last executing test programs: 3m56.794955533s ago: executing program 1 (id=1529): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) (async) unshare(0x20000400) (async) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a34000000140a01020000000000000000020000090900010073797a300000000008000340010000020c0006"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x35, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29b3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xec4f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xee67}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf0b}, @call={0x85, 0x0, 0x0, 0xb5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0xffff, 0x2b, &(0x7f0000000300)=""/43, 0x41000, 0xc, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x1, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r2], &(0x7f0000000440)=[{0x3, 0x1, 0xb, 0x7}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x0, 0x9a, 0xd4, &(0x7f0000000540)="11a56149f4501ec902966f0669e59094b1023754599551e48e54d110e67dce666118614ced8cb0d2f87a63d705355744cd4eac4d413b941499093eb032eb7e637adefebe9d64fdcaff394c6a83d3a02b80962dafacea7c8c61751e3f7c158b347bef6ce3c5bf3d93fe90228ae44a300b8884a043f4a5b5ad1a9d658b64bd7e00244e3daf069101e702108e5f1e7067c515a67a6bc031e74aa16b", &(0x7f0000000600)=""/212, 0x690, 0x0, 0xc0, 0x9a, &(0x7f0000000700)="672e8b03e766b257c7b22d8fc88ecfbacdd9b9e7f7db603d9a793fcce18a472de9512bdf8d125ad737571b53994b0395855476ff0d51bc8cf4c2f850def7e32abd9e0cac73c825a413a86fffb8d9cb99e66db3b99d9a3138109bf1ea840ccb9e1c213e5b7f05470cafc99a1f596fda3aeebafa723a7f410800308fae7c2592de0d84b14067145a4a00573b8e52234e97bc19fd62b39c0dbaaab04676b6bc57049da6c49a50ef3153f06efea8f3fa2ce1e317a8e3f8991bed25a2cc583b2b28c4", &(0x7f00000007c0)="e72236d0c27a55a75cc3e1e9a6fb3867cf32b0a883cebce5bf4ffdca42e705462d948bbdbdf50171330670c37536a8d31bc89adcc2cf8e232a32940f9da6aeba86a60356dd846daab53b83dd5a1cfa7cfcb040a1c04ad31e980ad325a3be899c2b78c90a963abb165f3bdbba3e4eb41415f518121717d1232e7660b8669546d2576f83565b179caa241e46b4c549933d1d5ba4614718303a85de", 0x7, 0x0, 0x6}, 0x50) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000040)={0x5, [0x0, 0xa, 0x3, 0xa, 0x9c0]}, 0xe) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x200, 0x200, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast1, @loopback, 0xffffff00, 0xff, 0xa, 0x9, {@empty, {[0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x401, 0x9f, 0x17, 0xfffc, 0x2, 'syz_tun\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x1cc}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x7, 0xea4, 0x1}}}, {{@arp={@multicast1, @loopback, 0xffffffff, 0xff, 0xc, 0x10, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xed, 0x5, 0x0, 0x35, 0x6, 0xfffb, 'macvlan0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x5, {0x5}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) r9 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0x40106183, &(0x7f0000000280)={r7, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0}) (async) r10 = socket$kcm(0x2, 0x1, 0x0) listen(r10, 0x2000000) 3m56.39169712s ago: executing program 1 (id=1534): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000610000009a11217cf70d64dad4ef5e80b1f7b7eadf3a2dec33379eac1f0200a646a1e107bbd3d501a10aa03ffb6aa1a10c7a4d87e5d6502cf30d046f7be6d50239f67e44e2e019374967e951546c99d7dd221d7e4e829ee670a0223b7fb839338b00caa3dfe6f9e0a124ee70d072ea600602a7ae9f390add40e6a4cf1ac4c08fdd3837ee9c3f426f148d2f98d8e817ab397c993330acc99bd8be0ba16b273bfdc89c2ae841bf6b57961a361a399e3e29e51e2b202c3ef0985450eeee1bbf9e5de78a337307d72a967c3d4dd514b4dcb538486739", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) r0 = getgid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x400) r2 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f0000001b00)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r8 = syz_open_procfs$namespace(r5, &(0x7f0000001780)='ns/ipc\x00') r9 = getpid() sendmmsg$unix(r4, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r9, r6}}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = getpid() ioctl$sock_FIOSETOWN(r10, 0x8901, &(0x7f0000000380)=r11) r12 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r13}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r18 = syz_open_procfs$namespace(r15, &(0x7f0000001780)='ns/ipc\x00') r19 = getpid() sendmmsg$unix(r14, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r15, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r15, 0x0, r17}}}, @cred={{0x1c, 0x1, 0x2, {r19, r16}}}, @rights={{0x18, 0x1, 0x1, [r18, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="3fe62af19c706c11bd3b8419c98ccaa9d2fa1310eb3798843a88e70bfb0ad83c7204d4d574db23c90dbb14d352afcd6f9d", 0x31}, {&(0x7f0000000140)="9fbe82c7a61724d3dd51a05761c2948d", 0x10}, {&(0x7f0000000200)="74ffdb1e28ee0513ebc10f6efd27bc055a09142e7b17c33f1ddfa1a85899412654071549b34fcb9e3703815e689df7fdf32afb934fcbbea293a64faeb3cbd1234beaaa0e2593ad7b961d134f9bc4e3d517720efefe159735871dc0fc34d9f86f5b560839770320fd16f71f61b93c7d47a8fecc21cab2923f8157a5ee2decc4a5208fbd49706f638f4bd7193a8f999eaaf1e0233884bfb65dba58717aa11d341cd422b4ee5129a4dd7be281595b72c519afc9c9d718daf948c636f3ea36dc41", 0xbf}, {&(0x7f00000002c0)="6c2873ad1d303a628d058308418a8cdc4001", 0x12}, {&(0x7f0000000340)="aaec21ecb1034a3631cbe7049afd4b0c", 0x10}], 0x5, &(0x7f0000001b40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r0}}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r7}}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, r17}}}], 0xb0, 0x24000044}, 0x84) r20 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r21 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r21, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r23 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r23, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r22, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$netlink(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) 3m56.000035998s ago: executing program 1 (id=1539): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r1, 0x89e9, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x7fffffe}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x45, 0xe, 0x81, 0x2, 0x2, 0x6, 0x2}}, {0x8, 0x2, [0x6, 0x7ff]}}, {{0x1c, 0x1, {0x5, 0xff, 0x749c, 0xc9, 0x2, 0x1, 0x1, 0x3}}, {0xa, 0x2, [0x220, 0x9cc, 0x4]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x12302, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000180)=r6) 3m55.747447802s ago: executing program 1 (id=1544): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x18, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mld={0xc4, 0x0, 0x0, 0x7, 0x0, @loopback}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c0, 0x98, 0x138, 0x428, 0x0, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x9}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x32}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x8}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) 3m55.599093576s ago: executing program 1 (id=1547): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="183000060100000000000000030000009500000000000000e4c10a914167937eda63962779e4327427ca52d779e18bfed67f97e7e60032cfedf6fd8670a82f6ded31898eb52b51811e702003865ea2b251ec3d1537682219a4bfa25c0bd879d8f6432c01399d2fb374122e65b610ae1d5d7218b049d0d0ee4bdba80618e5372535b585eef9beb9dc830104922ba259c9849c19dcf1de404a2e3047d818bac02511cfb3540c5ecc5c0c48811516f08d0698f9e7a57de4d499a67312326d8b72d5c72790d35f7abeb273bb77c605639b5785da77ad8e959e5e04217b4f2a3ee6e6826539d4d8d05814a621e583e857fd3717c7d1eecba7a135c2bbe28ad15715b2ab6bbe"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 3m55.542237452s ago: executing program 1 (id=1548): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040844}, 0x24004910) 3m40.474096197s ago: executing program 32 (id=1548): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040844}, 0x24004910) 2m34.692123966s ago: executing program 5 (id=2195): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) splice(r1, &(0x7f0000000040)=0xfffffffffffffffc, r0, 0x0, 0x800000000ff, 0x0) 2m34.630942574s ago: executing program 5 (id=2196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x1c}}, 0x4) 2m31.891577493s ago: executing program 5 (id=2201): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x10, 0x0, 0x7, 0x4], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x44010, r3, 0x1c614000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_AF_SPEC={0x4}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) listen(r0, 0xffffffff) r4 = accept4(r0, 0x0, 0x0, 0x0) listen(r4, 0x3ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) getsockname$llc(r4, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x0, 0x8, 0xfff, 0x30, 0x200}) 2m31.671600852s ago: executing program 5 (id=2206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a440000000c0a010100000000000000000a0000060900020073797a310000000009000171c5797a3100000000801400008004000180080003c000000001040002801400000011"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000340)={0x28, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m31.442920669s ago: executing program 5 (id=2210): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d4e496b"], 0x2c}}, 0x60040050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110a90000000000720ac0ff0100000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a2", 0x1}, {&(0x7f00000000c0)="e63770df945e5013c2ef1e3505ae43634e1052eb6f5838da4fd11285cbc0f074fccdf3f0a4c92ffe15f13f512c9a4dc188d205a1a618f3d1835de77af8d55b9403aa11c022cd4957f75b042cba6f1eb351213955a262032ae23a23eba1765a515a85e721405841ef7d81c32c796645780bed011f", 0x74}], 0x2, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x77}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010101, @local}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="d33a8985c6f26060465e48a5b1f4e2712c09dbee0ba43e1d4d12226570e0cd102736bf15e9f6b667b6f787f9a6f6044f2bdf6bae809e7ecb59970cd8026138a3831c1b5dd7c038fcbcbb62c0ca596b68dec54178e21a7586ed4d331aeb5e6656e518e5ce3eff1fe5c2c4fd30c3c67cf612c4319e0b4e7e3c7fb3c43a025b245cbd48a1eb325667b7d28f9b28af9aef093fb80abc8c2e4cff979834270ef5d4f198177f1ed4e844f77249cb4cd3c9cfe01af01af91fd4708ab5d6e0a6de39a28bce4f17ef70a584dd7b53aec59ad35e742179d4fa48615913d15f6a5a9731507d30efb1e4cc3e1f2d0a1b748200f1bcd0eb4d8af4bf", 0xf5}], 0x1, &(0x7f0000000440)=[@ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x96, 0x3, 0xa, [{@broadcast}, {@rand_addr=0x64010101, 0xb3d}, {@empty, 0x403}]}, @timestamp={0x44, 0x18, 0x73, 0x0, 0x3, [0xc, 0x4, 0x1ff, 0x8, 0x3]}, @rr={0x7, 0xb, 0xe0, [@multicast2, @broadcast]}, @cipso={0x86, 0x23, 0x3, [{0x7, 0x9, "2c7650557505d1"}, {0x0, 0xa, "ff751c2bd2e1550d"}, {0x5, 0x2}, {0x2, 0x3, "c8"}, {0x5, 0x5, 'Vm['}]}, @rr={0x7, 0x7, 0xb, [@multicast1]}]}}}], 0x80}}, {{&(0x7f00000004c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000500)="f368cd58d8917c927b3d80f8704cd48b88146be5e43fe26a48f715544ab79b8e696f8970a1aaca", 0x27}, {&(0x7f0000000540)="9f43c0d4230e45065ed837c9c0a81ff86a2a9ad0123440ae4b56fd158021d62b81df1efff6fc593d6f4d89bee35c4e99bf912b8ced3adc9548c3a1c73771916fb555c49024627e0402ddc2e45161406f27b4959adffd8e773f044cbff40223ef77431f7d608b27c4d47bc826", 0x6c}], 0x2, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="bbe5aede9a07abc4d4e363c211dd82088e5ddae3a5753bebd4de107296c5d2d96a7b370d01da228b0f17c8455776a82e8e2359966941a3779edf722ccdb521f3d45d39d5ec7c88ede4093967597e05aeeb4ac575bfb85d9a490bc194e8880b93a22b1277d5bdeb0a7fc2bcb759d471", 0x6f}], 0x2, &(0x7f00000020c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x48}}], 0x4, 0x5) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7ff, 0x7, 0x3, 0xfbc}, {0xfff5, 0x1, 0x3, 0x4}]}, 0x10) 2m31.173525012s ago: executing program 5 (id=2215): socket$nl_sock_diag(0x10, 0x3, 0x4) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000300)={@void, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x15, 0x2c, 0x64, 0x0, 0xc2, 0x6, 0x0, @local, @broadcast}, {{0x4e20, 0x4e60, 0x41424344, 0x41424344, 0x1, 0x0, 0x400000000000005e, 0x1, 0x200, 0x0, 0x4, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x42) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x1, 0x20002040) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0xd0, 0x0, 0x10, 0x7c6, 0xfdb1, 0x5, 0xc16d, 0x7}, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) 2m16.044074002s ago: executing program 33 (id=2215): socket$nl_sock_diag(0x10, 0x3, 0x4) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000300)={@void, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x15, 0x2c, 0x64, 0x0, 0xc2, 0x6, 0x0, @local, @broadcast}, {{0x4e20, 0x4e60, 0x41424344, 0x41424344, 0x1, 0x0, 0x400000000000005e, 0x1, 0x200, 0x0, 0x4, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x42) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x1, 0x20002040) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0xd0, 0x0, 0x10, 0x7c6, 0xfdb1, 0x5, 0xc16d, 0x7}, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) 32.383207532s ago: executing program 0 (id=3336): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x438, 0x0, "45ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b42a870604b55907b7d9f5cc440a9461ae68370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60c85d749598ac313fecd1e4ec6e8dd1995db3286855f34db39"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYRES32=0x0], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 32.131024482s ago: executing program 0 (id=3338): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x18, "77f8699b2abc26d726f3005112d8b9c7354354f5834944b7"}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={r2, 0x1000}, &(0x7f0000000240)=0x8) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, &(0x7f0000000180)) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e24, @private=0xa010100}}, 0x8, 0x5, 0x6, 0x7735f67e, 0x20, 0x17bb, 0xff}, 0x9c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 31.924504196s ago: executing program 0 (id=3342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xf}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 31.199271268s ago: executing program 0 (id=3347): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000001c0)={{0x0, 0x3, 0x1, 0x101, 0xe9, 0x9, 0x8, 0x0, 0x1, 0x9, 0x91, 0x10001, 0x1, 0xffffffffffffffc2, 0x9}, 0x20, [0x0, 0x0, 0x0, 0x0]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0xa, 0x0}, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01801800000000000000180000001800000004000000020000000000000c02000000000000000000000d710000000000005f00"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000006db822ac93e8640000f0ffffff00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd4, r9, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1cf78c8bcc1366285bdbe3b34054097e2079fd74a77075c7977e0b9276374070"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "754f25900ad8cb98b1e7da5873f8081c"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "526b62559c7639e8f6681f4fc3e8a6fd74ab97e4f287aa9555e47f1a521d677e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e5ac9c2f4c8f25dcbec40066afce7f7a"}]}]}, 0xd4}}, 0x8010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r7, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r13, &(0x7f00000000c0), &(0x7f0000000000)=@tcp6=r3, 0x1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000ff0700000000000004000000852000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183700000400000000000000000000000192e0f0ff7f00008457f4fffcffffff950000000000000011f903d7065c2a1651cbdb2eb6daac98"], &(0x7f0000000280)='syzkaller\x00', 0xffffff7f, 0xf1, &(0x7f00000003c0)=""/241, 0x40f00, 0x1, '\x00', r4, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x2, 0x6}, 0x10, r5, r7, 0x2, &(0x7f0000000680)=[r13, r14], &(0x7f00000006c0)=[{0x5, 0x3, 0x3, 0x7}, {0x4, 0x3, 0xf, 0xc}], 0x10, 0xffff}, 0x94) getpeername(r0, &(0x7f00000007c0)=@can, &(0x7f0000000840)=0x80) r15 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r15, 0x0, 0xcb, &(0x7f00000002c0)={0x1, 0x4, 0x6, 0x0, @vifc_lcl_ifindex=r12, @remote}, 0x10) r16 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r16, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) 30.609878149s ago: executing program 0 (id=3352): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x27, 0x1, 0x2) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x80000001}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000200)=""/261, 0x105, 0x20120, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 29.516858774s ago: executing program 0 (id=3364): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x2, 0x5, 0x2, 0x1, 0x10, 0x0, 0x5, 0x3], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x4, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0xfffe, 0x1000]}}}}]}, 0x3e}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) shutdown(r4, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x4, 0x8, 0x9ba2bf28609cf708, 0x5, 0x0, 0x2, 0x441a, 0x81}, &(0x7f0000000240)=0x20) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12}, 0x48) 13.573908532s ago: executing program 34 (id=3364): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x2, 0x5, 0x2, 0x1, 0x10, 0x0, 0x5, 0x3], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x4, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0xfffe, 0x1000]}}}}]}, 0x3e}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) shutdown(r4, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x4, 0x8, 0x9ba2bf28609cf708, 0x5, 0x0, 0x2, 0x441a, 0x81}, &(0x7f0000000240)=0x20) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12}, 0x48) 5.507636469s ago: executing program 6 (id=3604): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) (async, rerun: 32) syz_emit_ethernet(0xfe8, &(0x7f0000003140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60fb2000000000000000000000000ffff0a010100fe8000000000000000000000000000aa840000"], 0x0) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (rerun: 32) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001300)={r4, 0x6e2}, &(0x7f0000001340)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r4, 0x800, 0x10, 0x44, 0xd}, &(0x7f0000000580)=0x18) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) (async) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x48005) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) (async, rerun: 64) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) r6 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="e40100001000010028bd700000000000ff020000000000000000000000000001e00000010000000700000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1e4}}, 0x44050) 5.080798213s ago: executing program 6 (id=3606): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x4, 0x0, 0x1, 0x1}, 0x22, 0x3, 0x0, 0x0, "8d17a52fe5b6e2dca68843d0447a36db2010865e2f8a54504983c95663a051b5b34b68d29e4ee5e7925d7764d5b36d47b4ec4979ab895e75b7c7ec3fb650de6b"}, 0x48}, 0x1, 0x0, 0x0, 0x20008880}, 0x40800) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000180)={0x0, 0x8, [0x944, 0x0, 0x4, 0x6, 0x4, 0xfffffffffffffffe]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x2000, 0x4) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/9, 0x9}], 0x1, &(0x7f0000000300)=""/141, 0x8d}, 0x1002) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) recvmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000440)=@ethernet, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/185, 0xb9}, {&(0x7f0000000580)=""/253, 0xfd}], 0x2, &(0x7f00000006c0)=""/105, 0x69}, 0x3}, {{&(0x7f0000000740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f00000008c0)=""/151, 0x97}], 0x2, &(0x7f00000009c0)=""/4096, 0x1000}, 0x1}], 0x2, 0x21, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000001a40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001a80)={'vxcan1\x00'}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000001bc0)={0xffffffffffffffff, &(0x7f0000001ac0)='vxcan1\x00', 0xa8980, &(0x7f0000001b00)={@_ha_fsid={[0x3, 0xfffffffd]}, {0x3, 0x80, 0xfff, 0x6}}, 0x9, &(0x7f0000001b40)={@_ha_fsid}, &(0x7f0000001b80)=0x9}) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44080) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001d40)={0x7, &(0x7f0000001d00)=[{0x7ff, 0x0, 0x5, 0x2}, {0x3ed0, 0x2, 0x4, 0x6}, {0x401, 0xa, 0xae, 0xa}, {0x7, 0x0, 0xd, 0x7}, {0xfd91, 0x1, 0x4, 0xfffffff8}, {0x18, 0x10, 0x0, 0x2}, {0xf, 0x3, 0x5, 0x1ff}]}, 0x10) recvmmsg(r4, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001d80)=""/200, 0xc8}, {&(0x7f0000001e80)=""/221, 0xdd}, {&(0x7f0000001f80)=""/218, 0xda}, {&(0x7f0000002080)}, {&(0x7f00000020c0)=""/241, 0xf1}, {&(0x7f00000021c0)=""/66, 0x42}, {&(0x7f0000002240)=""/169, 0xa9}, {&(0x7f0000002300)=""/118, 0x76}, {&(0x7f0000002380)=""/195, 0xc3}], 0x9, &(0x7f0000002540)=""/16, 0x10}, 0xf}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002580)=""/209, 0xd1}, {&(0x7f0000002680)=""/17, 0x11}, {&(0x7f00000026c0)=""/171, 0xab}, {&(0x7f0000002780)=""/9, 0x9}, {&(0x7f00000027c0)=""/41, 0x29}, {&(0x7f0000002800)=""/3, 0x3}, {&(0x7f0000002840)=""/16, 0x10}, {&(0x7f0000002880)=""/87, 0x57}], 0x8, &(0x7f0000002980)=""/115, 0x73}, 0x5bb}, {{&(0x7f0000002a00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a80)=""/144, 0x90}, {&(0x7f0000002b40)=""/42, 0x2a}, {&(0x7f0000002b80)=""/196, 0xc4}, {&(0x7f0000002c80)=""/61, 0x3d}, {&(0x7f0000002cc0)=""/17, 0x11}, {&(0x7f0000002d00)=""/158, 0x9e}, {&(0x7f0000002dc0)=""/115, 0x73}, {&(0x7f0000002e40)=""/170, 0xaa}], 0x8, &(0x7f0000002f80)=""/148, 0x94}, 0x7fffffff}], 0x3, 0x20, &(0x7f0000003100)={0x0, 0x3938700}) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000003140)=0x1, 0x4) recvmmsg(r0, &(0x7f0000007d00)=[{{&(0x7f0000003180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003200)=""/141, 0x8d}, {&(0x7f00000032c0)=""/216, 0xd8}, {&(0x7f00000033c0)=""/173, 0xad}, {&(0x7f0000003480)=""/196, 0xc4}, {&(0x7f0000003580)=""/188, 0xbc}, {&(0x7f0000003640)=""/136, 0x88}, {&(0x7f0000003700)=""/246, 0xf6}, {&(0x7f0000003800)=""/38, 0x26}], 0x8, &(0x7f00000038c0)=""/93, 0x5d}, 0x7fff}, {{&(0x7f0000003940)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, 0x80, &(0x7f0000003b80)=[{&(0x7f00000039c0)=""/8, 0x8}, {&(0x7f0000003a00)=""/48, 0x30}, {&(0x7f0000003a40)=""/33, 0x21}, {&(0x7f0000003a80)=""/210, 0xd2}], 0x4, &(0x7f0000003bc0)=""/186, 0xba}, 0x80000001}, {{&(0x7f0000003c80)=@nl=@proc, 0x80, &(0x7f0000004100)=[{&(0x7f0000003d00)=""/99, 0x63}, {&(0x7f0000003d80)=""/17, 0x11}, {&(0x7f0000003dc0)=""/123, 0x7b}, {&(0x7f0000003e40)=""/24, 0x18}, {&(0x7f0000003e80)=""/214, 0xd6}, {&(0x7f0000003f80)=""/151, 0x97}, {&(0x7f0000004040)=""/175, 0xaf}], 0x7, &(0x7f0000004180)=""/198, 0xc6}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000004280)=""/129, 0x81}, {&(0x7f0000004340)=""/220, 0xdc}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/236, 0xec}, {&(0x7f0000005540)=""/23, 0x17}], 0x5, &(0x7f0000005600)=""/34, 0x22}, 0x67e}, {{&(0x7f0000005640)=@ethernet, 0x80, &(0x7f0000005700)=[{&(0x7f00000056c0)=""/33, 0x21}], 0x1, &(0x7f0000005740)=""/54, 0x36}, 0x354c}, {{&(0x7f0000005780)=@nfc, 0x80, &(0x7f0000007c00)=[{&(0x7f0000005800)=""/200, 0xc8}, {&(0x7f0000005900)=""/111, 0x6f}, {&(0x7f0000005980)=""/14, 0xe}, {&(0x7f00000059c0)=""/228, 0xe4}, {&(0x7f0000005ac0)=""/46, 0x2e}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/4096, 0x1000}, {&(0x7f0000007b00)=""/205, 0xcd}], 0x8, &(0x7f0000007c80)=""/86, 0x56}, 0x3}], 0x6, 0x40, &(0x7f0000007e80)={0x0, 0x989680}) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000007f00), r3) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000007fc0)={&(0x7f0000007ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000007f80)={&(0x7f0000007f40)={0x2c, r7, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40094}, 0x4040805) getsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000008000), &(0x7f0000008040)=0x4) socket$xdp(0x2c, 0x3, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000008080)={0x0, 0x4, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000008400)=@bpf_lsm={0x1d, 0x14, &(0x7f00000080c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r8}, @jmp={0x5, 0x1, 0x9, 0x7, 0x8, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000008180)='syzkaller\x00', 0xb, 0xe5, &(0x7f00000081c0)=""/229, 0x41000, 0x68, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f00000082c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000008300)={0x3, 0x10, 0x80, 0xd}, 0x10, 0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000008340)=[{0x1, 0x4, 0x3}, {0x3, 0x5, 0xe, 0x7}, {0x2, 0x3, 0x7}, {0x0, 0x5, 0xa, 0x4}, {0x2, 0x2, 0x9, 0xc}, {0x1, 0x1, 0xa, 0xa}, {0x2, 0x2, 0xe, 0x3}, {0x0, 0x2, 0x3, 0xa}, {0x4, 0x1, 0x7, 0x8}], 0x10, 0xfffffc01}, 0x94) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000084c0)) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000008540), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000008600)={&(0x7f0000008500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000085c0)={&(0x7f0000008580)={0x30, r9, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x3, 0x8000, 0x1ff, 0xb08}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000008640)={r2}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f0000008780)={&(0x7f0000008680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000008740)={&(0x7f0000008700)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x16}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x41) 4.496223797s ago: executing program 4 (id=3611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000210"], 0x18}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r5, @ANYBLOB=' k\x00\x00', @ANYRES32=r5, @ANYBLOB="01000800000000000000000000000000000000008edd0000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x200}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8902}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25170000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001c00018008000100", @ANYRES32=r5, @ANYBLOB="08000300000057960ccb1fb8", @ANYRES32=r8, @ANYBLOB="0c0001800800030002000000180001801400020064766d72703000"/36], 0x68}, 0x1, 0x0, 0x0, 0x24002804}, 0x4) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 4.495825539s ago: executing program 2 (id=3612): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000001c00)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r4, 0x0) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000089000000080003"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r5, 0x8b32, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="0600550dc195c7d96fa35cc751a5b2ccf10000", @ANYRES16=0x0, @ANYBLOB="000102000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00000000000600110001000000"], 0x4c}}, 0x20000011) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 4.144571136s ago: executing program 2 (id=3614): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="01000000000000000000010000000000000001410000001c0017fffffffd000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4000001) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 4.021547591s ago: executing program 6 (id=3615): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000007800010402000000018e080003006400000008000210c800"/41], 0x2c}}, 0x4840) 3.662033537s ago: executing program 6 (id=3617): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x1c, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180)) sendmsg$sock(r4, &(0x7f0000001240)={&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x100, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x8, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x1, 0x1, 0x8, 0x4, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x8000) 3.586720916s ago: executing program 2 (id=3618): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3c, 0x31d, 0x7fffa, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4c0d2) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 3.391561803s ago: executing program 2 (id=3620): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xfffc}}]}]}}}]}, 0x64}}, 0x0) (async) sendto$packet(r1, &(0x7f00000002c0)="44c30100000000000000c0c288a8", 0xe, 0x4004831, &(0x7f0000000440)={0x11, 0x8100, r4, 0x1, 0x2, 0x6, @remote}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d6574610000000014000280080003400000000108000240"], 0xdc}}, 0x0) 3.178527701s ago: executing program 6 (id=3622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}, [@mark={0xc, 0x15, {0x35075a, 0x7}}]}, 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000180)=@newtaction={0x174, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x160, 0x1, [@m_nat={0x0, 0x2, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x3, 0x5, 0x10000000, 0x4, 0xc}, @multicast2, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x5, 0x2, 0x0, 0x1, 0x27e}, @rand_addr=0x64010100, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x5, 0xc, 0x2, 0xee, 0xd}, @multicast1, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x1000, 0x1ff, 0x1, 0x4, 0x1}, @broadcast, @empty, 0xffffffff, 0x7}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x5, 0x8, 0x4, 0x7, 0xffff}, @rand_addr=0x64010102, @local}}]}, {0x0, 0x6, "c8a2183779692399b536a7130da806c3d7cb9da1511decd6716fa8bc717a38903f5b9b3a0530b10fc0c1f258761a4f1f2517279580921c93cfa570ef3959a3b580ec5f2f5c5e934debb2620c9e72a50b9e3b49db1edf347694c3d1cbf65bf60fd02a14700b8b8cdd89669fa817008626cc3a09e9214c3eab8b9e0df10cbab055c53310363bfe8d1348a5a67f3486c9b853443dde23e24a1eb2026ea457ea1e027bd6b37aedc659de8a9e1b2519e9b7096a2043cc53f6bb6840398797ede6988b310ca11ff933b23fee1cbebdaaf71012857c35d9712e7fd6b550aaf930e13ff8062403"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x1}}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x174}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x1) socket(0x0, 0x6, 0x4) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@broadcast, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0xb0, 0x32, r4, r11}, {0x1, 0x2, 0x1, 0x2, 0x9, 0x2, 0x3, 0x81}, {0x3, 0x2b14, 0x8, 0x7fffffff}, 0x3, 0x6e6bb6, 0x2, 0x0, 0x3, 0x1}, {{@in=@multicast1, 0x4d6, 0x6c}, 0x2, @in6=@loopback, 0x3505, 0x3, 0x2, 0xe, 0x4, 0x5, 0x7}}, 0xe8) 3.114926661s ago: executing program 4 (id=3623): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 64) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) (rerun: 64) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc020000000000000000000000000000000200000000000004010001010031"], 0x0) r0 = socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) 3.011665582s ago: executing program 2 (id=3625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) socket$inet(0xa, 0x801, 0x84) (async) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) (async) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000380)=0x84) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd700000000000010000000000000007410000001400180000000069623a6e6963766630def4fd"], 0x30}}, 0x0) 2.822900226s ago: executing program 4 (id=3628): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x98, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0xfffffffffffffdd5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x85}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2b, 'rlimit'}, {0x2b, 'pids'}]}, 0xe) 2.82028898s ago: executing program 3 (id=3629): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x884) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @sk_msg}, 0x94) 2.819003721s ago: executing program 7 (id=3630): socket(0xa, 0x3, 0x3a) (async) r0 = socket(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}}, 0x4004000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) 2.717417203s ago: executing program 7 (id=3631): bpf$MAP_CREATE(0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000e2ffffff000000000000000010000000"], 0xa1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x24000010) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="102a05f4ffffff000c001a8008000280040001"], 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) 2.64678721s ago: executing program 3 (id=3632): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000c400000093206951a2238f95000000000000005b8604439cbd6268ba985c28043d1cdb9b07d9d56975da024792443b0f86d4767a80c207ca9744e844b77bdc8a29cc69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYRESDEC=0x0, @ANYRES16=r3, @ANYRES16=r3, @ANYRESHEX=r2], 0x44}}, 0x2000801) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000000101040000000000000000020000001400188008000140000000000800004000000000240001801400018008000100e000000108000200e00000010c00028005000100"], 0x50}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000000101040000000000000000020000001400188008000140000000000800004000000000240001801400018008000100e000000108000200e00000010c00028005000100"], 0x50}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0x100, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0x100, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 2.644449826s ago: executing program 4 (id=3633): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00828c1955a7dbc800001a002200f3ff0000156b16001c0400fe927a0381232b5c8de633520000000000b2aae8508097bd8c9576c908fbd535ef8a2a8f624a7bcab08d6afd15fdc5251d049c29125d49684eeb851f1dde7de97c3e0516409c8c36b84cbfc30000"], 0x1c}}, 0x4000000) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000000c0)=0x71e, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd26, 0x0, {0xa}, [@RTA_DST={0x8, 0x1, @private=0xa010102}]}, 0x24}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) (async) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) (async) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000400)={{r0}, 0x8, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0x4, 0x5, 0x6, 0x6, 0x9, 0x4], 0xa510, 0xf, 0x1}) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x1412, 0x4, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x40}}, 0x0) 2.500547512s ago: executing program 3 (id=3634): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) mmap(&(0x7f0000a4b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) 2.36318535s ago: executing program 7 (id=3635): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0x871a15abc695fb3d, 0xffffffff, 0x25dfdc02, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48050}, 0x20004800) r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="68000000300005060000000d000000000000010054000100500001000900010067617465"], 0x68}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) 2.230769937s ago: executing program 3 (id=3636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e000100697036677265746170000000040002800a000100bf5dba82fcb30000"], 0x44}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='-\x1c@]\x00', 0x50000, &(0x7f0000000040)={@align=0x7fffffffffffffff, {0x0, 0x0, 0x3ff, 0x17b}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8010000000002100000000000000bb050005002b0000000a0000a874000000fc01000000020000000200000000000000000000000000000800197c"], 0xe0}}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x8, 0x7800, 0xd4, 0x6, {{0x13, 0x4, 0x0, 0x2, 0x4c, 0x66, 0x0, 0xff, 0x29, 0x0, @multicast2, @local, {[@noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x70, [@multicast2, @local, @multicast1, @private=0xa010100]}, @lsrr={0x83, 0xb, 0x23, [@private=0xa010102, @remote]}, @timestamp={0x44, 0x10, 0x1a, 0x0, 0x1, [0xb, 0x0, 0x3]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x0, 0xcc, 0xc1, &(0x7f0000000a40)="d388a54bf4fe98bf9d43d3ddfe05a1c68a315165bc946aaafc87b7da184ea536050e2c4b498b4e8e796250b6db9f359327756fc1db476948dd514a0babc2b21cd6d6ab8c8ff752435459dbc5087daa56ddd989e6cebec45dec6d5449b9fbd5a91f20772b8c9cda69664e05e147a5193e8dd8e0aa198d72ff55b5182245dd7b9474a33dd4ad7663df98d0ce4ac130f738fc7788d0646c1ba17dfa91f2e026944f03d21f355d1fbdca056da0c0d305cdbd82036e26e3d8788ef3d74c1c9b29476e3b922d1e2bceb4dfee581593", &(0x7f0000000b40)=""/193, 0x7, 0x0, 0xbc, 0x52, &(0x7f0000000c40)="a26f8f0a6cdc15c202ea9a010c526dcce7fad0fd89b9698d4ec39bbe1d9e09be116ed172f9c4ca8bad91103ed40e1875ac6c04594912196ae55d295f18e12b22bd6dbef8ead68b90ce843d596e622950fc429a11878b2638df57e2d358ea531fda152628998948dd3d6d956f9d1295d435180aa49bc2115a90fd08a437a7b5331fceced420f1fca5e351b71fcf700bff1cb21defc2146566afb6afdc76d8846de5de917b1332f4adbb886148668948979192ee5202f1631070199ab5", &(0x7f0000000d00)="253e36176ac9b8aa49f31fa09d24b947fb7c10c8f648d9f7236275a58b5a01fb5e3647b8e8fe63d26beec05e4f2a59c7eb12b6a0b569c2e3be03e5cd8f909582e26f0ab1d7cf162f243028839b8f2369ac85", 0x5, 0x0, 0x5}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x86, 0x86, 0x5, [@datasec={0x7, 0x7, 0x0, 0xf, 0x2, [{0x3, 0x101}, {0x1, 0x0, 0x5d9}, {0x1, 0x5, 0x3ff7}, {0x1, 0x8, 0x7}, {0x1, 0x4, 0x6}, {0x1, 0x9, 0x3}, {0x2, 0x1000, 0x5}], "a4e6"}, @fwd={0xd}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x4, [{0xb, 0x5}]}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000740)=""/44, 0xa5, 0x2c}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000800)={r0, 0x0, 0x4, 0x8}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x1a, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000500000000000000e40d000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185a0000000000000000000000000000bf9230000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000ef008500000086cfdb179bcfd57f0000008122c4ff000000fa1900000000", @ANYRES32=r5, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x7, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000007c0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[0xffffffffffffffff, r8, r9], &(0x7f0000000900)=[{0x3, 0x3, 0xa, 0x5}, {0x1, 0x3, 0x10, 0x4}, {0x3, 0x2, 0x2, 0x3}, {0x5, 0x4, 0xd}, {0x2, 0x3, 0xc, 0xc}, {0x3, 0x4, 0xa, 0x3}, {0x0, 0x3, 0x5, 0x9}, {0x2, 0x5, 0x8, 0x1}], 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e000100697036677265746170000000040002800a000100bf5dba82fcb30000"], 0x44}}, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='-\x1c@]\x00', 0x50000, &(0x7f0000000040)={@align=0x7fffffffffffffff, {0x0, 0x0, 0x3ff, 0x17b}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8010000000002100000000000000bb050005002b0000000a0000a874000000fc01000000020000000200000000000000000000000000000800197c"], 0xe0}}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x8, 0x7800, 0xd4, 0x6, {{0x13, 0x4, 0x0, 0x2, 0x4c, 0x66, 0x0, 0xff, 0x29, 0x0, @multicast2, @local, {[@noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x70, [@multicast2, @local, @multicast1, @private=0xa010100]}, @lsrr={0x83, 0xb, 0x23, [@private=0xa010102, @remote]}, @timestamp={0x44, 0x10, 0x1a, 0x0, 0x1, [0xb, 0x0, 0x3]}, @ra={0x94, 0x4}]}}}}}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x0, 0xcc, 0xc1, &(0x7f0000000a40)="d388a54bf4fe98bf9d43d3ddfe05a1c68a315165bc946aaafc87b7da184ea536050e2c4b498b4e8e796250b6db9f359327756fc1db476948dd514a0babc2b21cd6d6ab8c8ff752435459dbc5087daa56ddd989e6cebec45dec6d5449b9fbd5a91f20772b8c9cda69664e05e147a5193e8dd8e0aa198d72ff55b5182245dd7b9474a33dd4ad7663df98d0ce4ac130f738fc7788d0646c1ba17dfa91f2e026944f03d21f355d1fbdca056da0c0d305cdbd82036e26e3d8788ef3d74c1c9b29476e3b922d1e2bceb4dfee581593", &(0x7f0000000b40)=""/193, 0x7, 0x0, 0xbc, 0x52, &(0x7f0000000c40)="a26f8f0a6cdc15c202ea9a010c526dcce7fad0fd89b9698d4ec39bbe1d9e09be116ed172f9c4ca8bad91103ed40e1875ac6c04594912196ae55d295f18e12b22bd6dbef8ead68b90ce843d596e622950fc429a11878b2638df57e2d358ea531fda152628998948dd3d6d956f9d1295d435180aa49bc2115a90fd08a437a7b5331fceced420f1fca5e351b71fcf700bff1cb21defc2146566afb6afdc76d8846de5de917b1332f4adbb886148668948979192ee5202f1631070199ab5", &(0x7f0000000d00)="253e36176ac9b8aa49f31fa09d24b947fb7c10c8f648d9f7236275a58b5a01fb5e3647b8e8fe63d26beec05e4f2a59c7eb12b6a0b569c2e3be03e5cd8f909582e26f0ab1d7cf162f243028839b8f2369ac85", 0x5, 0x0, 0x5}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x86, 0x86, 0x5, [@datasec={0x7, 0x7, 0x0, 0xf, 0x2, [{0x3, 0x101}, {0x1, 0x0, 0x5d9}, {0x1, 0x5, 0x3ff7}, {0x1, 0x8, 0x7}, {0x1, 0x4, 0x6}, {0x1, 0x9, 0x3}, {0x2, 0x1000, 0x5}], "a4e6"}, @fwd={0xd}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x4, [{0xb, 0x5}]}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000740)=""/44, 0xa5, 0x2c}, 0x28) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000800)={r0, 0x0, 0x4, 0x8}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x1a, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000500000000000000e40d000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185a0000000000000000000000000000bf9230000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000ef008500000086cfdb179bcfd57f0000008122c4ff000000fa1900000000", @ANYRES32=r5, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x7, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000007c0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[0xffffffffffffffff, r8, r9], &(0x7f0000000900)=[{0x3, 0x3, 0xa, 0x5}, {0x1, 0x3, 0x10, 0x4}, {0x3, 0x2, 0x2, 0x3}, {0x5, 0x4, 0xd}, {0x2, 0x3, 0xc, 0xc}, {0x3, 0x4, 0xa, 0x3}, {0x0, 0x3, 0x5, 0x9}, {0x2, 0x5, 0x8, 0x1}], 0x10, 0x4}, 0x94) (async) 2.229099791s ago: executing program 4 (id=3637): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000a4b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x1000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) accept(r2, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2d) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r5, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) 2.168942751s ago: executing program 7 (id=3638): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000fefff3d0ff0c00d8efcfb23b9ff5441074f7cbd4a6e6e256f09d87ebb315dbca81f5b9c6f7c7030a9392f30b870b8f4f1753b63368974dcf7448c1d431095f88af56c1d0f2e8e1d777e61c2b2ba72842dfdcdbd526", @ANYRESDEC=r0], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="1278f411b7d1da9817097332b23125d71b030000000000000a00faffa9aaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 2.157132309s ago: executing program 3 (id=3639): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000080)=0x80, 0x1800) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x810, r0, 0x180000000) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@null, 0x2, 'veth1_to_team\x00'}) getpeername(r0, &(0x7f00000001c0)=@ieee802154={0x24, @long}, &(0x7f0000000240)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0xfffd, 0x6, 0x1, 0xff, 0x0, 0x7, 0xb}, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r2, 0x802, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4084}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xb008f3aa136662eb}, 0x20040000) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r9, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x80}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xf7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000900)={r0, &(0x7f0000000800)=' \x00', 0x4a0000, &(0x7f0000000840)={@align=0x5, {0xcf45, 0x7fff, 0x81, 0x3}}, 0x7, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)}) readv(r0, &(0x7f0000002bc0)=[{&(0x7f0000000940)=""/83, 0x53}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/214, 0xd6}, {&(0x7f0000001ac0)=""/52, 0x34}, {&(0x7f0000001b00)=""/186, 0xba}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x6) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002c80), r1) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r11, &(0x7f0000002d80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x48, r12, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002e00), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000002f80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e40)={0xd8, r13, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa66}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x801}, 0x4004800) sendmsg$NLBL_MGMT_C_LISTDEF(r11, &(0x7f0000003080)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '/\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000004140)={&(0x7f0000004100)=[{&(0x7f00000030c0)="b50aeaf862e588edd679", 0xa}, {&(0x7f0000003100)="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", 0x1000}], 0x2, 0xe, 0x0, 0x262f, 0x6, 0x8dd, 0x3, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000004900)={'batadv0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000004ec0)={&(0x7f00000041c0)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000004880)=[{&(0x7f0000004200)="2294f362bec0d24dcf65f559266e5d341872bfd3fc91de10c1bc0164950d3318323d26618fcfbb7adb021baf20759714116736a93ac8b1dd39247ccd67bb8d89e11f4d863eb87743ef1c55312377b3cb8fa82c291ff39d106e6bcf8921ef6c412d75aaf393f877faf7a61b59456518abb3acacc6ed624a2ba86f280f80ae6d825b487a9b7399f2bea267e9007b9aea80a431573ffa1b0c3b072a1b0b84c8cce9f3eb2eab90a103fdf73cd79f1d918c1609a96302aa2645b076dc6f7b6f4d409b642062ec1a10f656c27aeb59d11026236f6e23799922ee7776cfdf0370a558390e61c6738acaad44ebf831f85e", 0xed}, {&(0x7f0000004300)="cd0076907d97e7301940acd1b2b22923cbb51c8e95bbd868a1848e1edded6da7f5ed9d2ad06ac75d84496c283eeae981bb5fd599cd3ee3ca7cdb1be541faf1d8f0cb7f5173e78870076be53fdb15138165a8716e7f93074bb66ab6be25059c62de912a8f6e8d80b29778bd449b27bac4929267081c094e18f7ee930028fca3ce6878c33f4353149b566221ac8774c3bf8c75c038c27d28cffa95", 0x9a}, {&(0x7f00000043c0)="16616853b8945b47fac400a07c4324c09dabc7b4c05c96f2f47d00224a13da10425903a9c1ca429e6c7129449a1e87e4236e7eea171084201dc2b122f2a92bed20bb4d691fd8b76ce51c3245a4d8a059f8542e46bdc6a03961c1fb2be01aa8c7ba01923a2e9ac986c89d24b56ddf60619afd3dad02eedce580779dc4280cf3678d39d2eac580457d09aba56fdca0a0d3cde2ca33315a19b12a7b83bc4bef9ed21a19f16f7c58e07d5d044cd9d7238d6306038493c782768fdafbe77174adcfcf4218f5006c04c0c0bc79", 0xca}, {&(0x7f00000044c0)="39b4ef9af3bff7d2f4e84f40da4f178cd1e3b3f85bd33651666499fa1a10d5f953280e5b14d50b8eda530efeceef9d711142221e88d426c21ffa00745a62f37662fa09579f4287a03ed214bf3eb31df6ad679b73683b6fe0ea7c899004eb6bf1d434ca7d83877953b45e3a166669cf60f364ecfccf212b96defee66b496a214b022ad95aa31795e3bb4b515ea4bf9a2ea5543a4479f9609efdc0bb459dc82546eb9e7193a4f57d69da2b6a89c594618c0cfdf1eeb106e7100598022a30ee7934a47b41a8289df34cb29b5574606e1f5b3672b1faf0513856aaf43b9fa1f1539c4f5f442b54285336", 0xe8}, {&(0x7f00000045c0)="2aa1f0440bd082cfc5a0d0850958000e760b14271e466082f865e3aa1dfb9a7b99251a57350717a25d41e8ac95fcc553179e5e9984b510ce9d7916320ceb33a37cc596ecf0de9423ff3404a18bdf4d3a966ed55b83b0ed5836a0ee7c98319e8e08bf11cda9358700a5ba7ed4b230ac5f9472d52bdb3b498e5637fbced7e90686d8a8fbdafef1fd306d4becff3d92f7b24fb1bccbf00d7bd8b0bb5b97eccfa17c0f3b4400b499cc403bc3f6", 0xab}, {&(0x7f0000004680)="0346155f453bde5265f1e60b2dbabc34f0b53945bf133920fce0cb964eb748ac7897dcb20a2f8013f0205f6d9b1ef79525b6c5dc53e1235f919cfcf591bdcb", 0x3f}, {&(0x7f00000046c0)="72a7a513f8fb8f6a0528370ffef7e356fd9accd16d44161a46bd8f57eeff76aa484f565d246b321dcc034ed373e63e808614cf3c3312aeedbbcb50a92b6279a4273e95f7f7d6dbe48527741907aeadefce9a5ba98823872ae88fe9928aec6891a7c99f6e107e419a2784c8cb24026f28357de04a0853802f702ba05b8158f25b08", 0x81}, {&(0x7f0000004780)="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", 0xfa}], 0x8, &(0x7f0000004d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf94}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @local, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc0}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}], 0x110}, 0x1) 2.011068816s ago: executing program 7 (id=3640): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1}, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x401, 0x1, 0x0, 0x8001}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20041091) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 79.358078ms ago: executing program 2 (id=3641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010f000000000000000067000000080001003c00000008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800c300741300000800c400"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x42, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 50.653686ms ago: executing program 6 (id=3642): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) accept4(r2, 0x0, 0x0, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) (async) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) openat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) (async) r3 = openat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (async) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000340), 0x9) r6 = socket(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000055200010000000000000000001c0000000c00018e4565f7d8701d8e76920346e6000200000000000000"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x18) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x308) close(r6) 1.164729ms ago: executing program 7 (id=3643): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x8c}}, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f00000002c0)=[0xfffffffffffffff8, 0x2]) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626c6964676500000400028008001f000500000019488df995c5fb4b5cf4be3da5486e0da09e588487ad3794be7c87a4cc358b37cd4b13ffa0c737611a8258bdd4886e23d23f7df157138cc3d7957e63b86c0fc0b1c1085005113fda0f101b15590d43cdd1ec192727418da9c12ea51795ca70375363731e7e6f79"], 0x3c}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, &(0x7f0000000040)) (async) splice(r3, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000240)=0x28) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'team_slave_1\x00', 0x4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000005000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000004b653c0bd0bc33a00000b70e000000000000850000008300008800bf0900000000000055090100000000009500000080000000182b00df43480636734928b1da23ad390ea231fe34d0f82440fa71d16fe85a242c5ca8cb66c433d200070beefa10b3e6fadb6aa473825971f337e62bd6cdba7b3e2fda648c272bcfa40be7634c832a645be1fedac7c1f6310106d1f274765dcb01000000000000009a1327d76118d323722c5790858c327e4ed7cd6fb7ddf8f24990f79f7f7328cb8a6524355467114e33a6d0110f1387d48c21bb6a211284b0", @ANYRES32=r1, @ANYBLOB="0000000001000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x34d, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) 827.748µs ago: executing program 4 (id=3644): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) close(0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) 0s ago: executing program 3 (id=3645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffb, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0x40, 0x8, 0x4000004, 0xfffffe00, 0x5, 0x0, 0xb, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f4620134000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ntered disabled state [ 418.958198][T14502] bridge_slave_0: entered allmulticast mode [ 418.983770][T14502] bridge_slave_0: entered promiscuous mode [ 418.996196][T14502] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.003887][T14502] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.011230][T14502] bridge_slave_1: entered allmulticast mode [ 419.027125][T14502] bridge_slave_1: entered promiscuous mode [ 419.052935][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.174475][T14634] bond26: option packets_per_slave: invalid value (18446744073709551615) [ 419.184314][T14634] bond26: option packets_per_slave: allowed values 0 - 65535 [ 419.201910][T14634] bond26 (unregistering): Released all slaves [ 419.250053][T14502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.335659][T14502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.429730][T14652] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 419.528439][T14502] team0: Port device team_slave_0 added [ 419.570597][T14502] team0: Port device team_slave_1 added [ 419.778102][T14502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.801656][T14502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.853037][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.865284][T14502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.927610][T14502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.963282][T14502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.019159][T14502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.028976][T14673] x_tables: duplicate underflow at hook 3 [ 420.044999][T14673] x_tables: duplicate underflow at hook 2 [ 420.100719][ T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.109613][ T50] Bluetooth: hci6: command tx timeout [ 420.161767][T14502] hsr_slave_0: entered promiscuous mode [ 420.170561][T14502] hsr_slave_1: entered promiscuous mode [ 420.178083][T14502] debugfs: 'hsr0' already exists in 'hsr' [ 420.184226][T14502] Cannot create hsr debugfs directory [ 420.499903][T14691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.009973][ T6637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.088041][T14502] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 421.108291][T14502] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.131058][T14502] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 421.157714][T14502] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.196396][T14502] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 421.257460][T14719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.274309][T14502] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.293957][T14502] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 421.333110][T14502] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.569075][T14741] __nla_validate_parse: 11 callbacks suppressed [ 421.569096][T14741] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2426'. [ 421.687606][T14502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.776951][T14502] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.822221][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.829479][ T6848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.906623][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.913996][ T6848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.172663][ T50] Bluetooth: hci6: command tx timeout [ 422.456123][T14781] syzkaller0: entered promiscuous mode [ 422.518352][T14781] syzkaller0: entered allmulticast mode [ 422.698820][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 423.866415][ T5272] veth1_vlan: left promiscuous mode [ 424.047662][ T57] net_ratelimit: 7 callbacks suppressed [ 424.047692][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.062239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.108871][T14856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2450'. [ 424.216186][T14502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.252895][ T50] Bluetooth: hci6: command tx timeout [ 424.353121][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.826736][ T492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.076333][T14892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.221828][T14502] veth0_vlan: entered promiscuous mode [ 425.245778][T14896] netlink: 'syz.0.2456': attribute type 10 has an invalid length. [ 425.379639][T14896] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 425.434587][T14502] veth1_vlan: entered promiscuous mode [ 425.477114][ T6636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.561876][T14906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2457'. [ 425.576357][T14911] xt_hashlimit: size too large, truncated to 1048576 [ 425.660150][T14502] veth0_macvtap: entered promiscuous mode [ 425.668106][T14914] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2459'. [ 425.710663][T14502] veth1_macvtap: entered promiscuous mode [ 425.798615][T14502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.844602][T14502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.093374][ T6848] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.142789][ T6848] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.178220][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.188134][ T6848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.199700][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.211909][T14928] openvswitch: netlink: Multiple metadata blocks provided [ 426.269612][T14927] netlink: 'syz.0.2462': attribute type 1 has an invalid length. [ 426.330368][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.340794][ T492] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.357868][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.380573][ T492] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.448347][T14934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2464'. [ 426.477813][T14934] ieee802154 phy1 wpan1: encryption failed: -22 [ 426.499384][ T6636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.510985][T14934] netlink: 364 bytes leftover after parsing attributes in process `syz.3.2464'. [ 426.522429][ T6636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.961300][T14953] netlink: 'syz.0.2469': attribute type 1 has an invalid length. [ 427.009152][T14953] 8021q: adding VLAN 0 to HW filter on device bond10 [ 428.191491][T14985] netlink: 'syz.4.2478': attribute type 7 has an invalid length. [ 428.417004][T14991] bridge0: port 2(bridge_slave_1) entered listening state [ 428.446427][T14991] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.521582][T14996] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 428.720713][T15003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.977463][T15019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2489'. [ 428.997753][T15019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2489'. [ 429.136439][ T6848] net_ratelimit: 9 callbacks suppressed [ 429.136460][ T6848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.151613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.294335][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.307325][T15027] netlink: 'syz.6.2492': attribute type 11 has an invalid length. [ 429.747395][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2498'. [ 429.925805][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.348776][T15070] bond11: (slave bond_slave_1): Device is not our slave [ 430.396314][T15070] bond11: option active_slave: invalid value (bond_slave_1) [ 430.409909][T15076] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2508'. [ 430.466318][T15080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2509'. [ 430.480435][T15070] bond11 (unregistering): Released all slaves [ 430.501340][T15080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2509'. [ 430.539361][T15080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2509'. [ 430.574836][ T6636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.600751][T15080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2509'. [ 430.648265][T15087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.659387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.687040][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2508'. [ 430.725519][T15087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.736308][ T6637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.774070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.838089][T15091] bond5 (unregistering): Released all slaves [ 431.024686][T15098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2513'. [ 431.053859][ T57] bond0: (slave veth0_to_bond): interface is now down [ 431.077789][ T57] bond0: now running without any active interface! [ 431.933574][T15142] team0: Device gtp0 is of different type [ 431.984026][T15148] xt_policy: too many policy elements [ 432.540085][T15173] netlink: 'syz.3.2534': attribute type 25 has an invalid length. [ 432.737096][T15186] netlink: 'syz.3.2539': attribute type 1 has an invalid length. [ 432.810420][T15186] bond26: entered promiscuous mode [ 432.817105][T15186] 8021q: adding VLAN 0 to HW filter on device bond26 [ 432.844507][T15185] macvtap3: entered allmulticast mode [ 432.873219][T15186] macvtap4: entered allmulticast mode [ 432.966876][T15190] bond26: (slave bridge7): making interface the new active one [ 432.987949][T15190] bridge7: entered promiscuous mode [ 432.996313][T15190] bond26: (slave bridge7): Enslaving as an active interface with an up link [ 433.025378][T15190] bond26: (slave bridge8): Enslaving as a backup interface with an up link [ 433.067270][T15190] bond26: (slave bridge9): Enslaving as a backup interface with an up link [ 433.159528][T15186] macvtap5: entered allmulticast mode [ 433.551542][T15190] bond26: (slave bridge10): Enslaving as a backup interface with an up link [ 433.574572][T15186] macvtap6: entered allmulticast mode [ 434.154398][T15231] __nla_validate_parse: 6 callbacks suppressed [ 434.154420][T15231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2551'. [ 434.178486][T15244] net_ratelimit: 9 callbacks suppressed [ 434.178538][T15244] netlink: Invalid conntrack timeout [ 434.210582][T15244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.228363][T15236] xt_CT: No such helper "snmp" [ 434.295383][T15236] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2552'. [ 434.382897][ T492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.414414][ T492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.423249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.541586][T15247] netlink: 39091 bytes leftover after parsing attributes in process `syz.0.2555'. [ 434.558764][T15247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2555'. [ 434.902689][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.054342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.178248][T15281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2562'. [ 435.384326][T15285] erspan0: entered allmulticast mode [ 435.438382][T15290] netlink: 'syz.3.2567': attribute type 2 has an invalid length. [ 435.476609][T15292] netlink: 'syz.3.2567': attribute type 2 has an invalid length. [ 435.512463][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.533295][T15290] : entered promiscuous mode [ 435.679275][T15305] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 435.729763][T15305] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 435.926856][T15305] bond5: (slave bond_slave_1): Device is not our slave [ 435.947655][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2574'. [ 435.953055][T15305] bond5: option active_slave: invalid value (bond_slave_1) [ 435.999770][T15305] bond5 (unregistering): Released all slaves [ 436.079677][T15321] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2576'. [ 436.254511][T15326] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 436.335500][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.370741][T15333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2577'. [ 436.441560][T15339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2577'. [ 436.443935][T15333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2577'. [ 436.545771][T15337] netlink: 'syz.4.2581': attribute type 1 has an invalid length. [ 436.643722][ T492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.230469][T15366] tipc: Enabled bearer , priority 0 [ 437.333630][T15366] tipc: Resetting bearer [ 437.803300][T15395] netlink: 'syz.4.2595': attribute type 1 has an invalid length. [ 437.855909][T15395] netlink: 'syz.4.2595': attribute type 3 has an invalid length. [ 438.061740][T15398] IPVS: length: 94 != 24 [ 438.158985][T15404] Bluetooth: ISO socket layer initialized [ 438.333558][ T5722] tipc: Node number set to 2035774871 [ 438.348045][T15409] xt_hashlimit: size too large, truncated to 1048576 [ 438.497809][T15415] xt_hashlimit: size too large, truncated to 1048576 [ 439.531532][T15455] __nla_validate_parse: 8 callbacks suppressed [ 439.531552][T15455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2610'. [ 439.619950][T15460] netlink: 'syz.0.2612': attribute type 1 has an invalid length. [ 439.720312][T15464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2612'. [ 439.807768][T15466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2614'. [ 439.879087][T15460] bond11: entered promiscuous mode [ 439.886068][T15460] 8021q: adding VLAN 0 to HW filter on device bond11 [ 439.888802][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2615'. [ 439.992527][ T1090] net_ratelimit: 4 callbacks suppressed [ 439.992547][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.181263][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.203030][ T6637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.211594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.375815][T15492] tipc: Resetting bearer [ 440.515078][T15490] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 440.611177][T15500] netlink: 'syz.0.2619': attribute type 1 has an invalid length. [ 440.677580][T15500] netlink: 'syz.0.2619': attribute type 1 has an invalid length. [ 440.920285][T15500] bond12: entered promiscuous mode [ 440.944216][T15500] 8021q: adding VLAN 0 to HW filter on device bond12 [ 440.972805][ T9139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.114240][T15523] netlink: 8183 bytes leftover after parsing attributes in process `syz.4.2621'. [ 441.139205][T15508] 8021q: adding VLAN 0 to HW filter on device bond12 [ 441.148172][ T492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.165890][T15508] bond12: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 441.227469][T15508] bond12: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 441.289477][T15508] bond12: (slave ip6gre1): making interface the new active one [ 441.339625][T15508] ip6gre1: entered promiscuous mode [ 441.367465][T15508] bond12: (slave ip6gre1): Enslaving as an active interface with an up link [ 441.580324][T15530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.618299][T15530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.939324][T15540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2625'. [ 441.972780][T15543] netlink: 'syz.6.2626': attribute type 15 has an invalid length. [ 442.004417][T15544] bond0: option ad_select: unable to set because the bond device is up [ 442.093758][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.295307][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.395349][T15571] netlink: 'syz.2.2633': attribute type 1 has an invalid length. [ 442.423779][T15571] netlink: 'syz.2.2633': attribute type 2 has an invalid length. [ 442.444250][T15571] netlink: 'syz.2.2633': attribute type 2 has an invalid length. [ 442.508295][T15571] netlink: 'syz.2.2633': attribute type 2 has an invalid length. [ 442.856234][T15588] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode [ 442.891812][T15588] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode [ 442.908112][T15592] validate_nla: 1 callbacks suppressed [ 442.908129][T15592] netlink: 'syz.3.2637': attribute type 3 has an invalid length. [ 442.947194][T15588] tipc: Resetting bearer [ 442.983372][T15601] netlink: 'syz.0.2640': attribute type 1 has an invalid length. [ 443.131450][T15610] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2641'. [ 443.570490][T15633] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2648'. [ 443.660212][T15629] sctp: [Deprecated]: syz.2.2647 (pid 15629) Use of int in max_burst socket option. [ 443.660212][T15629] Use struct sctp_assoc_value instead [ 443.719496][T15629] netlink: 'syz.2.2647': attribute type 11 has an invalid length. [ 443.921737][T15644] xt_TPROXY: Can be used only with -p tcp or -p udp [ 443.957519][T15644] netlink: 'syz.0.2651': attribute type 1 has an invalid length. [ 443.980751][T15647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2652'. [ 443.986285][T15644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2651'. [ 444.206848][T15660] netlink: 'syz.4.2655': attribute type 1 has an invalid length. [ 444.406764][T15667] vcan0: entered promiscuous mode [ 444.439155][T15667] vcan0: entered allmulticast mode [ 444.774957][T15690] xt_hashlimit: size too large, truncated to 1048576 [ 444.815954][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'. [ 445.019818][T15689] xt_hashlimit: size too large, truncated to 1048576 [ 445.305073][ T492] net_ratelimit: 5 callbacks suppressed [ 445.305093][ T492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.319745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.351375][T15728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2668'. [ 445.486762][T15733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.495518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.505645][T15733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.516009][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.529872][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.541664][ T9139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.551098][ T9139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.559880][ T9139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.790183][T15741] syzkaller1: entered promiscuous mode [ 445.797033][T15741] syzkaller1: entered allmulticast mode [ 445.837425][T15737] tipc: Resetting bearer [ 446.219733][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2673'. [ 446.470676][T15773] netlink: 'syz.6.2677': attribute type 12 has an invalid length. [ 446.497547][T15773] netlink: 'syz.6.2677': attribute type 29 has an invalid length. [ 446.535465][T15773] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2677'. [ 446.578518][T15773] netlink: 39 bytes leftover after parsing attributes in process `syz.6.2677'. [ 446.890314][T15796] netlink: 'syz.2.2683': attribute type 21 has an invalid length. [ 446.904752][T15794] syzkaller0: entered promiscuous mode [ 446.915552][T15794] syzkaller0: entered allmulticast mode [ 446.939208][T15794] tipc: Enabled bearer , priority 0 [ 446.970754][T15799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2684'. [ 447.085242][T15805] tipc: Resetting bearer [ 447.205159][T15817] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 447.271670][T15813] tipc: Resetting bearer [ 447.336193][T15813] tipc: Disabling bearer [ 447.377209][T15824] netlink: 'syz.2.2688': attribute type 1 has an invalid length. [ 447.451170][T15832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2690'. [ 447.547699][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2692'. [ 447.589952][T15837] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2690'. [ 447.836371][T15851] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2698'. [ 448.269012][T15878] netlink: 'syz.0.2704': attribute type 1 has an invalid length. [ 448.326632][T15883] netlink: 'syz.4.2706': attribute type 11 has an invalid length. [ 448.343319][T15883] netlink: 'syz.4.2706': attribute type 4 has an invalid length. [ 448.461368][T15878] 8021q: adding VLAN 0 to HW filter on device bond13 [ 448.826454][T15910] tipc: Enabled bearer , priority 10 [ 450.049361][T15973] __nla_validate_parse: 6 callbacks suppressed [ 450.049381][T15973] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2725'. [ 450.125584][T15982] netlink: 'syz.2.2727': attribute type 142 has an invalid length. [ 450.143665][T15982] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2727'. [ 450.411604][T15999] netlink: 'syz.4.2731': attribute type 7 has an invalid length. [ 450.448567][ T6848] net_ratelimit: 19 callbacks suppressed [ 450.448588][ T6848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.464418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.491186][T15999] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2731'. [ 451.136803][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2734'. [ 451.244381][T16018] bond1: (slave vlan2): making interface the new active one [ 451.342979][ T6636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.389532][T16018] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 451.467736][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2734'. [ 452.244921][T16090] team0: Device veth1_macvtap failed to register rx_handler [ 452.262773][T16097] netlink: 'syz.6.2745': attribute type 1 has an invalid length. [ 452.278524][ T50] block nbd2: Receive control failed (result -32) [ 452.278608][ T5610] block nbd2: Receive control failed (result -32) [ 452.378951][T16097] bond2: entered promiscuous mode [ 452.386892][T16097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.426600][T16093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.454122][T16093] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 452.512220][T16093] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 452.515084][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.594846][T16093] bond2: (slave ip6gre1): making interface the new active one [ 452.622416][T16093] ip6gre1: entered promiscuous mode [ 452.643903][T16093] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 452.687502][T16113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2747'. [ 452.729468][T16116] netlink: 'syz.3.2749': attribute type 2 has an invalid length. [ 452.837013][T16112] netlink: 'syz.4.2746': attribute type 1 has an invalid length. [ 452.858167][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2750'. [ 452.870595][T16112] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2746'. [ 452.973742][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.113526][T16131] sch_tbf: burst 0 is lower than device bridge8 mtu (1514) ! [ 453.133883][ T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.217688][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2751'. [ 453.415055][T16145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2756'. [ 453.713371][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.847355][T16178] netlink: 'syz.0.2762': attribute type 4 has an invalid length. [ 453.909595][T16175] tipc: Started in network mode [ 453.938152][T16175] tipc: Node identity 1a3b3f788234, cluster identity 4711 [ 453.947860][T16175] tipc: Enabled bearer , priority 0 [ 453.991411][T16185] syzkaller0: entered promiscuous mode [ 454.014744][T16185] syzkaller0: entered allmulticast mode [ 454.048388][T16164] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 454.125632][T16164] tipc: Resetting bearer [ 454.151766][T16163] tipc: Resetting bearer [ 454.238677][T16163] tipc: Disabling bearer [ 454.344175][T16198] netlink: 'syz.3.2766': attribute type 3 has an invalid length. [ 454.744795][T16215] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 454.843615][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.885974][ T30] audit: type=1800 audit(1787006078.036:14): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2775" name="memory.events" dev="tmpfs" ino=354 res=0 errno=0 [ 455.176364][T16230] __nla_validate_parse: 4 callbacks suppressed [ 455.176385][T16230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2779'. [ 455.340235][T16236] bond6: entered promiscuous mode [ 455.360671][T16236] bond6: entered allmulticast mode [ 455.728906][T16256] FAULT_INJECTION: forcing a failure. [ 455.728906][T16256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.775399][T16256] CPU: 1 UID: 0 PID: 16256 Comm: syz.2.2786 Not tainted syzkaller #0 PREEMPT(full) [ 455.775429][T16256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.775448][T16256] Call Trace: [ 455.775456][T16256] [ 455.775465][T16256] dump_stack_lvl+0xe8/0x150 [ 455.775564][T16256] should_fail_ex+0x40c/0x560 [ 455.775689][T16256] _copy_from_user+0x2d/0xb0 [ 455.775747][T16256] kstrtouint_from_user+0xd6/0x180 [ 455.775800][T16256] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 455.775846][T16256] proc_fail_nth_write+0x8e/0x210 [ 455.775906][T16256] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 455.775952][T16256] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 455.775981][T16256] vfs_write+0x296/0xba0 [ 455.776033][T16256] ? __pfx_vfs_write+0x10/0x10 [ 455.776065][T16256] ? __fget_files+0x2a/0x420 [ 455.776108][T16256] ? __fget_files+0x3a2/0x420 [ 455.776133][T16256] ? __fget_files+0x2a/0x420 [ 455.776170][T16256] ksys_write+0x150/0x270 [ 455.776204][T16256] ? __pfx_ksys_write+0x10/0x10 [ 455.776245][T16256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.776317][T16256] do_syscall_64+0x174/0x580 [ 455.776407][T16256] ? trace_irq_disable+0x3b/0x140 [ 455.776453][T16256] ? clear_bhb_loop+0x70/0xc0 [ 455.776479][T16256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.776498][T16256] RIP: 0033:0x7f9568d5e90e [ 455.776517][T16256] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 455.776535][T16256] RSP: 002b:00007f9569c33fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 455.776557][T16256] RAX: ffffffffffffffda RBX: 00007f9569c346c0 RCX: 00007f9568d5e90e [ 455.776572][T16256] RDX: 0000000000000001 RSI: 00007f9569c340a0 RDI: 0000000000000004 [ 455.776585][T16256] RBP: 00007f9569c34090 R08: 0000000000000000 R09: 0000000000000000 [ 455.776598][T16256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.776611][T16256] R13: 00007f9569026038 R14: 00007f9569025fa0 R15: 00007ffd8bc8d928 [ 455.776647][T16256] [ 456.096965][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 456.110977][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 456.120065][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2789'. [ 456.129368][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 456.144422][T16032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.156609][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 456.168263][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 456.175842][ T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.197164][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.205732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.306397][T16270] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 456.364868][T16270] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 456.409554][T16270] tipc: Resetting bearer [ 457.024008][T16300] openvswitch: netlink: IP tunnel dst address not specified [ 457.040421][T16300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.165813][T16306] netlink: 'syz.6.2799': attribute type 1 has an invalid length. [ 457.237439][T16306] bond3: entered promiscuous mode [ 457.243673][T16306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 457.283690][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.370461][T16255] wg1 speed is unknown, defaulting to 1000 [ 457.448098][T16325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2803'. [ 458.039698][T16355] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2810'. [ 458.332920][ T5610] Bluetooth: hci7: command tx timeout [ 458.433149][ T6636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.436135][T16369] netlink: 'syz.6.2815': attribute type 49 has an invalid length. [ 458.508598][T16255] wg0 speed is unknown, defaulting to 1000 [ 458.634128][T16376] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 458.734335][ T6636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.985540][T16385] bond10 (unregistering): Released all slaves [ 459.014337][T16399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2824'. [ 459.213742][ T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.688607][T16255] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.728948][T16255] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.745254][T16255] bridge_slave_0: entered allmulticast mode [ 459.761488][T16255] bridge_slave_0: entered promiscuous mode [ 459.790959][T16432] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.827752][T16432] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.875820][T16255] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.891003][T16255] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.908882][T16255] bridge_slave_1: entered allmulticast mode [ 459.928976][T16255] bridge_slave_1: entered promiscuous mode [ 460.011189][T16432] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.045458][T16432] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.190850][T16255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.234104][T16432] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.282499][T16432] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.348946][T16453] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 460.382707][T16453] bond7 (unregistering): Released all slaves [ 460.398718][T16459] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2842'. [ 460.413549][ T5610] Bluetooth: hci7: command tx timeout [ 460.428906][T16255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.488276][T16432] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.499276][T16432] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.580589][T16255] team0: Port device team_slave_0 added [ 460.597653][T16255] team0: Port device team_slave_1 added [ 460.679739][T16255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.698104][T16255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.757656][T16255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.821532][T16255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.834089][T16255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.863030][T16255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.892536][T16056] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.906783][T16056] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.002607][ T1090] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.011862][ T1090] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.096250][T16471] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 461.111046][T16475] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 461.118559][T16475] syzkaller1: Refused to change device type [ 461.148087][T16255] hsr_slave_0: entered promiscuous mode [ 461.166566][T16255] hsr_slave_1: entered promiscuous mode [ 461.174607][T16255] debugfs: 'hsr0' already exists in 'hsr' [ 461.180410][T16255] Cannot create hsr debugfs directory [ 461.335503][T16482] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2852'. [ 461.416360][T16489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2853'. [ 461.472895][T16489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2853'. [ 461.537874][T16489] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 461.642393][T16042] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.659464][T16042] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.689502][T16042] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.715548][T16042] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.759310][T16498] nbd: must specify an index to disconnect [ 461.804170][T16500] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2858'. [ 461.855638][T16042] net_ratelimit: 69 callbacks suppressed [ 461.855656][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.879610][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2858'. [ 461.940465][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.949515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.976699][T16255] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.005058][T16255] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.103934][T16508] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2859'. [ 462.139173][T16255] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.149532][T16255] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.265646][ T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.327156][T16255] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.342928][T16255] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.481534][T16255] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.493132][ T5610] Bluetooth: hci7: command tx timeout [ 462.509317][T16255] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.527329][T16523] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2864'. [ 462.585456][T16525] C: left promiscuous mode [ 462.601091][T16525] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 462.794145][T16535] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2867'. [ 462.847280][T16540] netlink: 'syz.2.2870': attribute type 29 has an invalid length. [ 462.912964][T16537] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2869'. [ 463.002925][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.476506][T16255] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 463.514688][T16255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.531167][T16570] netlink: ct_mark mask cannot be 0 [ 463.538379][T16255] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 463.550025][T16570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.583605][T16255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.613865][T16255] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 463.676952][T16255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.709195][T16571] openvswitch: netlink: Flow key attr not present in new flow. [ 463.714260][T16255] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 463.765417][T16255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.856922][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.077006][T16595] netlink: 'syz.3.2879': attribute type 8 has an invalid length. [ 464.112742][T16593] netlink: 'syz.3.2879': attribute type 8 has an invalid length. [ 464.127591][T16255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.209497][T16255] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.255612][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.263010][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.339403][T16044] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.346685][T16044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.573318][ T5610] Bluetooth: hci7: command tx timeout [ 465.219451][ T5729] tipc: Resetting bearer [ 465.797386][T16663] __nla_validate_parse: 6 callbacks suppressed [ 465.797406][T16663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2896'. [ 465.816379][T16663] macvlan0: entered promiscuous mode [ 465.850496][T16667] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2898'. [ 466.149778][T16255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.329656][T16255] veth0_vlan: entered promiscuous mode [ 466.384155][T16692] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2904'. [ 466.418173][T16255] veth1_vlan: entered promiscuous mode [ 466.457824][T16699] bond0: Error: Cannot enslave bond to itself. [ 466.545906][T16255] veth0_macvtap: entered promiscuous mode [ 466.597947][T16255] veth1_macvtap: entered promiscuous mode [ 466.622696][T16703] netlink: 'syz.6.2911': attribute type 2 has an invalid length. [ 466.646972][T16703] netlink: 'syz.6.2911': attribute type 2 has an invalid length. [ 466.693288][T16255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.730984][T16255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.769079][T16706] netlink: 'syz.4.2909': attribute type 5 has an invalid length. [ 466.904330][ T6636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.925984][T16719] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 466.937434][ T6636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.948522][ T6636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.043801][ T1090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.247173][T16730] net_ratelimit: 7 callbacks suppressed [ 467.247192][T16730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.274138][T16056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.283991][T16730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.308316][T16056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.324074][T16730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.364497][T16724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.404114][T16724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.436066][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2916'. [ 467.464970][T16034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.473835][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.482811][T16730] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2916'. [ 467.492899][T16034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.546758][T16730] gretap1: entered promiscuous mode [ 467.555973][T16730] gretap1: entered allmulticast mode [ 467.587058][T16722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.653024][T16743] netlink: 'syz.4.2922': attribute type 1 has an invalid length. [ 467.695073][T16056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.704207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.741878][T16743] 8021q: adding VLAN 0 to HW filter on device bond7 [ 467.870927][T16744] bond7: (slave gretap3): making interface the new active one [ 467.911687][T16744] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 467.955683][T16757] sctp: [Deprecated]: syz.0.2782 (pid 16757) Use of int in max_burst socket option. [ 467.955683][T16757] Use struct sctp_assoc_value instead [ 468.217419][T16762] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 468.602901][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 468.625468][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 468.635230][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 468.646107][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 468.659897][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 469.165444][T16032] nci: nci_ntf_packet: unknown ntf opcode 0x12e [ 469.427490][T16817] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 469.453372][T16817] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 469.519654][T16817] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 469.545355][T16817] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 469.571265][T16817] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 469.605446][T16817] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 469.656636][T16822] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 469.715571][T16781] wg1 speed is unknown, defaulting to 1000 [ 469.735713][T16817] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 469.756173][T16817] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 469.783663][T16817] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 469.810183][T16817] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 469.856504][T16796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.973417][T16831] bridge_slave_0: left allmulticast mode [ 469.980895][T16831] bridge_slave_0: left promiscuous mode [ 470.014692][T16831] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.076733][T16831] bridge_slave_1: left allmulticast mode [ 470.104604][T16831] bridge_slave_1: left promiscuous mode [ 470.124106][T16831] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.157007][T16831] bond0: (slave bond_slave_0): Releasing backup interface [ 470.188728][T16831] bond0: (slave bond_slave_1): Releasing backup interface [ 470.259306][T16831] team0: Port device team_slave_0 removed [ 470.298397][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2949'. [ 470.323419][T16831] team0: Port device team_slave_1 removed [ 470.340920][T16831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.349991][T16831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.363206][T16831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.370853][T16831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.398291][T16832] team0: Mode changed to "loadbalance" [ 470.421950][T16781] wg0 speed is unknown, defaulting to 1000 [ 470.733007][ T5610] Bluetooth: hci2: command tx timeout [ 470.861747][T16860] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2955'. [ 470.919898][T16860] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2955'. [ 471.048101][T16875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.176572][T16878] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2961'. [ 471.227560][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2961'. [ 471.318532][T16885] netlink: 'syz.3.2964': attribute type 34 has an invalid length. [ 471.381453][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2964'. [ 471.391217][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2964'. [ 471.435239][T16893] netlink: 596 bytes leftover after parsing attributes in process `syz.6.2965'. [ 471.483482][T16781] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.490838][T16781] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.502213][T16781] bridge_slave_0: entered allmulticast mode [ 471.510447][T16781] bridge_slave_0: entered promiscuous mode [ 471.520186][T16781] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.528088][T16781] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.536114][T16781] bridge_slave_1: entered allmulticast mode [ 471.546518][T16781] bridge_slave_1: entered promiscuous mode [ 471.609238][T16781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.627391][T16781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.715442][T16781] team0: Port device team_slave_0 added [ 471.736612][T16781] team0: Port device team_slave_1 added [ 471.832489][T16905] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2968'. [ 471.836820][T16781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.850300][T16781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.881590][T16910] netlink: 'syz.0.2969': attribute type 2 has an invalid length. [ 471.890557][T16910] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2969'. [ 471.901305][T16912] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2968'. [ 471.904079][T16781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.957861][T16781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.983996][T16781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.040686][T16781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.210599][T16781] hsr_slave_0: entered promiscuous mode [ 472.231447][T16781] hsr_slave_1: entered promiscuous mode [ 472.247261][T16781] debugfs: 'hsr0' already exists in 'hsr' [ 472.261422][T16781] Cannot create hsr debugfs directory [ 472.401194][T16925] net_ratelimit: 17 callbacks suppressed [ 472.401215][T16925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.450070][T16928] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 472.787772][T16940] macvlan0: entered promiscuous mode [ 472.812924][ T5610] Bluetooth: hci2: command tx timeout [ 472.927689][T16944] team0 (unregistering): left promiscuous mode [ 472.942861][T16944] team_slave_0: left promiscuous mode [ 472.969435][T16944] team_slave_1: left promiscuous mode [ 472.993416][T16944] bridge0: port 3(team0) entered disabled state [ 473.025206][ T6636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.046605][T16944] team_slave_0: left allmulticast mode [ 473.086426][T16944] team0 (unregistering): Port device team_slave_0 removed [ 473.127234][T16944] team_slave_1: left allmulticast mode [ 473.164698][T16944] team0 (unregistering): Port device team_slave_1 removed [ 473.227086][T16963] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode [ 473.257720][T16963] tipc: Resetting bearer [ 473.266615][T16944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.464232][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.473162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.599449][T16969] netlink: 'syz.3.2986': attribute type 29 has an invalid length. [ 473.670505][T16972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 473.737517][T16979] team0: Unable to change to the same mode the team is in [ 473.881515][T16980] 8021q: adding VLAN 0 to HW filter on device bond4 [ 473.921156][T16980] bond0: (slave bond4): Enslaving as an active interface with an up link [ 474.073314][T16781] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.095300][T16781] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.164536][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.370126][T16781] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.394647][T16781] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.414578][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.444725][T17003] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 474.585675][T16781] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.623495][T16781] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.893280][ T5610] Bluetooth: hci2: command tx timeout [ 475.006611][T17032] netlink: 'syz.3.3000': attribute type 4 has an invalid length. [ 475.300305][T17042] netlink: 'syz.6.3003': attribute type 12 has an invalid length. [ 475.335918][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.373706][ T6636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.387050][T17047] netlink: 'syz.6.3003': attribute type 1 has an invalid length. [ 475.528461][T17050] netlink: 'syz.3.3006': attribute type 1 has an invalid length. [ 475.731566][T16781] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 475.802367][T16781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 475.829976][T16781] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 475.866062][T16781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 475.897074][T16781] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 475.935835][T16781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 475.958285][T16781] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 475.986595][T16781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 475.995350][T17072] __nla_validate_parse: 11 callbacks suppressed [ 475.995368][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3014'. [ 476.299770][T16781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.390273][T16781] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.443315][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.465368][ T6636] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.472620][ T6636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.486572][ T6636] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.493842][ T6636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.519728][T17104] veth1_to_bond: entered allmulticast mode [ 476.530019][T17105] veth1_to_bond: entered promiscuous mode [ 476.537128][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3020'. [ 476.674701][T17104] veth1_to_bond (unregistering): left allmulticast mode [ 476.681794][T17104] veth1_to_bond (unregistering): left promiscuous mode [ 476.701561][T17104] bond0: (slave bond_slave_1): Releasing backup interface [ 476.973317][ T5610] Bluetooth: hci2: command tx timeout [ 477.007489][T17122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3026'. [ 477.047608][T17126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3028'. [ 477.356140][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3031'. [ 477.455540][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.582988][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.598671][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3035'. [ 477.816856][T17163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.827498][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.845969][T17163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.855123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.867700][T17163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.876308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.885543][T17163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.894442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.625847][T17161] netlink: 'syz.3.3038': attribute type 12 has an invalid length. [ 478.887965][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3041'. [ 478.920599][T17175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3040'. [ 479.129453][T16781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.204764][T17190] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3047'. [ 479.256190][T17194] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3047'. [ 479.435872][T17198] batadv_slave_1: entered allmulticast mode [ 479.445800][T17197] batadv_slave_1: left allmulticast mode [ 480.055320][T16781] veth0_vlan: entered promiscuous mode [ 480.099477][T16781] veth1_vlan: entered promiscuous mode [ 480.389861][T16781] veth0_macvtap: entered promiscuous mode [ 480.417904][T16781] veth1_macvtap: entered promiscuous mode [ 480.483973][T16781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.544749][T16781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.609607][T17245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.616947][T17245] IPv6: NLM_F_CREATE should be set when creating new route [ 480.725553][T16034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.774324][T16034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.873900][T16034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.902799][T16034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.991952][T17254] syzkaller1: entered allmulticast mode [ 481.020027][T16042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.049622][T16042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.101804][T17266] __nla_validate_parse: 6 callbacks suppressed [ 481.101823][T17266] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3067'. [ 481.156992][T16034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.171483][T16034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.778966][T17294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.828103][T17294] bond0: (slave bond1): Enslaving as an active interface with an up link [ 482.047785][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 482.061831][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 482.074975][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 482.084355][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 482.095568][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 482.155423][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3080'. [ 482.493889][ C0] net_ratelimit: 2053 callbacks suppressed [ 482.493910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.517364][ T5624] team0: Port device syz_tun removed [ 482.525598][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 482.551552][T17334] ieee802154 phy1 wpan1: encryption failed: -22 [ 482.586786][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3086'. [ 482.634250][T17335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3087'. [ 482.665430][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3087'. [ 482.927219][T16034] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.944962][T16034] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.047274][T17357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3091'. [ 483.106340][T17360] netlink: 'syz.0.3091': attribute type 4 has an invalid length. [ 483.118633][T17359] netlink: 'syz.6.3092': attribute type 13 has an invalid length. [ 483.130505][T17360] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3091'. [ 483.136475][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3091'. [ 483.158635][T16034] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.176935][T16034] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.203166][T16056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.327883][T17360] .`: renamed from bond0 (while UP) [ 483.417024][ T1090] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.443597][T16034] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.457608][T16034] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.530747][T17370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3093'. [ 483.536313][ T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.584587][T17374] bridge_slave_0: left allmulticast mode [ 483.590532][T17374] bridge_slave_0: left promiscuous mode [ 483.601186][T17374] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.620040][T17374] bridge_slave_1: left allmulticast mode [ 483.626286][T17374] bridge_slave_1: left promiscuous mode [ 483.633481][T17374] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.651284][T17374] bond0: (slave bond_slave_0): Releasing backup interface [ 483.666009][T17374] bond0: (slave bond_slave_1): Releasing backup interface [ 483.744791][T17374] team0: Port device team_slave_0 removed [ 483.785682][T17374] team0: Port device team_slave_1 removed [ 483.809402][T17374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.817556][T17374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.826711][T17374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.835996][T17374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.845972][T17374] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 483.899705][T17376] team0: Mode changed to "loadbalance" [ 484.187993][ T5610] Bluetooth: hci1: command tx timeout [ 484.335992][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.348878][ T6636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.493787][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.932197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.146947][T16034] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.157666][T16034] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.176359][T17308] wg1 speed is unknown, defaulting to 1000 [ 486.199860][T17388] __nla_validate_parse: 1 callbacks suppressed [ 486.199880][T17388] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3097'. [ 486.222890][T17388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.261107][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.286230][ T5610] Bluetooth: hci1: command tx timeout [ 486.464131][ T6636] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.655888][T16044] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.803019][T16050] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.954503][T17425] netlink: 'syz.0.3105': attribute type 1 has an invalid length. [ 486.982726][T17425] netlink: 'syz.0.3105': attribute type 11 has an invalid length. [ 487.005210][T16034] pim6reg527: left allmulticast mode [ 487.027725][T17425] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3105'. [ 487.107525][T17434] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3108'. [ 487.733935][T16042] net_ratelimit: 2 callbacks suppressed [ 487.733957][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.971232][T16034] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 487.983511][T16034] bridge5 (unregistering): left promiscuous mode [ 488.009520][T16034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.029045][T16034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.046910][T16034] bond0 (unregistering): Released all slaves [ 488.061181][T16034] bond1 (unregistering): Released all slaves [ 488.083375][T16034] bond2 (unregistering): (slave batadv_slave_0): Releasing active interface [ 488.101119][T16034] bond2 (unregistering): Released all slaves [ 488.124841][T16034] bond3 (unregistering): Released all slaves [ 488.150481][T16034] bond4 (unregistering): Released all slaves [ 488.168955][T16034] bond5 (unregistering): (slave wireguard0): Releasing backup interface [ 488.179819][T16034] wireguard0: left promiscuous mode [ 488.188510][T16034] bond5 (unregistering): Released all slaves [ 488.208124][T16034] bond6 (unregistering): Released all slaves [ 488.225894][T16034] bond7 (unregistering): Released all slaves [ 488.253582][T16034] bond8 (unregistering): Released all slaves [ 488.274813][T16034] bond9 (unregistering): Released all slaves [ 488.306301][T17434] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3108'. [ 488.316334][T17308] wg0 speed is unknown, defaulting to 1000 [ 488.342320][ T5610] Bluetooth: hci1: command tx timeout [ 488.420590][T17453] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 488.421640][T17458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3111'. [ 488.496682][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 488.514418][T17466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.525223][ T5609] wg0 speed is unknown, defaulting to 1000 [ 488.536907][ T5609] syz0: Port: 1 Link DOWN [ 488.562583][T16034] tipc: Disabling bearer [ 488.608364][T16034] tipc: Disabling bearer [ 488.638468][T16034] tipc: Left network mode [ 488.885937][T16050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.445245][T17502] netlink: 'syz.4.3123': attribute type 21 has an invalid length. [ 489.612409][ T9139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.818093][T17502] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3123'. [ 490.005359][T16050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.097121][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.281028][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 490.412484][ T5610] Bluetooth: hci1: command tx timeout [ 490.984370][T17583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3135'. [ 491.005661][T17585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3136'. [ 491.144411][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.171218][T17308] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.189814][T17308] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.226271][T17308] bridge_slave_0: entered allmulticast mode [ 491.244072][T17308] bridge_slave_0: entered promiscuous mode [ 491.253617][T17308] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.264304][T17308] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.278800][T17308] bridge_slave_1: entered allmulticast mode [ 491.291856][T17308] bridge_slave_1: entered promiscuous mode [ 491.420577][T17596] netlink: 'syz.3.3138': attribute type 63 has an invalid length. [ 491.510526][T17598] netlink: 'syz.3.3138': attribute type 63 has an invalid length. [ 491.536419][T17308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.542247][T17604] netlink: 'syz.3.3138': attribute type 63 has an invalid length. [ 491.614210][T17308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.929014][T17308] team0: Port device team_slave_0 added [ 491.999646][T17308] team0: Port device team_slave_1 added [ 492.020819][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 492.029750][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.057187][T16034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.065761][T16034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.098227][T16034] veth0_macvtap: left promiscuous mode [ 492.116326][T16034] veth1_vlan: left promiscuous mode [ 492.121847][T16034] veth0_vlan: left promiscuous mode [ 492.272941][T16050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.450766][T16034] team0 (unregistering): Port device vlan0 removed [ 492.564684][T16034] team0 (unregistering): Port device team_slave_1 removed [ 492.585315][T16034] team0 (unregistering): Port device team_slave_0 removed [ 492.658158][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.736972][T16044] smbdirect: ib_dev[syz0] removed [ 492.831528][T17308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.841001][T17308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.873757][T17308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.898357][T17308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.906473][T17308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.934994][T17308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.076645][T17308] hsr_slave_0: entered promiscuous mode [ 493.089639][T17308] hsr_slave_1: entered promiscuous mode [ 493.108072][T17308] debugfs: 'hsr0' already exists in 'hsr' [ 493.116417][T17308] Cannot create hsr debugfs directory [ 493.173751][T17632] xt_hashlimit: size too large, truncated to 1048576 [ 493.292166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.357585][T16034] IPVS: stop unused estimator thread 0... [ 493.394094][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.621886][T16034] bridge_slave_1: left allmulticast mode [ 493.631493][T16034] bridge_slave_1: left promiscuous mode [ 493.642489][T16034] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.660005][T16034] ¾x9ÿ: left allmulticast mode [ 493.664983][T16034] ¾x9ÿ: left promiscuous mode [ 493.669838][T16034] bridge0: port 1(1¾x9ÿ) entered disabled state [ 493.698040][T16034] erspan0: left allmulticast mode [ 493.703621][T16034] erspan0: left promiscuous mode [ 493.708744][T16034] bridge6: port 1(erspan0) entered disabled state [ 493.746846][T17563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 494.035745][T16034] bond12 (unregistering): (slave ip6gre1): Releasing backup interface [ 494.045011][T17651] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3147'. [ 494.054502][T16034] ip6gre1 (unregistering): left promiscuous mode [ 494.367504][T16034] bond5 (unregistering): (slave geneve2): Releasing active interface [ 494.409512][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3151'. [ 494.487806][T16034] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 494.496814][T16034] bridge4 (unregistering): left promiscuous mode [ 494.514630][ T6636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.553519][T16034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.568548][T16034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.586642][T16034] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 494.601547][T16034] bond0 (unregistering): Released all slaves [ 494.614796][T16034] bond1 (unregistering): Released all slaves [ 494.636429][T16034] bond2 (unregistering): Released all slaves [ 494.657255][T16034] bond3 (unregistering): Released all slaves [ 494.678086][T16034] bond4 (unregistering): Released all slaves [ 494.711676][T16034] bond5 (unregistering): Released all slaves [ 494.729107][T16034] bond6 (unregistering): Released all slaves [ 494.764172][T16034] bond7 (unregistering): Released all slaves [ 494.782328][T16034] bond8 (unregistering): (slave veth3): Releasing backup interface [ 494.796951][T16034] bond8 (unregistering): Released all slaves [ 494.816258][T16034] bond9 (unregistering): Released all slaves [ 494.837129][T16034] bond10 (unregistering): Released all slaves [ 494.865489][T16034] bond11 (unregistering): Released all slaves [ 494.882765][T16034] bond12 (unregistering): Released all slaves [ 494.911135][T16034] bond13 (unregistering): Released all slaves [ 495.123362][T17659] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3151'. [ 495.198003][ T5729] wg1 speed is unknown, defaulting to 1000 [ 495.204981][ T5729] syz2: Port: 1 Link DOWN [ 495.211346][ T5729] wg1 speed is unknown, defaulting to 1000 [ 495.220615][T17668] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3153'. [ 495.233275][T17668] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3153'. [ 495.290363][T16034] tipc: Disabling bearer [ 495.355862][T16034] tipc: Left network mode [ 495.441133][T17681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.610507][T17692] openvswitch: netlink: IPv4 tun info is not correct [ 495.643661][T16050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.693509][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.807075][T17683] netlink: 'syz.6.3156': attribute type 1 has an invalid length. [ 495.854498][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.078674][T17695] xt_CT: No such helper "pptp" [ 496.650818][T17724] netlink: 'syz.3.3162': attribute type 10 has an invalid length. [ 496.684428][T17724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3162'. [ 496.697600][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3161'. [ 496.805156][ T6636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.838863][T17727] tipc: Enabled bearer , priority 10 [ 496.960913][T17716] gre1: entered promiscuous mode [ 496.983415][T17716] gre1: entered allmulticast mode [ 497.125585][T17740] netlink: 'syz.4.3164': attribute type 10 has an invalid length. [ 497.159872][T17743] netlink: 'syz.4.3164': attribute type 10 has an invalid length. [ 497.210034][T17747] netlink: 'syz.4.3164': attribute type 10 has an invalid length. [ 497.414019][T17740] team0: Port device dummy0 added [ 497.464765][T17756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.495771][T17747] team0: Port device dummy0 removed [ 497.545562][T16034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.573510][T16034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.597991][T16034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.619061][T16034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.673463][T16034] veth1_macvtap: left promiscuous mode [ 497.679317][T16034] veth0_macvtap: left promiscuous mode [ 497.685294][T16034] veth0_vlan: left promiscuous mode [ 498.516836][T16034] team0 (unregistering): Port device team_slave_1 removed [ 498.556939][T16034] team0 (unregistering): Port device team_slave_0 removed [ 498.676129][T16050] smc: removing ib device syz2 [ 498.735203][ T5609] net_ratelimit: 2 callbacks suppressed [ 498.735222][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.749046][T16050] smbdirect: ib_dev[syz2] removed [ 498.810027][T17714] tipc: Resetting bearer [ 498.878184][T17714] tipc: Disabling bearer [ 499.054351][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.100130][ T5729] tipc: Node number set to 2551136120 [ 499.128817][T17308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 499.251432][T17308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 499.294820][T17308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 499.368683][T17308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.469964][T17797] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3170'. [ 499.526912][T17308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 499.564050][T17809] netlink: 'syz.3.3173': attribute type 23 has an invalid length. [ 499.580531][T17308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.607794][T17308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 499.699875][T17308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.021576][T17825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3177'. [ 500.075074][T17828] netlink: 'syz.6.3178': attribute type 39 has an invalid length. [ 500.194227][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.355331][T17308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.450696][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3181'. [ 500.476736][T17308] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.535990][T16048] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.543252][T16048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.569379][T17843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.607973][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.615250][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.616728][T17843] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3182'. [ 500.777483][T17840] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3181'. [ 500.861892][T17853] netlink: 'syz.6.3184': attribute type 23 has an invalid length. [ 501.259214][T17870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.310669][T17869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.323929][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.613855][ T6636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.625380][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.636224][T17887] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3191'. [ 501.681855][T17887] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3191'. [ 501.699642][T17888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.772757][ T9139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.235501][T17908] netlink: 'syz.0.3194': attribute type 1 has an invalid length. [ 502.278112][T17908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3194'. [ 502.909100][T17939] netlink: 'syz.3.3201': attribute type 1 has an invalid length. [ 503.370017][T17939] bridge14: entered promiscuous mode [ 503.390249][T17939] bond30: (slave bridge14): making interface the new active one [ 503.433197][T17939] bond30: (slave bridge14): Enslaving as an active interface with an up link [ 503.466843][T17308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.095201][T17308] veth0_vlan: entered promiscuous mode [ 504.143497][T17308] veth1_vlan: entered promiscuous mode [ 504.348003][T17994] team0: No ports can be present during mode change [ 504.399102][T17308] veth0_macvtap: entered promiscuous mode [ 504.458270][T17308] veth1_macvtap: entered promiscuous mode [ 504.478515][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3212'. [ 504.511290][T17999] net_ratelimit: 3 callbacks suppressed [ 504.511310][T17999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.526243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.652634][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.833682][T18021] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3212'. [ 504.848828][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.867861][T18020] netlink: 'syz.0.3217': attribute type 4 has an invalid length. [ 504.884100][T18020] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3217'. [ 504.969950][T18013] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3212'. [ 505.157682][T18027] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 505.249907][T17308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.344907][T17308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.403980][T16034] IPVS: stop unused estimator thread 0... [ 505.607511][T16050] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.660724][T16050] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.674979][T18041] x_tables: duplicate underflow at hook 3 [ 505.691283][T18047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3222'. [ 505.797814][T16056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.963307][T16056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.980554][T16056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.058973][T16034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.098902][T16034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.250245][T16050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.290423][T18064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3226'. [ 506.306194][T16050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.636864][T18081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.645400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.791458][T18089] netlink: 'syz.6.3232': attribute type 11 has an invalid length. [ 506.943526][T16034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.372204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.383622][T16050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.476102][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3239'. [ 507.498165][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3239'. [ 508.181526][T18138] netlink: 'syz.6.3244': attribute type 30 has an invalid length. [ 508.227314][T18138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3244'. [ 508.247734][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 508.267440][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 508.284298][T18141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3245'. [ 508.294551][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 508.306838][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 508.317915][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 508.910333][T18172] netlink: 'syz.0.3250': attribute type 1 has an invalid length. [ 509.179516][T18165] bond0: (slave gretap1): making interface the new active one [ 509.220789][T18165] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 509.320011][T18187] team0: Device veth1_macvtap failed to register rx_handler [ 509.615741][T18194] sctp: [Deprecated]: syz.6.3254 (pid 18194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.615741][T18194] Use struct sctp_sack_info instead [ 509.672398][T18196] netlink: 'syz.4.3255': attribute type 1 has an invalid length. [ 509.941359][T18213] __nla_validate_parse: 1 callbacks suppressed [ 509.941379][T18213] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3258'. [ 510.098460][T18223] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3262'. [ 510.135063][T18221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3261'. [ 510.189225][T18229] netlink: 'syz.0.3261': attribute type 1 has an invalid length. [ 510.200039][T18223] netlink: 'syz.6.3262': attribute type 1 has an invalid length. [ 510.230338][T18225] syzkaller0: entered promiscuous mode [ 510.242689][T18225] syzkaller0: entered allmulticast mode [ 510.260491][T18223] netlink: 'syz.6.3262': attribute type 1 has an invalid length. [ 510.282608][T16056] net_ratelimit: 4 callbacks suppressed [ 510.282627][T16056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.311488][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3262'. [ 510.493793][ T5610] Bluetooth: hci4: command tx timeout [ 510.768593][T18142] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.792731][T18142] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.807148][T18142] bridge_slave_0: entered allmulticast mode [ 510.820526][T18142] bridge_slave_0: entered promiscuous mode [ 510.831781][T18142] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.840815][T18142] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.851256][T18142] bridge_slave_1: entered allmulticast mode [ 510.860545][T18142] bridge_slave_1: entered promiscuous mode [ 510.893584][ T9139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.017919][T18142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.054051][T18142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.182902][T18142] team0: Port device team_slave_0 added [ 511.218517][T18275] openvswitch: netlink: Message has 8 unknown bytes. [ 511.235982][T18142] team0: Port device team_slave_1 added [ 511.286285][T18277] netlink: 'syz.6.3274': attribute type 11 has an invalid length. [ 511.377215][T18142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.422997][T18142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.453257][T16034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.491719][T18142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.515513][T18142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.543908][T18142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.624826][T18142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.840420][T18142] hsr_slave_0: entered promiscuous mode [ 511.859174][T18142] hsr_slave_1: entered promiscuous mode [ 511.879754][T18294] netlink: 'syz.0.3279': attribute type 16 has an invalid length. [ 511.891311][T18142] debugfs: 'hsr0' already exists in 'hsr' [ 511.913426][T18142] Cannot create hsr debugfs directory [ 511.918973][T18294] netlink: 'syz.0.3279': attribute type 17 has an invalid length. [ 512.084287][T18294] 8021q: adding VLAN 0 to HW filter on device .` [ 512.300800][T18294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.330540][T18299] wg0: entered allmulticast mode [ 512.405064][T18302] netlink: 'syz.4.3281': attribute type 14 has an invalid length. [ 512.573649][ T5610] Bluetooth: hci4: command tx timeout [ 512.576888][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.121342][T18342] xt_l2tp: invalid flags combination: 0 [ 513.136161][T16034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.193262][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3287'. [ 513.333736][T18142] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 513.390537][T18142] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 513.428996][T18142] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.506176][T18355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3293'. [ 513.583718][T18360] pimreg: entered allmulticast mode [ 513.734927][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.774197][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.855585][T18357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3292'. [ 513.898154][T18142] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 513.935765][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.952054][T18142] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 513.971131][T18142] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.166415][T18142] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 514.222036][T18142] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 514.239097][T18142] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.286905][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3301'. [ 514.296539][T18394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3301'. [ 514.395619][T18142] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 514.399232][T18391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3299'. [ 514.434381][T18142] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 514.455065][T18142] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.617620][T18391] bond2: Invalid ad_actor_system MAC address. [ 514.653035][ T5610] Bluetooth: hci4: command tx timeout [ 514.660550][T18391] bond2: option ad_actor_system: invalid value (1) [ 514.675262][T18391] bond2 (unregistering): Released all slaves [ 514.748338][T18397] syzkaller0: entered promiscuous mode [ 514.754638][ T5721] IPVS: starting estimator thread 0... [ 514.767214][T18397] syzkaller0: entered allmulticast mode [ 514.854393][T18417] IPVS: using max 26 ests per chain, 62400 per kthread [ 514.882374][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.081238][T18429] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3306'. [ 515.377218][T18437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3308'. [ 515.650931][T18446] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 515.783439][T18452] syzkaller0: entered promiscuous mode [ 515.791483][T18452] syzkaller0: entered allmulticast mode [ 515.881077][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3312'. [ 515.897820][T18458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3312'. [ 515.990084][T18461] veth0: Caught tx_queue_len zero misconfig [ 516.005649][ T6636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.075034][T18142] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 516.115672][T18142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 516.153052][T18142] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 516.195860][T18142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.225108][T18142] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 516.271211][T18142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 516.296054][T18142] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 516.369186][T18142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 516.698435][T18142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.732540][ T5610] Bluetooth: hci4: command tx timeout [ 516.771047][T18142] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.808650][T16050] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.815912][T16050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.847208][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3321'. [ 516.859263][T18506] netlink: 'syz.4.3321': attribute type 5 has an invalid length. [ 516.870475][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.877730][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.890282][T18501] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3320'. [ 516.892100][T18506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3321'. [ 516.974608][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.137752][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.479710][T18534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3328'. [ 517.564227][T18534] netlink: 'syz.2.3328': attribute type 1 has an invalid length. [ 517.590482][T18534] netlink: 'syz.2.3328': attribute type 2 has an invalid length. [ 517.885737][T18553] macvlan0: entered promiscuous mode [ 517.945430][T18553] openvswitch: netlink: IP tunnel dst address not specified [ 517.999190][T18553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.268300][T16056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.894884][T16056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.903741][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.307782][T18142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.423415][T16056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.537670][T18142] veth0_vlan: entered promiscuous mode [ 520.012930][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.084000][T18142] veth1_vlan: entered promiscuous mode [ 520.176837][T18637] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3344'. [ 520.264837][T18639] netlink: 'syz.6.3346': attribute type 2 has an invalid length. [ 520.266132][T18142] veth0_macvtap: entered promiscuous mode [ 520.330542][T18142] veth1_macvtap: entered promiscuous mode [ 520.353002][T18648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3348'. [ 520.405813][T18142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.487652][T18142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.644858][T16050] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.675676][T16050] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.729292][T16034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.829467][T16050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.868664][T16050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.893514][T16034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.043173][T16034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.064767][T18671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3355'. [ 521.089475][T16034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.359994][T18682] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 521.417433][T18686] bridge_slave_1: left allmulticast mode [ 521.443776][T18686] bridge_slave_1: left promiscuous mode [ 521.470238][T18686] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.499652][T18686] bridge_slave_0: left allmulticast mode [ 521.547147][T18686] bridge_slave_0: left promiscuous mode [ 521.597883][T18686] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.615542][T18695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3360'. [ 521.647714][T18698] SET target dimension over the limit! [ 521.673291][T16056] net_ratelimit: 1 callbacks suppressed [ 521.673309][T16056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.780551][T18696] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3360'. [ 521.799623][T18703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3362'. [ 522.062402][T18710] openvswitch: netlink: EtherType 2 is less than min 600 [ 522.171197][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3367'. [ 522.350445][T18728] vlan0: mtu less than device minimum [ 522.582573][T18738] lo: Caught tx_queue_len zero misconfig [ 522.620904][T18741] netlink: 'syz.3.3371': attribute type 1 has an invalid length. [ 522.792320][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.863636][T18752] netlink: 'syz.2.3372': attribute type 3 has an invalid length. [ 522.932722][T16056] tipc: Subscription rejected, illegal request [ 522.967989][T18743] team0: Port device veth3 added [ 523.058918][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.220521][T18764] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3375'. [ 523.502975][T18774] bond6 (unregistering): Released all slaves [ 523.652380][T18781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3380'. [ 523.933123][T16056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.997042][T18798] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3386'. [ 524.207148][T18806] erspan0: entered promiscuous mode [ 524.281679][T18807] netlink: 'syz.6.3389': attribute type 1 has an invalid length. [ 524.304447][T18807] netlink: 'syz.6.3389': attribute type 4 has an invalid length. [ 524.399681][T18809] bond2 (unregistering): Released all slaves [ 524.516822][T18821] netlink: 'syz.3.3396': attribute type 12 has an invalid length. [ 524.530484][T18821] netlink: 'syz.3.3396': attribute type 11 has an invalid length. [ 524.658487][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.671791][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.935763][T18824] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 525.060777][T18829] gtp0: entered promiscuous mode [ 525.069828][T18829] gtp0: entered allmulticast mode [ 525.083208][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.111852][T18833] netlink: 'syz.2.3401': attribute type 4 has an invalid length. [ 525.150022][T18833] .`: renamed from bond0 (while UP) [ 525.203874][T18832] __nla_validate_parse: 8 callbacks suppressed [ 525.203893][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3400'. [ 525.223928][T16034] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.246846][T16034] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.256374][T18832] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3400'. [ 525.269509][T16034] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.281276][T18837] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3402'. [ 525.303987][T16048] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.396061][T18843] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3402'. [ 525.431434][T18837] bond1 (unregistering): Released all slaves [ 525.480260][T18844] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.490371][T18844] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.523408][T18843] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 525.545555][T18847] netlink: 'syz.6.3405': attribute type 3 has an invalid length. [ 525.608339][T18847] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3405'. [ 525.673645][T18853] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3407'. [ 525.726864][T18856] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3408'. [ 525.889193][T18861] netlink: 'syz.6.3411': attribute type 1 has an invalid length. [ 525.998503][T18861] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3411'. [ 526.034971][T18866] 8021q: adding VLAN 0 to HW filter on device bond7 [ 526.045755][T18866] bond6: (slave bond7): making interface the new active one [ 526.056046][T18866] bond6: (slave bond7): Enslaving as an active interface with an up link [ 526.067020][T18875] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3412'. [ 526.078292][T18875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3412'. [ 526.090527][T18861] 8021q: adding VLAN 0 to HW filter on device bond6 [ 526.100235][T18866] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 526.548849][T18877] veth0: entered promiscuous mode [ 526.555543][T18877] batadv_slave_1: entered promiscuous mode [ 526.969526][T18896] netlink: 'syz.4.3419': attribute type 10 has an invalid length. [ 527.012040][T18896] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 527.047804][ T6636] bond0: (slave bond_slave_0): interface is now down [ 527.090367][ T6636] bond0: (slave bond_slave_1): interface is now down [ 527.168395][ T6636] bond0: now running without any active interface! [ 527.227670][T18906] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 527.267156][T18906] net_ratelimit: 3 callbacks suppressed [ 527.267177][T18906] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 527.317411][T18908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.378479][T18876] batadv_slave_1: left promiscuous mode [ 527.395363][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.403539][T18876] veth0: left promiscuous mode [ 527.443916][T18914] xt_hashlimit: size too large, truncated to 1048576 [ 527.684067][T18926] x_tables: duplicate underflow at hook 2 [ 528.507411][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.591076][T18976] bridge_slave_0: left allmulticast mode [ 528.598213][T18976] bridge_slave_0: left promiscuous mode [ 528.614703][T18976] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.634886][T18976] bridge_slave_1: left promiscuous mode [ 528.640812][T18976] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.655703][T18976] bond0: (slave bond_slave_0): Releasing backup interface [ 528.687431][T18976] team0: Port device team_slave_0 removed [ 528.719696][T18976] team0: Port device team_slave_1 removed [ 528.730838][T18976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.743354][T18976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.755608][T18976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.765207][T18976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.776894][T18976] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 529.135557][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.623165][T16050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.775053][T16056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.414767][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.732636][T16056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.925756][T18949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.937558][T18957] netlink: 'syz.2.3435': attribute type 1 has an invalid length. [ 530.946670][T18957] __nla_validate_parse: 12 callbacks suppressed [ 530.946686][T18957] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3435'. [ 530.963088][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3435'. [ 531.146709][T18984] netlink: 'syz.3.3443': attribute type 1 has an invalid length. [ 531.239810][T18984] bond1 (unregistering): Released all slaves [ 531.263449][T18989] netlink: 'syz.2.3445': attribute type 39 has an invalid length. [ 531.296371][T18996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3443'. [ 531.353618][T18991] pim6reg: entered allmulticast mode [ 531.630535][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3448'. [ 531.660745][T19005] netlink: 'syz.4.3448': attribute type 32 has an invalid length. [ 531.682878][T19005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3448'. [ 531.755584][T19005] bond3: Setting coupled_control to off (0) [ 531.958553][T19017] syzkaller0: entered promiscuous mode [ 531.975048][T19017] syzkaller0: entered allmulticast mode [ 532.011684][T19021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3453'. [ 532.720991][T19048] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3462'. [ 532.975865][T16034] net_ratelimit: 2 callbacks suppressed [ 532.975885][T16034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.155209][T19065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3468'. [ 533.223988][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3469'. [ 533.415721][T19087] netlink: 'syz.4.3474': attribute type 64 has an invalid length. [ 533.429983][T19089] netlink: 'syz.2.3475': attribute type 7 has an invalid length. [ 533.439689][T19087] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3474'. [ 533.671560][T19095] netlink: 'syz.4.3477': attribute type 10 has an invalid length. [ 533.742441][T19095] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.763634][T19095] bond0: (slave team0): Enslaving as an active interface with an up link [ 533.906573][T19100] netlink: 'syz.3.3480': attribute type 7 has an invalid length. [ 534.145500][T16034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.412145][ T5610] Bluetooth: hci5: command 0x0406 tx timeout [ 534.458774][T19127] IPVS: persistence engine module ip_vs_pe_` [ 534.458774][T19127] not found [ 534.892541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.904708][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.009052][T19168] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 535.038686][T19168] bond4 (unregistering): Released all slaves [ 535.222996][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.263465][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.366529][T19188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.377326][T19193] netlink: 'syz.6.3507': attribute type 2 has an invalid length. [ 535.413086][T19194] nbd: must specify at least one socket [ 535.523171][T19201] netlink: 'syz.3.3511': attribute type 2 has an invalid length. [ 535.730641][ T29] IPVS: starting estimator thread 0... [ 535.787523][T19220] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 535.827104][T19220] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 535.832617][T19216] IPVS: using max 28 ests per chain, 67200 per kthread [ 535.838872][T19220] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 535.868673][T19209] bond8 (unregistering): Released all slaves [ 536.057804][T19227] __nla_validate_parse: 11 callbacks suppressed [ 536.057825][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3518'. [ 536.107772][T19227] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3518'. [ 536.197515][T19229] ip6tnl0: Caught tx_queue_len zero misconfig [ 536.259801][T19231] validate_nla: 1 callbacks suppressed [ 536.259823][T19231] netlink: 'syz.3.3520': attribute type 2 has an invalid length. [ 536.337186][T19231] netlink: 'syz.3.3520': attribute type 2 has an invalid length. [ 536.365247][T19235] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3521'. [ 536.382592][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.466094][T19233] syzkaller0: entered promiscuous mode [ 536.482707][T19233] syzkaller0: entered allmulticast mode [ 536.510447][T19233] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3521'. [ 536.598979][T19240] netlink: 'syz.4.3523': attribute type 1 has an invalid length. [ 536.690562][T19237] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3522'. [ 536.713614][T19240] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3523'. [ 536.837513][T19251] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3525'. [ 537.503681][ T6636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.034020][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 538.077112][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 538.097095][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 538.124891][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 538.139030][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 538.253855][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.653848][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.126686][T19261] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3528'. [ 539.172703][T19261] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3528'. [ 539.212911][T19261] netlink: 'syz.2.3528': attribute type 5 has an invalid length. [ 539.239443][T19261] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3528'. [ 539.274418][T19263] netlink: 'syz.4.3527': attribute type 2 has an invalid length. [ 539.555417][T19275] bond0: (slave bond_slave_0): Releasing backup interface [ 539.599349][T19275] bond0: (slave bond_slave_1): Releasing backup interface [ 539.681826][T19275] team0: Port device team_slave_0 removed [ 539.715249][T19275] team0: Port device team_slave_1 removed [ 539.736115][T19275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.747020][T19275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.762358][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.777129][T19275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.785374][T19275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.798787][T19275] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 539.817094][T19278] team0: No ports can be present during mode change [ 539.986375][T19290] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 540.168186][T19298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.181489][T19301] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 540.241086][T19298] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 540.259115][ T50] Bluetooth: hci3: command tx timeout [ 540.609272][T19320] netlink: 'syz.2.3541': attribute type 1 has an invalid length. [ 540.654791][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.887244][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.982972][T19336] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 541.027101][T19341] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 541.051672][T19336] team0: No ports can be present during mode change [ 541.147988][T19253] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.156539][T19253] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.159181][T19336] __nla_validate_parse: 11 callbacks suppressed [ 541.159232][T19336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3546'. [ 541.164471][T19253] bridge_slave_0: entered allmulticast mode [ 541.189915][T19253] bridge_slave_0: entered promiscuous mode [ 541.200637][T19253] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.208583][T19253] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.217603][T19253] bridge_slave_1: entered allmulticast mode [ 541.227123][T19253] bridge_slave_1: entered promiscuous mode [ 541.274437][T19253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.294230][ T9139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.305475][T19253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.434618][T19353] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 541.446236][T19353] bond1: option packets_per_slave: allowed values 0 - 65535 [ 541.460030][T19353] bond1 (unregistering): Released all slaves [ 541.498421][T19253] team0: Port device team_slave_0 added [ 541.531618][T19253] team0: Port device team_slave_1 added [ 541.598301][T19253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.613532][T19253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.671085][T19253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.696529][T19253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.713543][T19253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.745873][T19253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.912991][T19253] hsr_slave_0: entered promiscuous mode [ 541.920250][T19253] hsr_slave_1: entered promiscuous mode [ 541.934833][T19253] debugfs: 'hsr0' already exists in 'hsr' [ 541.943862][T19253] Cannot create hsr debugfs directory [ 542.134307][T19382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3558'. [ 542.147539][T19382] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3558'. [ 542.228852][T19381] bridge_slave_0: left allmulticast mode [ 542.240584][T19386] x_tables: duplicate underflow at hook 2 [ 542.243490][T19381] bridge_slave_0: left promiscuous mode [ 542.279938][T19381] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.300799][T19381] bridge_slave_1: left allmulticast mode [ 542.317222][T19381] bridge_slave_1: left promiscuous mode [ 542.323963][T19381] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.340551][ T50] Bluetooth: hci3: command tx timeout [ 542.431528][T19396] netlink: 'syz.3.3562': attribute type 1 has an invalid length. [ 542.439359][T19381] .`: (slave bond_slave_0): Releasing backup interface [ 542.449706][T19396] netlink: 'syz.3.3562': attribute type 3 has an invalid length. [ 542.461752][T19396] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3562'. [ 542.484959][T19390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3559'. [ 542.497641][T19381] .`: (slave bond_slave_1): Releasing backup interface [ 542.531500][T19381] team0: Port device team_slave_0 removed [ 542.557237][T19381] team0: Port device team_slave_1 removed [ 542.566868][T19381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.587610][T19381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.597507][T19381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.605825][T19381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.627696][T19384] team0: Mode changed to "loadbalance" [ 542.844766][T19406] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 543.387248][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3570'. [ 543.527286][T19439] nbd: must specify an index to disconnect [ 543.554238][T19433] bond8 (unregistering): Released all slaves [ 543.626616][T19446] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3579'. [ 543.636220][T19446] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3579'. [ 543.647352][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3579'. [ 543.656748][T19446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3579'. [ 543.660940][T19442] netlink: 'syz.4.3577': attribute type 1 has an invalid length. [ 543.667777][T19446] netlink: 'syz.3.3579': attribute type 12 has an invalid length. [ 543.686985][T19446] netlink: 'syz.3.3579': attribute type 11 has an invalid length. [ 543.707559][T19442] netlink: 'syz.4.3577': attribute type 1 has an invalid length. [ 543.761100][T19253] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 543.799316][T19253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.823647][T19253] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 543.861240][T19253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.888490][T19253] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 543.915460][T19253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.078666][T19450] bond0: peer notification delay (25) is not a multiple of miimon (28933), value rounded to 0 ms [ 544.091110][T19450] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 544.107317][T19450] bond0 (unregistering): Released all slaves [ 544.140702][T19253] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 544.160236][T19253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.246257][T16034] net_ratelimit: 4 callbacks suppressed [ 544.246318][T16034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.335581][ T9139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.414930][ T50] Bluetooth: hci3: command tx timeout [ 544.494618][T19486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.701442][T19253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.739453][T19487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.799754][T19495] syzkaller1: entered promiscuous mode [ 544.817556][T19495] syzkaller1: entered allmulticast mode [ 544.838910][T19253] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.873761][T16050] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.881204][T16050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.991375][ T6636] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.998677][ T6636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.290563][T19522] netlink: 'syz.3.3597': attribute type 10 has an invalid length. [ 545.387701][T19522] team0: Port device dummy0 added [ 545.395154][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.484752][T19525] netlink: 'syz.3.3597': attribute type 10 has an invalid length. [ 545.524803][T19529] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 545.570510][T19529] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 545.581285][T19525] team0: Port device dummy0 removed [ 545.680772][T19537] syzkaller0: entered promiscuous mode [ 545.706080][T19537] syzkaller0: entered allmulticast mode [ 546.004808][T19552] xt_hashlimit: size too large, truncated to 1048576 [ 546.054247][T19557] netlink: 'syz.3.3603': attribute type 10 has an invalid length. [ 546.168802][T19557] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 546.411500][T19567] __nla_validate_parse: 4 callbacks suppressed [ 546.411521][T19567] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3605'. [ 546.421125][T16034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.489111][T19253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.500613][ T50] Bluetooth: hci3: command tx timeout [ 546.545459][T16050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.948362][T19253] veth0_vlan: entered promiscuous mode [ 546.974067][T19253] veth1_vlan: entered promiscuous mode [ 547.061001][T19590] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3611'. [ 547.079712][T19253] veth0_macvtap: entered promiscuous mode [ 547.104942][T19253] veth1_macvtap: entered promiscuous mode [ 547.147706][T19253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.178114][T19253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.359174][T16034] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.373823][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.442146][T16034] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.607597][T19609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3616'. [ 547.662845][T16034] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.702889][T16034] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.713217][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.729038][T16032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.767846][T16032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.879503][T19616] netlink: 'syz.6.3617': attribute type 1 has an invalid length. [ 547.894667][T16056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.917634][T16056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.979625][T19616] 8021q: adding VLAN 0 to HW filter on device bond8 [ 548.051452][T19620] bond8: (slave batadv_slave_0): making interface the new active one [ 548.065773][T19620] bond8: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 548.148498][T19624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3620'. [ 548.281360][T19631] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3622'. [ 548.325766][T19631] netlink: 348 bytes leftover after parsing attributes in process `syz.6.3622'. [ 548.548227][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3622'. [ 548.805555][T19671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3632'. [ 548.815627][T19670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3632'. [ 548.856965][T16056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.866086][T19673] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3631'. [ 548.878048][T19674] xt_hashlimit: size too large, truncated to 1048576 [ 549.023321][T19681] xt_recent: Unsupported userspace flags (000000b1) [ 549.205913][T19685] geneve2: entered promiscuous mode [ 549.295471][T19692] netlink: 'syz.7.3638': attribute type 1 has an invalid length. [ 549.616110][T16056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.982819][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.412763][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.083966][ T6636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.255564][T19631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.456937][T19707] netlink: 'syz.2.3641': attribute type 7 has an invalid length. [ 551.472966][T19707] __nla_validate_parse: 3 callbacks suppressed [ 551.472985][T19707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3641'. [ 551.515877][T19707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3641'. [ 551.534065][ T31] INFO: task syz.5.2215:13963 blocked for more than 143 seconds. [ 551.542819][ T31] Not tainted syzkaller #0 [ 551.556649][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 551.573850][T19712] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 551.583839][ T31] task:syz.5.2215 state:D stack:26288 pid:13963 tgid:13962 ppid:12150 task_flags:0x400140 flags:0x00080002 [ 551.603655][ T31] Call Trace: [ 551.607841][T19712] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 551.619037][ T31] [ 551.623264][ T31] __schedule+0x17d9/0x56c0 [ 551.629247][ T31] ? __lock_acquire+0x683/0x2cf0 [ 551.643682][ T31] ? __pfx___schedule+0x10/0x10 [ 551.654386][ T31] ? schedule+0x90/0x2b0 [ 551.666255][ T31] schedule+0x164/0x2b0 [ 551.675602][ T31] schedule_preempt_disabled+0x13/0x30 [ 551.684254][ T31] __mutex_lock+0x7bf/0x1550 [ 551.689142][ T31] ? kasan_save_track+0x3e/0x80 [ 551.697818][ T31] ? __mutex_lock+0x5d4/0x1550 [ 551.703692][ T31] ? nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 551.710558][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 551.738586][ T31] ? net_generic+0x1e/0x240 [ 551.755949][ T31] ? net_generic+0x1e/0x240 [ 551.761915][ T31] nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 551.769153][ T31] ? rcu_is_watching+0x15/0xb0 [ 551.775554][ T31] ? trace_kmalloc+0x2a/0xf0 [ 551.780509][ T31] ? __pfx_nfsd_nl_svc_export_get_reqs_dumpit+0x10/0x10 [ 551.787734][ T31] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 551.795912][ T31] ? netlink_dump+0x1e7/0xee0 [ 551.800914][ T31] ? netlink_dump+0x1e7/0xee0 [ 551.807012][ T31] genl_dumpit+0x10b/0x1b0 [ 551.811756][ T31] netlink_dump+0x711/0xee0 [ 551.817131][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 551.822861][ T31] ? genl_start+0x497/0x6d0 [ 551.827473][ T31] __netlink_dump_start+0x589/0x7b0 [ 551.833358][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 551.839249][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 551.845768][ T31] ? __pfx_genl_start+0x10/0x10 [ 551.850723][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 551.856322][ T31] ? __pfx_genl_done+0x10/0x10 [ 551.861199][ T31] ? bpf_lsm_capable+0x9/0x20 [ 551.866606][ T31] ? security_capable+0x7e/0x2c0 [ 551.871749][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 551.876771][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.881879][ T31] ? __pfx_nfsd_nl_svc_export_get_reqs_dumpit+0x10/0x10 [ 551.889563][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 551.895513][ T31] netlink_rcv_skb+0x226/0x4a0 [ 551.901079][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.906421][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 551.911785][ T31] ? down_read+0x2be/0x330 [ 551.916740][ T31] genl_rcv+0x28/0x40 [ 551.920792][ T31] netlink_unicast+0x7bb/0x940 [ 551.926052][ T31] netlink_sendmsg+0x813/0xb40 [ 551.930929][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.936808][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 551.941899][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.947481][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 551.953153][ T31] ____sys_sendmsg+0x54e/0x850 [ 551.957970][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.963471][ T31] ? import_iovec+0x73/0xa0 [ 551.968149][ T31] ___sys_sendmsg+0x2a5/0x360 [ 551.973244][ T31] ? __lock_acquire+0x683/0x2cf0 [ 551.978538][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.984201][ T31] ? futex_wait+0x2a2/0x390 [ 551.989017][ T31] ? __fget_files+0x2a/0x420 [ 551.993850][ T31] ? __fget_files+0x3a2/0x420 [ 551.999325][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 552.004926][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.010580][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.018134][ T31] do_syscall_64+0x174/0x580 [ 552.022945][ T31] ? trace_irq_disable+0x3b/0x140 [ 552.028074][ T31] ? clear_bhb_loop+0x70/0xc0 [ 552.033005][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.038975][ T31] RIP: 0033:0x7fc84339e0d9 [ 552.043787][ T31] RSP: 002b:00007fc84418d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.052430][ T31] RAX: ffffffffffffffda RBX: 00007fc843625fa0 RCX: 00007fc84339e0d9 [ 552.060495][ T31] RDX: 0000000004044810 RSI: 0000200000000180 RDI: 0000000000000005 [ 552.068666][ T31] RBP: 00007fc843435024 R08: 0000000000000000 R09: 0000000000000000 [ 552.077051][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.085495][ T31] R13: 00007fc843626038 R14: 00007fc843625fa0 R15: 00007ffe608b4648 [ 552.093834][ T31] [ 552.098847][ T31] [ 552.098847][ T31] Showing all locks held in the system: [ 552.144172][ T31] 2 locks held by ksoftirqd/1/23: [ 552.156264][ T31] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 552.173807][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.175209][ T31] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 552.198853][ T31] 1 lock held by khungtaskd/31: [ 552.204552][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 552.215261][ T31] 2 locks held by getty/5366: [ 552.220025][ T31] #0: ffff888036a100a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 552.231632][T16032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.240016][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 552.251499][ T31] 2 locks held by syz.1.1548/11475: [ 552.257387][ T31] #0: ffffffff90098e68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.266516][ T31] #1: ffffffff8ee8dd80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 552.277938][ T31] 3 locks held by syz.5.2215/13963: [ 552.283856][ T31] #0: ffffffff90098e68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.292907][ T31] #1: ffff88807bcd06e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 552.304528][ T31] #2: ffffffff8ee8dd80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 552.317660][ T31] 3 locks held by kworker/u8:14/16044: [ 552.324044][ T31] 3 locks held by syz.0.3364/18726: [ 552.329335][ T31] #0: ffffffff90098e68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.352475][ T31] #1: ffff88807902b6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 552.373797][ T31] #2: ffffffff8ee8dd80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 552.385232][ T31] [ 552.387612][ T31] ============================================= [ 552.387612][ T31] [ 552.398440][ T31] NMI backtrace for cpu 1 [ 552.398458][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 552.398480][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.398492][ T31] Call Trace: [ 552.398499][ T31] [ 552.398508][ T31] dump_stack_lvl+0xe8/0x150 [ 552.398542][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 552.398695][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 552.398738][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 552.398772][ T31] sys_info+0x135/0x170 [ 552.398799][ T31] watchdog+0xfd7/0x1030 [ 552.398838][ T31] ? watchdog+0x1c7/0x1030 [ 552.398870][ T31] kthread+0x388/0x470 [ 552.398898][ T31] ? __pfx_watchdog+0x10/0x10 [ 552.398920][ T31] ? __pfx_kthread+0x10/0x10 [ 552.398948][ T31] ret_from_fork+0x514/0xb70 [ 552.398991][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 552.399020][ T31] ? __switch_to+0xc89/0x1420 [ 552.399047][ T31] ? __pfx_kthread+0x10/0x10 [ 552.399083][ T31] ret_from_fork_asm+0x1a/0x30 [ 552.399131][ T31] [ 552.399151][ T31] Sending NMI from CPU 1 to CPUs 0: [ 552.524950][ C0] NMI backtrace for cpu 0 [ 552.524968][ C0] CPU: 0 UID: 0 PID: 16044 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 552.524988][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.524999][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 552.525114][ C0] RIP: 0010:unwind_next_frame+0x51a/0x2550 [ 552.525134][ C0] Code: 0f b6 04 08 84 c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 48 39 e8 4c 0f 46 f9 48 8d 43 fc 4c 0f 47 e0 4c 0f 46 eb 4d 39 e7 76 a9 7c fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 7c cd 48 89 df 48 89 [ 552.525149][ C0] RSP: 0018:ffffc9000345f260 EFLAGS: 00000212 [ 552.525163][ C0] RAX: ffffffff9071cdf8 RBX: ffffffff9071cdfc RCX: ffffffff9071ce00 [ 552.525177][ C0] RDX: ffffffff9071cdfc RSI: ffffffff90f024dc RDI: ffffffff8c4bbf20 [ 552.525190][ C0] RBP: ffffffff818f2ffd R08: 0000000000000001 R09: 0000000000000000 [ 552.525202][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff9071cdfc [ 552.525214][ C0] R13: ffffffff9071cdfc R14: ffffc9000345f308 R15: ffffffff9071ce00 [ 552.525227][ C0] FS: 0000000000000000(0000) GS:ffff888124f49000(0000) knlGS:0000000000000000 [ 552.525242][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.525254][ C0] CR2: 00007f32017ed158 CR3: 000000007f190000 CR4: 00000000003526f0 [ 552.525269][ C0] Call Trace: [ 552.525276][ C0] [ 552.525286][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 552.525306][ C0] ? unwind_next_frame+0x8f/0x2550 [ 552.525323][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 552.525351][ C0] arch_stack_walk+0x11b/0x150 [ 552.525371][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 552.525391][ C0] stack_trace_save+0xa9/0x100 [ 552.525410][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 552.525433][ C0] ? __lock_acquire+0x683/0x2cf0 [ 552.525457][ C0] kasan_save_track+0x3e/0x80 [ 552.525478][ C0] ? kasan_save_track+0x3e/0x80 [ 552.525497][ C0] ? kasan_save_free_info+0x40/0x50 [ 552.525513][ C0] ? __kasan_slab_free+0x5c/0x80 [ 552.525541][ C0] ? kfree+0x1c5/0x640 [ 552.525558][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1ea1/0x2c40 [ 552.525641][ C0] ? ieee80211_iface_work+0x78a/0x1010 [ 552.525663][ C0] ? cfg80211_wiphy_work+0x29e/0x420 [ 552.525678][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 552.525723][ C0] kasan_save_free_info+0x40/0x50 [ 552.525740][ C0] __kasan_slab_free+0x5c/0x80 [ 552.525762][ C0] kfree+0x1c5/0x640 [ 552.525779][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1ea1/0x2c40 [ 552.525800][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 552.525827][ C0] ieee80211_ibss_rx_queued_mgmt+0x1ea1/0x2c40 [ 552.525856][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 552.525905][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 552.525926][ C0] ? __lock_acquire+0x683/0x2cf0 [ 552.525948][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 552.525970][ C0] ? __mutex_trylock_common+0x15f/0x270 [ 552.525999][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 552.526028][ C0] ? __lock_acquire+0x683/0x2cf0 [ 552.526055][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 552.526079][ C0] ? kcov_remote_start+0x181/0x790 [ 552.526103][ C0] ieee80211_iface_work+0x78a/0x1010 [ 552.526132][ C0] cfg80211_wiphy_work+0x29e/0x420 [ 552.526150][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 552.526168][ C0] process_scheduled_works+0xa8e/0x14e0 [ 552.526201][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 552.526223][ C0] ? assign_work+0x3cf/0x5d0 [ 552.526244][ C0] worker_thread+0xa47/0xfb0 [ 552.526277][ C0] kthread+0x388/0x470 [ 552.526300][ C0] ? __pfx_worker_thread+0x10/0x10 [ 552.526318][ C0] ? __pfx_kthread+0x10/0x10 [ 552.526341][ C0] ret_from_fork+0x514/0xb70 [ 552.526366][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 552.526389][ C0] ? __switch_to+0xc89/0x1420 [ 552.526411][ C0] ? __pfx_kthread+0x10/0x10 [ 552.526434][ C0] ret_from_fork_asm+0x1a/0x30 [ 552.526469][ C0] [ 552.970431][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 552.977346][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 552.986487][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.996574][ T31] Call Trace: [ 552.999885][ T31] [ 553.002839][ T31] vpanic+0x56c/0xa60 [ 553.006859][ T31] ? __pfx___schedule+0x10/0x10 [ 553.011738][ T31] ? __pfx_vpanic+0x10/0x10 [ 553.016304][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 553.022507][ T31] panic+0xc5/0xd0 [ 553.026270][ T31] ? __pfx_panic+0x10/0x10 [ 553.030802][ T31] ? preempt_schedule_common+0x82/0xd0 [ 553.036306][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 553.041704][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 553.047888][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 553.054099][ T31] watchdog+0x1030/0x1030 [ 553.058469][ T31] ? watchdog+0x1c7/0x1030 [ 553.062910][ T31] kthread+0x388/0x470 [ 553.067005][ T31] ? __pfx_watchdog+0x10/0x10 [ 553.071704][ T31] ? __pfx_kthread+0x10/0x10 [ 553.076325][ T31] ret_from_fork+0x514/0xb70 [ 553.080960][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 553.086104][ T31] ? __switch_to+0xc89/0x1420 [ 553.090899][ T31] ? __pfx_kthread+0x10/0x10 [ 553.095513][ T31] ret_from_fork_asm+0x1a/0x30 [ 553.100320][ T31] [ 553.103963][ T31] Kernel Offset: disabled [ 553.108300][ T31] Rebooting in 86400 seconds..