller0 (unregistered): delete flow: hash 2383510104 index 0 [ 234.522790][T10605] netlink: 'syz.2.1117': attribute type 1 has an invalid length. [ 234.564803][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.778919][T10614] syzkaller0: entered promiscuous mode [ 234.779096][T10614] syzkaller0: entered allmulticast mode [ 235.331419][T10633] __nla_validate_parse: 82 callbacks suppressed [ 235.331438][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 235.362161][T10633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1124'. [ 235.362193][T10633] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 235.394138][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1124'. [ 235.683947][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.213319][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 236.213344][T10644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1126'. [ 236.783989][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.384294][T10606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.902522][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.028873][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.124121][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.321505][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 241.264552][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.508710][T10696] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1135'. [ 241.774049][T10700] netlink: 'syz.4.1136': attribute type 1 has an invalid length. [ 241.882897][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 241.958750][T10702] bond3: (slave bridge4): making interface the new active one [ 242.019979][T10702] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 242.349804][T10714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1140'. [ 242.351661][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 242.351870][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 242.354423][T10714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1140'. [ 242.356432][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1140'. [ 242.372218][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.579325][T10724] netlink: 'syz.4.1141': attribute type 4 has an invalid length. [ 242.579347][T10724] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1141'. [ 242.768969][T10724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.771441][T10713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1141'. [ 243.263750][T10725] bond8 (unregistering): Released all slaves [ 243.464671][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.720721][T10749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'. [ 243.720759][T10749] netlink: 'syz.1.1147': attribute type 8 has an invalid length. [ 244.026140][T10760] netlink: 'syz.0.1149': attribute type 29 has an invalid length. [ 244.026635][T10774] netlink: 'syz.0.1149': attribute type 29 has an invalid length. [ 244.575251][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.419353][T10810] 8021q: VLANs not supported on ip6tnl0 [ 245.686767][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.214033][T10824] nbd: nbd64 already in use [ 246.631595][T10674] udevd[10674]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 246.748146][ T56] nci: nci_rx_work: unknown MT 0x5 [ 246.798230][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.822465][T10852] __nla_validate_parse: 12 callbacks suppressed [ 246.822485][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'. [ 246.962097][T10851] vlan2: entered allmulticast mode [ 246.962118][T10851] bridge0: entered allmulticast mode [ 246.962509][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 246.973250][T10858] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1171'. [ 246.979909][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 246.985873][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 246.987711][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 246.989330][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 246.992149][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 246.995077][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 246.995809][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 247.095622][T10862] bridge0: port 1(bond0) entered blocking state [ 247.095796][T10862] bridge0: port 1(bond0) entered disabled state [ 247.184928][T10862] hsr_slave_1 (unregistering): left promiscuous mode [ 247.575023][T10869] vxcan2: entered allmulticast mode [ 247.895485][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.304104][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.520970][T10840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.416562][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.684945][T10909] netlink: 'syz.0.1185': attribute type 3 has an invalid length. [ 250.837278][T10913] tipc: Enabled bearer , priority 0 [ 250.837952][T10913] syzkaller0: entered promiscuous mode [ 250.837971][T10913] syzkaller0: entered allmulticast mode [ 251.441906][T10933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.522710][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.739367][T10912] tipc: Resetting bearer [ 251.816937][T10912] tipc: Disabling bearer [ 251.851425][T10945] __nla_validate_parse: 28 callbacks suppressed [ 251.851446][T10945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1198'. [ 252.015519][T10945] vlan2: entered promiscuous mode [ 252.015546][T10945] dummy0: entered promiscuous mode [ 252.621100][T10965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1205'. [ 252.655672][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.777014][T10974] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 252.780043][T10975] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 252.806732][T10974] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 252.809385][T10979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1206'. [ 252.906550][T10985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1208'. [ 252.986053][T10975] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 252.986076][T10975] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1207'. [ 253.427658][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 253.451848][T11004] block nbd0: not configured, cannot reconfigure [ 253.453879][T11000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1210'. [ 253.465711][T10999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1211'. [ 253.465735][T10999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1211'. [ 253.465755][T10999] netlink: 'syz.3.1211': attribute type 4 has an invalid length. [ 253.759617][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.904833][T11014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1213'. [ 254.211733][T11023] netlink: 'syz.2.1216': attribute type 12 has an invalid length. [ 254.734340][T11043] syzkaller0: entered promiscuous mode [ 254.734515][T11043] syzkaller0: entered allmulticast mode [ 254.876963][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.944487][T11058] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 255.628976][T11075] syzkaller0: entered promiscuous mode [ 255.629161][T11075] syzkaller0: entered allmulticast mode [ 255.677496][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.677517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.986266][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.121481][T11083] sctp: [Deprecated]: syz.0.1233 (pid 11083) Use of int in maxseg socket option. [ 256.121481][T11083] Use struct sctp_assoc_value instead [ 256.479109][T11089] gretap0: left promiscuous mode [ 256.494495][T11089] netlink: 'syz.1.1235': attribute type 2 has an invalid length. [ 257.084716][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.760970][T11123] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 257.916204][T11129] x_tables: duplicate underflow at hook 1 [ 258.119619][T11123] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 258.172124][T11123] bond5 (unregistering): Released all slaves [ 258.194386][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.038814][T11152] netlink: 'syz.3.1251': attribute type 1 has an invalid length. [ 259.038836][T11152] netlink: 'syz.3.1251': attribute type 2 has an invalid length. [ 259.038848][T11152] __nla_validate_parse: 7 callbacks suppressed [ 259.038858][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1251'. [ 259.050849][T11152] netlink: 'syz.3.1251': attribute type 1 has an invalid length. [ 259.050869][T11152] netlink: 'syz.3.1251': attribute type 2 has an invalid length. [ 259.050880][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1251'. [ 259.071455][T11152] netlink: 'syz.3.1251': attribute type 1 has an invalid length. [ 259.071476][T11152] netlink: 'syz.3.1251': attribute type 2 has an invalid length. [ 259.071487][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1251'. [ 259.079686][T11152] netlink: 'syz.3.1251': attribute type 1 has an invalid length. [ 259.079707][T11152] netlink: 'syz.3.1251': attribute type 2 has an invalid length. [ 259.079718][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1251'. [ 259.106450][T11152] netlink: 'syz.3.1251': attribute type 1 has an invalid length. [ 259.106474][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1251'. [ 259.135021][T11162] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1252'. [ 259.143348][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1253'. [ 259.332208][T11169] netlink: NAT attribute has 8 unknown bytes [ 259.332244][T11169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.334441][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.348691][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'. [ 259.764367][T11186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1255'. [ 260.435479][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.584788][T11201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1259'. [ 260.647655][T11199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.647839][T11199] team0: Device bond0 failed to register rx_handler [ 260.961455][T11218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.980159][T11218] team0: Device bond0 failed to register rx_handler [ 261.535475][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.654994][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.741727][T11258] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 262.813567][T11266] tipc: Enabling of bearer rejected, already enabled [ 263.156344][T11276] validate_nla: 9 callbacks suppressed [ 263.156367][T11276] netlink: 'syz.0.1277': attribute type 1 has an invalid length. [ 263.775330][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.461544][T11301] tipc: Started in network mode [ 264.461564][T11301] tipc: Node identity , cluster identity 4711 [ 264.461579][T11301] tipc: Failed to obtain node identity [ 264.461608][T11301] tipc: Enabling of bearer rejected, failed to enable media [ 264.467363][T11301] syzkaller0: entered promiscuous mode [ 264.467386][T11301] syzkaller0: entered allmulticast mode [ 264.898131][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.307571][T11315] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 265.478283][T11332] __nla_validate_parse: 7 callbacks suppressed [ 265.478304][T11332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1288'. [ 265.825560][T11332] veth0_to_bridge: entered allmulticast mode [ 265.848698][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.017065][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.125961][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.833427][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 268.119201][T11325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.226504][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.790263][T11367] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 269.337829][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.924471][T11396] sctp: [Deprecated]: syz.3.1300 (pid 11396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.924471][T11396] Use struct sctp_sack_info instead [ 270.465970][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.527065][T11408] syzkaller0: entered promiscuous mode [ 270.527090][T11408] syzkaller0: entered allmulticast mode [ 270.771031][T11414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1305'. [ 270.858385][T11419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1308'. [ 270.892884][T11419] netlink: 'syz.1.1308': attribute type 1 has an invalid length. [ 270.892906][T11419] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1308'. [ 270.917435][T11420] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 271.401296][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 271.401322][T11428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1309'. [ 271.402702][T11428] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1309'. [ 271.596226][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.985689][T11448] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1317'. [ 272.001961][T11448] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1317'. [ 272.250838][T11452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1318'. [ 272.250868][T11452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1318'. [ 272.315711][T11452] netlink: 'syz.1.1318': attribute type 1 has an invalid length. [ 272.317288][T11452] netlink: 'syz.1.1318': attribute type 1 has an invalid length. [ 272.704095][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.426450][T11462] bridge0: port 1(wlan1) entered blocking state [ 273.426541][T11462] bridge0: port 1(wlan1) entered disabled state [ 273.426707][T11462] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 273.492457][T11462] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 273.804491][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.989658][T11468] syzkaller0: entered promiscuous mode [ 273.989686][T11468] syzkaller0: entered allmulticast mode [ 274.559563][T11487] netlink: Failed to add wlan0 helper -22 [ 274.559624][T11487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.918250][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.037227][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.134313][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.268364][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.522960][T11480] netlink: 'syz.1.1325': attribute type 3 has an invalid length. [ 278.899665][T11516] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 278.933810][T11523] x_tables: duplicate underflow at hook 3 [ 278.987381][T11524] __nla_validate_parse: 2 callbacks suppressed [ 278.987445][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 279.047719][T11522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1330'. [ 279.179331][T11527] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1333'. [ 279.230547][T11527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1333'. [ 279.230584][T11527] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1333'. [ 279.365886][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.372277][T11532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1334'. [ 280.544470][T11567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.786639][T11570] netlink: 'syz.3.1338': attribute type 1 has an invalid length. [ 280.871304][T11575] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1340'. [ 280.963251][T11578] netlink: 'syz.3.1338': attribute type 10 has an invalid length. [ 280.963277][T11578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1338'. [ 281.279340][T11570] 8021q: adding VLAN 0 to HW filter on device bond6 [ 281.463113][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'. [ 281.581464][T11576] bond6: (slave veth5): Enslaving as an active interface with a down link [ 281.640527][T11578] dummy0: entered promiscuous mode [ 281.648957][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 281.690042][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.382706][T11592] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 282.636955][T11595] veth9: entered allmulticast mode [ 282.797035][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.185213][T11621] netlink: 'syz.1.1350': attribute type 1 has an invalid length. [ 283.396411][T11636] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 283.896159][T11635] ip6gre1: entered promiscuous mode [ 283.896203][T11635] ip6gre1: entered allmulticast mode [ 283.921127][ T1120] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.921385][ T1120] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.924151][ T7021] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.927086][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.083464][ T7018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.278057][ T7018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.953277][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 285.024337][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.157640][T11679] xt_l2tp: invalid flags combination: 8 [ 285.362014][T11664] syzkaller0: entered promiscuous mode [ 285.362186][T11664] syzkaller0: entered allmulticast mode [ 285.475900][ T7018] hid-generic 0005:0008:0009.0002: item fetching failed at offset 2/3 [ 285.477351][ T7018] hid-generic 0005:0008:0009.0002: probe with driver hid-generic failed with error -22 [ 286.145388][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.236268][T11708] sctp: [Deprecated]: syz.3.1366 (pid 11708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.236268][T11708] Use struct sctp_sack_info instead [ 287.236891][T11708] sctp: [Deprecated]: syz.3.1366 (pid 11708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.236891][T11708] Use struct sctp_sack_info instead [ 287.284356][ T260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.430572][T11712] nftables ruleset with unbound set [ 288.016200][T11718] netlink: 'syz.3.1368': attribute type 1 has an invalid length. [ 288.079525][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 288.094919][T11719] __nla_validate_parse: 51 callbacks suppressed [ 288.094939][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1368'. [ 288.398166][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.505123][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.649562][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.665323][T11686] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 290.665365][T11686] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 290.665384][T11686] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 290.763709][T11710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1367'. [ 290.816008][T11718] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 291.170809][T11729] netlink: 'syz.2.1369': attribute type 32 has an invalid length. [ 291.170834][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 291.294146][T11729] bond5: Setting coupled_control to off (0) [ 291.369373][T11737] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1373'. [ 291.469115][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1371'. [ 291.757799][T11739] 8021q: adding VLAN 0 to HW filter on device bond7 [ 291.774938][ T260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.866483][T11748] macvtap0: entered allmulticast mode [ 292.049347][T11756] bond7: (slave sit3): refused to change device type [ 292.160278][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'. [ 292.160301][T11765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1376'. [ 292.663935][T11778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1380'. [ 292.841107][T11787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1381'. [ 292.889758][T11790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1381'. [ 292.918798][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.305803][T11801] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1382'. [ 293.589954][T11806] xt_hashlimit: size too large, truncated to 1048576 [ 293.662955][T11803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1385'. [ 293.662992][T11803] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1385'. [ 294.055342][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.282479][T11820] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1390'. [ 294.443966][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1034 jiffies old. [ 294.569419][T11822] xt_CONNSECMARK: invalid mode: 254 [ 294.590848][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'. [ 295.019521][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'. [ 295.183334][T11843] sctp: [Deprecated]: syz.0.1396 (pid 11843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.183334][T11843] Use struct sctp_sack_info instead [ 295.183639][T11843] sctp: [Deprecated]: syz.0.1396 (pid 11843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.183639][T11843] Use struct sctp_sack_info instead [ 295.229086][ T260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.395357][T11851] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 295.412355][T11839] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1397'. [ 295.443907][T11839] Bluetooth: MGMT ver 1.23 [ 295.474085][T11839] Bluetooth: MGMT ver 1.23 [ 295.545762][T11854] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1400'. [ 295.601267][T11858] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1400'. [ 296.094671][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.094759][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.094842][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.094922][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.095028][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.095108][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.095256][T11870] tun0: tun_chr_ioctl cmd 1074025675 [ 296.095270][T11870] tun0: persist enabled [ 296.096001][T11869] tun0: tun_chr_ioctl cmd 1074025675 [ 296.096017][T11869] tun0: persist disabled [ 296.269121][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.270138][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.270239][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.270316][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.270392][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.270505][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.270581][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.270658][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.270734][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.270839][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.270916][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.270994][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.271070][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.273066][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.373335][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.373452][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.373531][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.373615][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.373695][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.373772][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.373850][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.373939][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.374019][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.374124][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.374202][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.374283][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.374362][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.374439][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.374519][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.374597][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.374676][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.375387][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.375467][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.375550][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.375627][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.375702][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.375778][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.375860][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.375944][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.376023][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.376101][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.376181][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.376261][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.376340][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.376418][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.376500][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.376579][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.376657][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.376735][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.376814][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.376891][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.376978][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.377050][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.377130][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.377208][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.377288][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.377366][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.377448][T11868] tun0: tun_chr_ioctl cmd 1074025673 [ 296.385889][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.637484][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 296.637883][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.950243][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 297.112743][T11882] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 297.136828][T11882] bond4 (unregistering): Released all slaves [ 297.387096][T11889] 8021q: VLANs not supported on vcan0 [ 297.392381][T11902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.525685][ T260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.010776][T11914] ip6t_rt: unknown flags 1F [ 298.209750][T11917] syzkaller1: entered promiscuous mode [ 298.209772][T11917] syzkaller1: entered allmulticast mode [ 298.636714][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.677891][T11928] nft_compat: unsupported protocol 0 [ 299.322454][T11915] __nla_validate_parse: 1 callbacks suppressed [ 299.322478][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'. [ 299.479228][T11945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1420'. [ 299.611883][T11915] bond0: (slave bond_slave_1): Releasing backup interface [ 299.668229][T11944] 8021q: VLANs not supported on ip_vti0 [ 299.766819][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.133373][T11955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1422'. [ 300.141207][T11955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1422'. [ 300.207756][T11957] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1423'. [ 300.207794][T11957] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1423'. [ 300.207810][T11957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1423'. [ 300.270082][T11957] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 300.358858][T11961] tipc: Enabling of bearer rejected, already enabled [ 300.447975][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 300.900538][T11969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1426'. [ 300.930837][T11969] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1426'. [ 300.950853][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.963580][T11969] gretap0: entered promiscuous mode [ 300.974456][T11971] netlink: 'syz.1.1425': attribute type 34 has an invalid length. [ 300.993886][T11969] siw: device registration error -23 [ 302.054878][ T260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.210369][T11992] smbdirect: ib_dev[syz1] renamed to [sy] [ 302.511780][T12005] bridge1: entered promiscuous mode [ 302.511820][T12005] bridge1: entered allmulticast mode [ 303.178942][ T260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.613844][T12035] veth0_to_bridge: entered promiscuous mode [ 303.614142][T12035] macvtap1: entered allmulticast mode [ 303.614156][T12035] veth0_to_bridge: entered allmulticast mode [ 303.717523][T12035] veth0_to_bridge: left allmulticast mode [ 303.717553][T12035] veth0_to_bridge: left promiscuous mode [ 304.069842][T12053] netlink: 'syz.2.1447': attribute type 8 has an invalid length. [ 304.290656][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.480805][T12060] __nla_validate_parse: 7 callbacks suppressed [ 304.480828][T12060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1448'. [ 304.662565][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 304.872703][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1449'. [ 304.872729][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1449'. [ 305.029327][T12075] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.029443][T12075] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.029454][T12075] IPv6: NLM_F_CREATE should be set when creating new route [ 305.029494][T12075] IPv6: NLM_F_CREATE should be set when creating new route [ 305.029518][T12075] IPv6: NLM_F_CREATE should be set when creating new route [ 305.030553][T12075] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1450'. [ 305.181061][T12062] bond0: left promiscuous mode [ 305.181087][T12062] bond_slave_0: left promiscuous mode [ 305.181271][T12062] bond_slave_1: left promiscuous mode [ 305.181404][T12062] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 305.307042][T12062] ip6gretap0: left allmulticast mode [ 305.424614][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.917042][T12087] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1455'. [ 306.033628][T12088] block nbd0: Unsupported socket: should be TCP or UNIX. [ 306.490224][T12095] erspan0: entered promiscuous mode [ 306.522370][T12095] erspan0: left promiscuous mode [ 306.555402][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.488031][T12119] syzkaller0: entered promiscuous mode [ 307.488055][T12119] syzkaller0: entered allmulticast mode [ 307.724725][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.853882][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1467'. [ 308.116430][T12125] ip6erspan0: entered allmulticast mode [ 308.835023][ T260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.888343][T12169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1475'. [ 308.888546][T12169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1475'. [ 309.025889][T12171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1476'. [ 309.934120][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.542908][T12133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.964920][T12195] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1482'. [ 311.051211][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.142718][T12204] syzkaller1: entered promiscuous mode [ 311.142742][T12204] syzkaller1: entered allmulticast mode [ 311.316669][T12202] netlink: 'syz.0.1481': attribute type 1 has an invalid length. [ 311.316692][T12202] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1481'. [ 311.334553][T12210] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 311.474151][T12210] bond4 (unregistering): Released all slaves [ 311.496514][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1486'. [ 311.566201][T12216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1485'. [ 311.714646][T12201] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 311.746077][T12201] bond4 (unregistering): Released all slaves [ 311.869278][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1486'. [ 312.156042][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.182114][T12223] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 312.182153][T12223] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 312.182214][T12223] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 312.310599][T12223] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 312.617538][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'. [ 312.633740][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.684362][T12245] x_tables: ip_tables: osf match: only valid for protocol 6 [ 312.689986][T12230] syzkaller0: entered promiscuous mode [ 312.690010][T12230] syzkaller0: entered allmulticast mode [ 312.850451][T12248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1493'. [ 312.925910][ T7011] hid-generic 0005:0008:0009.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 313.197688][T12256] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.294685][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.486962][T12254] fido_id[12254]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 314.307652][T12293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1499'. [ 314.307687][T12293] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1499'. [ 314.411436][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.521404][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.622916][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.021643][T12260] veth1_to_bond: entered allmulticast mode [ 317.041071][T12265] veth1_to_bond: entered promiscuous mode [ 317.041925][T12263] veth1_to_bond: left promiscuous mode [ 317.057327][T12263] veth1_to_bond: left allmulticast mode [ 317.115999][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.336948][T12298] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1502'. [ 317.361754][T12299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1502'. [ 317.386747][T12299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1502'. [ 317.404841][T12299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1502'. [ 317.482279][T12299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1502'. [ 317.519398][T12299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1502'. [ 317.565701][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1502'. [ 317.632754][T12300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.733475][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.875466][T12313] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1506'. [ 317.898482][T12318] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 317.937538][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1505'. [ 318.094173][T12309] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 318.094294][T12309] syzkaller1: linktype set to 825 [ 318.191591][T12308] netlink: 'syz.1.1505': attribute type 2 has an invalid length. [ 318.855506][ T260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.127245][T12349] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1511'. [ 319.127297][T12349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.590016][T12368] bond0: Device is already in use. [ 322.440296][ T30] audit: type=1107 audit(1790582810.286:4): pid=12446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='lq[Ec=Yg?NĊ cҬn^W0I$pE jLIVjXNRt0/HPPBrqhfBt"^ø\;_̎ `yՌ MGr-,$MBM{g [ 322.440296][ T30] o [ 322.440296][ T30] yzb.J#)O@IJ' [ 323.066571][T12484] __nla_validate_parse: 4 callbacks suppressed [ 323.066590][T12484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1530'. [ 323.066616][T12484] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1530'. [ 323.129841][T12490] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 323.205576][T12491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1531'. [ 323.421581][T12496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1532'. [ 323.449627][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'. [ 324.083741][T12512] netlink: 'syz.1.1535': attribute type 11 has an invalid length. [ 324.083764][T12512] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1535'. [ 326.170289][T12552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1543'. [ 326.170328][T12552] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1543'. [ 326.197703][T12547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1544'. [ 326.380421][T12549] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 326.431698][T12549] team0: entered promiscuous mode [ 326.431721][T12549] team_slave_0: entered promiscuous mode [ 326.432478][T12549] team_slave_1: entered promiscuous mode [ 326.476491][T12549] debugfs: 'hsr1' already exists in 'hsr' [ 326.476509][T12549] Cannot create hsr debugfs directory [ 326.478319][T12559] netlink: 'syz.1.1546': attribute type 1 has an invalid length. [ 326.668388][T12566] netlink: 'syz.0.1548': attribute type 1 has an invalid length. [ 326.785544][T12559] 8021q: adding VLAN 0 to HW filter on device bond9 [ 326.900646][T12562] macvlan2: entered promiscuous mode [ 326.900674][T12562] macvlan2: entered allmulticast mode [ 326.916868][T12562] bond9: entered promiscuous mode [ 326.919373][T12562] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 326.997440][T12562] bond9: left promiscuous mode [ 327.370248][T12566] 8021q: adding VLAN 0 to HW filter on device bond6 [ 327.383655][T12570] sch_fq: defrate 0 ignored. [ 327.607494][T12572] macvlan3: entered promiscuous mode [ 327.607517][T12572] macvlan3: entered allmulticast mode [ 327.627565][T12572] bond6: entered promiscuous mode [ 327.651216][T12572] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 327.706481][T12572] bond6: left promiscuous mode [ 327.744043][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 328.414954][T12596] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 328.473622][T12596] x_tables: duplicate underflow at hook 1 [ 329.076470][T12612] netlink: 'syz.1.1557': attribute type 2 has an invalid length. [ 329.076494][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 329.103860][T12613] netlink: 'syz.1.1557': attribute type 2 has an invalid length. [ 329.103880][T12613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 329.328318][T12616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1558'. [ 329.352488][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1558'. [ 329.454113][T12616] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 329.603451][T12618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1558'. [ 329.692802][T12616] bond4: entered promiscuous mode [ 329.707710][T12616] 8021q: adding VLAN 0 to HW filter on device bond4 [ 330.027232][T12618] bond4: entered allmulticast mode [ 330.473931][T12650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1564'. [ 330.760366][T12648] geneve0: entered promiscuous mode [ 330.783066][T12655] syzkaller1: entered promiscuous mode [ 330.783088][T12655] syzkaller1: entered allmulticast mode [ 331.746885][T12674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1566'. [ 332.040061][T12686] xfrm0: entered allmulticast mode [ 332.057876][T12686] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 332.376700][T12695] bond7: entered allmulticast mode [ 332.419041][ T30] audit: type=1800 audit(1790582820.266:5): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1571" name="memory.events" dev="tmpfs" ino=1549 res=0 errno=0 [ 332.565880][T12702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1575'. [ 332.565916][T12702] netlink: 'syz.3.1575': attribute type 24 has an invalid length. [ 332.566130][T12702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1575'. [ 332.566147][T12702] netlink: 'syz.3.1575': attribute type 24 has an invalid length. [ 332.569739][T12704] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1574'. [ 332.735291][T12702] sctp: [Deprecated]: syz.3.1575 (pid 12702) Use of int in max_burst socket option. [ 332.735291][T12702] Use struct sctp_assoc_value instead [ 333.069678][T12712] : renamed from team_slave_1 [ 333.169833][T12712] netlink: 'syz.0.1577': attribute type 9 has an invalid length. [ 334.085629][T12738] __nla_validate_parse: 9 callbacks suppressed [ 334.085651][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 334.119897][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 334.124882][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 334.158968][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 334.162042][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 334.186739][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 334.209165][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 334.225358][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 334.232043][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 334.254288][T12745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.261962][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 334.313014][T12749] netlink: 'syz.4.1584': attribute type 3 has an invalid length. [ 334.537837][T12751] tipc: Enabling of bearer rejected, failed to enable media [ 337.603703][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 338.051480][T12857] netlink: 'syz.2.1602': attribute type 9 has an invalid length. [ 339.670823][T12884] __nla_validate_parse: 19 callbacks suppressed [ 339.670877][T12884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1611'. [ 339.670941][T12884] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1611'. [ 339.817732][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 339.836664][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 339.838125][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 339.864558][T12887] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1612'. [ 340.072934][T12859] Bluetooth: MGMT ver 1.23 [ 340.167237][T12897] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1614'. [ 340.398081][T12900] bridge5: entered promiscuous mode [ 340.398106][T12900] bridge5: entered allmulticast mode [ 340.429993][T12900] team0: Port device bridge5 added [ 340.444990][T12900] bridge0: port 3(team0) entered blocking state [ 340.445412][T12900] bridge0: port 3(team0) entered disabled state [ 340.445736][T12900] team0: entered allmulticast mode [ 340.445751][T12900] team_slave_0: entered allmulticast mode [ 340.446103][T12900] team_slave_1: entered allmulticast mode [ 340.450732][T12900] team0: entered promiscuous mode [ 340.450753][T12900] team_slave_0: entered promiscuous mode [ 340.451651][T12900] team_slave_1: entered promiscuous mode [ 340.631214][T12910] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1618'. [ 340.684825][T12910] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 341.570860][T12931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1622'. [ 341.680071][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1626'. [ 341.914708][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 342.801451][T12956] bridge0: port 3() entered disabled state [ 342.802146][T12956] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.956672][T12956] veth0_to_bridge: left allmulticast mode [ 343.111961][T12956] xfrm0: left allmulticast mode [ 343.294646][T12956] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 343.319988][T12956] ipvlan2: left allmulticast mode [ 343.320012][T12956] gretap0: left allmulticast mode [ 343.351074][T12956] bridge1: port 2(veth5) entered disabled state [ 343.351576][T12956] bridge1: port 1(veth3) entered disabled state [ 343.353417][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.412067][T12956] bond2: left promiscuous mode [ 343.469950][T12956] batman_adv: batadv0: Interface deactivated: macvlan2 [ 343.489479][T12956] batman_adv: batadv0: Interface deactivated: macvlan3 [ 343.509513][T12956] ip6gre1: left promiscuous mode [ 343.509536][T12956] ip6gre1: left allmulticast mode [ 343.531872][T12951] syzkaller0: entered promiscuous mode [ 343.531894][T12951] syzkaller0: entered allmulticast mode [ 343.721641][T12952] tipc: Started in network mode [ 343.721675][T12952] tipc: Node identity 36cbe1c3ce52, cluster identity 4711 [ 343.721917][T12952] tipc: Enabled bearer , priority 0 [ 343.723910][T12471] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.723966][T12471] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.724001][T12471] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.724033][T12471] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.862950][T12966] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 343.910525][T12950] tipc: Resetting bearer [ 344.050871][T12950] tipc: Disabling bearer [ 345.269555][T12998] __nla_validate_parse: 2 callbacks suppressed [ 345.269575][T12998] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1637'. [ 345.310020][T12998] Bluetooth: hci0: unsupported parameter 5135 [ 345.310043][T12998] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 345.344784][T12998] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1637'. [ 345.346168][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1637'. [ 345.346678][T12998] Bluetooth: hci0: unsupported parameter 5135 [ 345.346698][T12998] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 345.469390][T13006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 345.469426][T13006] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1638'. [ 345.637119][T12994] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 346.207279][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 346.207301][T13019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1643'. [ 346.207521][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 346.207534][T13019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1643'. [ 347.395041][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1653'. [ 348.127585][T13055] tipc: Enabling of bearer rejected, failed to enable media [ 348.281772][T13059] netlink: 'syz.1.1657': attribute type 1 has an invalid length. [ 348.698472][T13068] tc_dump_action: action bad kind [ 349.895602][ T5633] Bluetooth: hci4: link tx timeout [ 349.896055][ T5633] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 350.634538][T13118] __nla_validate_parse: 5 callbacks suppressed [ 350.634584][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1675'. [ 350.634601][T13118] netlink: 'syz.2.1675': attribute type 6 has an invalid length. [ 350.770744][T13120] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 350.770782][T13120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.791916][T13120] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1674'. [ 350.956005][T13123] dvmrp8: left allmulticast mode [ 351.665150][T13139] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1679'. [ 351.667362][T13140] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1679'. [ 351.915916][ T5623] Bluetooth: hci4: command 0x0405 tx timeout [ 352.883203][T13118] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 354.110150][T13153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.559417][T13165] sctp: [Deprecated]: syz.3.1686 (pid 13165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.559417][T13165] Use struct sctp_sack_info instead [ 354.690223][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1688'. [ 354.939906][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1689'. [ 355.531031][T13189] syz.2.1690: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 355.531328][T13189] CPU: 1 UID: 0 PID: 13189 Comm: syz.2.1690 Not tainted syzkaller #0 PREEMPT(full) [ 355.531352][T13189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.531370][T13189] Call Trace: [ 355.531461][T13189] [ 355.531538][T13189] dump_stack_lvl+0xe8/0x150 [ 355.531707][T13189] warn_alloc+0x24d/0x270 [ 355.531756][T13189] ? kasan_save_track+0x4f/0x80 [ 355.531817][T13189] ? kasan_save_track+0x3e/0x80 [ 355.531842][T13189] ? __pfx_warn_alloc+0x10/0x10 [ 355.531859][T13189] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 355.531990][T13189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.532050][T13189] __vmalloc_node_range_noprof+0x127/0x1540 [ 355.532112][T13189] ? rcu_is_watching+0x16/0xb0 [ 355.532165][T13189] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 355.532197][T13189] ? __kmalloc_cache_noprof+0x321/0x600 [ 355.532218][T13189] ? __kmalloc_cache_noprof+0x14d/0x600 [ 355.532238][T13189] ? xskq_create+0x56/0x220 [ 355.532331][T13189] xskq_create+0x148/0x220 [ 355.532356][T13189] ? xsk_init_queue+0x8a/0xe0 [ 355.532381][T13189] xsk_init_queue+0x8a/0xe0 [ 355.532408][T13189] xsk_setsockopt+0x52a/0x960 [ 355.532435][T13189] ? __pfx_xsk_setsockopt+0x10/0x10 [ 355.532457][T13189] ? __pfx_aa_sk_perm+0x10/0x10 [ 355.532521][T13189] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 355.532562][T13189] ? __pfx_xsk_setsockopt+0x10/0x10 [ 355.532595][T13189] do_sock_setsockopt+0x17c/0x1b0 [ 355.532628][T13189] __x64_sys_setsockopt+0x13d/0x1b0 [ 355.532661][T13189] do_syscall_64+0x166/0x520 [ 355.532748][T13189] ? trace_irq_disable+0x3b/0x140 [ 355.532780][T13189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.532801][T13189] ? clear_bhb_loop+0x70/0xc0 [ 355.532825][T13189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.532845][T13189] RIP: 0033:0x7f216519e159 [ 355.532894][T13189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.532912][T13189] RSP: 002b:00007f216603c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 355.532961][T13189] RAX: ffffffffffffffda RBX: 00007f2165426090 RCX: 00007f216519e159 [ 355.532976][T13189] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 355.532988][T13189] RBP: 00007f216523506b R08: 0000000000000004 R09: 0000000000000000 [ 355.533001][T13189] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.533014][T13189] R13: 00007f2165426128 R14: 00007f2165426090 R15: 00007ffc0d9a2168 [ 355.533048][T13189] [ 355.733326][T13189] Mem-Info: [ 355.733345][T13189] active_anon:6143 inactive_anon:0 isolated_anon:0 [ 355.733345][T13189] active_file:0 inactive_file:43442 isolated_file:0 [ 355.733345][T13189] unevictable:17 dirty:103 writeback:0 [ 355.733345][T13189] slab_reclaimable:11067 slab_unreclaimable:104224 [ 355.733345][T13189] mapped:29513 shmem:865 pagetables:1221 [ 355.733345][T13189] sec_pagetables:0 bounce:0 [ 355.733345][T13189] kernel_misc_reclaimable:0 [ 355.733345][T13189] free:1279697 free_pcp:11124 free_cma:0 [ 355.733577][T13189] Node 0 active_anon:24572kB inactive_anon:0kB active_file:0kB inactive_file:173564kB unevictable:68kB isolated(anon):0kB isolated(file):0kB mapped:118052kB dirty:412kB writeback:0kB shmem:3460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16440kB pagetables:4744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 355.733628][T13189] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 355.733683][T13189] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.733737][T13189] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 355.733771][T13189] Node 0 DMA32 free:1161208kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24572kB inactive_anon:0kB active_file:0kB inactive_file:173564kB unevictable:68kB writepending:412kB zspages:0kB present:3129332kB managed:2546840kB mlocked:68kB bounce:0kB free_pcp:44496kB local_pcp:20960kB free_cma:0kB [ 355.734019][T13189] lowmem_reserve[]: 0 0 0 0 0 [ 355.734060][T13189] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.734113][T13189] lowmem_reserve[]: 0 0 0 0 0 [ 355.734146][T13189] Node 1 Normal free:3942220kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.734199][T13189] lowmem_reserve[]: 0 0 0 0 0 [ 355.734231][T13189] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 355.734337][T13189] Node 0 DMA32: 172*4kB (UM) 1*8kB (U) 508*16kB (UM) 432*32kB (UM) 132*64kB (UM) 33*128kB (UME) 6*256kB (UME) 8*512kB (UME) 6*1024kB (UME) 4*2048kB (UME) 270*4096kB (UM) = 1161208kB [ 355.734482][T13189] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 355.734572][T13189] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 10*16kB (UM) 6*32kB (UM) 7*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3942220kB [ 355.734720][T13189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.734736][T13189] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.734755][T13189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.734769][T13189] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.734783][T13189] 44303 total pagecache pages [ 355.734793][T13189] 0 pages in swap cache [ 355.734800][T13189] Free swap = 124996kB [ 355.734807][T13189] Total swap = 124996kB [ 355.734815][T13189] 2097051 pages RAM [ 355.734821][T13189] 0 pages HighMem/MovableOnly [ 355.734829][T13189] 428725 pages reserved [ 355.734835][T13189] 0 pages cma reserved [ 357.284984][T13215] netlink: 'syz.3.1697': attribute type 1 has an invalid length. [ 357.491043][T13215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1697'. [ 357.503650][T13223] bond8: (slave geneve0): making interface the new active one [ 357.504145][T13216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1697'. [ 357.505728][T13223] bond8: (slave geneve0): Enslaving as an active interface with an up link [ 357.549272][T13215] 8021q: adding VLAN 0 to HW filter on device bond8 [ 357.817136][T13230] netlink: 'syz.2.1701': attribute type 1 has an invalid length. [ 357.817158][T13230] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1701'. [ 358.057813][ T7011] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.347254][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 358.347281][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 358.381545][ T7012] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.413804][T12477] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 358.414412][T12477] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 358.414452][T12477] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 358.414487][T12477] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 358.416900][T13239] tun0: tun_chr_ioctl cmd 1074025673 [ 359.131985][ T7013] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 359.418855][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1707'. [ 359.734434][T13278] netlink: 'syz.1.1711': attribute type 8 has an invalid length. [ 359.888638][T13275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1712'. [ 359.888680][T13275] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1712'. [ 360.233051][T13293] netlink: 'syz.1.1714': attribute type 1 has an invalid length. [ 360.330503][T13300] netlink: 'syz.2.1715': attribute type 2 has an invalid length. [ 360.330525][T13300] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1715'. [ 360.382925][T13287] dvmrp6: entered allmulticast mode [ 360.404240][T13302] bond10: entered promiscuous mode [ 360.404278][T13302] bond10: entered allmulticast mode [ 360.404763][T13302] 8021q: adding VLAN 0 to HW filter on device bond10 [ 360.452673][T13301] netlink: 'syz.2.1715': attribute type 10 has an invalid length. [ 360.498995][T13301] team0: Port device dummy0 added [ 361.046496][T13314] syz.1.1716 (13314) used obsolete PPPIOCDETACH ioctl [ 361.126779][T13319] sock: sock_set_timeout: `syz.3.1719' (pid 13319) tries to set negative timeout [ 362.046934][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1722'. [ 362.078468][T13334] netlink: 'syz.0.1722': attribute type 1 has an invalid length. [ 362.116355][T13326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.233731][T13334] netlink: 'syz.0.1722': attribute type 1 has an invalid length. [ 362.383446][T13339] tipc: Enabled bearer , priority 0 [ 362.461985][T13336] tipc: Disabling bearer [ 362.852964][T13348] block nbd0: server does not support multiple connections per device. [ 362.865173][T13348] block nbd0: shutting down sockets [ 363.589680][T13368] syzkaller0: entered promiscuous mode [ 363.589703][T13368] syzkaller0: entered allmulticast mode [ 363.621974][T13368] __nla_validate_parse: 3 callbacks suppressed [ 363.621992][T13368] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1734'. [ 363.898453][T13373] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1736'. [ 364.482013][T13393] IPVS: set_ctl: invalid protocol: 33 10.1.1.0:20001 [ 365.582722][T13413] x_tables: duplicate entry at hook 1 [ 365.818803][T13423] x_tables: duplicate entry at hook 1 [ 365.831859][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1744'. [ 365.831880][T13425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'. [ 366.171058][T13435] ip6erspan0: entered allmulticast mode [ 366.881689][T13456] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1752'. [ 367.049348][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1752'. [ 367.145941][T13467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1757'. [ 367.237989][T13470] syzkaller0: entered promiscuous mode [ 367.238013][T13470] syzkaller0: entered allmulticast mode [ 367.602618][T13481] syzkaller1: entered promiscuous mode [ 367.602643][T13481] syzkaller1: entered allmulticast mode [ 367.764649][T13488] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 368.641610][T13502] erspan0: entered promiscuous mode [ 368.641774][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'. [ 369.582642][T13523] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 370.328946][T13538] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:20001 [ 370.451051][T13547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1774'. [ 370.451210][T13547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1774'. [ 370.451316][T13547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1774'. [ 370.451428][T13547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1774'. [ 370.451531][T13547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1774'. [ 370.451634][T13547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1774'. [ 370.451737][T13547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1774'. [ 370.451839][T13547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1774'. [ 370.451942][T13547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1774'. [ 371.062093][T13557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.096615][T13557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.100210][T13557] bond0 (unregistering): Released all slaves [ 371.640677][T13567] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 371.640715][T13567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.117172][T13576] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 372.667653][T13591] netlink: 'syz.0.1789': attribute type 5 has an invalid length. [ 372.721307][T13594] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 373.434262][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.806374][T13620] __nla_validate_parse: 30 callbacks suppressed [ 373.806396][T13620] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1796'. [ 373.934172][T13623] ip_tables: iptables: counters copy to user failed while replacing table [ 374.004896][T13625] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 374.005254][T13625] tipc: Enabled bearer , priority 10 [ 374.005403][T13614] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1794'. [ 374.143988][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1795'. [ 374.274787][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1798'. [ 374.901014][T13659] siw: device registration error -23 [ 375.003729][ T7012] tipc: Node number set to 4170834371 [ 375.102474][T13670] lo: entered allmulticast mode [ 375.137215][T13659] bridge0: port 4(syzkaller0) entered blocking state [ 375.137393][T13659] bridge0: port 4(syzkaller0) entered disabled state [ 375.138896][T13659] syzkaller0: entered allmulticast mode [ 375.172593][T13659] syzkaller0: entered promiscuous mode [ 375.282356][T13681] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 375.282738][T13681] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 375.283087][T13681] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 375.337933][T13656] syzkaller0 (unregistering): left allmulticast mode [ 375.338108][T13681] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 375.339498][T13656] syzkaller0 (unregistering): left promiscuous mode [ 375.339753][T13656] bridge0: port 4(syzkaller0) entered disabled state [ 375.463896][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1804'. [ 375.732847][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1804'. [ 376.042110][T13712] netlink: 'syz.2.1809': attribute type 2 has an invalid length. [ 376.475479][T13718] netlink: 'syz.3.1811': attribute type 1 has an invalid length. [ 376.544918][T13726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.546079][T13721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1811'. [ 376.551829][T13727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.609926][T13726] netlink: 'syz.1.1813': attribute type 21 has an invalid length. [ 376.746939][T13718] 8021q: adding VLAN 0 to HW filter on device bond9 [ 376.822912][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'. [ 376.941528][T13732] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 376.963528][T13732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.018557][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1814'. [ 377.108698][T13740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.222708][T13726] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1813'. [ 377.295956][T13731] ip6gre2: entered promiscuous mode [ 377.295980][T13731] ip6gre2: entered allmulticast mode [ 377.676565][T13750] netlink: 'syz.3.1815': attribute type 11 has an invalid length. [ 378.284790][T13772] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 378.342074][T13774] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 378.556261][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.718221][T13791] openvswitch: netlink: Missing valid actions attribute. [ 381.009302][T13764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.583616][T13802] syzkaller0: entered promiscuous mode [ 381.583640][T13802] syzkaller0: entered allmulticast mode [ 382.291651][T13800] syzkaller1: entered promiscuous mode [ 382.291674][T13800] syzkaller1: entered allmulticast mode [ 382.591628][T13819] __nla_validate_parse: 6 callbacks suppressed [ 382.591647][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 383.084295][T13832] netlink: 'syz.1.1834': attribute type 1 has an invalid length. [ 383.336153][T13835] netlink: 'syz.1.1834': attribute type 1 has an invalid length. [ 383.435556][T13841] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1835'. [ 383.714097][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 383.714130][T13850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1836'. [ 383.867994][T13850] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 383.912485][T13850] bond5 (unregistering): Released all slaves [ 383.924997][T13857] netlink: 'syz.3.1838': attribute type 7 has an invalid length. [ 383.992707][T13858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1837'. [ 384.059366][T13857] netlink: 'syz.3.1838': attribute type 7 has an invalid length. [ 385.673461][ T5623] Bluetooth: hci4: command 0x0405 tx timeout [ 385.808745][T13897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1844'. [ 386.919905][T13925] ip_tables: iptables: counters copy to user failed while replacing table [ 387.489570][T13949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1855'. [ 387.511755][T13949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1855'. [ 388.542044][T13974] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1859'. [ 388.672161][T13971] bond0: entered promiscuous mode [ 388.808444][T13966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.480000][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'. [ 389.480026][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'. [ 391.438477][T13985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.003759][T13985] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 392.315702][T12473] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.315740][T12473] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.316747][T12473] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.316774][T12473] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.316862][T12473] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.316888][T12473] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.316925][T12473] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.316950][T12473] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.508841][T14016] ipvlan1: entered promiscuous mode [ 392.509118][T14016] ipvlan1: left promiscuous mode [ 393.444508][T14067] netlink: 'syz.4.1870': attribute type 2 has an invalid length. [ 393.472581][T14068] netlink: 'syz.4.1870': attribute type 2 has an invalid length. [ 393.509465][T14066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1867'. [ 393.581504][T14066] bridge_slave_1: left allmulticast mode [ 393.581532][T14066] bridge_slave_1: left promiscuous mode [ 393.581783][T14066] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.072095][T14087] sctp: [Deprecated]: syz.2.1873 (pid 14087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.072095][T14087] Use struct sctp_sack_info instead [ 394.206371][T14089] xt_ecn: cannot match TCP bits for non-tcp packets [ 395.115979][T14119] xt_LOG: level 115 >= 8 [ 395.891863][T14088] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.1874:14088 [ 396.732237][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 397.218331][T14159] syzkaller0: entered promiscuous mode [ 397.218355][T14159] syzkaller0: entered allmulticast mode [ 397.576320][T14175] syzkaller0: entered promiscuous mode [ 397.576371][T14175] syzkaller0: entered allmulticast mode [ 397.615529][T14164] tipc: Enabled bearer , priority 0 [ 397.638723][T14162] tipc: Resetting bearer [ 397.894271][T14162] tipc: Disabling bearer [ 397.989952][T14184] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1898'. [ 399.672912][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 399.672937][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 399.672951][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 402.151022][T14278] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1931'. [ 403.671548][T14306] netlink: 'syz.3.1943': attribute type 39 has an invalid length. [ 404.430880][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1950'. [ 404.677019][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1951'. [ 404.944006][T12476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.944077][T12476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.944110][T12476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.944141][T12476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.610612][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1959'. [ 406.277931][T14357] syzkaller0: entered promiscuous mode [ 406.277954][T14357] syzkaller0: entered allmulticast mode [ 406.344334][T14357] 0: reclassify loop, rule prio 0, protocol 800 [ 408.388697][T14404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1987'. [ 408.671674][T14413] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 408.982982][T14419] netlink: 'syz.3.1994': attribute type 10 has an invalid length. [ 409.010642][T14419] syz_tun: entered promiscuous mode [ 409.099479][T14419] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 409.125316][T14419] siw: device registration error -23 [ 410.421866][T14452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2007'. [ 410.421889][T14452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2007'. [ 410.750370][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 411.179367][T14474] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 411.556123][T14477] block nbd0: Unsupported socket: should be TCP or UNIX. [ 411.676571][T14484] xt_ipcomp: unknown flags 1D [ 411.775636][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2015'. [ 411.841451][T14489] netlink: 'syz.1.2017': attribute type 1 has an invalid length. [ 411.841490][T14489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.882438][T14489] netlink: 'syz.1.2017': attribute type 1 has an invalid length. [ 411.882461][T14489] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2017'. [ 411.882476][T14489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2017'. [ 413.236906][T14519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2025'. [ 414.805418][T14551] xt_socket: unknown flags 0x8 [ 414.822624][T14551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2034'. [ 415.020576][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 415.899566][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2042'. [ 417.858617][T14558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.270193][T14607] netlink: 'syz.3.2049': attribute type 8 has an invalid length. [ 418.361644][T14611] netlink: 'syz.3.2049': attribute type 4 has an invalid length. [ 418.361669][T14611] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2049'. [ 418.564711][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 418.643505][T14617] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2052'. [ 418.702051][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2053'. [ 418.928074][T14621] netlink: 'syz.4.2054': attribute type 12 has an invalid length. [ 419.029980][T14630] netlink: 'syz.2.2056': attribute type 1 has an invalid length. [ 419.318714][T14630] 8021q: adding VLAN 0 to HW filter on device bond6 [ 419.369067][T14633] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 419.472292][T14630] bridge4: entered promiscuous mode [ 419.641558][T14630] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 419.779254][T14642] xt_hashlimit: size too large, truncated to 1048576 [ 420.236214][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2060'. [ 420.331133][T14661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2060'. [ 420.840493][T14665] syzkaller0: entered promiscuous mode [ 420.840516][T14665] syzkaller0: entered allmulticast mode [ 420.887937][T14671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2064'. [ 420.978162][T14665] tipc: Enabled bearer , priority 0 [ 421.024078][T14664] tipc: Resetting bearer [ 421.051279][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2066'. [ 421.125735][T14664] tipc: Disabling bearer [ 421.612025][T14696] sch_tbf: burst 7 is lower than device bridge0 mtu (1464) ! [ 422.486085][T14717] syzkaller0: entered promiscuous mode [ 422.486109][T14717] syzkaller0: entered allmulticast mode [ 423.203395][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2077'. [ 425.402308][T14779] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2086'. [ 425.724046][T14800] netlink: 'syz.0.2089': attribute type 12 has an invalid length. [ 426.035272][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2090'. [ 427.419511][T14767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.473461][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2095'. [ 427.699753][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2096'. [ 428.005869][T14838] bond0: (slave bond_slave_0): Releasing backup interface [ 428.215970][T14856] nbd: socks must be embedded in a SOCK_ITEM attr [ 428.219860][T14856] block nbd0: shutting down sockets [ 428.442648][T14861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2103'. [ 428.494855][T14861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2103'. [ 428.985787][T14868] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 429.004842][T14868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.005562][T14868] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 429.041509][T14868] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 429.178429][T14875] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2106'. [ 429.192647][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'. [ 429.229114][T14868] xt_policy: output policy not valid in PREROUTING and INPUT [ 429.587157][T14884] netlink: 'syz.0.2107': attribute type 2 has an invalid length. [ 429.587183][T14884] netlink: 'syz.0.2107': attribute type 1 has an invalid length. [ 429.587195][T14884] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2107'. [ 429.753703][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 430.305532][T14905] netlink: 'syz.4.2112': attribute type 1 has an invalid length. [ 430.394254][T14905] 8021q: adding VLAN 0 to HW filter on device bond5 [ 430.568499][T14905] bridge6: entered promiscuous mode [ 430.608428][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2113'. [ 430.692493][T14905] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 430.741681][T14911] 8021q: adding VLAN 0 to HW filter on device bond11 [ 430.781501][T14911] team0: Port device dummy0 removed [ 430.798830][T14911] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 430.800137][T14911] netlink: 'syz.1.2113': attribute type 10 has an invalid length. [ 430.800158][T14911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2113'. [ 430.800215][T14911] dummy0: entered promiscuous mode [ 430.882977][T14911] bond11: (slave dummy0): Releasing backup interface [ 431.392971][T14924] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2117'. [ 431.393004][T14924] netlink: 'syz.4.2117': attribute type 3 has an invalid length. [ 431.446235][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2117'. [ 432.138201][T14952] set match dimension is over the limit! [ 432.964971][T14973] netlink: 'syz.1.2128': attribute type 9 has an invalid length. [ 433.127252][T14962] bond10: entered promiscuous mode [ 433.705925][T14975] netlink: 'syz.2.2124': attribute type 2 has an invalid length. [ 433.705948][T14975] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2124'. [ 433.706360][T14992] netlink: 'syz.2.2124': attribute type 2 has an invalid length. [ 433.706401][T14992] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2124'. [ 434.018220][T15006] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 434.454479][T15013] xt_hashlimit: size too large, truncated to 1048576 [ 434.757153][T15023] netlink: 'syz.1.2138': attribute type 1 has an invalid length. [ 434.757769][T15023] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2138'. [ 435.019237][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 435.176331][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 435.222070][T12473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.222093][T12473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.349068][T12477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.349091][T12477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.926201][T15037] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 435.926240][T15037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.932260][T15037] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 435.932473][T15038] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 436.029645][T15038] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2141'. [ 436.030605][T15038] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2141'. [ 436.732567][T15048] netlink: 'syz.3.2144': attribute type 1 has an invalid length. [ 436.732592][T15048] netlink: 756 bytes leftover after parsing attributes in process `syz.3.2144'. [ 437.324763][ C1] ================================================================== [ 437.324864][ C1] BUG: KASAN: double-free in rcu_free_sheaf+0x31/0x200 [ 437.324935][ C1] Free of addr ffff88807c764200 by task ksoftirqd/1/24 [ 437.324950][ C1] [ 437.325000][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 437.325032][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.325050][ C1] Call Trace: [ 437.325062][ C1] [ 437.325072][ C1] dump_stack_lvl+0xe8/0x150 [ 437.325107][ C1] print_address_description+0x55/0x1e0 [ 437.325147][ C1] print_report+0x58/0x70 [ 437.325172][ C1] ? rcu_free_sheaf+0x31/0x200 [ 437.325194][ C1] kasan_report_invalid_free+0xea/0x110 [ 437.325223][ C1] ? rcu_free_sheaf+0x31/0x200 [ 437.325250][ C1] ? rcu_free_sheaf+0x31/0x200 [ 437.325271][ C1] __kasan_slab_pre_free+0x104/0x120 [ 437.325298][ C1] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 437.325329][ C1] ? rcu_core+0x8a8/0x1260 [ 437.325351][ C1] rcu_free_sheaf+0x31/0x200 [ 437.325380][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 437.325440][ C1] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 437.325462][ C1] ? rcu_core+0x8a8/0x1260 [ 437.325484][ C1] rcu_core+0x926/0x1260 [ 437.325514][ C1] ? __pfx_rcu_core+0x10/0x10 [ 437.325546][ C1] handle_softirqs+0x226/0x860 [ 437.325589][ C1] ? schedule+0x90/0x2b0 [ 437.325641][ C1] ? run_ksoftirqd+0x36/0x60 [ 437.325676][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 437.325714][ C1] run_ksoftirqd+0x36/0x60 [ 437.325743][ C1] smpboot_thread_fn+0x565/0xa70 [ 437.325775][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 437.325811][ C1] kthread+0x38b/0x480 [ 437.325838][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 437.325868][ C1] ? __pfx_kthread+0x10/0x10 [ 437.325889][ C1] ret_from_fork+0x514/0xb70 [ 437.325921][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 437.325941][ C1] ? __switch_to+0xc89/0x1420 [ 437.325982][ C1] ? __pfx_kthread+0x10/0x10 [ 437.326003][ C1] ret_from_fork_asm+0x1a/0x30 [ 437.326045][ C1] [ 437.326053][ C1] [ 437.326058][ C1] Allocated by task 49: [ 437.326096][ C1] kasan_save_track+0x3e/0x80 [ 437.326118][ C1] __kasan_kmalloc+0x93/0xb0 [ 437.326140][ C1] __kmalloc_cache_noprof+0x321/0x600 [ 437.326159][ C1] hwsim_update_pib+0x7e/0x400 [ 437.326245][ C1] hwsim_set_promiscuous_mode+0x196/0x2e0 [ 437.326274][ C1] drv_set_promiscuous_mode+0x159/0x2e0 [ 437.326360][ C1] drv_start+0x4ea/0x1010 [ 437.326388][ C1] mac802154_scan_worker+0x8e6/0xe60 [ 437.326411][ C1] process_scheduled_works+0xc3d/0x1630 [ 437.326438][ C1] worker_thread+0xa47/0xfb0 [ 437.326464][ C1] kthread+0x38b/0x480 [ 437.326481][ C1] ret_from_fork+0x514/0xb70 [ 437.326498][ C1] ret_from_fork_asm+0x1a/0x30 [ 437.326528][ C1] [ 437.326533][ C1] Freed by task 24: [ 437.326542][ C1] kasan_save_track+0x3e/0x80 [ 437.326563][ C1] kasan_save_free_info+0x40/0x50 [ 437.326591][ C1] __kasan_slab_free+0x5c/0x80 [ 437.326612][ C1] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 437.326637][ C1] rcu_free_sheaf+0x31/0x200 [ 437.326654][ C1] rcu_core+0x926/0x1260 [ 437.326673][ C1] handle_softirqs+0x226/0x860 [ 437.326698][ C1] run_ksoftirqd+0x36/0x60 [ 437.326726][ C1] smpboot_thread_fn+0x565/0xa70 [ 437.326754][ C1] kthread+0x38b/0x480 [ 437.326770][ C1] ret_from_fork+0x514/0xb70 [ 437.326788][ C1] ret_from_fork_asm+0x1a/0x30 [ 437.326817][ C1] [ 437.326822][ C1] The buggy address belongs to the object at ffff88807c764200 [ 437.326822][ C1] which belongs to the cache kmalloc-64 of size 64 [ 437.326898][ C1] The buggy address is located 0 bytes inside of [ 437.326898][ C1] 64-byte region [ffff88807c764200, ffff88807c764240) [ 437.326948][ C1] [ 437.326954][ C1] The buggy address belongs to the physical page: [ 437.326973][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c764780 pfn:0x7c764 [ 437.326995][ C1] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 437.327014][ C1] page_type: f5(slab) [ 437.327034][ C1] raw: 00fff00000000200 ffff88801b0418c0 ffffea0001633b50 ffffea00008ae890 [ 437.327054][ C1] raw: ffff88807c764780 0000000000200012 00000000f5000000 0000000000000000 [ 437.327065][ C1] page dumped because: kasan: bad access detected [ 437.327080][ C1] page_owner tracks the page as allocated [ 437.327088][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8696, tgid 8695 (syz.3.699), ts 166113514929 [ 437.327123][ C1] post_alloc_hook+0x1f9/0x250 [ 437.327153][ C1] get_page_from_freelist+0x2209/0x2280 [ 437.327175][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 437.327197][ C1] allocate_slab+0x7d/0x620 [ 437.327222][ C1] refill_objects+0x2d5/0x350 [ 437.327249][ C1] __pcs_replace_empty_main+0x2c8/0x6c0 [ 437.327274][ C1] __kmalloc_noprof+0x47b/0x720 [ 437.327292][ C1] hash_ipport4_resize+0xadb/0x1bb0 [ 437.327396][ C1] call_ad+0x43f/0xb50 [ 437.327414][ C1] ip_set_ad+0x82a/0x9d0 [ 437.327433][ C1] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 437.327507][ C1] netlink_rcv_skb+0x226/0x4a0 [ 437.327562][ C1] nfnetlink_rcv+0x2b9/0x28c0 [ 437.327590][ C1] netlink_unicast+0x7bd/0x940 [ 437.327645][ C1] netlink_sendmsg+0x813/0xb40 [ 437.327664][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 437.327685][ C1] page last free pid 8709 tgid 8698 ts 165037397445 stack trace: [ 437.327701][ C1] free_unref_folios+0xdc2/0x14e0 [ 437.327718][ C1] folios_put_refs+0x9e9/0xb30 [ 437.327756][ C1] free_pages_and_swap_cache+0x2ba/0x490 [ 437.327786][ C1] tlb_flush_mmu+0x6d3/0xa30 [ 437.327805][ C1] __zap_vma_range+0x418d/0x4f80 [ 437.327826][ C1] unmap_vmas+0x390/0x550 [ 437.327845][ C1] exit_mmap+0x293/0x9f0 [ 437.327872][ C1] __mmput+0x118/0x420 [ 437.327895][ C1] exit_mm+0x221/0x2d0 [ 437.327913][ C1] do_exit+0x6cd/0x2360 [ 437.327930][ C1] do_group_exit+0x22d/0x2f0 [ 437.327949][ C1] get_signal+0x121b/0x12c0 [ 437.327973][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 437.328002][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 437.328021][ C1] do_syscall_64+0x328/0x520 [ 437.328049][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.328069][ C1] [ 437.328074][ C1] Memory state around the buggy address: [ 437.328116][ C1] ffff88807c764100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 437.328130][ C1] ffff88807c764180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 437.328144][ C1] >ffff88807c764200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 437.328155][ C1] ^ [ 437.328166][ C1] ffff88807c764280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 437.328180][ C1] ffff88807c764300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 437.328191][ C1] ================================================================== [ 437.328247][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 438.005666][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 438.014880][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.024958][ C1] Call Trace: [ 438.028247][ C1] [ 438.031181][ C1] vpanic+0x56d/0xa60 [ 438.035194][ C1] ? rcu_is_watching+0x16/0xb0 [ 438.039993][ C1] ? __pfx_vpanic+0x10/0x10 [ 438.044520][ C1] panic+0xc5/0xd0 [ 438.048263][ C1] ? __pfx_panic+0x10/0x10 [ 438.052701][ C1] check_panic_on_warn+0x89/0xb0 [ 438.057741][ C1] end_report+0x73/0x170 [ 438.062015][ C1] ? rcu_free_sheaf+0x31/0x200 [ 438.066788][ C1] kasan_report_invalid_free+0xfa/0x110 [ 438.072356][ C1] ? rcu_free_sheaf+0x31/0x200 [ 438.077136][ C1] ? rcu_free_sheaf+0x31/0x200 [ 438.081915][ C1] __kasan_slab_pre_free+0x104/0x120 [ 438.087213][ C1] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 438.092780][ C1] ? rcu_core+0x8a8/0x1260 [ 438.097213][ C1] rcu_free_sheaf+0x31/0x200 [ 438.101817][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 438.107636][ C1] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 438.112844][ C1] ? rcu_core+0x8a8/0x1260 [ 438.117277][ C1] rcu_core+0x926/0x1260 [ 438.121545][ C1] ? __pfx_rcu_core+0x10/0x10 [ 438.126242][ C1] handle_softirqs+0x226/0x860 [ 438.131038][ C1] ? schedule+0x90/0x2b0 [ 438.135293][ C1] ? run_ksoftirqd+0x36/0x60 [ 438.139906][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 438.144952][ C1] run_ksoftirqd+0x36/0x60 [ 438.149384][ C1] smpboot_thread_fn+0x565/0xa70 [ 438.154344][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 438.159389][ C1] kthread+0x38b/0x480 [ 438.163469][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 438.168944][ C1] ? __pfx_kthread+0x10/0x10 [ 438.173548][ C1] ret_from_fork+0x514/0xb70 [ 438.178152][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 438.183271][ C1] ? __switch_to+0xc89/0x1420 [ 438.187976][ C1] ? __pfx_kthread+0x10/0x10 [ 438.192598][ C1] ret_from_fork_asm+0x1a/0x30 [ 438.197426][ C1] [ 438.200760][ C1] Kernel Offset: disabled [ 438.205086][ C1] Rebooting in 86400 seconds..