last executing test programs: 3.738129718s ago: executing program 4 (id=6951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000"], 0xfdef) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x38, r5, 0x7, 0x70bd26, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x5}}]}}]}, 0x48}}, 0x20040084) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x20, 0x80, 0x5, 0xffffffff, {{0x37, 0x4, 0x3, 0x3, 0xdc, 0x68, 0x0, 0xef, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0xfc, 0x0}, {[@ssrr={0x89, 0x17, 0x96, [@local, @remote, @multicast1, @local, @multicast2]}, @rr={0x7, 0x1b, 0x9, [@private=0xa010100, @multicast2, @local, @loopback, @local, @private=0xa010102]}, @timestamp_prespec={0x44, 0x3c, 0x35, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x9}, {@broadcast, 0x95400000}, {@broadcast, 0x80000001}, {@multicast2, 0xc}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xc3}, {@loopback, 0x101}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x31d6}]}, @end, @ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x55, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @cipso={0x86, 0x14, 0x3, [{0x7, 0xe, "186c29e22a167f7409c765a8"}]}, @timestamp_prespec={0x44, 0x34, 0x2f, 0x3, 0x4, [{@multicast1, 0x4}, {@rand_addr=0x64010101}, {@private=0xa010102, 0x2}, {@loopback, 0x4}, {@broadcast, 0x9}, {@multicast2, 0x5}]}, @noop]}}}}}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000340)=0xc) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x6}, {0xfff1}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x4000, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x8, 0x8, 0x524, 0x3, {{0x6, 0x4, 0x3, 0x3d, 0x18, 0x67, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@end]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="4401f9270000a47211d442763ed14a1ee078c50f00000000db45800a65acd94ff6612f4bcfa5ac59e5cffb2943ec26dead45908aad17efa84feed98559b2136b64918fc613cb4f770940b9d6e3cf7dbfbc61e3b97d4346bc5150fe52fce905549edee0c12572c2e1c14537176b977a59918287b8c170d6db454f18647a7ba3247d3a73133b14ae52008daafb39b595a4711b07683e375942fa095f0d1accd562a777d9f975b662a23f1bc374706633da12c31204cd3f119a0eecc3932474a93c28df97e54a38eb23b82f98b6868f84e5f5034f9a988dca00"/225, @ANYRES16=r5, @ANYBLOB="000127bd7000fddbdf25190000003c00018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0800030003000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r10, @ANYBLOB="280001801400020073797a6b616c6c6572310000000000000800030000000000080003000300000054000180080003000400000014000200767863616e310000000000000000000008000300010000000800030002000000080003000300000008000300020000001400020076657468305f766c616e0000000000007800018008000100", @ANYRES32=r11, @ANYBLOB="080003000100000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000300010000001400020070696d36726567310000000000000000140002006e657464657673696d30000000000000080003000300000014000200766972745f776966693000000000000008000100", @ANYRES32=r15, @ANYBLOB], 0x144}}, 0x40040) r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) ioctl$XFS_IOC_SCRUB_METADATA(r16, 0xc040583c, &(0x7f0000000040)={0x15, 0x80, 0x7fffffffffffffff, 0x70b2, 0xeff3}) 3.575407165s ago: executing program 4 (id=6953): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x8000004, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5, 0x8ca}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x44}}, 0x44) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x7ffffffe, r2, &(0x7f0000000140)={0xf0002003}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRES64=r3], 0x68}}, 0x240008c4) 3.377544911s ago: executing program 4 (id=6957): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) (async, rerun: 64) r1 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) (async, rerun: 64) r3 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(r2, 0x0, 0x0) (async, rerun: 32) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x407f}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 2.921585356s ago: executing program 4 (id=6962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000007301be000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x11, &(0x7f00000004c0)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk, @call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000060a0b04000000000000020000001400048010000180c97a0c0001007061796c6f6164000900030073797a300000000008000b4000000001140000001100010000000000000000000000000a"], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000060a0b04000000000000020000001400048010000180c97a0c0001007061796c6f6164000900030073797a300000000008000b4000000001140000001100010000000000000000000000000a"], 0x64}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x54, r3, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2dc328bd7000fcdbdf252500000008002f000200000006000400a2aa000008002c00ff0f0000050029000100000008000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socket$unix(0x1, 0x1, 0x0) 2.582988865s ago: executing program 1 (id=6966): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000020}, 0x20000000) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r1, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x80000}, 0x4004004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x15}, 0x2}, 0x1c) sendmmsg$inet(r4, &(0x7f0000002580)=[{{&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000380)="682cdbd8c46ab5bb0f0760a3ef9a7d99", 0x10}, {&(0x7f00000003c0)="d3be18d9ac502c741b", 0x9}, {&(0x7f0000000400)="ab9cabfd4b58b5a910d6a9bd087dcb18ef2832a662444e3e37a993121909247b32c9e8179b7d4fd47512a645142b36593f0e749aef885a0747dd03625c7169da85057d2c35140932947fec082a9d0cea1ef2b5d57c28fba0324e63c0a8e53406c90e3d8859e10696ef06266d51d1c3054d07bac24894ac696c5eb72943b0518939df82efb5a92b0166372d06e4d67c89b41a2a4fa5c7841967b68cea5219ec575f3eb1dfbd322fd40840e431c6858495c6ed5129373fac79bb476fa9d9477e76ea7218c451b3759e7c0a84a7b4a08e4e092ed15d9f3c6d89a27ce417d312225492637f69da500e3bd04da048342e4829", 0xf0}, {&(0x7f0000000500)}, {&(0x7f0000000540)="cfdfd9f8199cda4970b70a7e2ddc1d0c5979da2bc30495f92dedbec6556851be37eb8212e7813c1f331e09801ccd8753be093fe880033b58a324b8aa39891223b0ad72057d19895591d52398c2b845c9d302f36734a324bfe7", 0x59}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="637aa81af733a88e2848fc7e8de55672cbb4373dcafe7002249b7566caf1bb65742257833f67ca69132432644bdcaceb31573b62fdafd3e5462bfc4c32f8c904c9ff6276c83fec8a6b4c899004ce6f40933a1fd3f2df4f371d460a5a80e646dd9e019aef5d3c9ab17d06b2cd81543d67eae6b9c9fe4134ad9fdb735f4c49e8ad", 0x80}], 0x7, &(0x7f00000016c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001700)="b6ee5bd4895dcb1595cd20c10b78493b2039ad7204554191f7a8a78415708654c9741533d2cff6ebc0f26e8a4c12e893d54df03e2780686b317539bf2ae621024466706bda1bed94e12d0d250c64d2dcf0d5e8177b61701b432116cec1d76677c8933a61609fdea54dc0822649dbb6ca8a638445b54b29c8ed44f606e06ac1b0711f40d1f6ce9adaa7a879e85fbeeb39607e3fcfac2f7adf8883823bdbc0182304ec4ad2ce600e892648a5698378b28886af8046a067ec546226445da716402623aef44a176ee492363785a3405529e3b4072d4f5fb7ef4c317875d89daebe638f038c2ed43cc9d442c4868acbf8a52155b808cff126452dfc", 0xf9}, {&(0x7f0000001800)="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", 0xfb}, {&(0x7f0000001900)="e9b9ee17d4520c870f4331eed519134216dd4866a67c0f356f5d159b3db4685caea037c4bc2d2dfb476d739cd7bb4deb2bf1bec6ba6e25f65594fd85af40cc6b23d3d78cb23ae08beb0705684116716e146906fee823", 0x56}], 0x3, &(0x7f00000019c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x62c}}], 0x48}}, {{&(0x7f0000001a40)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000001a80)="d3ea6cf04054e555cedf615f628b33a7d83e0bb818b243767876e7a75b8e2772963c3c545724748b41d75af0e87f83e872ae31a56510df874d9f31407d53e398fe7521af12400cd5b46699bc925ac1337b60f2f899784fdaeac88b10a85cd071d039410186b7e7a98653cc8f49a4e6581e6bffea49359b47df400d079bfe954f689307093de3d191f0ab588ba46613d6f344bf9dcbdde3bf6d31a0a05b018dcdafab1e43383f57a0bdf4898cca2a047f86cbf92e73eceeffeef661a870345a4ba62562e80834c2c4c89f7c2a4a71b12529d0c75af10452f5efcb", 0xda}, {&(0x7f0000001b80)="f3e95add2d4a953d", 0x8}, {&(0x7f0000001bc0)="4816b9095492453d507085860d433e4c1107023a679eeb07cf9e616c5f992ed65a3b382d400e655203469086dd5d75ef602cdcdb0067d86e11d820cf8852a8ea2817b185ff190d5c6bb73f1ea5bedc096a47b209fc399d1a74eeceabf7b86c7722fa3964d7e52178c25d", 0x6a}, {&(0x7f0000001c40)="e3f97cb0bfffafd90660304848b8b2cd84a4b3d9fd4ecc47dccc8c45b95ef03c52ced7e174f7e5a2c63c799b2ff0e3bbab76d5a643cd8a021c82a900fc62270044d660c434751e117681d3eb469077697f7ed194b45099ec871c7ae4e8439134dae540ac9ccc0e325153a1e4966c864fd16c6f21bc31e2fdefefbed8d0dac2375e48ad03303ef6f34e9695d73d745b9747ee0ce306a0cfb98f022d8ccc0363a8801730b3aebc36188901a252ebad3aef6af2df84d6c32f6762e6597a6b751db94bc41f9421f6a7523763f94f89f5d052488048c7ecdf17bc8b52e07379193641f76711f12600d4cf9e97801913", 0xed}, {&(0x7f0000001d40)="4b0ff54eb84644a6635f4410cb7f82f369ccd48706e1f3cf1cc0f5622f4dfe22d339c75b121f613b0dad396e5401d16511fa1d2ac1a5aa5b6f4e63c8820db614b0dd10ae3b65", 0x46}, {&(0x7f0000001dc0)="afae28cdd455f49b32c475d8834bdde6b4801e22ac75680d1a8ac65df00779d2aafd34de3e", 0x25}, {&(0x7f0000001e00)="59689a1fc5f9f6bcf8edb326eac9481b836c93792b16b319aa720de380b6bcea194cb02ec4cde1933f5852e0da18a508ef38585bbbe35c06258ad997da3f397b075b3e84a6fbd1475cb2d8ab0f3ba30020d4253c3a86601c08886e4b192026dd6ae1d5e57e3364c1ae8c7edd547e527b0f8cbf114b4018045c8cc916e3e7d5a53d7014449ae70aa5e6300ebe0f56379462af28aa2f546615dbe7f19e99e163849821fc50f2ade2926a2ee37137df1b2240270fc0332201346f", 0xb9}, {&(0x7f0000001ec0)="b52a5b97c399f438ed20c8147cbf118e248a230dfb2235db46a4c368cbb91a07a0b274f0ba4857614561190240239df679cb0d601254beae3c5b30ff5e77ddddf099596189cb4ac50dca0dd902f345ec900bad956c3265e8ec0cd5c2493ea61217271b16f365e08b5eceddef9345a1fdc73c6132c0c08f7eb9c7ea633c3f54b507da5c7b69b46dcd7acd59ddda10d0690f44bfb74c9c0f8e1e9382edc1419b1c3c44168940cd70f24b6dd8b4beec1edbd269f2934d8c9d07c77c235380865d599f8cdc9a2913bcfd073f8eaf9934c93e727a2fc3b22176b51454760cd273fc1222b7d64ec4155ee4e048de68b72dd39fd988", 0xf2}], 0x8, &(0x7f0000002040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x20}}, {{&(0x7f0000002080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002180)=[{&(0x7f00000020c0)="ab1bf4ef382ac465818b1fec4935af16425be9e4ccee27e6fe84e508019da5ecc4784750ee1c786c35da35995ba0a10c78f0f4c0a72adb126c9229e5dd692648d7bb12714847bef61da8b297f40a92487c232511c0b3c82bd7f927a2a1456bc3f38c9ebb137652bbd793f6359813c997ad9ee35a62002a6fe777062f115ed5f4a004da0eee0e92fffd181fe6bbd487144f7bdb756785e5846099f5d4469c08fe868226cbd09e918f530c", 0xaa}], 0x1, &(0x7f00000021c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x79}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb68d}}, @ip_retopts={{0x70, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x17, 0x8c, [@multicast2, @multicast1, @rand_addr=0x64010102, @loopback, @empty]}, @cipso={0x86, 0x43, 0x2, [{0x1, 0x4, "d6e1"}, {0x7, 0x9, "808bb6f2f7d62f"}, {0x2, 0xd, "21ba594f924b02ae4780fc"}, {0x5, 0x6, "162b1d43"}, {0x7, 0x11, "a6e259f44b887f2fa72ac225fb948f"}, {0x6, 0xc, "41e7b430b35d5537aa30"}]}, @ra={0x94, 0x4, 0x1}]}}}], 0xe8}}, {{&(0x7f00000022c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002300)="3d1c92427e03e6a784c633b03bb18c42601ce9e8b5e4d56efa970b16c138529a83d1714250f51e28e3cda3f720fb7f1a4095694b85cfa8e15cd799b982877fac019b53fed660a46ae5ee19c8c8c998daf2c114cc6f7b7429bf0b4ba200886e11cdc0fe80414f", 0x66}, {&(0x7f0000002380)="4120c409dcdae83d6343d32e7fc4b033d35c145ac75b506450f8c493dc9c0643f523d30f004c55b393b342d441c9f216389c45b3c3617bb37c95", 0x3a}, {&(0x7f00000023c0)="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", 0xff}, {&(0x7f00000024c0)="0279e46facea34a6107f5017bca1e0511a886998b660b4f4a07e7b5177e05ac9100424cc24536297b74e6da84a3297b9264f7008c4033b5d55d21609b71395be6a1ba7d5d7305933835fe1d330e09041a1d3fb667d2f7a0f1478607f8ad4abc6c4c75553f2fbcfc0ca36a86b9d8da7397d0f", 0x72}], 0x4}}], 0x5, 0x24000004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000026c0)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000002700)=0x3, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000002900)={0x1, 0x2, 0x1000, 0xda, &(0x7f0000002740)="9c8dc6173d41fa86c34f2e9122c88767807c709a6e6d2e3af03fa2e275b0de569b37ae6a871723b0c807ab88363d2a3233b06f4fa108f937e463af99673159fb8dae7b04fc1b2daf9bca8aa78de5b73c88849cbe8be22d7160d67e4e1be5f81afb02670eff9167a7e61b933a4c73759148f158e351aad03b918e9c6d197e947fa3c7e8b0130084e639daaf49237f091059eef00914ea4b8006acf706605a9939ab0caf19ad0ad31eb56471c6beb79cc5dac26c754a242a6d49dd2ce6cd9d68c3fb260b892e4197154e10b8605a0bf10dff19aa83b10686cf87c4", 0xb0, 0x0, &(0x7f0000002840)="e5bb97db79335a3888e09fe8343292759f1ef68109609af2f508e05f79151598cd52d97d8b089d56c84c96cd316b3cd1066a03220150c9b3815ea3592f4c3c15c121b160f8b7c21db2c3b51cd72a2eae339cf2bba34da9c0a6d13f17c9a68c9c76a4e3a86a99b750e1985b2842e4ac43e166a9a611a93ffa9c37f818f93c177c6923d390390b5508f164727c36346df51fe6abf8f4472d3c91308b85cc5ab069008be46b2e47db0de0add714913c4b3f"}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000029c0), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000002c80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002a00)={0x208, r7, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xba64}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x76}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3c0000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x59}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r8 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002cc0)={'batadv_slave_1\x00', 0x0}) r10 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r8, &(0x7f0000002d00)={0x2c, 0x8, r9, 0x19, r10}, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002d80), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002dc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000002ec0)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={0x5c, r11, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1000}, 0xc001) syz_80211_inject_frame(&(0x7f0000002f00)=@broadcast, &(0x7f0000002f40)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8}, @device_b, @device_b, @from_mac=@device_b, {0x1, 0x4}}, 0x1, 0x1, 0x26, @val={0x10, 0x1, 0xf4}, [{0xdd, 0x50, "0428c5ae663a3a4ed8720d037fce48dd2561c5e1ff9d703844c333620e8f21dfd52b8e1b4dc9b91b29670e0f29b31fe84b5ec9723f510db4ff19fe6130c68f705c27f00865cb5ba07955881f72de5bee"}, {0xdd, 0x21, "fa7fa463cd44da69f9ba4a269589302cc8da7dbdf590aaed535ff81175a7af801e"}, {0xdd, 0xb4, "04e67ae2fba782b0f4f105a397151b5bb6d328efa02dea6d98f2b7e7094e2c16b15dd005b77df285a4c0358049c17cded93f4dd7cca8c846c07880e35c180fc694763d315b3fc512cb6fcfabe67b5c81f730af5b9406df2dcd92c9f7943be65e5056ce6797bcadb06b36553cb2eab273efa42ed79da72b153e00228f4176875ebbef42daab86829fcf322f96054db812e17fb1f9df230aec99f8cb23672d15b5e53fa32704f141fbf718214738059cf842c72e8c"}, {0xdd, 0x95, "b3e0e0cfc937920be7bc858f36e6298c6434a3c530c2dcac8bf4cdd86a04939a478a74486cafc92d84cc275fff0317891e27fb47e74460ea03e2169357250f8b1780d5e03551b005b585fbfbd018c7abd8cbb0046c58d3ef42c08a072050229c08a8f1977bcab0981777a4858bbb290091a78d1d4fed074fec270564fcefed5decd346eaa67746a5f7576b68a24fd66528a036b967"}, {0xdd, 0x40, "8e61dcf6ba1f88929516b9d649bf7e3f0323f988b069b3d7f52aee69f3f45acecd18b6b48a1f5f6f665274a3ed8afff626446330018172f91eb2de243c06edb7"}, {0xdd, 0xf0, "64ba2f9a675a9bb682bbc6a87abd17e214ff6c2ea53b0e766cd3f050764ec2284001ab00e83d777b597d70be88cde6ab53af684a07f0a7e7515df9246d527f764fa20e3c0273bebc8da81e16a41a70b3cfd2858fbe454bb239f7d3ea047c5c3e35627ed15f674388c129e6e2d02248a649f666b5316becac63fc821b6921deec090bf9cbe79324297976abaae1a342d988695017b20d64cfe1a0e0950c3991cd2ca4fd9a84efa0eba718ce916a1c31026e5db73a13f2750473b380f5049b870159bb0248e8dad04fb6d8525fde4475dbbff261a13986871b5d6e5edad9f5d64be828dd542170e8e1d673422171802be9"}]}, 0x317) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000003280), 0x3) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) r13 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000032c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000003300)=0x4, 0x12) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000003540)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) 2.576196245s ago: executing program 0 (id=6968): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)='[', 0x1}, {&(0x7f0000000000)="bf02f215a906d3209840ac252d6e8772ffd9bea40bc8036fa9615d6e218879f7bc52a66e1e11d51c8e23cc3596ddff9f221f413e3d6edae4ce8c", 0x3a}, {&(0x7f0000003f80)="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", 0xfb}], 0x3, 0x0, 0x0, 0x20040003}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/97, 0x61}, {&(0x7f0000000240)=""/56, 0x38}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000b40)=""/212, 0xd4}, {&(0x7f00000004c0)=""/185, 0xb9}, {&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000c40)=""/209, 0xd1}, {&(0x7f0000000040)=""/66, 0x42}], 0x5}, 0x7fffffff}], 0x2, 0x142, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000080), 0x97ff}, {&(0x7f0000000740)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f58263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f686f8f4ae905e573b200d669e65d56", 0x7f}, {&(0x7f00000015c0)}, {&(0x7f0000000e00)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98558d14a4850ac4b92e1b41a06dee6198c74c72607a032c3c7ef5abd0ba4a7f9f5dfebd75457b2ec358e951ade237c7498b025ad6524eb4263d6ef72e05901da983aac2b31a5e2631e39301a6dd04c128aabcea9134ec99685df1068506541f1265c77c85300497abfebce6ed768d9922ba3699dc6cc1863c0aa9321170b9e63a74986c1996d0fa1a5886e7023836ddbe64bea33edfe6fc1cb64784da18c2d4930eb481930b9298b57c7939189df401aed6a586f0103fccf70f92a53666d5afd3dd0b12273e5c1f2ddee89ed9a280c10df8e55ed24dcf9d631b693cd38006da4629a6b4a599de94a5b8ba6bccffdaa9d3fe0970623c118ba7e811d534915e4c63fa40df1e5a37ad9e5827ff65b2e4d8480a3f66576a3a52c0c80606098c0cb0b203f20d4f7b614652e4d8eb595d29ad1a4ce2c97aa30328c9987e1f1d8b7954ff54ddb69d5c3d2225bdd84e93b19edc2d33116373b0b5be8eea62d84896d2412edf5d321f75811360f89fe6ca8ac6545ec1c9f86ab285d1b5ba00c269514dab7a076c01cbfecaaff336d116481b16e434262de851a70ff056b1f9319840e27d5f446a3476210f4e70ceb71eeec17619911d56b74d7e761ff9c43dd237772377f888bfad215f3ee19eeeb87564f77241258874dd70bdd976305092426d18a3bc60022cb0acc2d21b3e24", 0x270}], 0x4, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}}}, @ip_retopts={{0x1c, 0xe1b, 0x7, {[@noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4, 0xf7, 0x1, 0x4}]}}}], 0x40}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x88, 0x0, 0xffb, 0x7, 0xb6b, 0x10000000, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0x3, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x1, 0x100000, 0x2, 0x3, 0x63c, 0xe, 0x6, 0xfffffffe, 0x6, 0x1bfa, 0x7, 0x8, 0x2, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x2, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x10001, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x8, 0x80180000, 0x4003, 0x8c, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x9, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x40000000, 0x800, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffffffff, 0x84, 0x100, 0xffffffff, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffc, 0x43, 0x2, 0x5, 0x8, 0x1, 0x4, 0x1000002, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1f8, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e24, 0x800, @private1, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000000)=0x9c) 2.522134201s ago: executing program 4 (id=6969): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000680)={0x7, &(0x7f0000000580)=[{0xfffffff3, 0xf6, &(0x7f0000000040)="dc90392192f58188a90b4e44a787753a80ab9dbe19678603bf645fc53e82e14daa3d5582c0a3366cef076e91c0a4aa689b19717f8f74b9cc3714162f60a791549928d480f4433ace49a2910b03df31ae5b113e614e25db25e94ea2717d9e83d5c8f4287edf62a25ef2113a9309dda09c5242f100d45b89713440492a8e9106763fb34d8778b423c25650acfe3441bf31f42e38b0861ced9c1dae9ccc675afef72264466590cdd982f4c11c1be67844a6fd747e0e9cb09c6440ce8b5dae7afcdf566547bdbcceb288e26e083d6e10407503a7c37ab3a34793cc827267bcbdc36a5dc0e5ed98c3304edf77757f08dde421d3d90fba3140", 0x0, 0x1}, {0x3, 0x0, &(0x7f0000000140), 0x1}, {0x8, 0x88, &(0x7f0000000180)="2eec2cb5a51fa3ad4088767d66125f9bcf3b3b897ef50d25f5eeb79a2367c55c5f79d0fdb7535a76aefa5c3b1c9a9921c69508bc5ffe5e942f4a81699a2914a82acf02690858ebd41a5a4d0fdedf2841de2f916721a4ee4bd755753fb53a554981099a809f5efa22599ddadb23834ed1a61e4b7cd23808df5caf15db1e064f90d458de373480161b", 0x1, 0x1}, {0x1, 0x61, &(0x7f0000000240)="d06111d5a8d50c556d577cfd300ac3b3dc02e5651aa2a3ccf002d84fb339e3af880950501fd2ef2b03f15f3bb9aeb0d3f9feab9918aa433c356dc971d08ec0bf47f185b02592950191bf2bcd5539a30555769390f8cedf9603704d17fb454c3189", 0x1, 0x1}, {0x1, 0xee, &(0x7f00000002c0)="09789f3d821a0465e947eed97af2324464ccbb8818b69352c0f833df84f7535fcf5b4fe55ebd235b27bb342c4d48cc9616adc71fba4104125e726d7108a1fe4568415ef9d34aa79dac58ac75579d925c9094cdbb7b9d42a8643350cb81692ccdb9a2207c0bbd15ecb7768a870ef0bac6040675f49502de4560ea8391e8676886ee04ae03f28644d30e2628dac58c1afa95fbf1df42d68f2f3905e859f21e4483e4a62906fd26b56ff8cc4a8e38c314a053785428571a76fe5662361999dec775b5ff48049ea64aa34ec647b0e8b7e2f1922af2d9d1c8315f2ad18a770d9df51bbe3f13eaf68a2263da14b4ecea71", 0x1, 0x1}, {0x44c, 0xc7, &(0x7f00000003c0)="2e69fb05f05b3c821c88eaedd2ee53d72e7e7c4701fccea8ad7d14704be1afef08ce297c6d054e56830ed8ab5403ff3043f12e29f519ee641f4efb8d959b820fc93a95d471a6246da4799381cebc8cb8b7a70d2ff35b7993ca62fdcb1905dd1bd30dfbe01b166d7de3edb246d9a65f1b8553c58842671c8fbdb52ddde1849eb5233f22108eb7c9744e1c4a82ef7c96b308589ed8189bb114d5772f81c59aa77448a5d9d00883b4bfc1a1278c473df59af9235c645b47a7bf09786ba9885a1db17a2f9bd77728c1", 0x0, 0x1}, {0xd82, 0x82, &(0x7f00000004c0)="86fac8c6031b3087602e671adb26115e3521373ff2fec67dcf14bbbf03e090bb5712e4f7ad24fc1e30618da9b2d45c910bb7645586087bd07eb91ad8e0863f737bc3a39b83c24cd5da1795f14439031576eee4fe0ca0f7e18e7e4f0e0307e016aedc2de5f70955a7d68127f8d4aff2d46d66f7d2e2cc0cb469e33255241023742343", 0x0, 0x1}]}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001700)={&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/4096, 0x1000, 0x1, &(0x7f00000016c0)=""/45, 0x2d}, &(0x7f0000001740)=0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) listen(r1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000001c80)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c40)={&(0x7f00000017c0)={0x450, 0x3f4, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x1, 0x27, [0x8, 0x8, 0xa00000, 0x8, 0x7, 0x9, 0x9, 0x1, 0x8, 0x9, 0x3800, 0x9, 0x9, 0xa, 0x10, 0x3, 0x1, 0x9, 0x2, 0x7, 0x2, 0x6, 0x9, 0x2, 0xb3, 0x8001, 0x9, 0x0, 0x1, 0x3, 0xff, 0x6, 0x5, 0x1000, 0xfffffffb, 0xf2, 0x10000, 0x8, 0x1, 0x6, 0x5, 0x2, 0x6c, 0x40000000, 0x7, 0x4, 0x2, 0x44c, 0x200, 0x200, 0xc, 0x7fffffff, 0x8001, 0x5, 0xa, 0x8, 0x7f, 0x2, 0x6, 0x1a, 0x4, 0x6, 0x9, 0x6], [0x8, 0x2, 0x0, 0x7fff, 0x0, 0xffffff87, 0x6, 0x2, 0x7ff, 0x7, 0xe9, 0xd, 0x3ff, 0xb, 0x2, 0x2, 0x80000000, 0x0, 0xffff, 0x1, 0x9b, 0x6, 0xc6b69e, 0x21, 0xffffffff, 0x6, 0x4, 0x8, 0x800, 0x9, 0xe25, 0x4, 0x2, 0x40, 0x7fffffff, 0x0, 0xffffffff, 0xe, 0x3, 0x7, 0x24e, 0xffff0001, 0x6bb, 0x1, 0x1, 0x0, 0x2, 0x5, 0x75b, 0x0, 0x6, 0x7, 0x3, 0x2, 0x6, 0xff, 0x308, 0x800, 0x4, 0x800, 0x40d, 0x3, 0x8000, 0x7], [0xfffffff9, 0xbe0, 0x3, 0xd07e, 0x8, 0x0, 0xffffc3c5, 0x81, 0x8001, 0x8001, 0xfffffffd, 0x7, 0x9, 0xfff, 0x401, 0x2, 0xfffffff7, 0xa, 0x61, 0x5a8, 0x9, 0x80, 0x8, 0x8, 0x0, 0x59fd, 0xe, 0x8, 0xf7f1, 0x0, 0x1b1, 0x8000, 0x7, 0x1000, 0x1, 0x6, 0x9, 0x8, 0x6, 0x6, 0xfffffffc, 0x9, 0x56, 0x9, 0x2, 0x34, 0xfffffffa, 0x2, 0x1, 0x3, 0x5, 0x0, 0x0, 0x890a, 0x3, 0x10001, 0x3, 0x7ff, 0x4, 0x1ff, 0x8, 0xfffffff7, 0x4, 0x1], [0xfffffffb, 0x4, 0x800, 0x1ff, 0x2, 0x8, 0xa77, 0x594f61f9, 0x8, 0x4, 0x100, 0xfff, 0x4, 0x8, 0x1, 0xe, 0x101, 0x3, 0x3ff, 0x637cd258, 0x8, 0x7, 0x8, 0x7, 0x8001, 0x9, 0x7ff, 0xa, 0x6, 0x4, 0x3, 0x5, 0x4, 0x6, 0x6, 0x7, 0x7fff, 0x7fffffff, 0x5, 0x6, 0x8, 0x401, 0x9, 0xe2b7a97a, 0x3, 0x7, 0x8, 0x86, 0x2, 0x3, 0xc, 0x7, 0x4, 0x8, 0x4, 0xe00000, 0x7fffffff, 0x2, 0x2, 0x0, 0x7fffffff, 0x6, 0x7, 0x3], 0x2e, ['$\x14+(\x8d\x00', 'net_prio.ifpriomap\x00', ',g:&\x00', '^.[/+[,{\xc4\x10@/&:[\x00']}, ["", "", "", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x20000400}, 0x40000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001d00)={0x0, @private, @private}, &(0x7f0000001d40)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)=@newtfilter={0x34, 0x2c, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x5, 0xfff1}, {0xa, 0xb}, {0x0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001f80)={{r1, &(0x7f0000001e40)='$\x14+(\x8d\x00', 0x400, &(0x7f0000001e80)={@_ha_fsid={[0x2, 0x4]}, {0x8, 0x775b, 0xfff, 0x9}}, 0x0, &(0x7f0000001ec0)={@_ha_fsid}, &(0x7f0000001f00)=0x6}, {[0xfffffffa, 0x0, 0xdb5, 0x81]}, 0x8000, 0x1, &(0x7f0000001f40)=""/1}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000002180)={&(0x7f0000002000), 0xc, &(0x7f0000002140)={&(0x7f0000002040)={0xd8, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffa}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}}]}, 0xd8}}, 0x20040084) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x100}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x5, 0x5]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x250}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3bf}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc001}, 0x400400c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002340)={'wlan1\x00'}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000002580)={{r4, &(0x7f0000002380)='net_prio.ifpriomap\x00', 0x0, &(0x7f00000023c0)={@align=0x5, {0xf000, 0x8, 0x4, 0x1}}, 0x5, &(0x7f0000002400)={@_ha_fsid}, &(0x7f0000002440)=0x7}, {[0x9, 0x3, 0xf, 0x8c]}, 0x800, 0xeb, &(0x7f0000002480)=""/235}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002640), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x24, r7, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10001}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xf3bd}]}, 0x24}}, 0x80) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000002740)={'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000027c0), r4) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f00000028c0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x68, r9, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x6b1, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24004080}, 0x40000) ioctl$XFS_IOC_GETBMAPX(r8, 0xc0205838, &(0x7f0000002900)={0x5, 0x6, 0x4, 0x1, 0x6, 0x2}) getsockname(r1, &(0x7f0000002940)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f00000029c0)=0x80) bind$l2tp(r6, &(0x7f0000002a00)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe24}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x8000) socket(0xf, 0x1, 0x7f) 2.255084551s ago: executing program 4 (id=6970): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000440)=@ethtool_gstrings={0x1b, 0x4}}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0013000002000000fd"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, &(0x7f0000000140)}, 0x20) (async, rerun: 64) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r2, 0x58, &(0x7f0000000600)}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0xd, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x61, 0xad9005ec53f2f1, 0x3e, 0x0]}}, &(0x7f0000000840)=""/174, 0x2e, 0xae, 0x0, 0x7fff, 0x10000}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d00000018110000", @ANYRES32=r3, @ANYRESOCT=r4], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048001}, 0x20000000) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000b60000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r7, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x550, 0x0, 0x0, 0x2e0, 0x3b0, 0x0, 0x480, 0x480, 0x480, 0x480, 0x480, 0x6, 0x0, {[{{@ipv6={@local, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x1}, 0x0, 0x100, 0x128, 0x0, {0x7a00000010000000}, [@common=@unspec=@cluster={{0x30}, {0x4, 0xb, 0x5}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xff}, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x20, "8400e1bf7f5dc8f3a5a6d0765e0770d84ae4b2b0fddc9481bc5db3d2e0c1"}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8fd, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 1.774541588s ago: executing program 1 (id=6976): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x20008004) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xc3b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6200}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xcf3d8}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004945}, 0x40080c0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v&U', 0x3}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r3}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x3) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) (async) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x20008004) (async) socket(0x2, 0x80805, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xc3b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6200}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xcf3d8}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004945}, 0x40080c0) (async) sendmmsg$inet(r1, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v&U', 0x3}], 0x1}}], 0x3, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r3}, 0x20) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x3) (async) 1.720191109s ago: executing program 3 (id=6977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x7, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000, 0xffffffffffffffff}, 0xfffd, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@fallback, 0xffffffffffffffff, 0x25, 0x8}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f0000000040)="76dbada3939225b6a42bf992842a6ce90f66ffb1391dbd9e231eae7c8caf606a92f0e2809c3f8a6549ff61fe3751", 0x2e, 0x20000000, 0x0, 0x0) 1.71616072s ago: executing program 2 (id=6978): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bc2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xfff3}, {0x5, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0xc0000004, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xa, 0x6}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xf, 0x0, &(0x7f0000000080)=0x4c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500"], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x0, @loopback, 0x4}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)="0a73f87b7b4550d065498ce4bba67dfbafe600", 0x13}, {&(0x7f0000000480)="3692104d86ba5db2fb63c64f8664cc8da8666f9deea31f3e", 0x18}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x528}}], 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="dfdcbe581d764030572c3e817ffd96d70dcad24f5d4aaa5236616abd11612182a22394145f213871fd94062e351adb9ac2904670bf35faba0af9a0e4f682ef5bb725e15fe4dbdc1458912701fe5cda5a88b5825e1ef4aeb3063b7ac2953f5d8b99813a1b994825d52b12fad43c99efd98d4641cc236c5ee4799f1d850510f303a48b3e1b8c6d9622f3b3c243a007b9edacdd0248f8626d7a0a91007c92a0", 0x9e, 0x40844, 0x0, 0x0) 1.649504615s ago: executing program 3 (id=6979): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dvmrp1\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) sendmsg$can_raw(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x3, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "31223d0f17b1202b"}, 0x10}, 0x1, 0x0, 0x0, 0x400d0}, 0x4000000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001000000a20000000000a6ddf0000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000010811e0341f8e9ddb000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a010100000000000000000700ffff0900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c000280180002800900020073797a320000000008000180fffffffc140000001000010000000000000000000084000a"], 0xec}}, 0x0) write$tun(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x3}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000540)={&(0x7f0000000240)={0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x2000006}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0xcdeb}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600210925bd7000000000000a0000fecacf7226308230611d74a00eaac4b0380c5e493f5ee5f7218e93f77c58b1b0a7f69f8954948f0d61f17b4b", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 1.544032919s ago: executing program 1 (id=6980): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x28008841) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x400000002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa4, 0x7f, 0x7, 0x20002}, {0x6, 0x0, 0xfd, 0xfffffffd}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xcf, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32, @ANYRES8=r2], 0xfe33) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="10002d800a000000020202020202000004002a0040002d800a"], 0x80}}, 0x0) 1.542976649s ago: executing program 0 (id=6981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e0000002080007400000000010000580"], 0x74}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESDEC=r4], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000003c0)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) 1.510832733s ago: executing program 2 (id=6982): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180a000000000000000000000000000085000000190000009500000000000000502d9e1de0dfdaf0"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x41100}, 0x94) 1.33877515s ago: executing program 0 (id=6983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'bridge0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0x7, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x21, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x40010) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000140)="05", 0x1, 0x4040094, &(0x7f00000000c0)={0x11, 0x10, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r9, 0x8940, &(0x7f0000007340)=@add_del={0x2, &(0x7f0000007300)='pim6reg0\x00'}) 1.288003655s ago: executing program 1 (id=6984): socket$pptp(0x18, 0x1, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$int_out(r0, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x8, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x44}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@op={0x18, 0x117, 0x3, 0x2}], 0x18}], 0x1, 0x20008054) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000021}, 0x20) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8084000}, 0x20) 1.287618338s ago: executing program 2 (id=6985): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x3fe}, 0x4}}]}, {0xd}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000005c0)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000004e090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000107baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$packet(0x11, 0x2, 0x300) r13 = socket$inet_tcp(0x2, 0x1, 0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@expire={0x104, 0x18, 0x1, 0x70bd27, 0x25dfdbfe, {{{@in=@remote, @in6=@empty, 0x4e20, 0x0, 0x4e24, 0x6, 0x2, 0x80, 0x180, 0x73}, {@in=@broadcast, 0x4d4, 0x6c}, @in6=@remote, {0x9, 0x0, 0x800, 0x1000, 0x800, 0x0, 0x81}, {0x8, 0xa, 0xfffffffffffffffd, 0x3}, {0x4, 0xe415, 0x7}, 0x70bd2a, 0x0, 0xa, 0x0, 0xff}, 0x4}, [@mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x104}, 0x1, 0x0, 0x0, 0x24008010}, 0x200008cc) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r15, 0x1, 0x0, 0x6, @multicast}, 0x14) recvfrom$packet(r12, &(0x7f0000000000)=""/107, 0x6b, 0x2100, &(0x7f0000000080)={0x11, 0x5, 0x0, 0x1, 0xa0, 0x6, @multicast}, 0x14) 1.235587272s ago: executing program 3 (id=6986): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000", @ANYRES16=r3], 0x30}}, 0xad48e3952cdd0b8e) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000111"], 0x30}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa000000000000007050000f8ee5d012d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 1.131919027s ago: executing program 1 (id=6987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) splice(r1, &(0x7f0000000400)=0x9138, r0, &(0x7f0000000500)=0x6, 0xfffffffffffffff7, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x3, 0x6, @remote}, 0x14) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000080)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000340)={r5, 0x6666bb85, 0x20}, &(0x7f0000000380)=0xc) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r7, &(0x7f0000000000)=0x8, 0x12) close(r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r6, 0x0, r7, &(0x7f0000000540)=0x87ffffe, 0x1ff, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x23}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x1}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r12) (async) r14 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r14, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) sendmsg$TIPC_NL_MON_SET(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000000000110000000c0009"], 0x20}}, 0x0) 941.362245ms ago: executing program 0 (id=6988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000600)="9745010000004000012c8cc5ffff", 0xe}, {&(0x7f00000002c0)="6db3760209b63052ae2240c262af", 0xe}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x4, 0xd}, {0xfff5}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffa03, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 792.089147ms ago: executing program 0 (id=6989): r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) getsockname$packet(r1, &(0x7f0000000000), &(0x7f0000000080)=0x14) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0xf9, [0x8, 0x2, 0x1719000000000000, 0xffffffffffffffff, 0xac2, 0x6], 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000180)=""/249}, &(0x7f0000000300)=0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x0) socket$nl_route(0x10, 0x3, 0x0) 784.605245ms ago: executing program 2 (id=6990): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.sectors\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080", @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x5, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="128b3b8a2ccba7389f930b2fb4e73e08cb13713eb4f92b7c1736ca04b8b18c2673", 0x21}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8b4}], 0x1, 0x20040804) recvmmsg(r7, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000001780)=""/4084, 0xff4}], 0x2}, 0x9}], 0x1, 0x40000140, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x3, 0x0, &(0x7f0000000180)) close(r2) 620.03947ms ago: executing program 0 (id=6991): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[@ANYBLOB="14009d2a4e123611b80010", @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf2503000000"], 0x14}}, 0x8010) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x917f15af92e0b70f}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x5c, r2, 0x500, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x5c}}, 0x20040010) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010181}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)={r8, 0x2c, "66741295fd8bfb328418c65c6294e2de12bdfc4fb2fc57ff5cc0b5e2b18797578b2bccedc1a80f4e6af632b2"}, &(0x7f0000000340)=0x34) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000100)={r8}, &(0x7f0000000200)=0x8) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x1, 0xfc, 0x0, 0x6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3010000}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 618.975959ms ago: executing program 3 (id=6992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb"], 0x88}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x45, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af", @generic="68eb7e22475186e591e23ad38a08862df02baf33ef122e"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000000)='GPL\x00', 0x20e500, &(0x7f0000000140)={@_ha_fsid={[0x3ff, 0x460]}, {0x2ed, 0x7ff, 0x8001, 0x8}}, 0x1, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f0000000180)='GPL\x00', 0x21, 0x0, 0x0, 0x0, 0x11}, 0x94) 615.139954ms ago: executing program 1 (id=6993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000010800000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r5, 0x1, 0x70bd6c, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x30, 0x2e, 0x61, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001c00)={&(0x7f0000000180)="54cd1817f9786b1b20a6c743ce47fae02ffb0d123625cc2c6f8eab41b418006d28f9db90c77b23dfcdd204526ea91599e7ffbb22f2f1e4d05d62c2b381", &(0x7f0000000a40)=""/4096, &(0x7f0000001a40)="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", &(0x7f0000001b40)="2effdf1755ef269cd8f52667b96e42d8082b1f70ed5fd60bcb4ad4a20eb75a24350d0e635abd519fe8d874d9c7154840a404ae002dfd8feae36c97476b1cf0", 0x1000, r8}, 0x38) 559.842332ms ago: executing program 2 (id=6994): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000100)={0x40, 0xb, 0x0, 0x0, 0x9, 0x3, 0x0, &(0x7f0000000000)=[{0x10, 0x101, 0x8a}, {0x21, 0x1ff, 0x8001}, {0x11, 0x101, 0x3}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 262.686618ms ago: executing program 2 (id=6995): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xff18, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 195.626389ms ago: executing program 3 (id=6996): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xe, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="a2", 0x1}], 0x1}, 0x400c044) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r7, &(0x7f0000000740)="605511a04273e925437138111c", 0xd, 0x8001, &(0x7f0000000780)=@hci={0x1d, 0x2, 0x1}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) 0s ago: executing program 3 (id=6997): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @empty}}, 0x14) (async) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @empty}}, 0x14) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x24, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xf}}, @TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x5, 0xf, 0x4, 0x13, 0x1f, 0x7}}]}}]}, 0x50}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90c0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) kernel console output (not intermixed with test programs): 77.802997][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.857554][T19839] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 877.870933][T29634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5803'. [ 878.052340][T29640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5804'. [ 878.329347][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.333194][T19833] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 878.407023][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.566154][T24486] Bluetooth: hci4: command tx timeout [ 878.660953][T29597] xfrm0 speed is unknown, defaulting to 1000 [ 878.926741][T29668] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5810'. [ 878.954069][T29668] netlink: 'syz.2.5810': attribute type 4 has an invalid length. [ 879.154398][T29675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5813'. [ 879.284390][T29682] netlink: 'syz.3.5815': attribute type 3 has an invalid length. [ 879.431096][T29682] syz_tun: entered allmulticast mode [ 879.845110][T29698] IPv6: NLM_F_CREATE should be specified when creating new route [ 879.870435][T29702] xt_l2tp: invalid flags combination: 8 [ 880.295172][T29597] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.302660][T29597] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.311011][T29597] bridge_slave_0: entered allmulticast mode [ 880.320600][T29597] bridge_slave_0: entered promiscuous mode [ 880.324835][T29724] netlink: 'syz.2.5827': attribute type 83 has an invalid length. [ 880.352649][T29726] netlink: 'syz.4.5829': attribute type 20 has an invalid length. [ 880.361845][T29597] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.381110][T29597] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.395418][T29597] bridge_slave_1: entered allmulticast mode [ 880.404553][T29597] bridge_slave_1: entered promiscuous mode [ 880.452439][T29726] netlink: 'syz.4.5829': attribute type 20 has an invalid length. [ 880.518583][ T145] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.544330][ T145] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.624652][ T145] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.646200][T24486] Bluetooth: hci4: command tx timeout [ 880.658839][ T145] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.680415][T29597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.719100][T29597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.860571][T29597] team0: Port device team_slave_0 added [ 880.903608][T29764] netlink: 'syz.0.5839': attribute type 2 has an invalid length. [ 880.979760][T29597] team0: Port device team_slave_1 added [ 881.046673][T29597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.054014][T29597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.080315][T29597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.102001][T29597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.111194][T29597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.138653][T29597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.186109][T29742] tipc: Resetting bearer [ 881.233531][T29597] hsr_slave_0: entered promiscuous mode [ 881.240313][T29597] hsr_slave_1: entered promiscuous mode [ 881.574873][T29774] __nla_validate_parse: 6 callbacks suppressed [ 881.574895][T29774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5842'. [ 881.891695][T29597] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 881.959228][T29796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.269147][T29597] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.282214][T29597] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.295685][T29807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5851'. [ 882.302865][T29597] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 42346 - 0 [ 882.519467][T29597] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.547306][T29597] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.582651][T29597] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 42346 - 0 [ 882.726211][T24486] Bluetooth: hci4: command tx timeout [ 882.844356][T29837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5856'. [ 882.890249][ T9228] net_ratelimit: 16 callbacks suppressed [ 882.890272][ T9228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.937617][ T9228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.938200][T29840] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5856'. [ 882.974263][T29843] netlink: 'syz.3.5857': attribute type 13 has an invalid length. [ 882.984456][T29843] netlink: 'syz.3.5857': attribute type 27 has an invalid length. [ 883.010147][T29597] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.020948][T29597] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.035114][T29597] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 42346 - 0 [ 883.192534][T19833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.211087][T19833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.267163][T25925] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 883.283406][T25925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 883.284372][T29855] xt_bpf: check failed: parse error [ 883.314031][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.322282][T19833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.330496][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.352777][T25925] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 883.562359][T29863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5863'. [ 883.572898][T25925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 883.581214][T29863] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5863'. [ 883.657460][T29863] gretap0: entered promiscuous mode [ 883.846874][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.898115][T29597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 883.922030][T29597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 883.938799][T29597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 883.952203][T29597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 883.965341][T29597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 883.979167][T29597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 883.987756][T29597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 884.001020][T29597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 884.085256][T29894] netlink: 'syz.3.5869': attribute type 4 has an invalid length. [ 884.096504][T29894] netlink: 'syz.3.5869': attribute type 8 has an invalid length. [ 884.096862][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.108879][T29894] netlink: 'syz.3.5869': attribute type 1 has an invalid length. [ 884.117896][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.129973][T29889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5869'. [ 884.165809][T29894] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5869'. [ 884.199344][T29894] NCSI netlink: No device for ifindex 0 [ 884.253249][T29900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5870'. [ 884.264198][T29888] xt_hashlimit: overflow, rate too high: 0 [ 884.278429][T29900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5870'. [ 884.300955][T29888] netlink: 'syz.0.5868': attribute type 1 has an invalid length. [ 884.319940][T29597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.383966][T29597] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.427763][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.435118][ T9228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.504369][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.511804][ T9228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.773653][T29905] bond0: (slave syz_tun): Releasing backup interface [ 884.808469][T24486] Bluetooth: hci4: command tx timeout [ 884.830235][T29905] syz_tun: left promiscuous mode [ 884.898306][T29925] netlink: 'syz.3.5877': attribute type 13 has an invalid length. [ 884.917905][T29925] netlink: 'syz.3.5877': attribute type 27 has an invalid length. [ 885.034769][T25925] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 885.043590][T25925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 885.086174][T25926] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 885.244307][T29939] xt_NFQUEUE: number of total queues is 0 [ 885.586261][T25926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 885.648890][T29958] ip6tnl0: Caught tx_queue_len zero misconfig [ 885.803629][T29597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.012810][T29969] netlink: 'syz.0.5889': attribute type 13 has an invalid length. [ 886.025063][T29597] veth0_vlan: entered promiscuous mode [ 886.039061][T29969] netlink: 'syz.0.5889': attribute type 27 has an invalid length. [ 886.060100][T29597] veth1_vlan: entered promiscuous mode [ 886.290053][T29975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 886.305122][T29597] veth0_macvtap: entered promiscuous mode [ 886.374473][T29597] veth1_macvtap: entered promiscuous mode [ 886.481788][T29597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.523696][T29597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.594910][T30000] __nla_validate_parse: 11 callbacks suppressed [ 886.594934][T30000] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5898'. [ 886.660292][ T3293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.693392][ T3293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.714772][ T3293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.725556][T30004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5896'. [ 886.733656][ T3293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.753493][T30006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5900'. [ 886.812730][T30004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.838226][T30004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5896'. [ 887.151154][T30015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5902'. [ 887.160875][T30015] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 887.171867][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.183445][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.220022][T30015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5902'. [ 887.247124][T30015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5902'. [ 887.263555][T19867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.282271][T19867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.443433][T30019] netlink: 'syz.0.5904': attribute type 13 has an invalid length. [ 887.453671][T30019] netlink: 'syz.0.5904': attribute type 27 has an invalid length. [ 887.519478][T30023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5795'. [ 887.623710][T30030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5907'. [ 887.897921][T30042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5909'. [ 888.084117][T30049] netlink: 'syz.1.5910': attribute type 1 has an invalid length. [ 888.328838][T30052] batadv_slave_0: entered promiscuous mode [ 888.341113][ C0] vcan0: j1939_session_tx_dat: 0xffff888056b7a000: queue data error: -100 [ 888.419290][T30057] ªªªªª!: renamed from virt_wifi0 [ 888.447483][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 888.463982][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 888.474987][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 888.496264][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 888.506083][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 888.579838][T30055] batadv_slave_0: left promiscuous mode [ 888.678100][T19867] net_ratelimit: 41 callbacks suppressed [ 888.678124][T19867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.718416][T19867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.452486][T19859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.601232][T30093] netlink: 'syz.2.5918': attribute type 13 has an invalid length. [ 889.610971][T30093] netlink: 'syz.2.5918': attribute type 27 has an invalid length. [ 889.826221][ T9228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.842523][ T9228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.093343][T19867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.122583][T17331] syz_tun (unregistering): left allmulticast mode [ 890.433128][T30059] xfrm0 speed is unknown, defaulting to 1000 [ 890.566627][T24486] Bluetooth: hci5: command tx timeout [ 890.762631][T30124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.987935][T19867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.003922][T19867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.025324][T30137] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 891.292511][T30149] SET target dimension over the limit! [ 891.319107][T30149] netlink: 'syz.2.5932': attribute type 10 has an invalid length. [ 891.360726][T30149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.376764][T30149] team0: Device bond0 failed to register rx_handler [ 891.444124][T30156] netlink: 'syz.1.5936': attribute type 13 has an invalid length. [ 891.465613][T30156] netlink: 'syz.1.5936': attribute type 17 has an invalid length. [ 891.477430][T30154] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.485309][T30154] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.615215][T30154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.632351][T30154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.824792][T30156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.833207][T30156] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.845082][T30156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.901999][T30156] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.909291][T30156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.923444][T30156] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.930937][T30156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.978777][T30156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.995240][T30156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.041455][T30156] veth1_vlan: left promiscuous mode [ 892.050849][T30156] veth0_vlan: left promiscuous mode [ 892.060632][T30156] veth0_vlan: entered promiscuous mode [ 892.072897][T30156] veth1_vlan: entered promiscuous mode [ 892.095252][T30156] veth1_macvtap: left promiscuous mode [ 892.103360][T30156] veth0_macvtap: left promiscuous mode [ 892.113255][T30156] veth0_macvtap: entered promiscuous mode [ 892.121473][ T1319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.146108][T30156] veth1_macvtap: entered promiscuous mode [ 892.161748][T30156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 892.181016][T30156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 892.198660][T30156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 892.212237][T30156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 892.277998][T30162] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.647048][T24486] Bluetooth: hci5: command tx timeout [ 892.819524][T30220] __nla_validate_parse: 7 callbacks suppressed [ 892.819547][T30220] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5949'. [ 892.862433][T30059] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.879554][T30059] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.898610][T30059] bridge_slave_0: entered allmulticast mode [ 892.912660][T30059] bridge_slave_0: entered promiscuous mode [ 893.312315][T30059] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.320081][T30059] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.327523][T30059] bridge_slave_1: entered allmulticast mode [ 893.347207][T30059] bridge_slave_1: entered promiscuous mode [ 893.377613][T30227] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 893.386568][T30227] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 893.569110][T30059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.632289][T30059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.684057][T30236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5952'. [ 893.742181][T30059] team0: Port device team_slave_0 added [ 893.759281][T30059] team0: Port device team_slave_1 added [ 893.845505][T30059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.860741][T30059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.861260][T30242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5955'. [ 893.922556][T30059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.019190][T30059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.026496][T30059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.056447][T30059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.207956][T30254] netlink: 'syz.1.5958': attribute type 12 has an invalid length. [ 894.230685][T30059] hsr_slave_0: entered promiscuous mode [ 894.240589][T30059] hsr_slave_1: entered promiscuous mode [ 894.260195][T30059] debugfs: 'hsr0' already exists in 'hsr' [ 894.276039][T30059] Cannot create hsr debugfs directory [ 894.348900][T19867] net_ratelimit: 5 callbacks suppressed [ 894.348923][T19867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.390865][T19867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.727533][T24486] Bluetooth: hci5: command tx timeout [ 894.921450][T30059] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.989606][T30282] syzkaller1: entered promiscuous mode [ 895.002380][T30282] syzkaller1: entered allmulticast mode [ 895.039391][T30059] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.211721][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.254426][T30059] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.357079][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 895.396622][T30059] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.495621][T30267] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 895.507053][T19867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.520648][T19867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.608087][T30295] syzkaller0: entered promiscuous mode [ 895.647935][T30295] syzkaller0: entered allmulticast mode [ 895.762346][T30302] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5973'. [ 895.799524][T30302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5973'. [ 895.850049][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.032609][T30309] netlink: 'syz.2.5976': attribute type 1 has an invalid length. [ 896.129705][T30059] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 896.149746][T30059] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 896.174003][T30059] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 896.209644][T30059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 896.323797][T30059] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 896.359922][T30059] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 896.429119][T30326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5979'. [ 896.455408][T30327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.473122][T30059] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 896.474976][T30327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.493131][T24486] block nbd5: Receive control failed (result -107) [ 896.512177][T30327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.523576][T30059] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 896.533119][T30327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.806602][T24486] Bluetooth: hci5: command tx timeout [ 896.845154][T30059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.878475][T30059] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.941277][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.948873][ T3293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.978289][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.985647][ T3293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.003709][T30341] macvlan0: entered promiscuous mode [ 897.012157][T30341] macvlan0: entered allmulticast mode [ 897.018126][T30341] veth1_vlan: entered allmulticast mode [ 897.038315][T30339] tipc: Enabling of bearer rejected, already enabled [ 897.141887][T30340] macvlan0: left allmulticast mode [ 897.147986][T30340] veth1_vlan: left allmulticast mode [ 897.155741][T30340] macvlan0: left promiscuous mode [ 897.239904][T30346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5985'. [ 897.296482][T30346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5985'. [ 897.351280][T30346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5985'. [ 897.965760][T29763] udevd[29763]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 898.074528][T30365] tipc: Enabled bearer , priority 0 [ 898.085727][T30374] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 898.169141][T30365] tipc: Resetting bearer [ 898.314982][T30059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.337818][T30392] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5995'. [ 898.555273][T19833] hid-generic 0005:0007:0009.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 899.199768][T19841] tipc: Node number set to 1944562434 [ 899.214928][T30059] veth0_vlan: entered promiscuous mode [ 899.257644][T30059] veth1_vlan: entered promiscuous mode [ 899.376861][T30059] veth0_macvtap: entered promiscuous mode [ 899.415294][T30059] veth1_macvtap: entered promiscuous mode [ 899.448129][T30423] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6002'. [ 899.479931][T30059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.540176][T30059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.583458][T19867] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.599579][T19867] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.642602][ T3293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.679544][ T3293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.697631][T30425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6003'. [ 899.940621][T19859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.974783][T19859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.088291][ T9226] net_ratelimit: 93 callbacks suppressed [ 900.088312][ T9226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.112381][T30397] infiniband syz1: set active [ 900.118338][ T9226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.118537][T19859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.136878][T30397] infiniband syz1: added syz_tun [ 900.154638][T30433] netlink: 'syz.2.6005': attribute type 2 has an invalid length. [ 900.163372][T19859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.201509][T30429] netlink: 'syz.0.6004': attribute type 1 has an invalid length. [ 900.251989][T30429] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.6004'. [ 900.295119][T30397] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 900.343138][T30437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5911'. [ 900.365987][T30397] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 900.456005][T30397] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 900.598561][T30397] RDS/IB: syz1: added [ 900.613003][T30397] smc: adding ib device syz1 with port count 1 [ 900.625895][T30397] smc: ib device syz1 port 1 has no pnetid [ 900.658680][T30449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6008'. [ 900.881705][T30456] netlink: 'syz.4.6010': attribute type 1 has an invalid length. [ 900.969263][ T9226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.981130][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.069035][T30465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6013'. [ 901.247929][ T9226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.269928][ T9226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.537361][T30478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6017'. [ 901.967069][T30494] netlink: 'syz.2.6020': attribute type 13 has an invalid length. [ 902.013733][T30494] netlink: 'syz.2.6020': attribute type 27 has an invalid length. [ 902.158149][T30504] syzkaller0: entered promiscuous mode [ 902.175647][T30504] syzkaller0: entered allmulticast mode [ 902.234371][T30508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6024'. [ 902.250752][T30508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6024'. [ 902.386999][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.412709][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.781293][T30529] syzkaller1: entered promiscuous mode [ 902.792957][T30529] syzkaller1: entered allmulticast mode [ 903.208214][T30549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.223197][T30551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.257944][T30552] netlink: 'syz.4.6035': attribute type 13 has an invalid length. [ 903.278846][T30552] netlink: 'syz.4.6035': attribute type 27 has an invalid length. [ 903.547330][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.582059][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.615461][T30557] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 903.701106][T30569] __nla_validate_parse: 5 callbacks suppressed [ 903.701129][T30569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6038'. [ 903.727131][T30569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6038'. [ 903.738590][T30569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6038'. [ 903.799661][T30564] syzkaller1: entered promiscuous mode [ 903.811712][T30564] syzkaller1: entered allmulticast mode [ 904.160622][T30592] netlink: 'syz.4.6044': attribute type 3 has an invalid length. [ 904.199459][T30592] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6044'. [ 904.467591][T30605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6047'. [ 904.515655][T30605] hsr_slave_1 (unregistering): left promiscuous mode [ 904.769330][T30611] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 904.898636][T30618] netlink: 'syz.4.6048': attribute type 1 has an invalid length. [ 904.908060][T30618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6048'. [ 905.171828][T30629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6052'. [ 905.371009][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 905.398912][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 905.407565][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 905.422277][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 905.431553][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 905.611848][T18433] syz_tun (unregistering): left allmulticast mode [ 905.626675][T18433] syz_tun (unregistering): left promiscuous mode [ 905.642100][T18433] bridge0: port 3(syz_tun) entered disabled state [ 905.838996][ T3293] net_ratelimit: 2 callbacks suppressed [ 905.839017][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.861009][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.941942][T30632] xfrm0 speed is unknown, defaulting to 1000 [ 906.399943][T30632] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.409816][T30632] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.419294][T30632] bridge_slave_0: entered allmulticast mode [ 906.427735][T30632] bridge_slave_0: entered promiscuous mode [ 906.436290][T30632] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.443475][T30632] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.450869][T30632] bridge_slave_1: entered allmulticast mode [ 906.458084][T30632] bridge_slave_1: entered promiscuous mode [ 906.488210][T30632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.501318][T30632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.533900][T30632] team0: Port device team_slave_0 added [ 906.543081][T30632] team0: Port device team_slave_1 added [ 906.569692][T30632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.576873][T30632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.604529][T30632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.617246][T30632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.624911][T30632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.654920][T30632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.701107][T30632] hsr_slave_0: entered promiscuous mode [ 906.708760][T30632] hsr_slave_1: entered promiscuous mode [ 906.715446][T30632] debugfs: 'hsr0' already exists in 'hsr' [ 906.722036][T30632] Cannot create hsr debugfs directory [ 906.728481][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.735639][ T9226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.819683][T30580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 906.977449][ T9226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.007928][ T9226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.159808][T30660] tipc: Enabling of bearer rejected, already enabled [ 907.341267][T30658] vcan0: Master is either lo or non-ether device [ 907.464445][T30672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6062'. [ 907.469870][T30670] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 907.527205][ T5634] Bluetooth: hci2: command tx timeout [ 907.674440][T30684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6065'. [ 907.684126][T30683] netlink: 'syz.3.6065': attribute type 1 has an invalid length. [ 908.127713][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.159189][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.455472][T30632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 908.494395][T30632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 908.512567][T30632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 908.544523][T30632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 908.579698][T30720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6073'. [ 908.590213][T30632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 908.613794][T30632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 908.633723][T30632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 908.724522][T30632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 909.167039][T30632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.282322][T30632] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.308334][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.341204][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.348447][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.358612][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.402472][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.409819][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.607420][ T5634] Bluetooth: hci2: command tx timeout [ 910.256746][T30751] netlink: 34 bytes leftover after parsing attributes in process `syz.2.6076'. [ 910.375069][T30778] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6080'. [ 910.584280][T30786] sctp: [Deprecated]: syz.1.6081 (pid 30786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 910.584280][T30786] Use struct sctp_sack_info instead [ 910.801854][T30796] netlink: 'syz.4.6085': attribute type 13 has an invalid length. [ 910.826914][T30796] netlink: 'syz.4.6085': attribute type 27 has an invalid length. [ 911.016490][T30632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.206123][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 911.206426][ C1] net_ratelimit: 3 callbacks suppressed [ 911.206440][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.359589][T30632] veth0_vlan: entered promiscuous mode [ 911.410853][T30632] veth1_vlan: entered promiscuous mode [ 911.431801][T30820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6090'. [ 911.549210][T30822] netlink: 'syz.4.6091': attribute type 7 has an invalid length. [ 911.551043][T30632] veth0_macvtap: entered promiscuous mode [ 911.595592][T30822] netlink: 'syz.4.6091': attribute type 7 has an invalid length. [ 911.604770][T30632] veth1_macvtap: entered promiscuous mode [ 911.608386][ T9226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.630607][ T9226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.686411][ T5634] Bluetooth: hci2: command tx timeout [ 911.690190][T30632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.731918][T30824] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6092'. [ 911.758214][T30632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.822849][ T1319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.844503][ T1319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.853950][T19867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.881807][ T1319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.893213][ T1319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.091249][T30834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6094'. [ 912.121491][T30834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6094'. [ 912.228760][T30831] syzkaller0: entered promiscuous mode [ 912.266046][T30831] syzkaller0: entered allmulticast mode [ 912.487923][ T9226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.512836][ T3293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.538370][ T3293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.681895][T19867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.709426][T19867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.742958][T30856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6100'. [ 912.767541][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.782599][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.874146][T30865] netlink: 'syz.1.6100': attribute type 13 has an invalid length. [ 912.888821][T30865] netlink: 'syz.1.6100': attribute type 27 has an invalid length. [ 912.930339][T30867] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6101'. [ 913.770285][ T5634] Bluetooth: hci2: command tx timeout [ 913.925098][ T1319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.938971][ T1319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.086535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.334782][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 917.309455][ T138] net_ratelimit: 5 callbacks suppressed [ 917.309477][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.333387][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.648293][ T9226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.252808][T19859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.477271][T19859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.489944][T19859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.448048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.642950][T19859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.653931][T19859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.512493][T30898] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6106'. [ 920.567851][T30895] syzkaller0: entered promiscuous mode [ 920.578027][T30895] syzkaller0: entered allmulticast mode [ 920.759008][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.964787][T30921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6112'. [ 921.022086][T30920] xfrm0 speed is unknown, defaulting to 1000 [ 921.311583][T30942] netlink: 'syz.0.6116': attribute type 3 has an invalid length. [ 921.560626][T24486] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 921.584159][T24486] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 921.601128][T24486] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 921.612412][T24486] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 921.621135][T24486] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 921.757183][T30951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6119'. [ 922.374377][T30966] net_ratelimit: 3 callbacks suppressed [ 922.374399][T30966] netlink: zone id is out of range [ 922.421128][T30966] netlink: zone id is out of range [ 922.507665][T30966] netlink: zone id is out of range [ 922.520733][T17809] syz_tun (unregistering): left allmulticast mode [ 922.537062][T30966] netlink: zone id is out of range [ 922.557145][T30966] netlink: zone id is out of range [ 922.563131][T30966] netlink: zone id is out of range [ 922.570030][T30966] netlink: zone id is out of range [ 922.575586][T30966] netlink: zone id is out of range [ 922.582143][T30966] netlink: zone id is out of range [ 922.584647][T17809] team0: Port device syz_tun removed [ 922.590946][T30966] netlink: zone id is out of range [ 922.634816][T19867] smc: removing ib device syz1 [ 922.733337][T30963] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.780494][T19867] smbdirect: ib_dev[syz1] removed [ 922.961519][T30945] xfrm0 speed is unknown, defaulting to 1000 [ 922.979115][T30983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 923.045446][T30983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.432426][T30984] erspan0: entered promiscuous mode [ 923.466881][T30984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6127'. [ 923.686429][T24486] Bluetooth: hci1: command tx timeout [ 924.272393][T31017] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 924.411672][T31017] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 924.528883][T31020] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6136'. [ 925.544487][ T30] audit: type=1800 audit(1785134538.008:12): pid=31053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6144" name=CB dev="tmpfs" ino=312 res=0 errno=0 [ 925.768685][T24486] Bluetooth: hci1: command tx timeout [ 926.084600][T31063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6145'. [ 926.443881][T31078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6147'. [ 926.463809][T31078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6147'. [ 926.723486][T31081] (: renamed from bridge_slave_0 (while UP) [ 926.953898][T30945] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.975682][T31089] netlink: 'syz.1.6150': attribute type 4 has an invalid length. [ 926.976218][T30945] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.002191][T31089] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6150'. [ 927.011848][T30945] bridge_slave_0: entered allmulticast mode [ 927.051748][T30945] bridge_slave_0: entered promiscuous mode [ 927.074002][T30945] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.106100][T30945] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.115199][T30945] bridge_slave_1: entered allmulticast mode [ 927.155740][T30945] bridge_slave_1: entered promiscuous mode [ 927.305538][T30945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.338478][T30945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.461529][T30945] team0: Port device team_slave_0 added [ 927.472544][T31094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6152'. [ 927.500157][ T145] net_ratelimit: 383 callbacks suppressed [ 927.500180][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.520782][T30945] team0: Port device team_slave_1 added [ 927.533463][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.535347][T31093] netlink: 'syz.1.6152': attribute type 2 has an invalid length. [ 927.592780][T31093] netlink: 'syz.1.6152': attribute type 2 has an invalid length. [ 927.608073][T31093] netlink: 'syz.1.6152': attribute type 1 has an invalid length. [ 927.635599][T31095] netlink: 'syz.1.6152': attribute type 2 has an invalid length. [ 927.676761][T31095] netlink: 'syz.1.6152': attribute type 2 has an invalid length. [ 927.703215][T31095] netlink: 'syz.1.6152': attribute type 1 has an invalid length. [ 927.811966][T31094] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 927.846528][T24486] Bluetooth: hci1: command tx timeout [ 927.867600][T31094] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 927.941231][T30945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.993472][T30945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.102607][T30945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.149816][T31100] netlink: 'syz.1.6154': attribute type 21 has an invalid length. [ 928.179071][T31100] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6154'. [ 928.291897][ T9228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.336743][ T9228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.390666][T31097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 928.433306][T30945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.467029][T30945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.512117][T19868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.578274][T30945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.646326][T31100] netlink: 'syz.1.6154': attribute type 5 has an invalid length. [ 928.671532][T31100] netlink: 'syz.1.6154': attribute type 6 has an invalid length. [ 928.676561][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.698123][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.716022][T31100] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6154'. [ 928.749107][T31111] xt_cgroup: xt_cgroup: no path or classid specified [ 928.757625][T31109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6155'. [ 928.879324][ T9228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.896909][ T9228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.989356][T30945] hsr_slave_0: entered promiscuous mode [ 929.004459][T30945] hsr_slave_1: entered promiscuous mode [ 929.019114][T30945] debugfs: 'hsr0' already exists in 'hsr' [ 929.026944][T30945] Cannot create hsr debugfs directory [ 929.033926][T31106] xfrm0 speed is unknown, defaulting to 1000 [ 929.124589][ T9228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.137898][T19867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.145932][ T9228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.370110][ T9228] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.392347][ T9228] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.847246][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.864267][T31128] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6159'. [ 929.881694][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.927784][T24486] Bluetooth: hci1: command tx timeout [ 930.058066][ T145] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 4352 - 0 [ 930.331115][T19868] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 4352 - 0 [ 930.479402][T31136] xfrm0 speed is unknown, defaulting to 1000 [ 930.479425][T19868] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 4352 - 0 [ 930.654620][T19868] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 4352 - 0 [ 934.024105][ T9228] bond7 (unregistering): (slave gre4): Releasing backup interface [ 934.095020][ T9228] bond4 (unregistering): (slave geneve3): Releasing active interface [ 934.161966][ T9228] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 934.220415][ T9228] bond0 (unregistering): Released all slaves [ 934.232052][ T9228] bond1 (unregistering): Released all slaves [ 934.248369][ T9228] bond2 (unregistering): Released all slaves [ 934.265084][ T9228] bond3 (unregistering): Released all slaves [ 934.292321][ T9228] bond4 (unregistering): Released all slaves [ 934.311922][ T9228] bond5 (unregistering): Released all slaves [ 934.326728][ T9228] bond6 (unregistering): Released all slaves [ 934.348630][ T9228] bond7 (unregistering): Released all slaves [ 934.368150][ T9228] bond8 (unregistering): Released all slaves [ 934.388564][ T9228] bond9 (unregistering): Released all slaves [ 934.419586][ T9228] bond10 (unregistering): Released all slaves [ 934.439817][ T9228] bond11 (unregistering): (slave dummy0): Releasing active interface [ 934.459154][ T9228] bond11 (unregistering): Released all slaves [ 934.477027][ T9228] bond12 (unregistering): Released all slaves [ 934.546002][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 934.741866][T30945] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 934.847365][T31188] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6172'. [ 934.886518][ C1] Virtual device  asks to queue packet! [ 934.949144][ T9228] : left promiscuous mode [ 935.064623][T31191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6173'. [ 935.106918][T30945] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 935.312787][ T9228] tipc: Disabling bearer [ 935.358438][ T9228] tipc: Left network mode [ 935.544455][T30945] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 936.230168][T30945] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 936.352827][T31246] netlink: 'syz.1.6182': attribute type 1 has an invalid length. [ 936.428500][T31240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6182'. [ 937.169509][T31262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6187'. [ 938.190008][T31267] bridge0: port 1(() entered disabled state [ 938.261576][T31301] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 938.407648][T31307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6193'. [ 938.461134][T31301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6193'. [ 938.489833][T31301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6193'. [ 938.884204][T31267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.933613][T31267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.676187][T31267] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 939.911905][ T9228] hsr_slave_0: left promiscuous mode [ 939.939955][ T9228] hsr_slave_1: left promiscuous mode [ 939.968195][ T9228] veth0_macvtap: left promiscuous mode [ 939.987622][ T9228] veth1_vlan: left promiscuous mode [ 940.002416][ T9228] veth0_vlan: left promiscuous mode [ 940.360818][T31349] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6198'. [ 940.539186][T31357] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 941.007816][T19867] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.036049][T19867] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.162421][T19867] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.172340][T31370] openvswitch: netlink: Multiple metadata blocks provided [ 941.192020][T19867] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.261368][T30945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 941.278971][T31370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6199'. [ 941.390985][T30945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 941.403451][T30945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 941.462326][T30945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 941.592289][T30945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 941.653587][T30945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 941.704491][T30945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 941.741601][T30945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 941.926563][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 941.945510][T31406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6206'. [ 942.117104][T30945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.256304][ T9228] IPVS: stop unused estimator thread 0... [ 942.341563][T30945] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.384225][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.391518][ T3293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.521190][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.528498][ T3293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.204444][T31465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6217'. [ 944.242630][T30945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.442316][T30945] veth0_vlan: entered promiscuous mode [ 944.491501][T30945] veth1_vlan: entered promiscuous mode [ 944.598521][T30945] veth0_macvtap: entered promiscuous mode [ 944.630649][T30945] veth1_macvtap: entered promiscuous mode [ 944.708137][T31516] tipc: Started in network mode [ 944.721811][T31516] tipc: Node identity 960f90a61473, cluster identity 4711 [ 944.750275][T31516] tipc: Enabled bearer , priority 0 [ 944.781218][T31523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 944.803252][T30945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.842774][T31516] syzkaller0: entered promiscuous mode [ 944.875306][T31516] syzkaller0: entered allmulticast mode [ 944.969153][T30945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.026582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.036729][T31523] tipc: Resetting bearer [ 945.043420][T31523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.101894][ T9228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.166343][ T9228] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.176496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.187308][ T9228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.242882][ T9228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.326020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.329907][T31542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6229'. [ 945.476485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.533664][T31514] tipc: Resetting bearer [ 945.621248][T31514] tipc: Disabling bearer [ 945.756211][ T3293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.782039][ T3293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.891267][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.913304][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.322183][T31578] netlink: 'syz.0.6235': attribute type 1 has an invalid length. [ 946.507944][T31578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 946.581325][T31597] x_tables: duplicate underflow at hook 3 [ 946.730157][T31587] bond1: (slave veth3): Enslaving as an active interface with a down link [ 946.809607][T31610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6238'. [ 946.841764][T31593] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 946.867027][T31593] bond1: (slave batadv1): making interface the new active one [ 946.891515][T31593] batadv1: entered promiscuous mode [ 946.904482][T31593] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 946.979628][T31578] bond1 (unregistering): (slave veth3): Releasing active interface [ 947.018103][T31578] bond1 (unregistering): (slave batadv1): Releasing active interface [ 947.088914][T31578] bond1 (unregistering): Released all slaves [ 947.648177][T31625] ±ÿÏ\kwÛTóÙ: renamed from lo (while UP) [ 947.691598][T31621] tipc: Enabled bearer , priority 0 [ 947.715246][T31622] syzkaller0: entered promiscuous mode [ 947.742464][T31622] syzkaller0: entered allmulticast mode [ 947.798421][T31628] tipc: Resetting bearer [ 947.837180][T31620] tipc: Resetting bearer [ 947.935424][T31620] tipc: Disabling bearer [ 948.004138][T31625] syzkaller1: entered promiscuous mode [ 948.029079][T31625] syzkaller1: entered allmulticast mode [ 948.083478][T31639] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6245'. [ 948.317253][T31649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6248'. [ 948.500257][T31659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6250'. [ 948.834449][T31679] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6253'. [ 949.283129][T31699] netlink: 'syz.1.6260': attribute type 1 has an invalid length. [ 949.351946][T31699] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 949.360764][T31707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6261'. [ 949.588344][T31716] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6264'. [ 949.623910][T31716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6264'. [ 949.635084][T31719] syzkaller0: entered promiscuous mode [ 949.642606][T31719] syzkaller0: entered allmulticast mode [ 949.675211][T31719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6263'. [ 949.708708][T31722] syzkaller0: entered promiscuous mode [ 949.729662][T31722] syzkaller0: entered allmulticast mode [ 949.870746][T31729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6267'. [ 950.149132][T31741] netlink: 'syz.1.6268': attribute type 2 has an invalid length. [ 950.169981][T31741] netlink: 'syz.1.6268': attribute type 2 has an invalid length. [ 950.204470][T31738] xt_CT: No such helper "netbios-ns" [ 950.521266][T31758] bond0: entered promiscuous mode [ 950.542125][T31758] bond0: left promiscuous mode [ 951.318667][T31776] tipc: Resetting bearer [ 951.616580][T31812] netlink: 'syz.3.6287': attribute type 1 has an invalid length. [ 951.943447][T31827] netlink: 'syz.3.6289': attribute type 1 has an invalid length. [ 951.993324][T31827] netlink: 'syz.3.6289': attribute type 5 has an invalid length. [ 952.035233][T31827] macvtap1: entered allmulticast mode [ 952.122164][T31837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.266867][T31844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 952.320873][T31843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 952.780516][T31865] __nla_validate_parse: 4 callbacks suppressed [ 952.780541][T31865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6298'. [ 952.827679][T31865] netlink: 'syz.2.6298': attribute type 14 has an invalid length. [ 952.860599][T31865] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6298'. [ 952.884287][T31863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6297'. [ 952.933037][T31863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6297'. [ 952.957035][T31863] netlink: 'syz.0.6297': attribute type 11 has an invalid length. [ 953.059933][ T138] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.069402][T31863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6297'. [ 953.098317][T31863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6297'. [ 953.098388][ T138] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.133494][ T138] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.147403][T31863] netlink: 'syz.0.6297': attribute type 11 has an invalid length. [ 953.206518][ T1319] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.218685][T31877] nbd: must specify an index to disconnect [ 953.505689][T31885] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6302'. [ 953.528604][T31883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.691822][T31891] x_tables: duplicate underflow at hook 1 [ 953.791415][T31903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6306'. [ 953.852030][T31907] Cannot find set identified by id 0 to match [ 954.000193][T31914] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6308'. [ 954.081547][T31923] netlink: 'syz.0.6311': attribute type 1 has an invalid length. [ 954.143130][T31930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6311'. [ 954.215175][T31913] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 954.790754][T31923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 954.852824][T31930] bond1: entered promiscuous mode [ 954.861429][T31930] bond1: entered allmulticast mode [ 954.894911][T31932] bond1: (slave dummy0): making interface the new active one [ 954.903784][T31932] dummy0: entered promiscuous mode [ 954.912281][T31932] dummy0: entered allmulticast mode [ 954.918904][T31932] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 954.943329][T31935] bridge0: entered promiscuous mode [ 954.949138][T31935] bridge0: entered allmulticast mode [ 954.972680][T31942] syzkaller0: entered promiscuous mode [ 954.985875][T31942] syzkaller0: entered allmulticast mode [ 955.127771][T31957] netlink: 'syz.1.6315': attribute type 39 has an invalid length. [ 955.827928][T31991] erspan0: entered promiscuous mode [ 955.842068][T31991] erspan0: entered allmulticast mode [ 956.108799][T32005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.021216][T32028] gretap0: entered promiscuous mode [ 957.198139][T32028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.220882][T32028] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.260769][T32028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.275268][T32047] xt_l2tp: wrong L2TP version: 0 [ 957.290101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 957.340732][T32028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.352404][T32028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.377520][T32028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 957.388821][T32028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 957.404001][T32028] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 957.477593][T32039] bridge2: entered promiscuous mode [ 957.483851][T32039] bridge2: entered allmulticast mode [ 957.498901][T32039] team0: Port device bridge2 added [ 957.519292][T32042] bridge0: port 3(team0) entered blocking state [ 957.530746][T32042] bridge0: port 3(team0) entered disabled state [ 957.538420][T32042] team0: entered allmulticast mode [ 957.543615][T32042] team_slave_0: entered allmulticast mode [ 957.550222][T32042] team_slave_1: entered allmulticast mode [ 957.561427][T32042] team0: entered promiscuous mode [ 957.567949][T32042] team_slave_0: entered promiscuous mode [ 957.573808][T32042] team_slave_1: entered promiscuous mode [ 957.581185][T32042] bridge0: port 3(team0) entered blocking state [ 957.587769][T32042] bridge0: port 3(team0) entered forwarding state [ 957.607098][ T9228] bridge0: port 1(() entered blocking state [ 957.613098][ T9228] bridge0: port 1(() entered forwarding state [ 957.625844][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.633105][ T9228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.878613][T32067] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 957.909754][ T3293] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.004690][T32073] bridge_slave_0: invalid flags given to default FDB implementation [ 958.258587][T32086] __nla_validate_parse: 9 callbacks suppressed [ 958.258610][T32086] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6353'. [ 958.310477][T32089] Cannot find set identified by id 65534 to match [ 958.479535][T32099] netlink: 'syz.0.6356': attribute type 210 has an invalid length. [ 959.244484][T32129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6366'. [ 959.319949][T32138] syzkaller0: entered promiscuous mode [ 959.336425][T32138] syzkaller0: entered allmulticast mode [ 959.378587][T32145] syzkaller0: entered promiscuous mode [ 959.385565][T32145] syzkaller0: entered allmulticast mode [ 959.402905][T32139] tipc: Started in network mode [ 959.409395][T32139] tipc: Node identity ce7236276da3, cluster identity 4711 [ 959.417881][T32139] tipc: Enabled bearer , priority 0 [ 959.426701][T32151] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 959.454441][T32145] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 959.504161][T32139] tipc: Resetting bearer [ 959.519615][T32138] tipc: Started in network mode [ 959.532687][T32138] tipc: Node identity b2509c39f8d4, cluster identity 4711 [ 959.545131][T32138] tipc: Enabled bearer , priority 0 [ 959.575230][T32137] tipc: Resetting bearer [ 959.602984][T32137] tipc: Disabling bearer [ 959.619864][T32136] tipc: Resetting bearer [ 959.650378][T32136] tipc: Disabling bearer [ 959.662054][T32161] netlink: 'syz.1.6374': attribute type 1 has an invalid length. [ 959.670809][T32160] netlink: 'syz.1.6374': attribute type 1 has an invalid length. [ 959.763869][T32161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 959.845769][T32172] sctp: [Deprecated]: syz.3.6378 (pid 32172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 959.845769][T32172] Use struct sctp_sack_info instead [ 959.876474][T32175] sctp: [Deprecated]: syz.3.6378 (pid 32175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 959.876474][T32175] Use struct sctp_sack_info instead [ 959.914080][T32173] xt_hashlimit: size too large, truncated to 1048576 [ 960.212836][T32193] lo speed is unknown, defaulting to 1000 [ 960.237934][T32200] lo speed is unknown, defaulting to 1000 [ 960.257366][T32193] lo speed is unknown, defaulting to 1000 [ 960.275414][T32200] lo speed is unknown, defaulting to 1000 [ 960.290334][T32193] lo speed is unknown, defaulting to 1000 [ 960.315643][T32200] lo speed is unknown, defaulting to 1000 [ 960.352832][T32200] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 960.413527][T32200] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 960.473063][T32200] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 960.475561][T32206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 960.521272][T32208] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6385'. [ 960.564693][T32208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6385'. [ 960.590772][T32200] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 960.637203][T32208] veth1_macvtap: left promiscuous mode [ 960.640879][T32211] openvswitch: netlink: Tunnel attr 91 out of range max 16 [ 960.836257][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 960.852514][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 960.864522][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 960.873338][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 960.895643][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 960.918161][T32200] lo speed is unknown, defaulting to 1000 [ 961.043690][T32200] lo speed is unknown, defaulting to 1000 [ 961.116391][T32200] lo speed is unknown, defaulting to 1000 [ 961.155662][T32200] lo speed is unknown, defaulting to 1000 [ 961.201837][T32200] lo speed is unknown, defaulting to 1000 [ 961.232875][T32200] lo speed is unknown, defaulting to 1000 [ 961.328729][T32239] macsec1: entered promiscuous mode [ 961.340302][T32239] bridge0: entered promiscuous mode [ 961.362214][T32200] lo speed is unknown, defaulting to 1000 [ 961.511485][T32246] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6395'. [ 961.623317][T32236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 961.657596][T32236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.698962][T32200] lo speed is unknown, defaulting to 1000 [ 961.738835][T32200] lo speed is unknown, defaulting to 1000 [ 961.762709][T32193] infiniband sz1: set active [ 961.786185][T32193] infiniband sz1: added lo [ 961.800827][T19839] lo speed is unknown, defaulting to 1000 [ 961.847568][T32193] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 961.905979][T32193] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 961.966524][T32236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 961.983808][T32193] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 961.994184][T32236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.073543][T32193] RDS/IB: sz1: added [ 962.079166][T32193] smc: adding ib device sz1 with port count 1 [ 962.085665][T32193] smc: ib device sz1 port 1 has no pnetid [ 962.095175][T25927] lo speed is unknown, defaulting to 1000 [ 962.103280][T32193] lo speed is unknown, defaulting to 1000 [ 962.175608][T32236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 962.186986][T32236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.240314][T32214] xfrm0 speed is unknown, defaulting to 1000 [ 962.460421][T32271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6400'. [ 962.491330][T32236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 962.520950][T32236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.823895][T32279] syzkaller0: entered promiscuous mode [ 962.830334][T32279] syzkaller0: entered allmulticast mode [ 962.838920][T32193] lo speed is unknown, defaulting to 1000 [ 962.982920][ T5634] Bluetooth: hci3: command tx timeout [ 965.047589][ T5634] Bluetooth: hci3: command tx timeout [ 966.622904][T32214] lo speed is unknown, defaulting to 1000 [ 966.664419][T19867] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.689909][T19867] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.721956][T32297] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6406'. [ 966.809282][T19867] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.830916][T19867] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.915982][T19867] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.937698][T19867] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.001070][T19867] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.011977][T19867] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.022847][T32302] tipc: Enabled bearer , priority 0 [ 967.031310][T32214] lo speed is unknown, defaulting to 1000 [ 967.032172][T32193] lo speed is unknown, defaulting to 1000 [ 967.043641][T32304] netlink: 'syz.3.6409': attribute type 1 has an invalid length. [ 967.054604][T32304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6409'. [ 967.117796][T32302] syzkaller0: entered promiscuous mode [ 967.126793][T32302] syzkaller0: entered allmulticast mode [ 967.136227][ T5634] Bluetooth: hci3: command tx timeout [ 967.136985][T32305] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 967.277808][T32302] tipc: Resetting bearer [ 967.323132][T32301] tipc: Resetting bearer [ 967.384922][T32301] tipc: Disabling bearer [ 967.408582][T32193] lo speed is unknown, defaulting to 1000 [ 967.417912][T32312] netlink: 'syz.0.6411': attribute type 1 has an invalid length. [ 967.450554][T32312] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6411'. [ 967.605676][T32327] sctp: [Deprecated]: syz.4.6413 (pid 32327) Use of int in maxseg socket option. [ 967.605676][T32327] Use struct sctp_assoc_value instead [ 967.645508][T32326] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 967.712340][T32329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6415'. [ 968.006763][T32193] lo speed is unknown, defaulting to 1000 [ 968.296642][T32214] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.313240][T32214] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.341261][T32214] bridge_slave_0: entered allmulticast mode [ 968.350645][T32214] bridge_slave_0: entered promiscuous mode [ 968.361088][T32214] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.368564][T32214] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.379677][T32214] bridge_slave_1: entered allmulticast mode [ 968.395010][T32214] bridge_slave_1: entered promiscuous mode [ 968.492313][T32193] lo speed is unknown, defaulting to 1000 [ 968.503794][T32214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.530568][T32214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.580530][T32359] team0: Device vxcan1 is of different type [ 968.632833][T32214] team0: Port device team_slave_0 added [ 968.649035][T32214] team0: Port device team_slave_1 added [ 968.733520][T32214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.756422][T32214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.803790][T32214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.832652][T32214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.840546][T32214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.875667][T32214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.896703][T32193] lo speed is unknown, defaulting to 1000 [ 969.092846][T32214] hsr_slave_0: entered promiscuous mode [ 969.108099][T32214] hsr_slave_1: entered promiscuous mode [ 969.123200][T32214] debugfs: 'hsr0' already exists in 'hsr' [ 969.136516][T32214] Cannot create hsr debugfs directory [ 969.207462][ T5634] Bluetooth: hci3: command tx timeout [ 969.472144][T32377] veth1_to_bridge: mtu less than device minimum [ 969.501058][T32193] lo speed is unknown, defaulting to 1000 [ 969.650961][T32383] netlink: 'syz.3.6432': attribute type 1 has an invalid length. [ 969.665404][T32214] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.677687][T32383] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6432'. [ 969.693306][T32214] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 969.704819][T32214] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.991800][T32214] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.012322][T32214] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 970.023939][T32214] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.049989][T32193] lo speed is unknown, defaulting to 1000 [ 970.231766][T32214] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.233836][T32405] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6437'. [ 970.253287][T32214] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 970.285993][T32214] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.342916][T32404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6437'. [ 970.461646][T32214] netdevsim netdevsim2 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.482331][T32214] netdevsim netdevsim2 €Â (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 970.498842][T32214] netdevsim netdevsim2 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.739940][T32423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6440'. [ 970.761721][T32423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6440'. [ 970.872513][T32423] netlink: 'syz.4.6440': attribute type 2 has an invalid length. [ 970.946163][T32427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6442'. [ 971.151233][T32214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 971.162146][T32442] openvswitch: netlink: Tunnel attr 91 out of range max 16 [ 971.164867][T32214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 971.210181][T32445] bridge0: port 4(vlan2) entered blocking state [ 971.217962][T32445] bridge0: port 4(vlan2) entered disabled state [ 971.224636][T32445] vlan2: entered allmulticast mode [ 971.230800][T32445] geneve0: entered allmulticast mode [ 971.244387][T32445] vlan2: entered promiscuous mode [ 971.253795][T32445] geneve0: entered promiscuous mode [ 971.270221][T32214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 971.280158][T32214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 971.289116][T32447] netlink: 'syz.3.6448': attribute type 6 has an invalid length. [ 971.308967][T32214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 971.326196][T32214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 971.345062][T32214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 971.359347][T32214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 971.379129][T32449] syzkaller0: entered promiscuous mode [ 971.383481][T32453] netlink: 'syz.3.6449': attribute type 1 has an invalid length. [ 971.387296][T32449] syzkaller0: entered allmulticast mode [ 971.419755][T32453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 971.479352][T32453] bond2: (slave veth3): Enslaving as an active interface with a down link [ 971.518342][ T7950] IPVS: starting estimator thread 0... [ 971.607255][T32463] IPVS: using max 28 ests per chain, 67200 per kthread [ 972.148329][T32484] __nla_validate_parse: 4 callbacks suppressed [ 972.148345][T32484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6454'. [ 972.177371][T32486] netlink: 'syz.3.6455': attribute type 1 has an invalid length. [ 973.134437][T32486] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 973.167516][T32487] gretap1: entered allmulticast mode [ 973.217253][T32489] gretap1: entered allmulticast mode [ 973.287636][ T5634] Bluetooth: hci3: command tx timeout [ 973.464624][T32518] bond2: Unable to set down delay as MII monitoring is disabled [ 973.475009][T32518] bond2 (unregistering): Released all slaves [ 973.589700][T32214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.624355][T32529] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 973.692803][T32531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6462'. [ 973.696663][T32214] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.725762][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.733307][ T9228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.753641][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.760967][ T3293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.884056][T32537] virt_wifi0 speed is unknown, defaulting to 1000 [ 973.916064][T32537] virt_wifi0 speed is unknown, defaulting to 1000 [ 973.938958][T32537] virt_wifi0 speed is unknown, defaulting to 1000 [ 973.978436][T32537] smbdirect: ib_dev[hyz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 974.069304][T32537] smbdirect: ib_dev[hyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 974.100016][T32542] netlink: 766 bytes leftover after parsing attributes in process `syz.0.6466'. [ 974.162612][T32537] smbdirect: ib_dev[hyz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 974.286478][T32560] Cannot find add_set index 0 as target [ 974.312200][T32537] infiniband hyz0: RDMA CMA: cma_listen_on_dev, error -98 [ 974.388833][T32537] virt_wifi0 speed is unknown, defaulting to 1000 [ 974.419758][T32537] virt_wifi0 speed is unknown, defaulting to 1000 [ 974.459227][T32537] virt_wifi0 speed is unknown, defaulting to 1000 [ 974.520644][T32537] virt_wifi0 speed is unknown, defaulting to 1000 [ 974.543505][T32537] virt_wifi0 speed is unknown, defaulting to 1000 [ 974.559173][T32570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6471'. [ 974.577660][T32570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6471'. [ 974.592685][T32537] virt_wifi0 speed is unknown, defaulting to 1000 [ 974.629345][T32537] virt_wifi0 speed is unknown, defaulting to 1000 [ 974.706112][T32537] virt_wifi0 speed is unknown, defaulting to 1000 [ 974.739713][T32537] virt_wifi0 speed is unknown, defaulting to 1000 [ 974.748252][T32574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6472'. [ 974.784524][T32537] virt_wifi0 speed is unknown, defaulting to 1000 [ 974.981660][T32582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6474'. [ 974.988841][T32580] Cannot find add_set index 2 as target [ 975.077415][T32588] netlink: 'syz.4.6475': attribute type 4 has an invalid length. [ 975.127371][T32214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.153097][T32588] netlink: 'syz.4.6475': attribute type 4 has an invalid length. [ 975.305005][T32214] veth0_vlan: entered promiscuous mode [ 975.392292][T32214] veth1_vlan: entered promiscuous mode [ 975.461456][T32604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 975.515502][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 975.525683][T32605] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6478'. [ 975.558576][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 975.566256][T32605] NCSI netlink: No device for ifindex 566712438 [ 975.576482][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 975.594899][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 975.637023][T32214] veth0_macvtap: entered promiscuous mode [ 975.637998][T32607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6480'. [ 975.649537][T32214] veth1_macvtap: entered promiscuous mode [ 975.689423][T32214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.692405][T32607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6480'. [ 975.733418][T32214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.800375][T19863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.838508][T19863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.864871][T19863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.884562][T19863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.194118][T19863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.227187][T19863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.329038][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.340998][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.021124][T32655] netlink: 'syz.1.6492': attribute type 16 has an invalid length. [ 977.484765][T32660] syzkaller0: entered promiscuous mode [ 977.508574][T32660] syzkaller0: entered allmulticast mode [ 977.565180][T32660] TC_ACT_REPEAT abuse ? [ 978.052242][T32678] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.083082][T32678] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.256212][T32678] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.266281][T32678] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.374368][T32678] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.417535][T32678] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.455223][T32692] netlink: 'syz.1.6501': attribute type 1 has an invalid length. [ 978.521786][T32699] __nla_validate_parse: 4 callbacks suppressed [ 978.521807][T32699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6502'. [ 978.543966][T32692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 978.568697][T32678] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.584479][T32678] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.614951][T32699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6502'. [ 978.632303][T32694] bond2: entered promiscuous mode [ 978.642046][T32694] bond2: entered allmulticast mode [ 978.810108][ T1102] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.820495][ T1102] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.941709][ T3293] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.986392][ T3293] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.151819][ T1102] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 979.178012][ T1102] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.290327][T32723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6505'. [ 979.303448][ T1102] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 979.334437][ T1102] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.358299][T32718] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6505'. [ 979.390033][T32723] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 979.433086][T32723] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 979.620463][T32728] syzkaller0: entered promiscuous mode [ 979.846893][T32734] netlink: 'syz.4.6508': attribute type 1 has an invalid length. [ 979.868027][T32734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6508'. [ 980.364594][T32766] netlink: 'syz.4.6515': attribute type 13 has an invalid length. [ 980.637617][ T308] tipc: Enabled bearer , priority 0 [ 980.680000][ T308] tipc: Resetting bearer [ 980.786733][ T307] tipc: Disabling bearer [ 981.110138][ T328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6522'. [ 981.161561][ T328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6522'. [ 981.729608][ T343] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6526'. [ 981.760718][ T343] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6526'. [ 981.787505][ T346] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.6527'. [ 982.082956][ T359] netlink: 'syz.4.6530': attribute type 1 has an invalid length. [ 983.187862][ T406] xt_hashlimit: size too large, truncated to 1048576 [ 983.335033][ T411] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 983.431467][ T411] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 983.522607][ T414] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 983.529923][T32642] Set syz1 is full, maxelem 65536 reached [ 983.562237][ T414] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 983.764063][ T417] netlink: 'syz.3.6547': attribute type 10 has an invalid length. [ 983.794933][ T417] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.831972][ T417] bond0: (slave team0): Enslaving as an active interface with an up link [ 983.914003][ T419] __nla_validate_parse: 6 callbacks suppressed [ 983.914024][ T419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6548'. [ 983.945096][ T419] veth1_to_hsr: entered promiscuous mode [ 983.952283][ T419] veth1_to_hsr: entered allmulticast mode [ 983.965307][ T419] veth1_to_hsr: left promiscuous mode [ 983.971125][ T419] veth1_to_hsr: left allmulticast mode [ 984.764092][ T469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6557'. [ 985.940348][ T497] Bluetooth: MGMT ver 1.23 [ 986.032666][ T497] netlink: 'syz.1.6567': attribute type 25 has an invalid length. [ 986.104456][ T500] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6570'. [ 986.141146][ T500] netlink: 'syz.4.6570': attribute type 10 has an invalid length. [ 986.180643][ T500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 986.206958][ T500] team0: Port device netdevsim1 added [ 986.224361][ T508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6573'. [ 986.242909][ T508] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6573'. [ 986.334207][ T504] openvswitch: netlink: Message has 4 unknown bytes. [ 986.350905][ T504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 986.693372][ T528] bond3: entered promiscuous mode [ 986.713765][ T528] 8021q: adding VLAN 0 to HW filter on device bond3 [ 986.741218][ T529] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 986.754622][ T533] gretap0: entered promiscuous mode [ 986.852839][ T555] netlink: 308 bytes leftover after parsing attributes in process `syz.3.6586'. [ 986.864560][ T555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6586'. [ 986.871100][ T550] pim6reg: entered allmulticast mode [ 986.874768][ T555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6586'. [ 987.549767][ T587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6593'. [ 987.589315][ T587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6593'. [ 987.665656][ T594] netlink: 'syz.3.6595': attribute type 1 has an invalid length. [ 987.670319][ T597] netlink: 'syz.2.6596': attribute type 32 has an invalid length. [ 987.733771][ T597] bond1: option coupled_control: invalid value (255) [ 987.749633][ T597] bond1 (unregistering): Released all slaves [ 987.829396][ T594] bond4: entered promiscuous mode [ 987.835200][ T594] 8021q: adding VLAN 0 to HW filter on device bond4 [ 987.879721][ T599] 8021q: adding VLAN 0 to HW filter on device bond4 [ 987.904917][ T599] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 987.915428][ T599] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 987.950623][ T599] bond4: (slave xfrm1): making interface the new active one [ 987.959534][ T599] xfrm1: entered promiscuous mode [ 987.968758][ T599] xfrm1: left promiscuous mode [ 987.984312][ T606] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 988.064713][ T599] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 988.082146][ T599] bond4: (slave xfrm1): making interface the new active one [ 988.147737][ T609] netlink: 'syz.4.6599': attribute type 2 has an invalid length. [ 988.160956][ T604] netlink: 'syz.2.6598': attribute type 6 has an invalid length. [ 988.202099][ T599] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 988.219149][ T599] bond4: (slave xfrm1): making interface the new active one [ 988.302665][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.323571][ T604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.363121][ T599] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 988.387158][ T599] bond4: (slave xfrm1): making interface the new active one [ 988.491379][ T599] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 988.530683][ T599] bond4: (slave xfrm1): making interface the new active one [ 988.627551][ T628] netlink: 'syz.2.6603': attribute type 2 has an invalid length. [ 989.145417][ T660] __nla_validate_parse: 10 callbacks suppressed [ 989.145440][ T660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6614'. [ 989.231943][ T672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6614'. [ 989.334947][T19841] hid-generic 0005:0C45:1030.0003: unknown main item tag 0x0 [ 989.404075][T19841] hid-generic 0005:0C45:1030.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 989.615367][ T681] netlink: 'syz.4.6616': attribute type 1 has an invalid length. [ 989.656906][ T680] netlink: 'syz.4.6616': attribute type 1 has an invalid length. [ 989.769300][ T687] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6618'. [ 989.994489][ T701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6624'. [ 990.031136][ T701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6624'. [ 990.052813][ T715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6625'. [ 990.065080][ T701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6624'. [ 990.065387][ T716] netlink: 'syz.3.6624': attribute type 11 has an invalid length. [ 990.099478][ T701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6624'. [ 990.149096][ T720] bond1: (slave dummy0): Releasing active interface [ 990.163683][ T716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6624'. [ 990.166621][ T720] dummy0: left promiscuous mode [ 990.212842][ T720] dummy0: left allmulticast mode [ 990.317843][ T729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6624'. [ 991.039269][ T764] xfrm0 speed is unknown, defaulting to 1000 [ 991.132623][ T770] netlink: 'syz.0.6637': attribute type 1 has an invalid length. [ 991.156550][ T770] netlink: 'syz.0.6637': attribute type 4 has an invalid length. [ 991.256395][ T773] netlink: 'syz.0.6637': attribute type 4 has an invalid length. [ 991.297763][ T773] netlink: 'syz.0.6637': attribute type 4 has an invalid length. [ 991.660251][ T781] vlan0: entered promiscuous mode [ 991.703972][T19867] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.725706][T19867] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.748816][ T9226] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.776993][ T9226] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.902902][ T764] lo speed is unknown, defaulting to 1000 [ 991.927370][ T790] openvswitch: netlink: Flow key attr not present in new flow. [ 992.499067][ T764] lo speed is unknown, defaulting to 1000 [ 992.510354][ T764] virt_wifi0 speed is unknown, defaulting to 1000 [ 993.150808][ T730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 993.379611][ T836] C: renamed from veth1_to_team (while UP) [ 993.749054][ T848] bridge3: entered promiscuous mode [ 993.758828][ T848] bridge3: entered allmulticast mode [ 993.780260][ T848] team0: Port device bridge3 added [ 993.785736][ T851] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 994.395333][ T878] __nla_validate_parse: 18 callbacks suppressed [ 994.395357][ T878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6669'. [ 994.508042][ T884] syzkaller0: entered promiscuous mode [ 994.527248][ T884] syzkaller0: entered allmulticast mode [ 994.829233][ T899] ip6tnl1: entered allmulticast mode [ 994.986933][ T904] netlink: 'syz.3.6677': attribute type 15 has an invalid length. [ 995.239675][ T896] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.247105][ T896] bridge0: port 1(() entered disabled state [ 995.369398][ T896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.382895][ T896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.525921][T25927] lo speed is unknown, defaulting to 1000 [ 995.533668][T25927] syz2: Port: 1 Link DOWN [ 995.743073][ T919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6680'. [ 995.772541][ T919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6680'. [ 995.837388][ T926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 995.999994][ T940] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6684'. [ 996.011806][ T940] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6684'. [ 996.366502][ T958] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6689'. [ 996.378239][ T958] netlink: 'syz.2.6689': attribute type 4 has an invalid length. [ 996.379403][ T943] syzkaller0: entered promiscuous mode [ 996.392005][ T943] syzkaller0: entered allmulticast mode [ 996.422684][ T958] netlink: 'syz.2.6689': attribute type 4 has an invalid length. [ 996.451706][ T958] x_tables: duplicate underflow at hook 1 [ 996.786055][ T974] syzkaller0: entered promiscuous mode [ 996.791772][ T974] syzkaller0: entered allmulticast mode [ 997.610941][ T914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.809283][ T1015] netlink: zone id is out of range [ 997.814582][ T1015] netlink: zone id is out of range [ 997.820703][ T1015] netlink: zone id is out of range [ 997.825995][ T1015] netlink: zone id is out of range [ 997.831441][ T1015] netlink: zone id is out of range [ 997.838266][ T1015] netlink: zone id is out of range [ 997.845432][ T1015] netlink: zone id is out of range [ 997.926330][T19833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.935317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.617464][ T967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 999.661710][ T1019] netlink: 'syz.0.6702': attribute type 2 has an invalid length. [ 999.913057][ T1028] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 999.991721][ T1031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6707'. [ 1000.327999][T24486] Bluetooth: hci4: command 0x0406 tx timeout [ 1001.899810][ T1031] team0: entered promiscuous mode [ 1001.905030][ T1031] team_slave_0: entered promiscuous mode [ 1001.911993][ T1031] team_slave_1: entered promiscuous mode [ 1002.310746][ T1086] xfrm0 speed is unknown, defaulting to 1000 [ 1002.442246][ T1100] netlink: 'syz.2.6715': attribute type 1 has an invalid length. [ 1002.472802][ T1100] netlink: 'syz.2.6715': attribute type 1 has an invalid length. [ 1002.559148][ T1105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6719'. [ 1002.770903][ T1086] lo speed is unknown, defaulting to 1000 [ 1002.806485][ T914] net_ratelimit: 7 callbacks suppressed [ 1002.806508][ T914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.086381][ T1122] block nbd0: must specify backend [ 1003.138310][ T1122] tipc: MTU too low for tipc bearer [ 1003.212936][T19832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.299902][ T1086] lo speed is unknown, defaulting to 1000 [ 1003.335286][ T1086] virt_wifi0 speed is unknown, defaulting to 1000 [ 1003.343981][ T1131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6728'. [ 1003.519187][ T1131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6728'. [ 1003.549957][ T1143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6732'. [ 1003.658160][ T1154] netlink: 'syz.2.6735': attribute type 1 has an invalid length. [ 1003.824322][ T1154] netlink: 'syz.2.6735': attribute type 10 has an invalid length. [ 1003.848158][ T7950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.848323][ T1165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1003.859065][ T1154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6735'. [ 1003.896802][ T1154] dummy0: entered promiscuous mode [ 1004.029886][ T1167] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6740'. [ 1004.084799][ T1170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6741'. [ 1004.522773][ T1182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6744'. [ 1004.814000][ T1188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6746'. [ 1004.903057][T25922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.025954][ T1201] netlink: 'syz.4.6750': attribute type 27 has an invalid length. [ 1005.069234][ T1203] netlink: 'syz.3.6751': attribute type 1 has an invalid length. [ 1005.156515][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.185648][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.196953][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.284725][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.305221][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.333969][ T1215] __nla_validate_parse: 1 callbacks suppressed [ 1005.333990][ T1215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6753'. [ 1005.480373][ T1208] bond5: (slave bridge4): making interface the new active one [ 1005.489731][ T1208] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 1005.796641][ T1237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6758'. [ 1005.874312][ T1251] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6760'. [ 1005.891800][ T1250] netlink: 'syz.0.6759': attribute type 1 has an invalid length. [ 1006.150742][ T1258] gretap1: entered allmulticast mode [ 1006.170629][ T1258] bond2: (slave gretap1): making interface the new active one [ 1006.185769][ T1258] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1006.714714][T19833] IPVS: starting estimator thread 0... [ 1006.727679][ T1295] netlink: 'syz.1.6769': attribute type 1 has an invalid length. [ 1006.835987][ T1299] IPVS: using max 27 ests per chain, 64800 per kthread [ 1007.847664][T19839] net_ratelimit: 4 callbacks suppressed [ 1007.847696][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.866422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.006731][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.260924][ T1349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6779'. [ 1009.056298][T25926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.287330][T19832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.686497][ T1297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1009.716215][ T1342] netlink: 'syz.4.6778': attribute type 1 has an invalid length. [ 1009.742929][ T1342] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6778'. [ 1010.049716][ T1356] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6782'. [ 1010.086456][T25926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.162276][ T1374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6780'. [ 1010.665733][ T1401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6790'. [ 1010.742239][ T1392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.750172][ T1392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.880748][ T1392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.898910][ T1392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1011.127022][T25927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.195601][ T1392] macvtap1: left allmulticast mode [ 1011.354583][ T1392] bond3: left promiscuous mode [ 1011.361671][ T1392] bridge3: left promiscuous mode [ 1011.372135][ T1392] bridge3: left allmulticast mode [ 1011.379445][ T1392] ip6tnl1: left allmulticast mode [ 1011.417670][ T1411] tipc: Enabled bearer , priority 0 [ 1011.582079][T19868] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.628225][ T1407] tipc: Disabling bearer [ 1011.669400][T19868] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.703263][T19868] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.724746][T19868] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.140397][ T1453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6800'. [ 1012.188657][ T1453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6800'. [ 1012.208126][T25922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.329265][T19833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.288060][T25927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.948368][ T1501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6813'. [ 1014.090203][ T1505] syzkaller0: entered promiscuous mode [ 1014.096879][ T1505] syzkaller0: entered allmulticast mode [ 1014.207126][ T1513] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1014.252235][ T1517] block nbd0: must specify backend [ 1014.277849][ T1513] bond3 (unregistering): Released all slaves [ 1014.305659][ T1523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6820'. [ 1014.315656][ T1522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6820'. [ 1014.355895][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.380399][T19832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.388619][T19832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.414710][T25922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.453819][T19832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.463018][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.411018][T19833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.488669][T25922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.549141][ T1543] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1018.620421][ T1546] netlink: 'syz.1.6825': attribute type 4 has an invalid length. [ 1018.640272][ T1546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6825'. [ 1018.677234][ T1548] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6827'. [ 1018.686582][ T1557] netlink: 'syz.1.6825': attribute type 4 has an invalid length. [ 1018.712184][ T1557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6825'. [ 1018.732694][T19833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.741999][T19832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.748050][ T1560] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1018.770998][ T1560] bond1 (unregistering): Released all slaves [ 1018.952222][ T1566] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6829'. [ 1019.106205][ T1573] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6831'. [ 1019.256673][ T1578] syzkaller1: entered promiscuous mode [ 1019.280399][ T1578] syzkaller1: entered allmulticast mode [ 1019.457874][ T1594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6836'. [ 1019.535702][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.545970][ T1595] netlink: 'syz.2.6836': attribute type 1 has an invalid length. [ 1019.594876][ T1594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6836'. [ 1019.690415][ T1595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1019.715765][ T1594] bond1: (slave geneve2): making interface the new active one [ 1019.732866][ T1594] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1019.745127][ T1604] netlink: 'syz.4.6840': attribute type 1 has an invalid length. [ 1019.753543][ T1604] netlink: 'syz.4.6840': attribute type 4 has an invalid length. [ 1019.762234][ T1604] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6840'. [ 1019.774774][ T1604] netlink: 'syz.4.6840': attribute type 46 has an invalid length. [ 1019.942531][ T1614] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1019.952041][ T1617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6842'. [ 1020.153694][ T1619] xfrm0 speed is unknown, defaulting to 1000 [ 1020.308569][ T1635] tipc: Enabled bearer , priority 0 [ 1020.327562][ T1634] syzkaller0: entered promiscuous mode [ 1020.339134][ T1634] syzkaller0: entered allmulticast mode [ 1020.357522][ T1628] tipc: Resetting bearer [ 1020.404097][ T1628] tipc: Disabling bearer [ 1020.426908][ T1634] tipc: Started in network mode [ 1020.437677][ T1634] tipc: Node identity 12bb530216f1, cluster identity 4711 [ 1020.459212][ T1634] tipc: Enabled bearer , priority 0 [ 1020.494455][ T1633] tipc: Resetting bearer [ 1020.574923][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.587102][ T1633] tipc: Disabling bearer [ 1020.610405][ T1621] x_tables: duplicate underflow at hook 3 [ 1020.720379][ T1619] lo speed is unknown, defaulting to 1000 [ 1021.179983][ T1654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6852'. [ 1021.363811][ T1619] lo speed is unknown, defaulting to 1000 [ 1021.394146][ T1619] virt_wifi0 speed is unknown, defaulting to 1000 [ 1021.608029][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.685318][ T1674] netlink: 'syz.3.6858': attribute type 4 has an invalid length. [ 1021.748566][ T1675] netlink: 'syz.3.6858': attribute type 4 has an invalid length. [ 1021.767045][T19832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.490653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.661307][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.525968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.698692][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.571405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.732830][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.816146][T19833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.779370][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.926624][ T5634] Bluetooth: hci5: command 0x0406 tx timeout [ 1026.317005][ T1700] __nla_validate_parse: 4 callbacks suppressed [ 1026.317056][ T1700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6861'. [ 1026.596703][ T1710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1026.806227][T25925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.609623][ T1743] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1027.860061][T19832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.869461][T25922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.995534][ T1757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6877'. [ 1028.169173][ T1765] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6879'. [ 1028.349685][ T1771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6880'. [ 1028.419646][ T1771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.497458][ T1771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.632289][ T1781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6883'. [ 1028.672905][ T1781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6883'. [ 1029.028957][T25922] net_ratelimit: 2 callbacks suppressed [ 1029.028980][T25922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.046576][T25927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.365958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.543076][ T1809] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 1029.713070][ T1813] netlink: 'syz.3.6892': attribute type 1 has an invalid length. [ 1029.745951][ T1813] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6892'. [ 1029.792196][ T1822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6894'. [ 1030.086388][T25927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.405946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.597876][ T1852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6902'. [ 1030.939363][T25927] IPVS: starting estimator thread 0... [ 1031.046362][ T1861] IPVS: using max 28 ests per chain, 67200 per kthread [ 1031.126636][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 1031.140787][T25922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.185275][ T1865] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6906'. [ 1031.446327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.638554][ T1890] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1031.649315][ T1886] xfrm0 speed is unknown, defaulting to 1000 [ 1032.088761][T19833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.169586][T25927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.460151][ T1886] lo speed is unknown, defaulting to 1000 [ 1032.485935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.646482][ T1930] __nla_validate_parse: 1 callbacks suppressed [ 1032.646506][ T1930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6922'. [ 1033.024383][ T1942] netlink: 'syz.3.6925': attribute type 1 has an invalid length. [ 1033.057651][ T1940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6924'. [ 1033.070730][ T1942] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6925'. [ 1033.123439][ T1943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6925'. [ 1033.137100][ T1886] lo speed is unknown, defaulting to 1000 [ 1033.150946][ T1886] virt_wifi0 speed is unknown, defaulting to 1000 [ 1033.161240][ T1942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6925'. [ 1033.719901][ T1957] syzkaller0: entered promiscuous mode [ 1033.725720][ T1959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6929'. [ 1033.776803][ T1957] syzkaller0: entered allmulticast mode [ 1033.800016][ T1959] sctp: [Deprecated]: syz.1.6929 (pid 1959) Use of int in max_burst socket option. [ 1033.800016][ T1959] Use struct sctp_assoc_value instead [ 1033.831485][ T1960] tipc: Enabled bearer , priority 0 [ 1033.865073][ T1963] netlink: 'syz.1.6929': attribute type 2 has an invalid length. [ 1033.880355][ T1956] tipc: Resetting bearer [ 1033.993374][ T1956] tipc: Disabling bearer [ 1034.044864][ T1966] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1034.224280][ T1986] tipc: Enabled bearer , priority 0 [ 1034.373087][ T1984] tipc: Disabling bearer [ 1034.851235][ T2013] x_tables: duplicate underflow at hook 4 [ 1034.913389][ T2018] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6943'. [ 1035.078168][ T2030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6946'. [ 1035.088513][ T2031] netlink: 'syz.1.6945': attribute type 1 has an invalid length. [ 1035.207667][ T2031] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1035.254185][ T2030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1035.278952][ T2036] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1035.339966][ T2037] veth1: entered allmulticast mode [ 1035.365410][ T2037] bond3: (slave veth1): Enslaving as an active interface with a down link [ 1035.393141][ T2040] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1035.402794][ T2046] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1035.411219][ T2047] tipc: Started in network mode [ 1035.422537][ T2047] tipc: Node identity 7af0c695a237, cluster identity 4711 [ 1035.436761][ T2047] tipc: Enabled bearer , priority 0 [ 1035.552795][ T2035] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1035.680968][ T2054] ip6erspan0: entered allmulticast mode [ 1035.699667][ T2034] tipc: Disabling bearer [ 1035.759449][ T2068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6953'. [ 1035.825207][ T2071] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6954'. [ 1036.196404][ T2085] netlink: 'syz.0.6958': attribute type 1 has an invalid length. [ 1036.244244][ T2088] net_ratelimit: 2 callbacks suppressed [ 1036.244266][ T2088] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1036.288749][ T2088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1036.386928][ T2092] netlink: 'syz.2.6961': attribute type 1 has an invalid length. [ 1036.531940][ T2092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1036.866133][ T2121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1036.923046][ T2118] sock: sock_set_timeout: `syz.3.6967' (pid 2118) tries to set negative timeout [ 1037.161022][ T2131] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1037.495068][ T2150] syz_tun: entered allmulticast mode [ 1037.521819][ T2149] syz_tun: left allmulticast mode [ 1037.661490][ T2162] __nla_validate_parse: 8 callbacks suppressed [ 1037.661515][ T2162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6978'. [ 1037.678639][ T2162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6978'. [ 1037.690230][ T2162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6978'. [ 1037.700632][ T2162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6978'. [ 1037.892354][ T2171] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.6980'. [ 1037.907668][ T2174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6981'. [ 1037.919990][ T2171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6980'. [ 1037.932143][ T2166] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6979'. [ 1038.162907][ T2184] syzkaller0: entered promiscuous mode [ 1038.182527][ T2184] syzkaller0: entered allmulticast mode [ 1038.288068][ T2195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6986'. [ 1038.809055][ T2217] GUP no longer grows the stack in syz.2.6994 (2217): 200000003000-20000000a000 (200000001000) [ 1038.821322][ T2217] CPU: 1 UID: 0 PID: 2217 Comm: syz.2.6994 Not tainted syzkaller #0 PREEMPT(full) [ 1038.821352][ T2217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1038.821366][ T2217] Call Trace: [ 1038.821375][ T2217] [ 1038.821385][ T2217] dump_stack_lvl+0xe8/0x150 [ 1038.821439][ T2217] __get_user_pages+0x238c/0x2720 [ 1038.821471][ T2217] ? __gup_longterm_locked+0xc3b/0x15c0 [ 1038.821528][ T2217] __gup_longterm_locked+0xd52/0x15c0 [ 1038.821558][ T2217] ? lock_acquire+0x106/0x350 [ 1038.821646][ T2217] gup_fast_fallback+0x1d8c/0x20e0 [ 1038.821709][ T2217] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1038.821736][ T2217] ? is_valid_gup_args+0x11f/0x200 [ 1038.821763][ T2217] ? get_user_pages_fast+0x4d/0xb0 [ 1038.821789][ T2217] __iov_iter_get_pages_alloc+0x378/0xa40 [ 1038.821884][ T2217] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1038.821920][ T2217] iov_iter_get_pages2+0x5e/0xa0 [ 1038.821955][ T2217] __se_sys_vmsplice+0x7b5/0x1660 [ 1038.822011][ T2217] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1038.822043][ T2217] ? __pfx_futex_wait+0x10/0x10 [ 1038.822155][ T2217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.822181][ T2217] do_syscall_64+0x174/0x580 [ 1038.822210][ T2217] ? trace_irq_disable+0x3b/0x140 [ 1038.822246][ T2217] ? clear_bhb_loop+0x40/0x90 [ 1038.822272][ T2217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.822294][ T2217] RIP: 0033:0x7f554919de99 [ 1038.822315][ T2217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.822334][ T2217] RSP: 002b:00007f5549fc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1038.822357][ T2217] RAX: ffffffffffffffda RBX: 00007f5549425fa0 RCX: 00007f554919de99 [ 1038.822374][ T2217] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1038.822387][ T2217] RBP: 00007f5549233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1038.822400][ T2217] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1038.822413][ T2217] R13: 00007f5549426038 R14: 00007f5549425fa0 R15: 00007ffe6b56a358 [ 1038.822456][ T2217] [ 1039.125092][ T2223] syzkaller0: entered promiscuous mode [ 1039.131632][ T2223] syzkaller0: entered allmulticast mode [ 1039.157639][ T2224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6995'. [ 1039.316936][T24486] block nbd7: Receive control failed (result -1) [ 1039.371951][ T2227] [ 1039.374327][ T2227] ====================================================== [ 1039.381401][ T2227] WARNING: possible circular locking dependency detected [ 1039.388562][ T2227] syzkaller #0 Not tainted [ 1039.393023][ T2227] ------------------------------------------------------ [ 1039.400073][ T2227] syz.3.6997/2227 is trying to acquire lock: [ 1039.406135][ T2227] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 1039.415437][ T2227] [ 1039.415437][ T2227] but task is already holding lock: [ 1039.422812][ T2227] ffff88807eaadcf8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1039.432326][ T2227] [ 1039.432326][ T2227] which lock already depends on the new lock. [ 1039.432326][ T2227] [ 1039.442831][ T2227] [ 1039.442831][ T2227] the existing dependency chain (in reverse order) is: [ 1039.451860][ T2227] [ 1039.451860][ T2227] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 1039.459586][ T2227] __might_fault+0xcb/0x130 [ 1039.464619][ T2227] _copy_from_user+0x28/0xb0 [ 1039.469792][ T2227] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 1039.476345][ T2227] ip_generic_getfrag+0x149/0x2d0 [ 1039.482033][ T2227] __ip6_append_data+0x3b26/0x40c0 [ 1039.487829][ T2227] ip6_append_data+0x108/0x270 [ 1039.493132][ T2227] rawv6_sendmsg+0x1298/0x18c0 [ 1039.498440][ T2227] sock_sendmsg_nosec+0x10e/0x180 [ 1039.504115][ T2227] ____sys_sendmsg+0x54e/0x850 [ 1039.509487][ T2227] ___sys_sendmsg+0x2a5/0x360 [ 1039.514790][ T2227] __x64_sys_sendmsg+0x1b1/0x290 [ 1039.520250][ T2227] do_syscall_64+0x174/0x580 [ 1039.525381][ T2227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.531821][ T2227] [ 1039.531821][ T2227] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1039.539576][ T2227] lock_sock_nested+0x41/0x100 [ 1039.544958][ T2227] inet_shutdown+0x6a/0x390 [ 1039.550016][ T2227] nbd_mark_nsock_dead+0x2cb/0x550 [ 1039.555738][ T2227] recv_work+0x1cee/0x1e10 [ 1039.560861][ T2227] process_scheduled_works+0xa8e/0x14e0 [ 1039.566948][ T2227] worker_thread+0xa47/0xfb0 [ 1039.572062][ T2227] kthread+0x388/0x470 [ 1039.576662][ T2227] ret_from_fork+0x514/0xb70 [ 1039.581810][ T2227] ret_from_fork_asm+0x1a/0x30 [ 1039.587116][ T2227] [ 1039.587116][ T2227] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1039.594854][ T2227] __mutex_lock+0x19d/0x1550 [ 1039.600025][ T2227] nbd_queue_rq+0x373/0x1150 [ 1039.605138][ T2227] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1039.611282][ T2227] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1039.618195][ T2227] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1039.624882][ T2227] blk_mq_run_work_fn+0x16c/0x300 [ 1039.630440][ T2227] process_scheduled_works+0xa8e/0x14e0 [ 1039.636535][ T2227] worker_thread+0xa47/0xfb0 [ 1039.641743][ T2227] kthread+0x388/0x470 [ 1039.646346][ T2227] ret_from_fork+0x514/0xb70 [ 1039.651463][ T2227] ret_from_fork_asm+0x1a/0x30 [ 1039.656752][ T2227] [ 1039.656752][ T2227] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1039.663979][ T2227] __mutex_lock+0x19d/0x1550 [ 1039.669184][ T2227] nbd_queue_rq+0xc1/0x1150 [ 1039.674210][ T2227] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1039.680283][ T2227] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1039.687173][ T2227] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1039.693942][ T2227] blk_mq_run_work_fn+0x16c/0x300 [ 1039.699665][ T2227] process_scheduled_works+0xa8e/0x14e0 [ 1039.705743][ T2227] worker_thread+0xa47/0xfb0 [ 1039.710864][ T2227] kthread+0x388/0x470 [ 1039.715633][ T2227] ret_from_fork+0x514/0xb70 [ 1039.720936][ T2227] ret_from_fork_asm+0x1a/0x30 [ 1039.726220][ T2227] [ 1039.726220][ T2227] -> #3 (set->srcu){.+.+}-{0:0}: [ 1039.733416][ T2227] __synchronize_srcu+0xc9/0x2f0 [ 1039.738908][ T2227] elevator_switch+0x1e8/0x7b0 [ 1039.744259][ T2227] elevator_change+0x2fa/0x480 [ 1039.749552][ T2227] elevator_set_default+0x375/0x440 [ 1039.755277][ T2227] blk_register_queue+0x3f3/0x4e0 [ 1039.760980][ T2227] __add_disk+0x6cb/0xe30 [ 1039.766097][ T2227] add_disk_fwnode+0x100/0x3a0 [ 1039.771393][ T2227] nbd_dev_add+0x733/0xb60 [ 1039.776423][ T2227] nbd_init+0x15f/0x1e0 [ 1039.781172][ T2227] do_one_initcall+0x250/0x870 [ 1039.786461][ T2227] do_initcall_level+0x10a/0x1a0 [ 1039.791943][ T2227] do_initcalls+0x59/0xa0 [ 1039.796816][ T2227] kernel_init_freeable+0x29d/0x3e0 [ 1039.802551][ T2227] kernel_init+0x1d/0x1d0 [ 1039.807446][ T2227] ret_from_fork+0x514/0xb70 [ 1039.812662][ T2227] ret_from_fork_asm+0x1a/0x30 [ 1039.817944][ T2227] [ 1039.817944][ T2227] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1039.825854][ T2227] __mutex_lock+0x19d/0x1550 [ 1039.830980][ T2227] elevator_change+0x1af/0x480 [ 1039.836284][ T2227] elevator_set_none+0xb5/0x140 [ 1039.841706][ T2227] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1039.848062][ T2227] nbd_start_device+0x189/0xb30 [ 1039.853905][ T2227] nbd_genl_connect+0x1597/0x1c10 [ 1039.859480][ T2227] genl_family_rcv_msg_doit+0x233/0x340 [ 1039.865720][ T2227] genl_rcv_msg+0x614/0x7a0 [ 1039.870756][ T2227] netlink_rcv_skb+0x226/0x4a0 [ 1039.876051][ T2227] genl_rcv+0x28/0x40 [ 1039.880563][ T2227] netlink_unicast+0x7bb/0x940 [ 1039.885856][ T2227] netlink_sendmsg+0x813/0xb40 [ 1039.891403][ T2227] sock_sendmsg_nosec+0x13a/0x180 [ 1039.896968][ T2227] ____sys_sendmsg+0x54e/0x850 [ 1039.902281][ T2227] ___sys_sendmsg+0x2a5/0x360 [ 1039.907575][ T2227] __x64_sys_sendmsg+0x1b1/0x290 [ 1039.913039][ T2227] do_syscall_64+0x174/0x580 [ 1039.918156][ T2227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.924577][ T2227] [ 1039.924577][ T2227] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1039.933222][ T2227] blk_alloc_queue+0x544/0x690 [ 1039.938624][ T2227] __blk_mq_alloc_disk+0x194/0x390 [ 1039.944718][ T2227] nbd_dev_add+0x494/0xb60 [ 1039.949944][ T2227] nbd_init+0x15f/0x1e0 [ 1039.954715][ T2227] do_one_initcall+0x250/0x870 [ 1039.960010][ T2227] do_initcall_level+0x10a/0x1a0 [ 1039.965487][ T2227] do_initcalls+0x59/0xa0 [ 1039.970348][ T2227] kernel_init_freeable+0x29d/0x3e0 [ 1039.976338][ T2227] kernel_init+0x1d/0x1d0 [ 1039.981197][ T2227] ret_from_fork+0x514/0xb70 [ 1039.986318][ T2227] ret_from_fork_asm+0x1a/0x30 [ 1039.991606][ T2227] [ 1039.991606][ T2227] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1039.998828][ T2227] __lock_acquire+0x1520/0x2cf0 [ 1040.004382][ T2227] lock_acquire+0x106/0x350 [ 1040.009419][ T2227] fs_reclaim_acquire+0x71/0x100 [ 1040.014892][ T2227] prepare_alloc_pages+0x15b/0x650 [ 1040.020531][ T2227] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1040.026868][ T2227] alloc_pages_mpol+0x212/0x380 [ 1040.032253][ T2227] alloc_pages_noprof+0xac/0x2a0 [ 1040.037723][ T2227] __pud_alloc+0x3a/0x460 [ 1040.042583][ T2227] handle_mm_fault+0x1f85/0x3080 [ 1040.048043][ T2227] do_user_addr_fault+0x744/0x1340 [ 1040.053716][ T2227] exc_page_fault+0x6a/0xc0 [ 1040.058744][ T2227] asm_exc_page_fault+0x26/0x30 [ 1040.064121][ T2227] rep_movs_alternative+0x30/0xa0 [ 1040.069694][ T2227] _copy_from_user+0x7a/0xb0 [ 1040.074806][ T2227] rfcomm_dev_ioctl+0x1b4/0x21c0 [ 1040.080384][ T2227] sock_do_ioctl+0x101/0x320 [ 1040.085522][ T2227] sock_ioctl+0x57a/0x7e0 [ 1040.090450][ T2227] __se_sys_ioctl+0xfc/0x170 [ 1040.095623][ T2227] do_syscall_64+0x174/0x580 [ 1040.100760][ T2227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.107200][ T2227] [ 1040.107200][ T2227] other info that might help us debug this: [ 1040.107200][ T2227] [ 1040.117429][ T2227] Chain exists of: [ 1040.117429][ T2227] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 1040.117429][ T2227] [ 1040.130069][ T2227] Possible unsafe locking scenario: [ 1040.130069][ T2227] [ 1040.137606][ T2227] CPU0 CPU1 [ 1040.143212][ T2227] ---- ---- [ 1040.148590][ T2227] rlock(&mm->mmap_lock); [ 1040.153013][ T2227] lock(sk_lock-AF_INET6); [ 1040.160039][ T2227] lock(&mm->mmap_lock); [ 1040.166890][ T2227] lock(fs_reclaim); [ 1040.170876][ T2227] [ 1040.170876][ T2227] *** DEADLOCK *** [ 1040.170876][ T2227] [ 1040.179076][ T2227] 2 locks held by syz.3.6997/2227: [ 1040.184186][ T2227] #0: ffffffff901dbfe0 (rfcomm_ioctl_mutex){+.+.}-{4:4}, at: rfcomm_dev_ioctl+0x187/0x21c0 [ 1040.194340][ T2227] #1: ffff88807eaadcf8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1040.204354][ T2227] [ 1040.204354][ T2227] stack backtrace: [ 1040.210262][ T2227] CPU: 1 UID: 0 PID: 2227 Comm: syz.3.6997 Not tainted syzkaller #0 PREEMPT(full) [ 1040.210281][ T2227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1040.210291][ T2227] Call Trace: [ 1040.210299][ T2227] [ 1040.210307][ T2227] dump_stack_lvl+0xe8/0x150 [ 1040.210332][ T2227] print_circular_bug+0x2e1/0x300 [ 1040.210351][ T2227] check_noncircular+0x12e/0x150 [ 1040.210369][ T2227] __lock_acquire+0x1520/0x2cf0 [ 1040.210394][ T2227] ? __lock_acquire+0x683/0x2cf0 [ 1040.210416][ T2227] ? __lock_acquire+0x683/0x2cf0 [ 1040.210437][ T2227] ? prepare_alloc_pages+0x15b/0x650 [ 1040.210457][ T2227] lock_acquire+0x106/0x350 [ 1040.210477][ T2227] ? prepare_alloc_pages+0x15b/0x650 [ 1040.210499][ T2227] ? __lock_acquire+0x683/0x2cf0 [ 1040.210522][ T2227] fs_reclaim_acquire+0x71/0x100 [ 1040.210541][ T2227] ? prepare_alloc_pages+0x15b/0x650 [ 1040.210567][ T2227] prepare_alloc_pages+0x15b/0x650 [ 1040.210590][ T2227] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1040.210613][ T2227] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1040.210636][ T2227] ? __pfx_policy_nodemask+0x10/0x10 [ 1040.210664][ T2227] alloc_pages_mpol+0x212/0x380 [ 1040.210689][ T2227] alloc_pages_noprof+0xac/0x2a0 [ 1040.210712][ T2227] __pud_alloc+0x3a/0x460 [ 1040.210730][ T2227] handle_mm_fault+0x1f85/0x3080 [ 1040.210750][ T2227] ? __pfx_mt_find+0x10/0x10 [ 1040.210830][ T2227] ? handle_mm_fault+0xec/0x3080 [ 1040.210848][ T2227] ? unwind_get_return_address+0x4d/0x90 [ 1040.210865][ T2227] ? __pfx_handle_mm_fault+0x10/0x10 [ 1040.210886][ T2227] ? __lock_acquire+0x683/0x2cf0 [ 1040.210908][ T2227] ? lock_mm_and_find_vma+0xa7/0x340 [ 1040.210928][ T2227] do_user_addr_fault+0x744/0x1340 [ 1040.210956][ T2227] exc_page_fault+0x6a/0xc0 [ 1040.210974][ T2227] asm_exc_page_fault+0x26/0x30 [ 1040.210989][ T2227] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 1040.211014][ T2227] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 61 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1040.211028][ T2227] RSP: 0018:ffffc90004447ab8 EFLAGS: 00050202 [ 1040.211043][ T2227] RAX: 00007ffffffff001 RBX: 0000000000000018 RCX: 0000000000000018 [ 1040.211054][ T2227] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc90004447bd0 [ 1040.211067][ T2227] RBP: ffffc90004447cb0 R08: ffffc90004447be7 R09: 1ffff92000888f7c [ 1040.211078][ T2227] R10: dffffc0000000000 R11: fffff52000888f7d R12: ffff88803ac81000 [ 1040.211089][ T2227] R13: dffffc0000000000 R14: ffffc90004447bd0 R15: 0000200000000100 [ 1040.211107][ T2227] _copy_from_user+0x7a/0xb0 [ 1040.211124][ T2227] rfcomm_dev_ioctl+0x1b4/0x21c0 [ 1040.211145][ T2227] ? kasan_quarantine_put+0xbb/0x1f0 [ 1040.211165][ T2227] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 1040.211185][ T2227] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1040.211257][ T2227] ? do_vfs_ioctl+0x116f/0x1530 [ 1040.211275][ T2227] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1040.211293][ T2227] sock_do_ioctl+0x101/0x320 [ 1040.211315][ T2227] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1040.211334][ T2227] ? hook_file_ioctl+0x1f0/0x5f0 [ 1040.211354][ T2227] sock_ioctl+0x57a/0x7e0 [ 1040.211374][ T2227] ? __pfx_sock_ioctl+0x10/0x10 [ 1040.211394][ T2227] ? __fget_files+0x2a/0x420 [ 1040.211413][ T2227] ? __fget_files+0x3a2/0x420 [ 1040.211433][ T2227] ? __fget_files+0x2a/0x420 [ 1040.211453][ T2227] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1040.211475][ T2227] ? __pfx_sock_ioctl+0x10/0x10 [ 1040.211494][ T2227] __se_sys_ioctl+0xfc/0x170 [ 1040.211510][ T2227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.211527][ T2227] do_syscall_64+0x174/0x580 [ 1040.211545][ T2227] ? trace_irq_disable+0x3b/0x140 [ 1040.211573][ T2227] ? clear_bhb_loop+0x40/0x90 [ 1040.211591][ T2227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.211607][ T2227] RIP: 0033:0x7f3fd9f9de99 [ 1040.211623][ T2227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.211637][ T2227] RSP: 002b:00007f3fdae88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1040.211653][ T2227] RAX: ffffffffffffffda RBX: 00007f3fda225fa0 RCX: 00007f3fd9f9de99 [ 1040.211664][ T2227] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000007 [ 1040.211675][ T2227] RBP: 00007f3fda033eaf R08: 0000000000000000 R09: 0000000000000000 [ 1040.211686][ T2227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.211696][ T2227] R13: 00007f3fda226038 R14: 00007f3fda225fa0 R15: 00007ffda1a59dc8 [ 1040.211713][ T2227] [ 1040.662879][ T2229] tipc: Enabling of bearer rejected, failed to enable media [ 1040.718535][ T2227] tipc: Enabling of bearer rejected, failed to enable media [ 1046.405997][ T5634] Bluetooth: hci1: command 0x0406 tx timeout