last executing test programs: 5.931711035s ago: executing program 4 (id=4649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket(0x1e, 0x802, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000200)={0x88, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @empty, 0x2}}, {0x2, 0x2, @in6={0xa, 0x4e22, 0x7fffffff, @private1, 0xbb44}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) r4 = epoll_create1(0x80000) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x4, 0x10008000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000500)={0x60002005}) 5.526403075s ago: executing program 4 (id=4652): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1a0000006d0001"], 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) sendmmsg$inet_sctp(r0, &(0x7f0000003f40), 0x0, 0x20000090) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) 5.199195063s ago: executing program 4 (id=4655): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x70bd25, 0x0, {0x7}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8, 0x20}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @loopback}}, 0xfffffffc, 0xb, 0x3, 0x10, 0x46, 0x20d, 0x4}, 0x9c) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000012010000010200000000000000000000100100000e000000d98c9de200000000"], 0x28}, 0x0) unshare(0x20000400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) close(0x4) socket$unix(0x1, 0x1, 0x0) bind$unix(r3, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.99358482s ago: executing program 4 (id=4659): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000a40)=""/4057, &(0x7f00000000c0)=0xfd9) r2 = accept$inet6(r0, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000040)=0x5, 0x4) r3 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r3, &(0x7f0000002100)=[{{&(0x7f0000000100), 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/90, 0x5a}], 0x1, &(0x7f0000000240)=""/108, 0x6c}, 0x9}, {{&(0x7f0000000440)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000580)=""/222, 0xde}, {&(0x7f0000000680)=""/99, 0x63}, {&(0x7f0000000700)=""/13, 0xd}], 0x3, &(0x7f0000002380)=""/265, 0x109}, 0x6}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/19, 0x13}], 0x1, &(0x7f0000000900)=""/176, 0xb0}, 0x7}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f00000022c0)=""/171, 0xab}, {&(0x7f0000001b00)=""/93, 0x5d}, {&(0x7f0000001b80)=""/116, 0x74}, {&(0x7f0000001c00)=""/154, 0x9a}], 0x4, &(0x7f0000001d00)}, 0xc0}, {{&(0x7f0000001d40)=@nl=@unspec, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001dc0)}, {&(0x7f0000001e00)=""/38, 0x26}], 0x2}, 0xc0}, {{&(0x7f0000001e80)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f00)=""/213, 0xd5}], 0x1, &(0x7f0000002040)=""/187, 0xbb}, 0x908f}], 0x6, 0x2, &(0x7f0000002280)) 4.965225175s ago: executing program 3 (id=4660): r0 = socket$inet(0x2, 0x3, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000400002000000400004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000020000000020a01080000000000000000000000090c000440000000000000000214000000020a010400000000000000000200000a14000000110001000000000000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004) socket(0x10, 0x3, 0x0) socket(0x1, 0x4, 0x9) unshare(0x24020400) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x3, 0x6, "e53d2d79723e2e614a791ba8e24e1e340dfa35b12c52ed4e1d3a7be902511feb177b3d2b4b5fd2d7f807eee09e02b0720f9c5c2a4eb765c4ec38ea9353f8ef37cf1fda11b5e36f1348c053b5d7f8879bcd302757e2740e74b724a53c87a743960f0d0f503ca445247d318285b25e3088b7321f3f850a6d203eeb0602a8f7083ca95ddea898aa09e692a56366e476fd3fd2a10a87b2f1dd16cc58d8d202b80d3ee800253b801d40dec7b04ac3e71489f9"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r4}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x7, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x100) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmmsg$inet(r6, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008005) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r8 = socket(0x28, 0x801, 0x1) connect$vsock_stream(r8, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) connect$nfc_llcp(r8, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 4.47390915s ago: executing program 0 (id=4665): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket(0x848000000015, 0x805, 0x0) (async) socket$inet6(0xa, 0x802, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1b, 0x0, &(0x7f0000000100)) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) (rerun: 32) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) read$nci(r4, &(0x7f0000000140)=""/226, 0xe2) 4.318381552s ago: executing program 0 (id=4667): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x2}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x20, &(0x7f0000000440)={&(0x7f0000001c40)=""/4085, 0xffc, 0x0, 0x0}}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x40, 0x5, 0x10, 0x27000, 0xffffffffffffffff, 0x461, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003c80)={r1, &(0x7f0000002c40)="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", &(0x7f0000003c40)=@buf="b03944dea62922ed6413970cdf9e4121e017816c5d6a62a047a7a04eef243aa46690e71312a64ab693b13052220c", 0x4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8}, {0xb, 0x4}, {0x1, 0x1}]}]}}, &(0x7f00000002c0)=""/162, 0x3e, 0xa2, 0x1, 0xc59b}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1, 0x0}, 0x8) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x890c, &(0x7f0000000000)={'ip6tnl0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000140)={0xa, 0x0, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009110ae000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x2}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x20, &(0x7f0000000440)={&(0x7f0000001c40)=""/4085, 0xffc, 0x0, 0x0}}, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x40, 0x5, 0x10, 0x27000, 0xffffffffffffffff, 0x461, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x3}, 0x50) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003c80)={r1, &(0x7f0000002c40)="a44fd0ce1b52d6823c71b3691457669e491a9478aefa976df18189cf622358449fe32da744e1c71e8e9362e07106e9ada8cb3c048cd1b6bfbd4b02d3c73e26363bba0f2fef2b0589b96f5cbc1327becade368656b6807063ac2da74f87c5f2e98e5f43b45e404d8ce8bc78b533e048bbe19fb77f2f446a5c8f760c7b6a911ce7ac4843f69983a2772592c373de7021ef92451fd6cd04e74a9ee16ea12093889264dc3a434a13eb2f94601f04703bd582893a36dcdc1ffe4a7edeab75c522a4c9d6f91fc324db03cfd341d616e2c51a3568d9fcadf9f819418d53413b17f324949f34ec822f9f9513c866d898d848848e1939e11ddf6ef3d9d907bf2d4d41bda46866f80b773bce8220663190a5eef7d3d6bef5d0cb8ebe5505f1076fcf98eb3469666ea7f9ec2bb2298d63484477e90b498e13e183d4fc3798d9cb1deb08fb07cb2a429b3c92e74b6f1d95bdf3bb218d58b91dffc488711a220ae9201236bd66373f5a04e5e5c48d32d8f335771f179e6c0878649049f95490eb812f808092b53b7a33d0f693705a0956b511d93f0bf8bd86c5b68af0df1b7d3804023a6accb80a8ff6ea70e8fbcd9751f9da994d154beaee5d67569a925dccbdd1587e69a27678e8298c4d4daccd6d4ac935a2253d95625cbf41ca80a88d3d592524da8a72188b5bdde73f1799c89ef5746a7dd03e09cbfb3e1d26d8aaa2f671380e1c038889517d6f9c585ab4103f98157ce511f52c0eab838130d44422b7e640e5baf2453bca7b490a24a6e6cb6ce9f5b4365f258f6c2bdd371468b8e58ec02283f0415330d90c0b039d97d8e9a150d0d5fa0bc6df450dbb6f67264c2ac6f72a8c12ee41c5dd298739519a0aad8bd674fe7878d40780ccb809ff7d52b50ebca75559d063b78299b0bd45576788e8f3cbf335692d3b81777fc0a1ac522da50b2a7d50ff7547b3ccb5b5e18f7a988bdaf51729f935aaef91e6ad6ae14ca8fa3ea0809f8b37a3aa2da2bba7a3277b1944730438c6258415306858d0b7a93b447ac633c6bf0de9dea65259c56cf8ce1f01cc0495fb7a045dab32aaeb266237a90d9695fd0662a3e5063f893112083f031676a849f18512c488594bbb57a533eeea0edb9e89dacb252d6fa75d34a418638dfd23abd527ad14c62943033de7731fad240ca85bf4c5c358ae0cd7a97c804c6759facb74cf6c6aba2aea729171b1f0617e1d16b8b02f453e1833ab35a96c90f788d07b09c21784d3fa53c710f00f9e9346449764ad3d6def74b2f52b2f7c437104eccc43dbad46967b3491428fff62b311b6fb3171f865c312bb5388f8c24b3bc91d39718dce01d1cb7a3d52a99da375fa074de75f6cea4a96cc922f6e7f81ed74179fb62aa3ac23913304a1f8b8669b74f384cb7c60fe49005eeb4112b392fa8c9f73d2b7ca70a45cdc4aa48876062404066e61b485945395a393e7f4f988a2e82fe213514d91436d9624c46fd4fcd56ef512ec67fefbee15a6986824137db820b100db1f3d27e56f392706c1e27189b2d8ae1dedb308f2ad685a9c0686699418a2dde664bfc10275d4e5824c72f2847575fe54fe21ead957824527a2b04a05dd642e0be4bedac8c04807ef576053d1dd42c2c0458c93cddd1ef9aedb5cf993477ca4bcf419694a27881bad11be3c66f4f42e1f73b5b9519a19cb6a2b305032880cc2c111b706203379e29fb2beba75c8db0c7a366af8890a1d15470035731873737f22eee039a3539649e5e47d3b2943cde7036dac3d5ce0d78a6c2ae0ab318eaa5db106fdd87d0aa10b3e6eb8bebc77dc9ee9196b9726593e6bc43c1450fb3b2d00a30ca3167a000084e08fee38282387bb19b6fc7a33ff153a4b3f89196fd9a7bc38707d2e6346e55e42a4688d44ece6700ec5fde37a3f34a61fd4e1e33e8d47d328224b5f3b9c998fbcd3af94ff2916a840894ac5018ca7e7edc24f88682dbf668366c3aa432513d9ea5a909b59e07cee09d70aec49701e7cac08bbee51f58818ea6e5a53bd11e15ce122fb0a1ea0efd79881b8711757fe32972e5d259560c069fe8cdd6fe43c0cab3d1c1c91cf4f9fc472f057f51e53deaf8c0c43b6424543e5cf91bb3df2dcd22d05579fc8b95d0ad82d605bcfad5549c1786128ef3f151010c3b0b343b991721a1a6c8c93bce889dcceaa6bc1ea395d290301baf388dab04d2cb71a3c63a096911561e0894a0389145f10f6edad46932ff25f10dcad40c23ee5bd631f0c6604b63204a5248d635e7238986fc72fc1312771f5366219e35fb828d935a2405789d82f95db06e845fca988aeb69ff4de308183b65c517c2f0b29fa8d1a8d3397b06b57c1be24f75d40abcd8262b1bfeabe7bfefdd848bb0ae1580d46fff05b8398243e8e7945a129a3a6069d774c00266b7e62688b8f23c07dd63c5842bae7ec3c817e0920e19b0b5e14682077b7c76781344dee67216f347eaba931cb20b6675bce07ec5f15948508042a5b25891b11d68109615033103601c7cc46c9a6f63570f6d2369e8ee434442f84786a05ddd25cdc464abcbf1cc8aa4bed85b18cf5641bfddcc2bb2fbc63e72a8496afa34781b5de914ad5f9fcbe83ab0340499a41438f7814709a391f7a28c6ab92fbc0ffe3f170e112afd6b338c110783671edd1d0cd709529b4f3daf58248d294705cfb7ec34d1543e5d7421645a0b62cc430a0f462101172ef857503ea25e0f6074e8c48d1fcaae0db2efe9e19781c4ab1c5f8a549001f668a1c35a17bf01d0b2a7a2f9029b8f92072b8d3e9fdccc851fcb2e99ab5285112fc8bb83969be5f861e43478fd42943cd92890f5b71e27b2ccabbdcda406b8edd89c002eb228783b41d1490d4e307d6c3dbb10a1c9df27385afe29afd6db7a3046c6fd4ff0e9a4884b8e1fdf56707252f5c34efa49e43bc62e84f41ea7d9af962dc8c0ebb8d1d3c447bcfe0d413a7091f79fd75ff49b6bc3fd4a28019aeba3531138f560797b00c5f10f7ef8a0408da3c5fda4f2f8beb775fd5b45172fe0bdc6ea66cbf3d148fbbe4f85b262ffad0714f1d3cce8a42ae00ecd0d4fc910fd8aff5cc30dacb2aa4b0ad1a717733245570224e9cc53841d0e3441513b590ff03004f0568925d1152118b11e08729ccbaf556c9a400945aa4c953ad6bd1b968594dd4265afdcf93867a7ef0f190191b39dfae6479bbc463634b7a1451dbf8fa2beb02f289e64f073f65dddd8aa59b563e69672645cbe4432fce82a4799829f8229650087ddbadc3a48fead1af08067bd01f2f938f2f52d54af28b3fa0ce3976e5114511f73f4eb806633319afb6c21eca8860844cc08d66364e076531373ca21a9469350e827d047412e1c9f0b3569ab81c866423c558ce63f6d505062c6081d73e78cb430e945f1064e165b387ae4e4456992dc234698801156c71eec0422cd7932c7fd9a0b5b5c744b0901855b270a12385eec9ef5e772ee5fa475bb506ac38c50a5c6e17eefeed62de0415f7a701e016b026b9a1536d8a898278e3b1549a62e4a949a39982dc2c3839afa8e994077d9c33ac6870426f49b23faf90e6f32a2cacce33d97da5e9445a53c9a199acf5a50bc631f02800c7238916a2d52fef9b76a5f3835be746d4613bf9fdd409c1e1f2420808db66d97a8bf68c9cbb4abe2ecde21cbb4bc9991035d110cf872fa263bab3a3ce2153b03134322deef68af72eada812208737e215eaeb6c1cf5061b4479dd701a3f2a207078f9c1c363ed210e3ebc88f53923d4f217e8afb703fc9467a6079aadbae7acd71c724c31a69d054847a633263c7ec286c546913c52c2d3ea36f70d29f5d9e96b710719521031046ca5d3361445d1860e838df5f137e5b90e877524e4ac9ea2d9754d38935587f6b3de4ebc1ce5f6b5e3286e82de9e13ac240bb201e6172edc30dd19080dac3af96db673696487349be720f6ccb026c40a489b4efa6af911bf76cd8870677e3299b0f6f5112fc34e3953d8af9bf729fffca991cc6f9883f041ea9db4e864ce8e721b2ec6696306abfa5ff40ae67d2dd465f70e7b4795760f2cfc5bb0e562aa7f2acd4fbca62db5705aef961110b79491e0369714cf57eb6b7b12e36d90e5b41eff3ddacae6eef6edeec4ff62cb71cb6a68f22e6d5018258bf91ee5a2284f853d737a79ec1892ec08a0b33b508bfbe769bcd0d0a82b7fe6c9e5f8d5ccabc2738e65ee7e9f2c1bac73de5d7e52d0090567ccbc892c3859da9da0ea055992fc1e9767914d004068f340fdb23d57b2eb1a03d63a0a777b7e514f7fb7f995e0709ee14083b83732da86cde3a3758da920635eaa9b903b613354e5acc9cc1a3e28652d71430ea5aa6981e70fadd9ab8c865e263379c6a61bcad017bbc3dd5b277fa97d995e8d3b16123106cd6d22d764914e6395efb76272d2d3481b431233ba776421ff92a3dcaf20131cf97057ae7987fc5774cfd915ed9755b6387d79adb4e6e7832c56db8b982a3e3240dd4ddd6a64ef7600f180e3d3c255cf6779ba8cff86bb899936d54a299ce1be9b2ef0f672af7e27a02d2e1dbb39e59d39d4e6683e8285de976978e2c8b2b7c9decfe441e9a1c98ed2dfccefba6c46cce356573f1634f726750b791222717cae90b7d2b41095f8b3ff0d98e8adfa4fa0181a258a8959891f4c1ee13d9db8fd13d644fe8ad1323272cb767ac66127b3703855aa8edfba5267cb506ec650a704dbf43056c20c750d1f3bf8b8338a570724c185fa113fe20e55da11c883c301c185fbe4325f39c69355a2a5108f212e410e36aa872be510cc47d04b6221c7fa066f2f3b3adfe4e03c6e6a9ae19e46a831d292c6f9c715f8b995086ac4ea44b1e58e09112c15a5dde5e32dbd224a231c1a7f1dde91364139f262912fb8e946d96e4f2f5c84a10a2d5b2181a7b11ce09fac0dbbf6ded5581c2ea8f4efe9d44a70aa3f8dd0e6f620d31366152f7e473ab41e32dbc23c74279dc0c8cbada9b3ddb0593490e3b822b0e19e6018a379c92a47fc75cd755afa0395d26b2d78fab17a9903f053536ab18670c246ef1cc60dbc8481e20cab10aa4d44c197604a15a6e20d9b91ceb7a87b98e4211f23547da61f2a44a5c5f989e9be2b0c75b088f8f89b7e9705d7ffddadfd59e5e48fe48944021450403df57912cfd7a7d3d95bdd4269a8fb25b2ab37304c486e77e26187c4551cdfb239fc5678074a0dadb178408c08c890417f6b72854d741eed0fcf11e0b515c9a052e66c54954f5b7f42bbf9385d5522e8ed40b6f6c8909d875149912abc1a228992428f3e196e4e5ab32583613cf3bba57e12a5575d5474a378cd05d76b9f27e2bd077e9adc085640bcf1ba167278e75f0f299fa6d91714c0b94c907d753280c1ae4b6fb8a86c6b3796ededa2650b0697a4bd6bccaa81bc73985c95b5ea60373dc539bca9330c4f5ab068ff8fbf734d60b1f0ecf94b16d293772d39d01328d97ee725f6beaf8f0b962a9d669f179cd9d45c98ad9a7fb6de0b834971a5f2eb1eb01ffc89660787793103712126fcff2726843b7f4a450249724954213e6a1d18347a5d3a16ea9fb03ac75127d76c5af7d3e38fbe63ed146a49a569abcbe310ec52c67a7db1685bc9f8ffd752d4e2769bc5848446a51a28a5fe25524a1a669e645992746c9b0694d76ed3b46b5925c28952c5cd21741f55dcb8f595c3ca096dc54e6c77dabb5016ea7c0d3cb84a89512e31f3e91d2378c2eb84fede3bde338df7053da160e1e0cb79a6ef7136d657e382b01e32ec7ae5038decdf470ace411118c18e8293c3e9d82ab1638230e02695a0c40dab30dd7c46", &(0x7f0000003c40)=@buf="b03944dea62922ed6413970cdf9e4121e017816c5d6a62a047a7a04eef243aa46690e71312a64ab693b13052220c", 0x4}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8}, {0xb, 0x4}, {0x1, 0x1}]}]}}, &(0x7f00000002c0)=""/162, 0x3e, 0xa2, 0x1, 0xc59b}, 0x28) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1}, 0x8) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x890c, &(0x7f0000000000)={'ip6tnl0\x00', @multicast}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bind$l2tp6(r4, &(0x7f0000000140)={0xa, 0x0, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x3}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009110ae000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x94) (async) 4.037334086s ago: executing program 4 (id=4668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="080008000700070000002b0006004b6f007c006600401190780a010102ac141414000e7fd2ca4795463fd9e49854a38907f4fc1e00010400004e204e22005090784202000000000000d84bd100f95124a51e3293b71617e211da20e8f6bff7a3eb4d35f7a83b0727328e60cfd2f32ff2e3b2438e51122055ab7a21bee02622d310b489a9922a2bc6935d36c3be8fdb8a975a9e06b2999001d58be26567d878a9466da959845c49c8c38ead3f1bb2b5f542a22bf1c39e17af2e49f710958376e37c763aae365f5f41f363be82aadaac8f539b284bda610141f607ae82998c619115ffdc57afdd7424c10d80d43bdfe57cffed1c7e00"], 0x8a) 3.955727123s ago: executing program 3 (id=4669): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xffffffd9}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}]}, 0x80}, 0x1, 0x7}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10682, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf040d}, @IFLA_GRE_TOS={0x5, 0x9, 0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24008000) 2.173449263s ago: executing program 2 (id=4670): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000001000000070000009f3d000040000400", @ANYRES32=r0, @ANYBLOB="05da2c0dbe0056c2ed3f002300000000000000001ba37df852ae840cc142b5de0d0addad4ff56ee094cd10567009f80c20ecdc740935349745fdf30d9a66981ed4c1dd74cfe5014c9b14013ae59dbd46cf108bdafdbd2a831b23d81038f71dc9d671540cc976f22b308d1e2a9dc7ef27819feb3b71a316f309bef3dd1aa144e97ece32a1488bc323f5e39e3147bb795d4afbe80e3e941ea1bda2ac04071766107c01e83e72854722", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0400000004000000050000000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="a544040004000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="00000000000000a5399bf10000000000850000000c000000b70000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085100000fbffffff1863000002f9ffffff000000d1350000"], &(0x7f00000004c0)='GPL\x00', 0x6, 0x5d, &(0x7f0000000580)=""/93, 0x41100, 0x41, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000600)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r0, r0, r0, r0, r3, r0], 0x0, 0x10, 0xac}, 0x94) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000280)={r7, 0x3ff}, 0x8) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r12, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0xba48, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r18, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x6, 0xf, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfdf1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x201, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000180), r4) 2.172593833s ago: executing program 0 (id=4671): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x8004041) sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000100), 0x4) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414ab0800060006000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r11, 0x6f6) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 2.084986665s ago: executing program 4 (id=4673): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x6, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0x6}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) r7 = socket(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000280)="f868eac0d956c2ef641dca8caa488d706ac99c20f61f5efb58100a5c218bb8059dc379357b0598775e83e7fa1e081b4d218701f24231664355d79244c254356be75bf8e034001388423cb332d5777c9f82fdda95492c031d4150ca1dfe9391f92f247c586ec032e29e2b88", 0x6b}, {&(0x7f0000000300)="b2b9b94054c3c0ffc1bda551ddc0afd2f83cc1defa63be82ebf5366243a67ed63263f013ba24cc6118343198a034cbb3b153252205391d3b3e0154b0fa7dd2dbe4d5bfad76c34a56dbe02785d4fc7621115fbe17efd18615200a810c7a11a9d195339eb5ab4e73d39d426ef352357abdfe32b5eafe979204aca765195c88d0dad0e605247afb30e9ea82f128bbfad64bb2ff0b2c2a2ead7a6e1e8e66f4495fecb52e7b1f5486260eca8db3c9d8f76fdbfb3d6573e74efde56ee113eb43a3d8560a215002b1171189d76ed3fd803edf434baae622d29c659ddd79000824a3f688aa2a09140d61", 0xe6}, {&(0x7f0000000540)="9238bb00953540acc37970994d059ff8d23c6488f40493203e687581e5a09dfd73091b7ed8c113b94e79ac0f9d36157efa13a5cc7ee07113255e38e154bb485804ec1e0f6d66d192c51ba9d9e7a7587a45056ee64ea199c41c4a5f6cc1960f40e38fd8ba1608f03ef4c84b0ff6af374eb4a2f141c50928f74b5dc7640e42e42813d341f423d397e741425bac7404b57846c95f36f19fc765a1fd637a671f9350c886fc90fc967988854e", 0xaa}, {&(0x7f0000000600)="324aaa2f5bd5d1878637672bc12b81", 0xf}], 0x4}, 0x8010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000001c0)={'pim6reg1\x00', {0x2, 0x0, @local}}) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ppoll(&(0x7f00000006c0)=[{r4, 0x103ec}, {r7, 0x280}, {0xffffffffffffffff, 0x636}, {r4, 0xc205}, {r1, 0x2}, {r6, 0x501a}, {r8, 0x8200}], 0x7, &(0x7f0000000700)={0x0, 0x3938700}, &(0x7f0000000740), 0x8) 2.030281227s ago: executing program 3 (id=4674): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r1, r0, 0x80000001, 0x0) (async) tee(r1, r0, 0x80000001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) 1.579363643s ago: executing program 2 (id=4676): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac010000170001000000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000000000000000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x4880}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x4}, 0x1c) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000680)) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000000500)={&(0x7f0000000400)=[{&(0x7f0000000080)="67d54d09e33ff501287d4c508875fc9648e2e0fc67ae7d", 0x17}, {&(0x7f00000000c0)="00843d048f369937", 0x8}, {&(0x7f0000000100)="85551f710cfc3f25cfc824f37fa0c2423cbb2812c510f98fc56534847894b1e3a9bee835d615304fd558a5215f11b1acbae2f53816a01aaf1a2a9a7030ed6b0216bcf3be899f3ad261825f2cc19522f1db5fb6cff3f1151106841f160a18340872fa0c773234b6f85c0fe22175b1d48903a3bbcbce9b7a1846b3228a0edda83233a84f40000a8d3b63bac080d7774b0e54d9950f3a57a7fc9d6bef663aa6cd655621615a658c1a8bd4a81304344a51f7d1cbdddc0402612e0668b4610f1c24f9979105f3ec78e0624cabe4138479b800fca2133c5b93c0b1a5eb0d966ea13abb1622df8be720cdd971e517", 0xeb}, {&(0x7f0000000200)="b53916f8052e92b6b54480f8067f7b17956eb42204b4f683309cace9b6b30ea3804d938e923f3642d619b1cc157409bb60c55982ec65b9acf9cade18e32ee40d008a2cedf819e3637ca849a876a8011a3d7f8c588a15a1808dc1f60ea66078050e293f5986143a0d9adbebb6a56f2b5d8b0de5358105e54e2ed1907b8466bc4a80a1d53f0ea6802e12f870c214a98e1424cb4bb77205aedb6427612e7e5d", 0x9e}, {&(0x7f00000002c0)="3d1ff1b9e661981e9773b5a263679d63d7eaa6e2e3e0f65fe56ed4bf615b59b5f527f111b27bf422fac94f05fdb5144bd8545776e530f51ba91557ee756092587e71f0f8b5e18ed85f1036eb7adfb2d1d6d9ab41f814697bd3ad57dae6e65ad8aa0823a93d5af9575b9a556872ebe6ebec9c9375cfd842247353b2195593b1a7c013f0353a47abd46e8f5322", 0x8c}, {&(0x7f0000000380)="ca2724b0c0a4cfe0133611ed8f65ec11230302b2a93a48a2585f13f12b88720fab9896f595590f53a610c45b2de3bd4cfd5a2d9b4c55c63a0ad63ece6b5768b26819b31fab467b95abb363560848c3ec0391a35c64f1389eac420ddeda9517690463960d55aec030483c92e0f20115902ae1be0940124080", 0x78}], 0x6, 0xfffffffffffffc00, 0x0, 0x4, 0x5, 0x4af1, 0x5, 0xff}) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x888) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xffffffffffffff87) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x6020400) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) unshare(0x2a060400) socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0xf5, &(0x7f0000000480)=""/6, &(0x7f0000000580)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x0) 1.578177151s ago: executing program 1 (id=4677): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x40880) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20000844) (async, rerun: 32) r6 = socket(0x2b, 0x1, 0x1) (rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd6}}]}, 0x290) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r7, &(0x7f0000000280)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x8}}}}}}, 0x32) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.577660582s ago: executing program 2 (id=4678): syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r0 = socket$kcm(0xa, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@remote, r3}, 0x14) unshare(0x40000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000380)={0x1f, 0xc000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x200280d0}, 0x24050081) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000580)=@ethtool_drvinfo={0x26, "744e97db9afbb12414a6834af78cb3831712e2a2293e398b46cd813d5dd09cd1", "6b6f9b9f8372dd6625bde94e9edc7c35bb7c2c1ffb866b4b4dd789c42881c2a8", "a7695026e9086edf8ccef78410fc16bacb308ca6b200a3c8b84dbc322fd0b42b", "830600cb7a9ae29e5c81d91096bfa200", "29b1b2e5f114e8a8a9f1e200777acf7ef09dbb3c6fde217f4d4cf2e20859b560", "de07748767cdc8e5821ffd4a", 0x200, 0x0, 0x10001, 0x4c4, 0x101}}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="02cb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7f3f07b9bb5b51c4ba8cddba3c80b1f30000000000ad020000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 1.389445631s ago: executing program 2 (id=4679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021341600001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000008160380741100800c0005400000000000000008e4000b80100001800b0001006e756d67656e0000100001800b0001006e756d67656e0000140001800e000100696d6d6564696174650000003c0001800b0001006e756d67656e00002c00028008000140000000150800014000000001080002400000000108000140000000130800034000000001140001800e000100627974656f7264657200000050000180080001006c6f670044000280080003400000000f060004400002000008000340000000030800034000000008060001409c4700000600014007120000060004400c7e000006000140000900000c000180070001006374000020100a801800028008000180fffffffd0900020073797a310000000004100100fbb9931de8eaaa1e050cdbd17df2799fc614f08c8782c6a3f45794a9c3abb1d11b3c6517058cf3948977aaac77630a841e05199b5991f3bd17d16f63a5758fa339dd0b6dc529c5508402ead1e93302ae408a9f4214f4921d762b479cbf6aece34d7af191053b9cf513bb5ef5f905ef10fbf5ad15dac252d10f295b391ba38a466a6a529b9c7eea0093c1639ac1b361dd3764819d69ef20d9090bff58454201e2ab6f51cab8e61f2cb431f72d97815837683f717d91a0a692ca8f71bbbf4f524556f59975926523c2cb307b9a60762b37ab02700c04d9b7bbf6c7e4ae47afb69ba23a9db75bf6850b3667cad376f4ad05ce849bd0723f827b89c185947482be6263b383b9649f88b9c5fb314e9687b9bcff350024e7a7206afc9fcdc6d2284cd9883fee8e93a7357481acf6cb303afef64c2c166d57888017c89c62b15f5e1de9c4769e5ed10c5951f9a942e878c20bddd237a65c1f1731c5586184a808384da5fe89ee8a6c10f128ac49fc32a941e6360de0d26919ecaf8fa323a2a2669df7aefac32636b9ece16eb4e8df6e9da56b5dff3e530212e6c093512533e53f99a9c8955caeba01e1620db957e9544c9dd78114ff1a664585d58fa45fc333bf00b5b85a5787dcac74e9329dbcb9595225f991e8e548a107af93ac4bc5b715ae53c91969ea018e424e8d49b0efe24d0e1dfb347e27b9e88fe2f628b7931691cca0e0a9301d40772051628f85a073d1a5c8f6223bd4bc2f5b914fac5c24945ed90a86da6d06d27af1050ae9d7eddb5fc51f3fc7d62b3633fce3f5e06c0b7de96b95a07647e85ea1d35bd8caffaceca224b58d15a141ff24f0efd6ab8c56cb337fe703069765558e46c93536d23433019b82d714b9ee15750c33b4e67f41f2c0de5b13027273f8d8f50d8039074ecf1a06712a15b4135f7fc8ada9f940234b84e42c49a43a0bab192bd73644953bf61d194247e952349ec2ae93ffd83901f4a9bf398025fb069120a2e27ae94a0254bd38ae10b1ad086d629eff46f83bf8f5d5fddc6b64fb3a81e51ff2b0276eae6079c90f30017deb876b7e63289755af47278f0fffa6a3d0f171cfae0fab5aafc0ae1225d848e8a19ad217c6e32d1ef75c3220f70e4d17d4494e947f531adcd8bff5d5044232ddde13d753a8c000b1bb9c230f7cbae10173e3912a81ee2b4737def4de189b6ffbe2b8d0e156d6628c85416125e217f1c924fb63c378a89ba6bea462ba38a4033c97893d35673332d69ffa052ae75c5f53a87da91c42a73592760d23fadc51602f89e05060762548d569ff2f79235aee8c5272308c21ffa2a2820cc447ef0a1cdce067cb305d9d8ea61ae4ff5566e7467340bf0bd3a0bbac2235339eeaa66f8d05ce6fab0c52721e0deda5bb5a305d0b75d33f274e806dfae01a67927b69396ba24e3c93cbdf85014ca2949f1372d8c55d2ba5884ce171e2ef3e0494c4679114a5be3737f7a43eb30a1de37fafc8de33a06f7e474600f981e9d850ae581988f633607651fe282c9fe094ed6d489e1dac1cde6d5626e1f270f09309aa400ab13908bb5c737420aaa6be5ec8ab95bec1cb8d3b59d82244e65b02ff56e62a1b0452c5865456f5132504c03a1c7e6c4112120a0e117a4240510a20b1ffc02569ae328b89dc798c12231441105f78b99b5299488d2ab4ab394124f5c20c23e40639fc308c76621f62cd8bf86eb58cab4af6a181326fae9466936fc3d91c80812d7aa13488b6cb3e88863bed15f511f9fea9e201fda665b98c8b796cdc08ab2d8546111fd45307d4f779ad1e2c9f4bbec50d74764e68686a01241b3d43bfade25b5b2afafcee531b4cbaaae3e3e7c3cd448c8d1b37ded91a718e89b65fdb1c2dbf798b3b0dd21c468cf93579deae4d8bc47e8330b4459643ae509a4e400eb67d789f9b97a449ecb94e79472037bb99ba3fb05509fa2d2b2283cc04557f0ddbd16e07a96d280e719f057105525e3276dd38691c270ed5e9d6492e02dd7f2ff283af73eff01de66523024003c6bcd50e3de04ab0a66f1b07fb7b3e6b4c20043d90540b4e7b015e0c0b819bcdaa36243106fbf702202bef3adbc8fe73499dd070c54f4e32390b6fa516c7986a0fbddf4667de8dce4ab231d30ee5bd18b1fa38f0ee4b5ed86ce24e07dbded561e26b0c81cf8774d3639105df29d39a1c302af0e63bc9e1ea55de1998c60790cb3622421514c9a1ce6bb907c2f4d7f8dce01681d26a3dd2925b8ae2eb2c8c909b775b1b354c8acbee5f7a34209db486da50e07029b6c52f20d26d481075c9b09d3ce2e02228553efdc63d2c96cd2b30688524cc7f004b545613403225d06036d72139febca3afa1a719eb6f547198865adea20d8a90662e9c7c9d60d31202e80e97caed7890a05b90ce5d730c4616733097cf661518ee19536c02e28f27a521fcca15cc9afc51209889d5da8050f1dc9ecd001d4e4d0b4ebc887482e44d00ccbeae661b3db1d76159414b86b1e567d2b81b0e7e05b016101957262bbee531faff291172f18c41e4a7669696f9401c03ca24ee8ff1870883a45fd9f42542f65f938ae5b79c31326b631cc58cadfe597753a553a2c4438e6ad6572185464a7a13e6f1d6287bd01320d39001ef9b77b805fc787f0748ba939ceac2b38208181762a406ef2c2fefc43aa66f3ad6b2129ae5eee0fc90c27d848038f9b59148e387d6134b6de89ac48dd96f8df21a4c965ee9ed36fd552c7c1c3bdcb4ec08b5e16bcd00388cf0984e0ee95f51c133a381629c374fa5806bf0303bf33418492d5abf5d936852682055c943234e992d0513f4aa777bd7f09e0803fb8ec097477986c1f62ffcff77fa86b62775cb5d5e582d7b02aa3ede589eec25c7527627b0aab4266a9975f01dbbe5fbc6b688732d2739239c46202e4f0346978f60a9c4a3a27adceaad01482096ed7f0ba4d04e14d0ed416aa8305b557cec7f64a46e8c6aa27597c3871185990aa2d05db48889f5932c0893c4e02ac617c62feb8cb5de08cb794d1ae8678500d6d02f66ff7cc793abdcb23392cff7d567f8d1af8f8588d39cbaa3661b112312a48c1e52ebf201778520db64b62acd3f52d7962034fa70dd46d926fa60485232a2b7470b9b57e90ca56a68451ee1a8b6a75e7e2fbccd99d2a96d31ffd91a30c7a9c02f2e023061af17588b27e3b735d1696ca91f576380befd654acbccb07a93934da9aa15792fecb8120d1bd5d10a8a0760b453a3132b31705a168a99742b56e93f48b596b0ea34f6c027560269db0636aaff4e32b86b0355cd5b20665becc84b55672f19358345f393577ab7ad1e966da13b3c9419533361d0ba00180f4c9807544ed8a6f0f53d4f0a4850df95908a4a20b2e9b5dbb447dac52607bcd6531b5358aad652234cd749e87c183ed7f77688df54d3c6d971ecd5a23b46be77869306996334cb541136d2f631f70b6eb4e75533f6f5aa0d7747c1ff33c1558c53480f65f76ab036ea0b54fede2373e04f9bed355332ce4fd9f225bdcc0c4c0d0ed8a66c98259ef7a34ce544521fe0d5aaf3452d416728b8c1a9929e2e9e73509fcf96f74519ad497dcd555b4f3702c906a60fb089865f0182e5ce23e00e5461c2a2d9164a14a46546cfb2d2f74dd93ff59646197b3be9affa188fb61dbabf54d2fc5bffed229dcce570164a77d29c3e4c8ad04f50f5f0b17cfdccb58a8677b724191c24c9b107f277ab61ddd3643ef667eb842c1ba04fcea09ff27575e2c5d0b34b7045e769712809db81fe626d27eb255661eae70a7f17c6ee5226d2291986f78d6407eaf8a414ed41da160ce47719cd037f86fe08a358bfb4ac69bab8099008be892590aa7d33020b73c993f8a27f536a0f3e5184208f3fb585a219c78bf8e0266b1c9c52af96e285ced8f15edc43e376d0771b27aa27ca400688aa6e3103e74e7f64802c5a292f47c96e02e5c8408ff2a72d177a131d26c4a67c56b07f54fba95d57bb25de480e28503669fef0fd186a00584507e13e38ef3de4d2d0670a079e5776477e6c4b5e11711add0172f5263b69051f45851e8be2d66015438317d1dfd87afa666f209d3510dad05f5882422c7ad1776dc43323e70677676dd86a4c502bcce1b2513a02975f19cc774ba1d6e9f66f941921dd2b5fa8dc1fc9c914b371abc91a0040035cb982a9a18ad7381d642fa0447e12f7484f12941724f3c4b1d457ce5fa5f998960ebff5b99a4e991b52df3c0e4586317bddd09ad150cef59ba6c2b915a3a76c66889d02ba579e826f6805c0f0622c2083b7270a1eafd663d7ea0f34abe77cbc5e9c373880b6dde5ea3d8275592a3ad171f147fc3058721b899f589f97c7b0fd297bc385a0c990cfefe9dfb0898a74b83b33e51c42b50cfed5bed6997de4fe858a1d348f04b2a612fd4dcb99de6f362ef4f0b0a0b8505112c4bc32ae1fcd8e03ebe13e2697170c8abde19062015967f1066c59f0e824c11a251c42c5e51cd30b02d5bafec541adcd01936aa708cb614b52924d7dd38ccc1d9e32e9e49131e6074e42a920aebc07159e84c1fcbe0bb2bd00296e0c2f1942fb523a88f9514b7189a3a92ce6f8551b5bb03601736eaf749a37888434d77f6a02e58b97c6a5806d8f0dfcdc3308f83bf44cfd91aac495ba6d5bb9af702cd3de9610d370efb9957719625dce33ee95c9a46656700e3d4e3f3b710a06f1f18947e6a373621220d75e3ddde5badaf5d2d8c68698dea923b756efb2ae1ddc4d2bc271f55b067b033820563d0a0bd67a1ff8ef74a635f2c1280cc8c591a6defe35b58e617cb14cc638996675be5eb3858191e1046ce94a2932eab4c7925e95d7176b08331b394b88e0a2761a56a2c2efd822d985267488ccc65a0bfa3fba8dce2d4bb56b5909b2257516bf5dc4ac2b7e4681f25907380929174f72ea24a2be6332d3d9f577ffbb622d2b50f310033f6c889b8528cc0b0067167f9471aa209353d0c067abdb03e225bfe9763297a150ac222041ebdbfb2cdfc75d99eeb6d8fcfcd10def66f8c6acab05981727dd6250fb030cfcfb4073b46ecb8dbf6974f1e558e1597a79be24d0b436e6d54a3000bf8b4022623982b07157a609d91bae808b2bc3c8736d4852f44dca24bd7850b0d734ecae31dafb1bf7de2f59a30e651429865182cfd984dbe0d93de46a65fcc92694dc1aa0cbe3f20b76000a0b57bcbb8f0cf89d1b815c0b8111d92f132f8b18fe5e68e75bf112ccc2d6fd98dda9ff72e578fbd7f7985bbff26dcb4be5292ecfbe3f753f490237f2e8215ca30bb00e64657cd05846af8cb657d6b71a3b53294b3ad56fbc91ba85d90115ca1f31bc4c01ec642ea3c0a16a92f11c3a21826a2ca8e6d5019ec1fb16830cae870b3c09801475dd7840bf74d5bf8c5dc6cfabdb98d687b803e7ac7427f584b75dc2994196ea92693dff5e36843ac500df553069955ae93b733c09b17a31937f28d11e5ece65d73ff64207eed14855f1c53616d5f7e1888466b81570fef3178908387f7727c1dcab1382bf054bead48c5549bb01dd9902bf4ff5e9264993182f197955756beebbafdcc3bd142df513e2d43ee7f01297b061e4be23b460062e3868c9e2c24c68662920d9ddb6f88ecffbf654d6e8b4d6ed0470ea4b9dcd4e801a79931176cf0dcef3f503a0c5b383b820bbc219c90fc1e9e70eb25cb299d6df8ac16be2ceb2be22524178f0acf4d162e1b74039875e0ff1c5860828e615f35eb877451cc224b9771320b60a1b05c8a881c5466900b5ab93bb5f6b9ac6addee8a3ad38b9d07e563ab98bdcdc2373e357b2e2ad3800018020"], 0x16b8}}, 0x40000) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) readv(r2, &(0x7f0000001a00)=[{&(0x7f0000001640)=""/252, 0xfc}, {&(0x7f0000001480)=""/145, 0x91}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001740)=""/150, 0x96}, {&(0x7f0000001a80)=""/145, 0x91}, {&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000001900)=""/215, 0xd7}], 0x7) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x1001100, 0x4) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001600000000000000ebffffff91113f000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000002c0), &(0x7f0000000440)=0x8) 1.335389278s ago: executing program 1 (id=4680): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x3c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x10005}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x4, 0x0, 0x0, 0xb, 0xce03b2, 0x1}, 0x9c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x638) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) listen(r4, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='westwood', 0x8) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @empty}, 0x1c) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) listen(r7, 0x14) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0x0) (async) readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f00000003c0)=""/200, 0xc8}], 0x2) (async) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1e6a523713c5360e}, 0x4040) r12 = accept4$x25(0xffffffffffffffff, &(0x7f0000000280)={0x9, @remote}, &(0x7f0000000500)=0x12, 0x80800) accept4$x25(r12, &(0x7f0000000540), &(0x7f0000000580)=0x12, 0x80000) 1.295973508s ago: executing program 2 (id=4681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f00000000c0)=@in6={0x21, 0x300, 0x2, 0x1c, {0xa, 0x1b59, 0x20007, @empty, 0x200}}, 0x24) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc0000001900010031bd700000000000ac1e00010000000000000000000000006401010200000000000000000000000000000000000000000a00000000000e99", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ffffffff000000000000000000000000000000013c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a3000000000540000007cdba77c4aa3419e000000000700000008000a40000000030900020073797a31000000000900010073797a30000000000800054000000008080003400000000808000740000000290800064000000000440000000c0a0101000800000000000007004004183d5750e4f46c02480003400000000208000280040001000900020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000a"], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000869f000c1100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22000090780300000000000000"], 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f00000003c0)={{r0, &(0x7f0000000200)='clsact\x00', 0x20100, &(0x7f0000000280)={@align=0x3, {0x2040, 0xffc0, 0x8b98, 0x5}}, 0x5833, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x101}, {[0x1, 0xf77, 0xffff, 0x1]}, 0x566, 0x0, &(0x7f0000000380)}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1a, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff7ffffb, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x1f, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x14, &(0x7f0000000a80)=@raw=[@initr0, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0x5104132557d5b345, 0x0, 0x5, 0xffffffffffffffc0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9fa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @exit], &(0x7f0000000500)='syzkaller\x00', 0x84000001, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0x30, r10, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x6, 0xfffff312, 0xfffffffd}, 0x10, r12, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000640)=[{0x1, 0x4, 0xe, 0x4}, {0x2, 0x3, 0x0, 0x2}, {0x5, 0x4, 0x3, 0x9}, {0x5, 0x2, 0xb, 0xc}, {0x3, 0x2, 0x10, 0x1}, {0x2, 0x2, 0x802, 0x2}], 0x10, 0x1000}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000840)=0x2, 0x4) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff2, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x0) unshare(0x20000d00) 1.161776086s ago: executing program 1 (id=4682): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4515b6bba5a28f4e29f40a1a04d24bd", @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf250700000028000180060005004e22000014000400fe800000000000000000000000000022060001000a000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc8d1}, 0x800) 1.161162803s ago: executing program 0 (id=4683): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x10}, 0xc) sendto$inet(r1, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000440)='\x00', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000180)={r6, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r6, 0x2, 0x6}, &(0x7f0000000040)=0x8) close(0x3) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200)=0xc7f, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) 1.105033668s ago: executing program 3 (id=4684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) 1.102642044s ago: executing program 1 (id=4685): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000600)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001700)={"3f94b8dd5df7d3c518f041d434864da8", r0, r1, {0xde06, 0x4}, {0x2, 0x80}, 0x3, [0x8, 0x0, 0x4, 0x2, 0x1, 0x5, 0x5, 0x89d, 0x4, 0x3, 0x29e1, 0x4, 0xa, 0x0, 0xfffffffffffff801, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"2ea8886788470328cb22efcbdbe73bdb", 0x0, 0x0, {0x4}, {0x3, 0x6}, 0x101, [0x2, 0x1, 0x5caa, 0xcb99, 0x7, 0x1, 0x9, 0x1, 0x5, 0xd2, 0xffffffff00000001, 0x6, 0x7d, 0x9, 0x0, 0x8a]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"65846a5135aa065bfa8b144bbb5aed9c", r0, r2, {0x1000, 0x10}, {0xffffffff, 0x906}, 0x4, [0xffff, 0x0, 0x2, 0xd, 0x9, 0x200, 0x2, 0x8, 0x7, 0x1, 0x59, 0x6, 0x3, 0x3, 0x0, 0x2]}) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="f400005d", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250f000000080001"], 0xf4}, 0x1, 0x0, 0x0, 0x94cd6bcfe2ea64a9}, 0x40010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500004000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) 989.983916ms ago: executing program 1 (id=4686): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000150002000fff52e84407000009300000240600000ee60000bf050000000000001c63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e71a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387bfa1bc9b49da28724ba9cd79fbee8f97af876d0e30c19555ffdd7d73815b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f42407107000cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08124d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cb003841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e75414c91fce6c86287945bd8d258442760000ff010000000000000000000000300807f2f3906c1d45d05ba9df828d35376fed399fa311ff63a34f0c0b82b4f2825e729eb9b7f4c9ab3be5bc011ff29904bbc424880247fabe7325a6e8d139e99d2b2fbf7e84fca3b21c78840b858ce900a4eb9c2b8b9b7fb664d2aeac991ca09b1afc0ef7aed4541a2f7275130a9fa3853481c81e919c000000000000000000000000b1e0e4b55e0d5d8c657b4853fc18ec43be33e5f971cceda04d95c87489910ce692ee55c536d1671bffd4c9b98efb741b13f0ab26ac191c74"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r1, &(0x7f0000002380), 0x12) (async) write$cgroup_pid(r1, &(0x7f0000002380), 0x12) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_OPERSTATE={0x5, 0x10, 0x6c}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0x44}}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_OPERSTATE={0x5, 0x10, 0x6c}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0x44}}, 0x8000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x58, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad61b1143aa3a6"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x806}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@allocspi={0x140, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in6=@private1, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@srcaddr={0x14, 0xd, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0xa, 0x58, 0xc6}}, @offload={0xc}]}, 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="6b606242f9af419afb43fc4e5f5ccc94b5d4517be19cf032f5", 0x19, 0x40040, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x18}, 0x2}, 0x1c) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x100000000000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x20000000, 0xa5, 0x0, &(0x7f0000000180)="32bca46367e11e05fe7dde397a12908a2120e8bd2c0e218b07b8be954bdeeb6a1e223e6885db6936cc9599fee13f25cb50e4e9616590b7e71c9ff402980f8d57d3f3a895266b49691a12ea23ef09dfef87b68d3b0a0c6a59a21a35b4c41b2209c0095a3cf7142c18884f1f33d19bbfae5261116f041b619ad34eb07ea9ecf070eed4fae0664bfb3ad8c4d80678d766f1fe46f52bb45a74ae240d71a766e33568c0ddf67b0a", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x20000000, 0xa5, 0x0, &(0x7f0000000180)="32bca46367e11e05fe7dde397a12908a2120e8bd2c0e218b07b8be954bdeeb6a1e223e6885db6936cc9599fee13f25cb50e4e9616590b7e71c9ff402980f8d57d3f3a895266b49691a12ea23ef09dfef87b68d3b0a0c6a59a21a35b4c41b2209c0095a3cf7142c18884f1f33d19bbfae5261116f041b619ad34eb07ea9ecf070eed4fae0664bfb3ad8c4d80678d766f1fe46f52bb45a74ae240d71a766e33568c0ddf67b0a", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 332.905274ms ago: executing program 3 (id=4687): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x802, 0x6) (async) r1 = socket(0x1d, 0x802, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x7800, 0x8, 0x4, 0x4, {{0x5, 0x4, 0x1, 0x3c, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @empty, @empty}}}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f0000000000)={0x5, 0x3, 0x7ff}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x78, 0xc, 0x8, 0xfffffffe, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x78, 0xc, 0x8, 0xfffffffe, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56743, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x2, 0xfff1}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 270.329173ms ago: executing program 1 (id=4688): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r4], &(0x7f0000000080)='GPL\x00', 0xf7b0, 0x0, 0x0, 0x0, 0x20, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 207.578069ms ago: executing program 2 (id=4689): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "4ab27a5bbf34f8bb", "801f5316346f6be5e67ad1b39021558717e2a4267e0661c1025ae933d34a275f", "1e4fba9a", "c6bbc09f5c48fece"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x2}, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(0xffffffffffffffff, 0x3) socketpair(0xf, 0x2, 0x2, &(0x7f0000000100)) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, 0x0}, 0x40085) sendfile(r0, r3, 0x0, 0x20000000002) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000380)=0x200, 0x4) r6 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r6, &(0x7f0000000000)={&(0x7f0000000300)=@in6={0xa, 0x4e20, 0x20000f07, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x80, 0x0, 0x0, &(0x7f0000000040)}, 0x0) socket$netlink(0x10, 0x3, 0x0) 201.978845ms ago: executing program 0 (id=4690): syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @empty, @val={@void}, {@ipv4={0x6000, @tipc={{0x5, 0x4, 0x0, 0x1, 0x40, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xb}, 0x0, 0x2}}}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x4000}, 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff00c}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000ffdbdf25070000000c00"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x11) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 26.080251ms ago: executing program 3 (id=4691): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x13, 0x800, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0x2}]}, 0x24}}, 0x0) socketpair(0x2a, 0x80000, 0xde9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x0, 0x8, 0x2c, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x7, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0b000000000000ac1e0001830739ac38c9018307efac1414bb0000150490780a010101"], 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000015c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4210000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x88d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000c0"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6}, {0x27}}, [@printk={@lli, {}, {0x5}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x25}}], {{0x4, 0x1, 0x9, 0x3, 0x2}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001600), 0x4) r10 = socket$rxrpc(0x21, 0x2, 0x2) ppoll(&(0x7f0000001640)=[{r1, 0x1200}, {r9, 0x2000}, {r2, 0x413}, {r10, 0x10}], 0x4, &(0x7f0000001680)={0x77359400}, &(0x7f00000016c0)={[0x9]}, 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000001500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000340)=@polexpire={0x114c, 0x1b, 0x400, 0x70bd2d, 0x25dfdbfb, {{{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@loopback, 0x4e24, 0x7, 0x4e21, 0x8, 0x2, 0x20, 0xa0, 0x89, r3, r8}, {0x0, 0x2, 0xf, 0xff2, 0x800, 0x6, 0x1000, 0x100}, {0x8001, 0x2, 0x6, 0x7}, 0x9, 0x6e6bb5, 0x1, 0x1, 0x2, 0x1}, 0x5}, [@replay_esn_val={0x38, 0x17, {0x7, 0x70bd2a, 0x70bd26, 0x70bd25, 0x70bd2c, 0x8, [0xfffffffb, 0x6, 0x4, 0x9, 0x8, 0x3, 0x8]}}, @algo_aead={0x104c, 0x12, {{'aegis128l-generic\x00'}, 0x8000, 0x80, "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"}}, @extra_flags={0x8}]}, 0x114c}, 0x1, 0x0, 0x0, 0x8000}, 0x4080c) 0s ago: executing program 0 (id=4692): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) (async) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x3, 0x800, 0x81, 0x800}) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) unshare(0x8040480) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x110, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000d4bb0000000000950000210000000094e42e381fde4f7d626d01a32c032c4519654a33ecfa7e611006fdec8f75ebb95458643d2b0aa4e68ec6f875b4608523b0b9b6c97e6e22364b3a0afc1510e6d4aec8adc0f789269b944bfc3bc82aad3556787ea6ba3469"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r3}, 0x38) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1b, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901001e000000950000000000000018440000030000000000000000000000850000002700000495000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000060000fdbf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000214010026bd7000fedbdf250800010002000000080044"], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4850) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.4.3232'. [ 567.880834][ T1183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.890388][T17716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.898529][T17716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.906876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.915351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.924313][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.935367][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.605595][T19479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.631392][T19145] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 568.667983][T19145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 568.689800][T19145] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 568.721775][T19145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 568.740861][T19145] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 568.808026][T19145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 568.835562][T19145] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 568.877960][T19145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 568.920695][T19539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3235'. [ 569.167024][T19555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3239'. [ 569.240840][T19145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.317949][T19145] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.333241][ T9314] IPVS: starting estimator thread 0... [ 569.396624][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.403861][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.453402][T19570] IPVS: using max 32 ests per chain, 76800 per kthread [ 569.531213][ T6995] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.538407][ T6995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.762223][T19584] syzkaller0: entered promiscuous mode [ 569.767765][T19584] syzkaller0: entered allmulticast mode [ 569.810928][ T6995] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 569.982137][T19587] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.989859][T19587] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.144125][T19587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.160283][T19587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.289450][T17718] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.304188][T19607] netlink: 'syz.0.3247': attribute type 4 has an invalid length. [ 570.328489][T17718] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.347558][T17718] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.356639][T19609] netlink: 'syz.0.3247': attribute type 4 has an invalid length. [ 570.399064][T17718] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.570902][T19616] netlink: 'syz.0.3249': attribute type 5 has an invalid length. [ 571.000114][ T9313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.112361][T19649] netlink: 'syz.3.3255': attribute type 1 has an invalid length. [ 571.128243][T19649] netlink: 'syz.3.3255': attribute type 2 has an invalid length. [ 571.225529][T19635] syzkaller0: entered promiscuous mode [ 571.236267][T19635] syzkaller0: entered allmulticast mode [ 571.245865][T19649] lo speed is unknown, defaulting to 1000 [ 571.262240][T19145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.298116][T19649] lo speed is unknown, defaulting to 1000 [ 571.324077][T19649] lo speed is unknown, defaulting to 1000 [ 571.403187][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3256'. [ 571.447738][T19655] Set syz1 is full, maxelem 65536 reached [ 571.815302][T19649] infiniband syz0: set down [ 571.836339][T19649] infiniband syz0: added lo [ 571.884999][T19649] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 571.900344][T19649] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 571.917570][T19649] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 571.962727][T19649] RDS/IB: syz0: added [ 571.967710][T19649] smc: adding ib device syz0 with port count 1 [ 571.974405][T19649] smc: ib device syz0 port 1 has no pnetid [ 573.010353][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.018692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.547322][T19660] tipc: Started in network mode [ 573.552412][T19660] tipc: Node identity ac14140f, cluster identity 4711 [ 573.559959][T19660] tipc: New replicast peer: 255.255.255.255 [ 573.566651][T19660] tipc: Enabled bearer , priority 10 [ 573.573087][ T9321] lo speed is unknown, defaulting to 1000 [ 573.596472][ T9319] lo speed is unknown, defaulting to 1000 [ 573.640578][ T1183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.648930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.686522][T19649] lo speed is unknown, defaulting to 1000 [ 573.743178][T19145] veth0_vlan: entered promiscuous mode [ 573.779689][T19145] veth1_vlan: entered promiscuous mode [ 573.818341][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3260'. [ 573.851027][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3260'. [ 573.884316][T19145] veth0_macvtap: entered promiscuous mode [ 573.896603][T19682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3260'. [ 573.925044][T19145] veth1_macvtap: entered promiscuous mode [ 573.948184][T19685] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3261'. [ 573.985534][T19145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.042134][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.063456][T19684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3262'. [ 574.072534][T19145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.102022][T19688] geneve1: entered promiscuous mode [ 574.260357][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.309970][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.328409][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.388429][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.407550][T19693] xfrm0: entered promiscuous mode [ 574.425750][T19693] xfrm0: entered allmulticast mode [ 574.474668][T19702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3266'. [ 574.546910][T19649] lo speed is unknown, defaulting to 1000 [ 574.605954][ T6995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.624563][ T6995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.703084][ T29] tipc: Node number set to 2886997007 [ 574.737918][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.768998][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.903812][T19705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3267'. [ 575.256604][T19649] lo speed is unknown, defaulting to 1000 [ 575.325663][T19723] bond0: (slave ip6tnl0): refused to change device type [ 575.380956][T19723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3272'. [ 575.549832][T19730] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 575.783302][T19735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.864906][T19740] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 575.919471][T19739] veth0: entered promiscuous mode [ 575.926589][T19649] lo speed is unknown, defaulting to 1000 [ 575.985096][T19740] veth0: left promiscuous mode [ 576.202966][ T1647] block nbd1: Possible stuck request ffff888026e60000: control (read@0,1024B). Runtime 390 seconds [ 576.216221][ T1647] block nbd1: Possible stuck request ffff888026e601c0: control (read@1024,1024B). Runtime 390 seconds [ 576.227966][ T1647] block nbd1: Possible stuck request ffff888026e60380: control (read@2048,1024B). Runtime 390 seconds [ 576.239028][ T1647] block nbd1: Possible stuck request ffff888026e60540: control (read@3072,1024B). Runtime 390 seconds [ 576.518671][T19649] lo speed is unknown, defaulting to 1000 [ 576.868137][T19649] lo speed is unknown, defaulting to 1000 [ 577.026828][T19768] syzkaller0: entered promiscuous mode [ 577.043226][T19768] syzkaller0: entered allmulticast mode [ 577.079645][ T9312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.444186][T19773] bond1: option primary_reselect: invalid value (6) [ 577.498560][T19773] bond1 (unregistering): Released all slaves [ 577.560918][T19649] lo speed is unknown, defaulting to 1000 [ 577.888962][T19784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3291'. [ 577.922434][T19784] 8021q: VLANs not supported on vxcan1 [ 578.096790][T19649] lo speed is unknown, defaulting to 1000 [ 578.127818][T19788] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3292'. [ 578.666195][T19649] lo speed is unknown, defaulting to 1000 [ 578.765799][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.774176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.402449][T17718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.410920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.510504][T19807] sctp: [Deprecated]: syz.3.3300 (pid 19807) Use of int in max_burst socket option. [ 579.510504][T19807] Use struct sctp_assoc_value instead [ 579.646861][T19812] __nla_validate_parse: 3 callbacks suppressed [ 579.646879][T19812] netlink: 279 bytes leftover after parsing attributes in process `syz.3.3300'. [ 579.749452][T19812] veth0_to_bond: default FDB implementation only supports local addresses [ 579.995247][ T5645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 580.013724][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 580.025242][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 580.036523][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 580.051168][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 580.121282][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.437483][T19835] macsec0: entered promiscuous mode [ 580.475791][T19835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3304'. [ 580.556363][T19835] veth1_macvtap: left promiscuous mode [ 580.605068][T19835] macsec0 (unregistering): left promiscuous mode [ 580.647087][T19838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3304'. [ 580.661199][T19847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3307'. [ 580.666613][T19838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3304'. [ 580.709378][T19848] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3304'. [ 581.128704][T19824] lo speed is unknown, defaulting to 1000 [ 581.308979][T19863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3309'. [ 581.467382][T19863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.645412][T19824] lo speed is unknown, defaulting to 1000 [ 582.119451][ T5645] Bluetooth: hci2: command tx timeout [ 582.605115][T19824] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.624424][T19824] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.639817][T19824] bridge_slave_0: entered allmulticast mode [ 582.650276][T19824] bridge_slave_0: entered promiscuous mode [ 582.660513][T19902] lo speed is unknown, defaulting to 1000 [ 582.785072][T19824] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.802565][T19824] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.817186][T19824] bridge_slave_1: entered allmulticast mode [ 582.838671][T19824] bridge_slave_1: entered promiscuous mode [ 582.888625][T19914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3322'. [ 582.906027][T19919] netlink: 'syz.1.3323': attribute type 2 has an invalid length. [ 582.981940][T19824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.025982][T19824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.090140][T19925] bridge4: entered allmulticast mode [ 583.172229][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.195435][T19824] team0: Port device team_slave_0 added [ 583.225735][T19824] team0: Port device team_slave_1 added [ 583.315271][T19902] lo speed is unknown, defaulting to 1000 [ 583.350173][T19824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.357300][T19824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.395575][T19824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.411123][T19934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3329'. [ 583.421051][T19824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.428308][T19824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.457802][T19824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.482055][T19935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.503886][T19935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.668838][T19824] hsr_slave_0: entered promiscuous mode [ 583.696027][T19824] hsr_slave_1: entered promiscuous mode [ 583.714899][T19824] debugfs: 'hsr0' already exists in 'hsr' [ 583.728121][T19824] Cannot create hsr debugfs directory [ 583.764633][T19942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3331'. [ 584.098949][T19961] netlink: 'syz.1.3336': attribute type 11 has an invalid length. [ 584.201766][ T5645] Bluetooth: hci2: command tx timeout [ 584.540676][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.549102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.961864][T19978] __nla_validate_parse: 3 callbacks suppressed [ 584.961883][T19978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3340'. [ 585.161842][T17718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.171346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.195753][T19824] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.228370][T19824] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 36868 - 0 [ 585.343356][T19986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3342'. [ 585.408053][T19824] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.452608][T19824] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 36868 - 0 [ 585.564021][T19999] netlink: 'syz.2.3344': attribute type 8 has an invalid length. [ 585.600680][T19999] netlink: 'syz.2.3344': attribute type 9 has an invalid length. [ 585.697775][T19824] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.720395][T19824] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 36868 - 0 [ 585.894622][T20005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3345'. [ 586.170180][T19824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 586.201213][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.201533][T19824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 586.248308][T19824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 586.275400][T19824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 586.291647][ T5645] Bluetooth: hci2: command tx timeout [ 586.293762][T19824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 586.313262][T19824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 586.322065][T19824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 586.333062][T19824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 586.935580][T20010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.167947][T19824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.198030][T19824] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.229166][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.236373][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.292882][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.300091][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.683274][T20048] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 587.700001][T20048] bond2 (unregistering): Released all slaves [ 588.287943][T20077] syzkaller0: entered promiscuous mode [ 588.306278][T20077] syzkaller0: entered allmulticast mode [ 588.360713][ T5645] Bluetooth: hci2: command tx timeout [ 588.521193][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3363'. [ 588.550734][T20094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'. [ 588.752307][T19824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.033111][T20107] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3365'. [ 589.140396][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3366'. [ 589.240965][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.407417][T19824] veth0_vlan: entered promiscuous mode [ 589.444493][T19824] veth1_vlan: entered promiscuous mode [ 589.535031][T19824] veth0_macvtap: entered promiscuous mode [ 589.568082][T19824] veth1_macvtap: entered promiscuous mode [ 589.634338][T19824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.644023][T17716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.652481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.677937][T19824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.713819][T17716] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.753309][T17716] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.791525][T17716] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.836920][T17716] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.854130][T20144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3372'. [ 589.873910][T20144] netlink: 'syz.3.3372': attribute type 1 has an invalid length. [ 590.075568][T17716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.097382][T17716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.128369][T20152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3375'. [ 590.145410][T20152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3375'. [ 590.171455][T20152] netlink: 58 bytes leftover after parsing attributes in process `syz.2.3375'. [ 590.214860][T10186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.233074][T10186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.396639][T20165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3377'. [ 590.468020][T20167] syzkaller0: entered promiscuous mode [ 590.479841][T20167] syzkaller0: entered allmulticast mode [ 590.755958][T20180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3380'. [ 590.797521][T20180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3380'. [ 590.893602][T20184] xfrm0: left promiscuous mode [ 590.920495][ T6272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.928839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.978113][T20184] geneve1: left promiscuous mode [ 591.006429][T20184] geneve2: left promiscuous mode [ 591.024659][T20184] vlan3: left promiscuous mode [ 591.040651][T20184] bridge0: left promiscuous mode [ 591.129811][T20195] batadv_slave_1: entered promiscuous mode [ 591.248493][T20202] netlink: 'syz.3.3384': attribute type 5 has an invalid length. [ 591.267658][T20202] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3384'. [ 591.298861][T20192] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.310678][T20192] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.366598][ T6995] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 591.471644][T20205] netlink: 'syz.3.3387': attribute type 4 has an invalid length. [ 591.501147][T20205] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3387'. [ 591.518699][T20208] netlink: 'syz.0.3388': attribute type 4 has an invalid length. [ 591.541733][T20208] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3388'. [ 591.551413][T20209] netlink: 'syz.0.3388': attribute type 4 has an invalid length. [ 591.562128][T20209] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3388'. [ 591.575383][T20192] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.605104][T20192] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.671955][T20216] vlan2: entered allmulticast mode [ 591.677495][T20216] bond0: entered allmulticast mode [ 591.682895][T20216] bond_slave_0: entered allmulticast mode [ 591.688657][T20216] bond_slave_1: entered allmulticast mode [ 591.721851][T20216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.751823][T20216] bond_slave_0: left allmulticast mode [ 591.789043][T20216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.837924][T20216] bond_slave_1: left allmulticast mode [ 591.848358][T20216] bond0 (unregistering): Released all slaves [ 591.903882][T20191] batadv_slave_1: left promiscuous mode [ 591.967761][T20192] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.989755][T20192] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.163852][T20192] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.183780][T20192] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.245364][T20243] netlink: 'syz.3.3393': attribute type 1 has an invalid length. [ 592.281274][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.366874][T17718] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.376856][T17718] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.402155][T17718] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.410881][T17718] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.435629][T10186] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.450802][T10186] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.472551][T20253] geneve3: entered promiscuous mode [ 592.493064][T10186] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.501786][T10186] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.774952][T20266] macvlan3: entered promiscuous mode [ 592.780635][T20266] macvlan3: entered allmulticast mode [ 592.786624][T20266] veth0: entered promiscuous mode [ 592.794334][T20266] veth0: entered allmulticast mode [ 592.805228][T20266] team0: Port device macvlan3 added [ 592.985624][T20276] lo speed is unknown, defaulting to 1000 [ 593.492043][T20309] netlink: 'syz.3.3412': attribute type 2 has an invalid length. [ 593.524582][T20276] lo speed is unknown, defaulting to 1000 [ 593.656212][ T5768] IPVS: starting estimator thread 0... [ 593.779386][T20314] IPVS: using max 31 ests per chain, 74400 per kthread [ 593.843756][T20326] netlink: 'syz.4.3420': attribute type 1 has an invalid length. [ 593.949136][T20326] bond0 (unregistering): Released all slaves [ 594.365465][T20344] tipc: Failed to remove unknown binding: 66,0,0/0:4070677689/4070677691 [ 594.404723][T20344] tipc: Failed to remove unknown binding: 66,0,0/0:4070677689/4070677690 [ 594.436188][T20346] tipc: Failed to remove unknown binding: 66,0,0/0:4070677689/4070677691 [ 594.453059][T20346] tipc: Failed to remove unknown binding: 66,0,0/0:4070677689/4070677690 [ 594.475362][T20352] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.609112][T20354] sctp: [Deprecated]: syz.1.3428 (pid 20354) Use of int in maxseg socket option. [ 594.609112][T20354] Use struct sctp_assoc_value instead [ 594.684492][T20358] sctp: [Deprecated]: syz.1.3428 (pid 20358) Use of int in maxseg socket option. [ 594.684492][T20358] Use struct sctp_assoc_value instead [ 595.159403][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 595.382570][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.406593][ T6272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.415002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.896425][T20390] __nla_validate_parse: 13 callbacks suppressed [ 595.896446][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3434'. [ 596.024502][T20390] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 596.073312][T20396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3438'. [ 596.139417][T20390] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 596.192375][T20399] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.3438'. [ 596.292586][T20400] tipc: Started in network mode [ 596.329334][T20400] tipc: Node identity ac1414aa, cluster identity 4711 [ 596.345855][T20400] tipc: Enabled bearer , priority 10 [ 596.556187][T20413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3444'. [ 596.567257][T20413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 596.574571][T20413] IPv6: NLM_F_CREATE should be set when creating new route [ 596.661765][T20415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3445'. [ 596.685306][ T6272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.693887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.922992][T20425] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3448'. [ 597.128888][T20434] mac80211_hwsim hwsim22 »»»»»»: renamed from wlan0 (while UP) [ 597.248831][T20443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3453'. [ 597.459532][ T9311] tipc: Node number set to 2886997162 [ 597.557866][T20461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3458'. [ 597.621691][T20461] netlink: 'syz.0.3458': attribute type 10 has an invalid length. [ 597.665536][T20466] netlink: 'syz.4.3460': attribute type 21 has an invalid length. [ 597.694767][T20466] netlink: 'syz.4.3460': attribute type 1 has an invalid length. [ 597.716827][T20466] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3460'. [ 597.790957][ T30] audit: type=1804 audit(1782552752.045:5): pid=20471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3459" name="/newroot/152/cgroup.controllers" dev="tmpfs" ino=789 res=1 errno=0 [ 597.835584][T20469] netlink: 'syz.1.3461': attribute type 4 has an invalid length. [ 597.873440][ T30] audit: type=1800 audit(1782552752.045:6): pid=20471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3459" name="cgroup.controllers" dev="tmpfs" ino=789 res=0 errno=0 [ 598.175652][T20486] tipc: Started in network mode [ 598.193728][T20486] tipc: Node identity ac14140f, cluster identity 4711 [ 598.211112][T20486] tipc: New replicast peer: 255.255.255.255 [ 598.239563][T20486] tipc: Enabled bearer , priority 10 [ 598.443289][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.541506][T20493] netlink: 'syz.3.3467': attribute type 8 has an invalid length. [ 598.721722][T20503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3467'. [ 599.467940][ T5768] tipc: Node number set to 2886997007 [ 599.710502][T20544] syzkaller1: entered promiscuous mode [ 599.729427][T20544] syzkaller1: entered allmulticast mode [ 599.974381][T20564] netlink: 'syz.0.3484': attribute type 3 has an invalid length. [ 600.047078][T20568] openvswitch: netlink: Message has 4 unknown bytes. [ 600.234995][T20579] syzkaller0: entered promiscuous mode [ 600.253822][T20579] syzkaller0: entered allmulticast mode [ 600.521695][T17718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.530721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.004259][T20632] __nla_validate_parse: 10 callbacks suppressed [ 601.004276][T20632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3500'. [ 601.148484][T20643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3502'. [ 601.164367][ T1183] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 601.189391][T20643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.207737][T20643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.248904][T20643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.286874][T20643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.482316][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.712426][T20670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'. [ 601.775937][T20672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3513'. [ 601.914318][T20674] veth3: entered promiscuous mode [ 601.968427][T20679] netlink: 'syz.0.3515': attribute type 1 has an invalid length. [ 602.003823][T20680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.130687][T20684] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3517'. [ 602.170968][T20684] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3517'. [ 602.219621][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3517'. [ 602.326423][T20693] netlink: 'syz.1.3520': attribute type 12 has an invalid length. [ 602.559613][T20699] macsec0: tun_chr_ioctl cmd 1074025675 [ 602.567832][T20701] IPv6: NLM_F_CREATE should be specified when creating new route [ 602.584929][T20699] macsec0: persist enabled [ 602.598925][T20699] macsec0: tun_chr_ioctl cmd 1074025675 [ 602.618884][T20699] macsec0: persist disabled [ 602.808139][T20715] veth0: entered promiscuous mode [ 602.862693][T20715] netlink: 'syz.3.3524': attribute type 1 has an invalid length. [ 602.997194][T20715] 8021q: adding VLAN 0 to HW filter on device bond3 [ 603.069843][T20719] bond3: (slave geneve2): making interface the new active one [ 603.079504][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 603.108799][T20719] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 603.164636][T20733] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3528'. [ 603.223348][ T6995] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.310975][T20733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3528'. [ 603.391313][T20726] syzkaller0: entered promiscuous mode [ 603.403926][T20726] syzkaller0: entered allmulticast mode [ 603.418736][T20728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3528'. [ 603.447146][ T6995] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.478196][ T6995] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.778933][ T6995] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.522974][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.020588][T20722] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.641897][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.650323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.910127][T20722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.923942][T20722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.084469][T20707] veth0: left promiscuous mode [ 606.284052][ T1647] block nbd1: Possible stuck request ffff888026e60000: control (read@0,1024B). Runtime 420 seconds [ 606.295248][ T1647] block nbd1: Possible stuck request ffff888026e601c0: control (read@1024,1024B). Runtime 420 seconds [ 606.306646][ T1647] block nbd1: Possible stuck request ffff888026e60380: control (read@2048,1024B). Runtime 420 seconds [ 606.318181][ T1647] block nbd1: Possible stuck request ffff888026e60540: control (read@3072,1024B). Runtime 420 seconds [ 607.563689][ T9312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.131412][T17715] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.140939][T17715] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.235326][T17715] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.275542][T17715] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.551636][T20791] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 608.566380][T20791] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 608.584698][T20791] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 608.610516][T20799] netlink: 'syz.4.3540': attribute type 32 has an invalid length. [ 608.626337][T20799] __nla_validate_parse: 1 callbacks suppressed [ 608.626352][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3540'. [ 608.630248][T20791] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 608.659781][T20801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3541'. [ 608.675409][T20799] bond1: option coupled_control: invalid value (255) [ 608.682391][T20801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3541'. [ 608.682435][T20801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3541'. [ 608.703281][T20799] bond1 (unregistering): Released all slaves [ 608.747116][T20792] bond2: Unable to set down delay as MII monitoring is disabled [ 608.757470][T20792] bond2 (unregistering): Released all slaves [ 608.922826][T17716] smbdirect: ib_dev[syz2] removed [ 609.278474][T20768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.828605][T20835] lo speed is unknown, defaulting to 1000 [ 610.175766][T20843] netlink: 732 bytes leftover after parsing attributes in process `syz.4.3546'. [ 610.250229][T20843] netlink: 732 bytes leftover after parsing attributes in process `syz.4.3546'. [ 610.484265][T20835] lo speed is unknown, defaulting to 1000 [ 610.602953][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.760365][T17715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.768689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.318967][T20868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3560'. [ 611.648345][T20877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3562'. [ 612.142076][T20877] hsr_slave_0: left promiscuous mode [ 612.164839][T20877] hsr_slave_1: left promiscuous mode [ 613.048452][T20912] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3565'. [ 613.558549][ T9314] lo speed is unknown, defaulting to 1000 [ 613.577552][ T9314] syz0: Port: 1 Link ACTIVE [ 613.599650][ T9312] lo speed is unknown, defaulting to 1000 [ 613.607253][T20904] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 613.639632][ T9312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.688368][T20914] ip6tnl2: entered allmulticast mode [ 613.700761][ T6276] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 613.738476][ T9314] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 613.747460][ T6276] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 614.027856][T20933] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3574'. [ 614.114438][T20933] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.128098][T20933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.262082][T20933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.277897][T20933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.298722][T20933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 614.320300][ T9312] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 614.330824][T20933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 614.355962][T20933] veth1_vlan: left promiscuous mode [ 614.368964][T20933] veth0_vlan: left promiscuous mode [ 614.375999][T20933] veth0_vlan: entered promiscuous mode [ 614.385379][T20933] veth1_vlan: entered promiscuous mode [ 614.396661][T20933] veth1_macvtap: left promiscuous mode [ 614.404178][T20947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3576'. [ 614.415218][T20933] veth0_macvtap: left promiscuous mode [ 614.423006][T20933] veth0_macvtap: entered promiscuous mode [ 614.431252][T20933] veth1_macvtap: entered promiscuous mode [ 614.445951][T20933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 614.470321][T20933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 614.482121][T20933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 614.490910][T20933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 614.511407][T20933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.518946][T20933] ip6gretap0: entered promiscuous mode [ 614.578382][T17715] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.585620][T17715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.623531][T17715] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.630775][T17715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.679932][ T5768] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 614.756185][T20942] syzkaller0: entered promiscuous mode [ 614.761957][T20942] syzkaller0: entered allmulticast mode [ 614.795704][ T6995] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.862894][ T6995] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.895421][ T6995] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.944192][ T6995] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.114416][T20963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3581'. [ 615.278287][T20817] Set syz1 is full, maxelem 65536 reached [ 615.475521][T20977] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 615.507837][T20987] netlink: 'syz.3.3585': attribute type 1 has an invalid length. [ 615.562488][T20989] netlink: 'syz.3.3585': attribute type 5 has an invalid length. [ 615.646600][T20994] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.3584'. [ 615.728572][T20987] bond4: entered promiscuous mode [ 615.748277][T20987] 8021q: adding VLAN 0 to HW filter on device bond4 [ 615.883170][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.891558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.924652][T21008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3591'. [ 616.000096][T21008] sctp: [Deprecated]: syz.3.3591 (pid 21008) Use of int in maxseg socket option. [ 616.000096][T21008] Use struct sctp_assoc_value instead [ 616.000415][T21011] netlink: 'syz.2.3592': attribute type 1 has an invalid length. [ 616.187148][T21019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.471822][T21038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3600'. [ 616.482483][T21037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3600'. [ 616.522325][ T6276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.530669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.572608][T21047] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3602'. [ 616.682001][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.728091][T21054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3603'. [ 616.738783][T21054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3603'. [ 617.058290][T21065] syzkaller0: entered promiscuous mode [ 617.066300][T21065] syzkaller0: entered allmulticast mode [ 617.390340][T21090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.417503][T21092] netlink: 'syz.0.3618': attribute type 1 has an invalid length. [ 617.454159][T21092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 617.478938][T21092] bridge_slave_1: left allmulticast mode [ 617.491590][T21092] bridge_slave_1: left promiscuous mode [ 617.505062][T21092] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.517924][T21092] bond0: (slave bond_slave_0): Releasing backup interface [ 617.533722][T21092] bond0: (slave bond_slave_1): Releasing backup interface [ 617.555914][T21092] team0: Port device team_slave_0 removed [ 617.583062][T21092] team0: Port device team_slave_1 removed [ 617.603224][T21092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 617.799463][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 618.468763][ T6276] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.502144][ T6276] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.533298][T21130] netlink: 'syz.4.3626': attribute type 41 has an invalid length. [ 618.552225][ T6276] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.565654][ T6276] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.081515][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 619.432376][T21159] lo speed is unknown, defaulting to 1000 [ 619.663874][T21176] 8021q: VLANs not supported on gre0 [ 619.724231][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.751528][T21174] team0: Device xfrm0 is of different type [ 620.013116][T21187] __nla_validate_parse: 4 callbacks suppressed [ 620.013135][T21187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3643'. [ 620.173525][T21196] ip6gre2: entered promiscuous mode [ 620.193147][T21196] ip6gre2: entered allmulticast mode [ 620.438383][T21159] lo speed is unknown, defaulting to 1000 [ 620.580747][T21214] syzkaller0: entered promiscuous mode [ 620.615186][T21214] syzkaller0: entered allmulticast mode [ 620.766209][T21214] tipc: Enabled bearer , priority 0 [ 620.787054][T21213] tipc: Resetting bearer [ 620.865273][T21213] tipc: Disabling bearer [ 620.893386][T21232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3656'. [ 620.914357][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3656'. [ 620.948253][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3656'. [ 620.989003][T21232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3656'. [ 621.345320][T21253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3662'. [ 621.374703][T21253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3662'. [ 621.646210][T17715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.654675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.805070][T21265] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3666'. [ 622.131298][T21270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3667'. [ 622.266703][T21275] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3670'. [ 622.279925][ T6992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.288247][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.304546][T21275] openvswitch: netlink: Message has 512 unknown bytes. [ 622.379785][T21261] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.387314][T21261] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.565638][ T30] audit: type=1800 audit(1782552776.825:7): pid=21284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3670" name=CB dev="tmpfs" ino=1010 res=0 errno=0 [ 622.665260][T21261] bridge_slave_0: left allmulticast mode [ 622.680646][T21261] bridge_slave_0: left promiscuous mode [ 622.695856][T21261] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.741745][T21261] bridge_slave_1: left allmulticast mode [ 622.757344][T21261] bridge_slave_1: left promiscuous mode [ 622.768797][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.780624][T21261] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.894047][T21261] team0: Port device team_slave_0 removed [ 622.938011][T21261] team0: Port device team_slave_1 removed [ 622.952686][T21261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.979531][T21261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.994468][T21261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.014226][T21261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.040980][T21261] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 623.072839][T21270] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 623.583914][T21309] netlink: 'syz.0.3678': attribute type 12 has an invalid length. [ 624.021273][T21346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.030805][T21346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.039149][T21346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.048380][T21346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.222446][T21354] veth3: entered promiscuous mode [ 624.727093][T21395] §: renamed from sit0 (while UP) [ 624.836167][T21373] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 624.877560][T21399] netlink: 'syz.0.3704': attribute type 1 has an invalid length. [ 624.916473][T21399] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 625.197618][T21414] netlink: 'syz.2.3709': attribute type 1 has an invalid length. [ 625.197874][T21419] netlink: 'syz.1.3710': attribute type 1 has an invalid length. [ 625.299757][T21419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 625.401462][T21433] netlink: 'syz.1.3710': attribute type 1 has an invalid length. [ 625.418340][T21433] __nla_validate_parse: 10 callbacks suppressed [ 625.418355][T21433] netlink: 756 bytes leftover after parsing attributes in process `syz.1.3710'. [ 625.475929][T21419] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 625.486932][ T7040] Bluetooth: hci3: command tx timeout [ 625.577033][T21435] syzkaller1: entered promiscuous mode [ 625.601498][T21435] syzkaller1: entered allmulticast mode [ 625.676613][T21437] macvlan2: entered promiscuous mode [ 625.693631][T21437] macvlan2: entered allmulticast mode [ 625.708076][T21437] bond1: entered promiscuous mode [ 625.719852][T21437] veth0_to_bond: entered promiscuous mode [ 625.732955][T21437] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 625.757247][T21437] bond1: left promiscuous mode [ 625.764412][T21437] veth0_to_bond: left promiscuous mode [ 625.799301][ T5645] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 625.812402][ T9312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.010438][T21454] tipc: Started in network mode [ 626.028409][T21454] tipc: Node identity cec6b4930bb7, cluster identity 4711 [ 626.058469][T21454] tipc: Enabled bearer , priority 0 [ 626.119538][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 626.171900][T21455] syzkaller0: entered promiscuous mode [ 626.179336][T21455] syzkaller0: entered allmulticast mode [ 626.186347][T21454] sch_tbf: burst 251 is lower than device syzkaller0 mtu (1514) ! [ 626.242350][T21457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3717'. [ 626.254145][T21454] tipc: Resetting bearer [ 626.287536][T21453] tipc: Resetting bearer [ 626.363674][T21453] tipc: Disabling bearer [ 626.654901][T21484] pim6reg99999999: entered allmulticast mode [ 626.691714][T21493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3727'. [ 627.506312][T17716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.514999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.554343][T21530] 8021q: VLANs not supported on syzkaller1 [ 627.901917][T21512] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 627.917305][T21512] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 628.040611][T17716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.048968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.128084][T21512] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 628.156768][T21512] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 628.205076][T21512] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 628.214342][T21512] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 628.345751][T21512] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 628.364985][T21512] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 628.550672][T21578] tipc: Enabled bearer , priority 0 [ 628.583067][T21578] syzkaller0: entered promiscuous mode [ 628.592922][T21578] syzkaller0: entered allmulticast mode [ 628.622331][T21578] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 628.674164][T21583] batadv_slave_1: entered promiscuous mode [ 628.717106][T21578] tipc: Resetting bearer [ 628.745952][T21575] tipc: Resetting bearer [ 628.819819][T21575] tipc: Disabling bearer [ 628.840609][ T9312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.321154][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 629.373388][T21623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3765'. [ 629.604485][T21638] bridge0: entered allmulticast mode [ 629.730564][T21642] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3771'. [ 629.768376][T21642] netlink: 'syz.3.3771': attribute type 15 has an invalid length. [ 629.792183][T21642] x_tables: duplicate underflow at hook 2 [ 629.935834][T21653] IPVS: Unknown mcast interface: vcan0 [ 630.021001][T21662] erspan0: entered allmulticast mode [ 630.667371][T21707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3786'. [ 630.730277][T21704] syzkaller0: entered promiscuous mode [ 630.760355][T21704] syzkaller0: entered allmulticast mode [ 630.818533][T21716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3788'. [ 630.841302][T21715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3788'. [ 631.007156][T21723] netlink: 'syz.2.3790': attribute type 16 has an invalid length. [ 631.121269][T21730] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3792'. [ 631.133392][T21730] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 631.144324][T21732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3791'. [ 631.161072][T21732] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 631.608021][T21741] syzkaller1: entered promiscuous mode [ 631.619514][T21741] syzkaller1: entered allmulticast mode [ 631.806546][T21755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3799'. [ 631.885746][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.047116][T21774] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 632.064212][T21774] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 632.090749][T21774] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 632.264470][T21783] netlink: 'syz.0.3806': attribute type 8 has an invalid length. [ 632.282858][T21783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'. [ 632.345501][T21784] macsec2: entered promiscuous mode [ 632.404147][T21790] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3805'. [ 632.582314][T21795] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3808'. [ 633.162053][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.170468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.260800][T21800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3809'. [ 633.667889][T21807] netlink: 'syz.0.3812': attribute type 1 has an invalid length. [ 633.759570][T21810] syzkaller0: entered promiscuous mode [ 633.781440][T21810] syzkaller0: entered allmulticast mode [ 633.801674][T10186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.810067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.922124][T21819] tipc: Enabled bearer , priority 0 [ 633.963375][T21810] tipc: Resetting bearer [ 634.043047][T21809] tipc: Resetting bearer [ 634.123010][T21809] tipc: Disabling bearer [ 634.626918][T21853] x_tables: duplicate underflow at hook 2 [ 634.635049][T21853] netlink: 'syz.4.3826': attribute type 14 has an invalid length. [ 634.753546][T21858] netlink: 'syz.1.3825': attribute type 21 has an invalid length. [ 634.919515][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.948711][T21866] team0: No ports can be present during mode change [ 635.218243][T21883] netlink: 'syz.1.3834': attribute type 5 has an invalid length. [ 635.442944][T21897] lo speed is unknown, defaulting to 1000 [ 635.786588][T21922] __nla_validate_parse: 14 callbacks suppressed [ 635.786607][T21922] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3844'. [ 635.848204][T21922] x_tables: unsorted entry at hook 2 [ 635.931889][ T9311] IPVS: starting estimator thread 0... [ 636.040452][T21928] IPVS: using max 30 ests per chain, 72000 per kthread [ 636.175666][T21944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3850'. [ 636.210734][T21897] lo speed is unknown, defaulting to 1000 [ 636.361348][ T1647] block nbd1: Possible stuck request ffff888026e60000: control (read@0,1024B). Runtime 450 seconds [ 636.372625][ T1647] block nbd1: Possible stuck request ffff888026e601c0: control (read@1024,1024B). Runtime 450 seconds [ 636.389175][ T1647] block nbd1: Possible stuck request ffff888026e60380: control (read@2048,1024B). Runtime 450 seconds [ 636.402474][ T1647] block nbd1: Possible stuck request ffff888026e60540: control (read@3072,1024B). Runtime 450 seconds [ 636.476546][T21953] lo speed is unknown, defaulting to 1000 [ 636.608263][T21959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3853'. [ 636.802093][T21968] IPv6: sit1: Disabled Multicast RS [ 636.962461][T21975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3860'. [ 636.977358][T21972] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3859'. [ 637.016719][T21972] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3859'. [ 637.095504][T21977] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3859'. [ 637.124864][T21980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3861'. [ 637.174106][T21953] lo speed is unknown, defaulting to 1000 [ 637.442424][T22000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3868'. [ 637.455911][T21990] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3865'. [ 637.494582][T22000] ip6tnl1: entered promiscuous mode [ 637.506791][T22000] ip6tnl1: entered allmulticast mode [ 637.960915][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.921158][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.929704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.261121][T22062] syzkaller1: entered allmulticast mode [ 639.526200][T22090] veth0: entered promiscuous mode [ 639.566592][T17715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.575087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.677185][T22092] x_tables: duplicate underflow at hook 1 [ 639.976074][T22090] veth0: left promiscuous mode [ 640.923539][T22156] __nla_validate_parse: 8 callbacks suppressed [ 640.923558][T22156] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.3912'. [ 640.946643][T22156] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3912'. [ 640.961661][T22162] netlink: 'syz.3.3913': attribute type 4 has an invalid length. [ 640.978045][T22160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.994570][T22157] netlink: 'syz.3.3913': attribute type 4 has an invalid length. [ 641.002999][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.012753][ T9321] lo speed is unknown, defaulting to 1000 [ 641.029931][T22163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3914'. [ 641.046071][ T9321] lo speed is unknown, defaulting to 1000 [ 641.059971][T22163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3914'. [ 641.067075][ T995] lo speed is unknown, defaulting to 1000 [ 641.130818][T22163] ip6tnl1: entered allmulticast mode [ 641.150700][T10186] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 641.355511][T22177] netlink: 'syz.1.3921': attribute type 3 has an invalid length. [ 641.358070][T22176] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3920'. [ 641.370899][T22177] netlink: 'syz.1.3921': attribute type 1 has an invalid length. [ 641.381143][T22179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3922'. [ 641.390558][T22177] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3921'. [ 641.550425][T22189] syzkaller0: entered promiscuous mode [ 641.556123][T22189] syzkaller0: entered allmulticast mode [ 641.569158][T22189] tipc: Enabled bearer , priority 0 [ 641.577989][T22189] netlink: 'syz.1.3925': attribute type 1 has an invalid length. [ 641.586231][T22189] netlink: 756 bytes leftover after parsing attributes in process `syz.1.3925'. [ 641.620891][T22190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3923'. [ 641.636294][T22166] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3916'. [ 641.712436][T22184] tipc: Resetting bearer [ 641.731309][T22194] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000 [ 641.783840][T22184] tipc: Disabling bearer [ 642.030361][T22196] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.111472][T22196] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.121514][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 642.261480][T22210] bridge2: entered promiscuous mode [ 642.277268][T22210] bridge2: entered allmulticast mode [ 642.298413][T22210] team0: Port device bridge2 added [ 642.315577][T22213] ip6tnl5: entered allmulticast mode [ 642.323657][T22217] bridge0: port 3(team0) entered blocking state [ 642.346813][T22217] bridge0: port 3(team0) entered disabled state [ 642.381285][T22222] atomic_op ffff888057a98198 conn xmit_atomic 0000000000000000 [ 642.389116][T22217] team0: entered allmulticast mode [ 642.402607][T22217] team_slave_0: entered allmulticast mode [ 642.422126][T22217] team_slave_1: entered allmulticast mode [ 642.463938][T22217] team0: entered promiscuous mode [ 642.469706][T22217] team_slave_0: entered promiscuous mode [ 642.480963][T22217] team_slave_1: entered promiscuous mode [ 642.505901][T22217] bridge0: port 3(team0) entered blocking state [ 642.512359][T22217] bridge0: port 3(team0) entered forwarding state [ 642.846141][T22196] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.856161][T22196] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.921761][T22196] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.952173][T22196] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.020207][T22253] netlink: 'syz.0.3942': attribute type 1 has an invalid length. [ 643.205773][T22253] 8021q: adding VLAN 0 to HW filter on device bond3 [ 643.247732][T22196] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.278338][T22196] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.524276][T22278] bond4: option primary_reselect: invalid value (6) [ 643.543919][T22278] bond4 (unregistering): Released all slaves [ 643.677584][T22279] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 643.821468][ T6276] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.839041][ T6276] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.936280][T17718] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.944898][T17718] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.954200][T17718] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.963864][T17718] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.976623][T22315] netlink: 'syz.4.3951': attribute type 1 has an invalid length. [ 643.998236][T22313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 644.039880][T22316] netlink: 'syz.3.3949': attribute type 1 has an invalid length. [ 644.040880][ T9312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.058737][T22308] netlink: 'syz.3.3949': attribute type 1 has an invalid length. [ 644.111501][T22315] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 644.130147][T17718] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.168236][T17718] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.237830][T22327] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20001 [ 644.287598][T22330] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 644.684007][ T6992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.702197][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.281155][T22372] netlink: 'syz.1.3969': attribute type 1 has an invalid length. [ 645.320197][T17716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.328548][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.456459][T22372] 8021q: adding VLAN 0 to HW filter on device bond4 [ 645.540907][T22379] vlan2: entered promiscuous mode [ 645.559082][T22379] bond4: entered promiscuous mode [ 645.564445][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 645.597983][ T30] audit: type=1804 audit(1782552799.855:8): pid=22387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3972" name="/newroot/151/cgroup.controllers" dev="tmpfs" ino=786 res=1 errno=0 [ 645.633969][T22379] vlan2: entered allmulticast mode [ 645.649708][T22379] bond4: entered allmulticast mode [ 645.682836][ T30] audit: type=1800 audit(1782552799.855:9): pid=22387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3972" name="cgroup.controllers" dev="tmpfs" ino=786 res=0 errno=0 [ 645.762108][T22389] 8021q: adding VLAN 0 to HW filter on device bond4 [ 645.800549][T22391] bond4: (slave veth5): Enslaving as an active interface with a down link [ 645.865704][T22394] bond4: (slave dummy0): making interface the new active one [ 645.906869][T22394] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 645.936866][T22389] dummy0: entered promiscuous mode [ 645.973787][T22389] bond4: (slave dummy0): Releasing active interface [ 646.111881][T22408] __nla_validate_parse: 6 callbacks suppressed [ 646.111899][T22408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3979'. [ 646.210182][T22408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3979'. [ 646.220383][T22416] validate_nla: 2 callbacks suppressed [ 646.220398][T22416] netlink: 'syz.3.3980': attribute type 15 has an invalid length. [ 646.277180][T22416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3980'. [ 646.453670][T22428] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 646.591104][T22434] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3983'. [ 646.874195][T22456] syzkaller1: entered promiscuous mode [ 646.893969][T22456] syzkaller1: entered allmulticast mode [ 646.926362][T22456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3988'. [ 646.966360][T22456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.016786][T22468] netlink: 'syz.4.3992': attribute type 11 has an invalid length. [ 647.027404][T22468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3992'. [ 647.081128][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.353692][T22483] syzkaller0: entered promiscuous mode [ 647.371722][T22483] syzkaller0: entered allmulticast mode [ 647.439070][T22483] +: renamed from syzkaller0 (while UP) [ 647.492833][T22482] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3995'. [ 647.635671][T22491] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3997'. [ 647.934615][T22514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4003'. [ 648.020856][T22513] netlink: 'syz.3.4004': attribute type 1 has an invalid length. [ 648.023349][T22521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4003'. [ 648.363319][T22537] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 648.556966][T22546] syzkaller0: entered promiscuous mode [ 648.582230][T22546] syzkaller0: entered allmulticast mode [ 648.859781][T22562] netlink: 'syz.2.4018': attribute type 10 has an invalid length. [ 649.205487][T22569] netlink: 'syz.3.4021': attribute type 1 has an invalid length. [ 649.271099][T22569] bond6: entered promiscuous mode [ 649.276691][T22569] 8021q: adding VLAN 0 to HW filter on device bond6 [ 649.488363][T22590] xt_hashlimit: size too large, truncated to 1048576 [ 649.522878][T22591] bridge1: entered promiscuous mode [ 649.538816][T22591] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 649.734912][T22597] bond5: entered promiscuous mode [ 649.760443][T22597] bond5: entered allmulticast mode [ 649.766167][T22597] 8021q: adding VLAN 0 to HW filter on device bond5 [ 649.804175][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 649.962013][T22612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.032880][T22617] netlink: 'syz.0.4032': attribute type 11 has an invalid length. [ 650.048625][T22617] netlink: 'syz.0.4032': attribute type 4 has an invalid length. [ 650.093204][T22617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.121125][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.182262][T22618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.271373][T22618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.440303][T10186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.448707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.502887][T22630] pimreg9: entered allmulticast mode [ 650.636942][T22652] netlink: 'syz.3.4042': attribute type 10 has an invalid length. [ 650.657203][T22652] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 651.080030][T17715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.088540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.704014][T22678] Unsupported ieee802154 address type: 0 [ 651.713022][T22678] __nla_validate_parse: 28 callbacks suppressed [ 651.713037][T22678] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4051'. [ 651.745565][T22678] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4051'. [ 652.136470][T22705] netlink: 'syz.4.4058': attribute type 14 has an invalid length. [ 652.804632][ T30] audit: type=1804 audit(1782552807.065:10): pid=22742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4067" name="/newroot/159/memory.events" dev="tmpfs" ino=831 res=1 errno=0 [ 652.869471][ T30] audit: type=1800 audit(1782552807.065:11): pid=22742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4067" name="memory.events" dev="tmpfs" ino=831 res=0 errno=0 [ 652.924176][ T30] audit: type=1804 audit(1782552807.065:12): pid=22742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4067" name="/newroot/159/memory.events" dev="tmpfs" ino=831 res=1 errno=0 [ 653.034526][T22745] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 653.160594][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.357929][T22761] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4072'. [ 653.406358][T22763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4073'. [ 653.544089][T22770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4075'. [ 653.566013][T22770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4075'. [ 653.579132][T22770] netlink: 'syz.3.4075': attribute type 19 has an invalid length. [ 653.587742][T22770] netlink: 'syz.3.4075': attribute type 20 has an invalid length. [ 653.598660][T22775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4078'. [ 653.613183][T22776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4076'. [ 653.623880][T22777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4076'. [ 653.660713][T22775] team1: entered promiscuous mode [ 653.665913][T22775] team1: entered allmulticast mode [ 653.671714][T22775] 8021q: adding VLAN 0 to HW filter on device team1 [ 653.835512][T22787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4080'. [ 653.914464][T22790] netlink: 'syz.3.4081': attribute type 30 has an invalid length. [ 653.994503][T22793] netlink: 'syz.3.4081': attribute type 30 has an invalid length. [ 654.546452][T22834] geneve1: entered promiscuous mode [ 654.922650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.931033][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 654.942011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.956139][T22858] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 2, id = 0 [ 655.061437][T22859] bridge3: entered promiscuous mode [ 655.075810][T22859] bridge3: entered allmulticast mode [ 655.087386][T22859] team0: Port device bridge3 added [ 655.097477][T22861] bridge0: port 1(team0) entered blocking state [ 655.113807][T22861] bridge0: port 1(team0) entered disabled state [ 655.125544][T22861] team0: entered allmulticast mode [ 655.143210][T22861] team0: entered promiscuous mode [ 655.166536][T22865] vti1: entered promiscuous mode [ 655.200878][T22859] bridge4: entered promiscuous mode [ 655.215861][T22859] bridge4: entered allmulticast mode [ 655.223796][T22868] tipc: Started in network mode [ 655.238806][T22868] tipc: Node identity 00000000000003000000000000000001, cluster identity 4711 [ 655.272927][T22868] tipc: Enabling of bearer rejected, failed to enable media [ 655.310617][T22859] bridge5: entered promiscuous mode [ 655.322398][T22859] bridge5: entered allmulticast mode [ 655.338384][T22859] bridge6: entered promiscuous mode [ 655.345072][T22859] bridge6: entered allmulticast mode [ 655.365011][T22859] bridge7: entered promiscuous mode [ 655.373500][T22859] bridge7: entered allmulticast mode [ 655.426704][T22859] bridge8: entered promiscuous mode [ 655.445317][T22859] bridge8: entered allmulticast mode [ 655.495355][T22859] bridge9: entered promiscuous mode [ 655.500939][T22859] bridge9: entered allmulticast mode [ 655.518660][T22859] bridge10: entered promiscuous mode [ 655.525011][T22859] bridge10: entered allmulticast mode [ 655.564516][T22859] bridge11: entered promiscuous mode [ 655.584723][T22859] bridge11: entered allmulticast mode [ 655.627559][T22859] bridge12: entered promiscuous mode [ 655.637279][T22859] bridge12: entered allmulticast mode [ 655.675458][T22859] bridge13: entered promiscuous mode [ 655.688650][T22859] bridge13: entered allmulticast mode [ 655.736199][T22859] bridge14: entered promiscuous mode [ 655.754870][T22859] bridge14: entered allmulticast mode [ 655.806270][T22859] bridge15: entered promiscuous mode [ 655.828409][T22859] bridge15: entered allmulticast mode [ 656.025959][T22916] netlink: 'syz.3.4113': attribute type 15 has an invalid length. [ 656.056417][T17715] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 656.065306][T22916] netlink: 'syz.3.4113': attribute type 15 has an invalid length. [ 656.074895][T17715] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 656.086510][T17715] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 656.096157][T17715] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 656.199736][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.210767][T17715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.219085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.379015][T22942] veth0: entered promiscuous mode [ 656.468644][T22929] veth0: left promiscuous mode [ 656.840897][ T6992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.849266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.966653][T22973] __nla_validate_parse: 69 callbacks suppressed [ 656.966671][T22973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4127'. [ 656.994241][T22973] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4127'. [ 657.014110][T22973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4127'. [ 657.092245][T22973] batadv1: entered promiscuous mode [ 657.106502][T22973] batadv1: entered allmulticast mode [ 657.153575][T22981] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 657.258492][T22985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4131'. [ 657.294354][T22985] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4131'. [ 657.320225][T22985] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4131'. [ 657.349074][T22985] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4131'. [ 657.473056][T22995] netlink: 'syz.4.4134': attribute type 2 has an invalid length. [ 657.538625][T22995] : entered promiscuous mode [ 657.731509][T23008] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 657.870516][T23019] netlink: 'syz.2.4139': attribute type 6 has an invalid length. [ 657.977714][T23024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4142'. [ 658.012135][T23024] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4142'. [ 658.035354][T23022] lo speed is unknown, defaulting to 1000 [ 658.358780][T23034] team0: left allmulticast mode [ 658.378277][T23034] team_slave_0: left allmulticast mode [ 658.400461][T23034] team_slave_1: left allmulticast mode [ 658.462883][T23034] team0: left promiscuous mode [ 658.485563][T23034] team_slave_0: left promiscuous mode [ 658.542856][T23034] team_slave_1: left promiscuous mode [ 658.560630][T23048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4147'. [ 658.576749][T23034] bridge0: port 3(team0) entered disabled state [ 658.645470][T23034] bridge_slave_0: left allmulticast mode [ 658.651468][T23034] bridge_slave_0: left promiscuous mode [ 658.657275][T23034] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.674728][T23034] bridge_slave_1: left allmulticast mode [ 658.685939][T23034] bridge_slave_1: left promiscuous mode [ 658.692023][T23034] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.711043][T23034] bond1: (slave veth0_to_bond): Releasing backup interface [ 658.737972][T23034] bond0: (slave bond_slave_0): Releasing backup interface [ 658.766931][T23034] bond0: (slave bond_slave_1): Releasing backup interface [ 658.798796][T23034] team0: Port device team_slave_0 removed [ 658.817583][T23034] team0: Port device team_slave_1 removed [ 658.837440][T23034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.847038][T23034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.855652][T23034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.864507][T23034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.896438][T23034] team0: Port device bridge2 removed [ 658.917921][T23043] team0: Mode changed to "loadbalance" [ 658.926061][T23022] lo speed is unknown, defaulting to 1000 [ 659.240297][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.768760][T23091] lo speed is unknown, defaulting to 1000 [ 660.247037][T23091] lo speed is unknown, defaulting to 1000 [ 661.964155][ T6276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.972661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.146221][T23175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.213294][T23172] lo speed is unknown, defaulting to 1000 [ 662.290137][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.484089][T23183] netlink: 'syz.1.4183': attribute type 5 has an invalid length. [ 662.609044][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.617926][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.635713][T23186] netlink: 'syz.4.4184': attribute type 4 has an invalid length. [ 662.674584][T23186] netlink: 'syz.4.4184': attribute type 4 has an invalid length. [ 662.701108][T23172] lo speed is unknown, defaulting to 1000 [ 662.712386][T23188] netlink: 'syz.3.4185': attribute type 1 has an invalid length. [ 662.726409][T23191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.742365][T23188] netlink: 'syz.3.4185': attribute type 1 has an invalid length. [ 662.774533][T23188] netlink: 'syz.3.4185': attribute type 1 has an invalid length. [ 662.784249][T23186] __nla_validate_parse: 10 callbacks suppressed [ 662.784265][T23186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4184'. [ 662.795843][T23188] netlink: 'syz.3.4185': attribute type 1 has an invalid length. [ 662.809347][T23194] netlink: 'syz.1.4186': attribute type 1 has an invalid length. [ 662.811646][T23195] netlink: 'syz.1.4186': attribute type 1 has an invalid length. [ 662.838061][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4184'. [ 662.868150][T23194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 662.931170][T23193] bond5 (unregistering): Released all slaves [ 663.025222][T23199] can: request_module (can-proto-0) failed. [ 663.033419][T23201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4187'. [ 663.044990][T23201] netlink: 'syz.3.4187': attribute type 2 has an invalid length. [ 663.111134][T23203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4188'. [ 663.336149][T23208] syzkaller1: entered promiscuous mode [ 663.351285][T23208] syzkaller1: entered allmulticast mode [ 663.482033][T23210] lo speed is unknown, defaulting to 1000 [ 663.549860][T23214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4192'. [ 663.583534][T23214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4192'. [ 664.200302][T23244] syzkaller0: entered promiscuous mode [ 664.205929][T23244] syzkaller0: entered allmulticast mode [ 664.385143][T23210] lo speed is unknown, defaulting to 1000 [ 665.252101][T23274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4210'. [ 665.274346][T23274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4210'. [ 665.321412][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.503486][T23278] syzkaller1: entered promiscuous mode [ 665.518017][T23278] syzkaller1: entered allmulticast mode [ 666.458054][ T1647] block nbd1: Possible stuck request ffff888026e60000: control (read@0,1024B). Runtime 480 seconds [ 666.468896][ T1647] block nbd1: Possible stuck request ffff888026e601c0: control (read@1024,1024B). Runtime 480 seconds [ 666.480705][ T1647] block nbd1: Possible stuck request ffff888026e60380: control (read@2048,1024B). Runtime 480 seconds [ 666.491801][ T1647] block nbd1: Possible stuck request ffff888026e60540: control (read@3072,1024B). Runtime 480 seconds [ 666.645150][T23295] mac80211_hwsim hwsim16 +: renamed from syzkaller0 [ 666.675980][T23299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4215'. [ 666.811069][T23303] netlink: 292 bytes leftover after parsing attributes in process `syz.3.4217'. [ 667.080736][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.089123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.136466][T23317] xt_TCPMSS: Only works on TCP SYN packets [ 667.647502][T23335] IPVS: Scheduler module ip_vs_ not found [ 667.895319][T23346] __nla_validate_parse: 14 callbacks suppressed [ 667.895338][T23346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4227'. [ 667.966621][T23351] geneve3: entered promiscuous mode [ 667.979025][T23351] geneve3: entered allmulticast mode [ 668.182138][T23365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4236'. [ 668.195589][T23359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4234'. [ 668.218060][T23359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4234'. [ 668.279065][T23361] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4235'. [ 668.368905][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.377573][T17715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.385894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.574595][T23378] syzkaller0: entered promiscuous mode [ 668.583174][T23378] syzkaller0: entered allmulticast mode [ 668.703977][T23387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4242'. [ 668.937127][T23394] syzkaller0: entered promiscuous mode [ 668.963936][T23394] syzkaller0: entered allmulticast mode [ 668.999122][T23402] syzkaller1: entered promiscuous mode [ 669.011430][T23402] syzkaller1: entered allmulticast mode [ 669.024396][T23402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4247'. [ 670.378776][T23432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4253'. [ 670.493768][T23434] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4253'. [ 671.306446][T23433] vlan2: entered allmulticast mode [ 671.329572][T23433] bond0: entered allmulticast mode [ 671.348118][T23433] bond_slave_0: entered allmulticast mode [ 671.373053][T23433] bond_slave_1: entered allmulticast mode [ 671.382371][T23433] bridge0: entered allmulticast mode [ 671.399858][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.426976][T23434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.441705][T23434] bond_slave_0: left allmulticast mode [ 671.451031][T23445] validate_nla: 5 callbacks suppressed [ 671.451048][T23445] netlink: 'syz.0.4256': attribute type 1 has an invalid length. [ 671.465573][T23434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.474613][T23434] bond_slave_1: left allmulticast mode [ 671.482541][T23434] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 671.491834][T23434] bridge0: left allmulticast mode [ 671.507497][T23434] bond0 (unregistering): Released all slaves [ 671.518371][T23439] netlink: 'syz.2.4255': attribute type 29 has an invalid length. [ 671.594424][T23445] 8021q: adding VLAN 0 to HW filter on device bond6 [ 671.682895][T23448] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 671.727131][T23445] macvlan1: entered promiscuous mode [ 671.761290][T23445] macvlan1: entered allmulticast mode [ 671.778437][T23445] bond6: entered promiscuous mode [ 671.795755][T23445] veth0_to_bond: entered promiscuous mode [ 671.814376][T23445] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 671.832601][T23445] bond6: left promiscuous mode [ 671.843526][T23445] veth0_to_bond: left promiscuous mode [ 671.852509][T23461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4261'. [ 671.946841][T23446] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 672.318152][T16597] udevd[16597]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 672.465299][T23481] IPv6: Can't replace route, no match found [ 672.526114][T23484] netlink: 'syz.3.4267': attribute type 1 has an invalid length. [ 672.580060][T23484] bond0: entered promiscuous mode [ 672.585685][T23484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.825632][T23491] netlink: 'syz.3.4269': attribute type 8 has an invalid length. [ 672.839400][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 672.848702][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.858005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.017127][T23499] __nla_validate_parse: 2 callbacks suppressed [ 673.017144][T23499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4270'. [ 673.122364][T23507] SET target dimension over the limit! [ 673.362787][T23521] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4278'. [ 673.382227][T23521] openvswitch: netlink: Message has 512 unknown bytes. [ 673.414882][T23514] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 673.453761][T23514] bond7 (unregistering): Released all slaves [ 673.714128][T23527] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.746459][T23543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4279'. [ 673.767576][T23520] netlink: 'syz.0.4277': attribute type 2 has an invalid length. [ 673.789804][T23520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4277'. [ 673.820001][T23520] nbd: must specify at least one socket [ 673.861901][T23537] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 674.119598][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 674.122456][ T1183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.135746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.440288][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.985132][ T4992] udevd[4992]: worker [6556] /devices/virtual/block/nbd1 timeout; kill it [ 677.005719][ T4992] udevd[4992]: seq 11788 '/devices/virtual/block/nbd1' killed [ 677.489832][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.537513][T23594] netlink: 'syz.2.4289': attribute type 1 has an invalid length. [ 677.553175][T23590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.581418][T23590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.583682][T23586] erspan0: left allmulticast mode [ 677.597412][T23590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.637324][T23586] batadv_slave_1: left promiscuous mode [ 677.960335][ T6276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.968738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.228005][T23586] veth3: left promiscuous mode [ 678.247490][T23586] macsec2: left promiscuous mode [ 678.270450][T23586] ip6tnl1: left allmulticast mode [ 678.330449][T23594] bond2: entered promiscuous mode [ 678.341393][T23594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 678.404666][T23597] bond2: (slave bridge7): making interface the new active one [ 678.419515][T23597] bridge7: entered promiscuous mode [ 678.426769][T23597] bond2: (slave bridge7): Enslaving as an active interface with an up link [ 678.452682][T23605] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 678.474932][T23605] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 678.512580][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 678.526221][T17718] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.586718][T17718] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.623293][T17718] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.823047][T23637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4296'. [ 679.327503][T23665] netlink: 'syz.0.4303': attribute type 1 has an invalid length. [ 679.591459][T23667] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 679.636436][T23665] 8021q: adding VLAN 0 to HW filter on device bond8 [ 679.658669][T23673] bond8: (slave geneve4): making interface the new active one [ 679.668300][T23673] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 679.706896][T23678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4307'. [ 679.721876][T23678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4307'. [ 679.804992][ T6272] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 679.822764][ T6272] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 679.851174][ T6272] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 679.880236][ T1183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.888546][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.901650][T17718] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 680.015703][T23689] erspan1: entered promiscuous mode [ 680.037070][T23689] erspan1: entered allmulticast mode [ 680.103503][ T30] audit: type=1804 audit(1782552834.365:13): pid=23700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4315" name="/newroot/206/cgroup.controllers" dev="tmpfs" ino=1074 res=1 errno=0 [ 680.156870][ T30] audit: type=1800 audit(1782552834.395:14): pid=23700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4315" name="cgroup.controllers" dev="tmpfs" ino=1074 res=0 errno=0 [ 680.210459][T23705] netlink: 'syz.1.4316': attribute type 1 has an invalid length. [ 680.341713][T23705] 8021q: adding VLAN 0 to HW filter on device bond5 [ 680.411169][T23706] macvtap1: entered promiscuous mode [ 680.462568][T23711] 8021q: adding VLAN 0 to HW filter on device bond5 [ 680.485575][T23711] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 680.507407][T23711] bond5: (slave gre1): Error -95 calling set_mac_address [ 680.520788][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.617252][T23722] netlink: 'syz.2.4319': attribute type 1 has an invalid length. [ 680.644696][T23715] gretap1: entered promiscuous mode [ 680.682531][T23715] bond5: (slave gretap1): making interface the new active one [ 680.688591][T23720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4319'. [ 680.707536][T23715] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 680.730804][T23705] macvlan2: entered promiscuous mode [ 680.736218][T23705] macvlan2: entered allmulticast mode [ 680.743162][T23705] bond5: entered promiscuous mode [ 680.749059][T23705] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 680.770024][T23705] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 680.790440][T23705] bond5: left promiscuous mode [ 680.818405][T23722] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 681.267361][T23746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4324'. [ 681.371791][T23751] netlink: 292 bytes leftover after parsing attributes in process `syz.1.4328'. [ 681.402904][T23758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4329'. [ 681.460006][T23756] lo speed is unknown, defaulting to 1000 [ 681.748769][T23756] lo speed is unknown, defaulting to 1000 [ 681.907317][T23762] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 682.083700][T23783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4337'. [ 682.679447][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 682.938255][T23809] syzkaller0: entered promiscuous mode [ 682.953342][T23809] syzkaller0: entered allmulticast mode [ 683.564515][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.721253][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 683.721956][ T6992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.737251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.759368][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 685.376550][T23841] netlink: 6188 bytes leftover after parsing attributes in process `syz.3.4347'. [ 685.416692][T23841] netlink: zone id is out of range [ 685.437338][T23841] netlink: set zone limit has 4 unknown bytes [ 685.637247][T23853] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4352'. [ 685.659346][T17718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.667646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.720431][T23856] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 685.799405][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 686.237513][T23890] syzkaller0: entered promiscuous mode [ 686.243363][T23890] syzkaller0: entered allmulticast mode [ 686.277890][T23890] tipc: Enabled bearer , priority 0 [ 686.333453][T23890] tipc: Resetting bearer [ 686.364509][T23884] tipc: Resetting bearer [ 686.424885][T23884] tipc: Disabling bearer [ 688.839731][ T6995] net_ratelimit: 3 callbacks suppressed [ 688.839746][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.853675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.919334][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 689.640946][ T9314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.655234][T17715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.663960][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.672933][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.959324][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 690.999352][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 691.399982][T17718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.119326][ C0] net_ratelimit: 4 callbacks suppressed [ 694.119341][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 694.599992][T17718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.608279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.159364][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 695.799559][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.199337][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 696.519802][ T1647] block nbd1: Possible stuck request ffff888026e60000: control (read@0,1024B). Runtime 510 seconds [ 696.532018][ T1647] block nbd1: Possible stuck request ffff888026e601c0: control (read@1024,1024B). Runtime 510 seconds [ 696.543167][ T1647] block nbd1: Possible stuck request ffff888026e60380: control (read@2048,1024B). Runtime 510 seconds [ 696.554209][ T1647] block nbd1: Possible stuck request ffff888026e60540: control (read@3072,1024B). Runtime 510 seconds [ 697.159907][T17718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.168271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.239391][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 698.279401][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 699.319345][ C0] net_ratelimit: 1 callbacks suppressed [ 699.319367][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 700.359373][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 700.360027][ T6992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.375043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.399352][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 701.879800][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.439328][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 702.919685][ T6276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.928010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.479355][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 704.519465][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 704.922586][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.559322][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 706.121577][ T6276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.129979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.599434][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 707.639356][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 707.959393][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.679372][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 708.681973][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.719366][ C0] net_ratelimit: 1 callbacks suppressed [ 709.719386][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 710.759304][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 710.893599][T23912] lo speed is unknown, defaulting to 1000 [ 710.941089][T23917] nbd: must specify a size in bytes for the device [ 710.985537][T23917] batadv_slave_1: entered promiscuous mode [ 711.001504][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.022419][T23915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4367'. [ 711.070754][T23911] can: request_module (can-proto-0) failed. [ 711.101934][T23915] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4367'. [ 711.239463][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 711.450584][T23940] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4374'. [ 711.491031][T23940] tipc: Enabling of bearer rejected, failed to enable media [ 711.535762][T23944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.678702][T23912] lo speed is unknown, defaulting to 1000 [ 711.757102][T23917] batadv_slave_1: left promiscuous mode [ 711.799313][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 711.879627][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.888022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.340720][T23961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4382'. [ 712.429719][T23965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4383'. [ 712.687825][T23971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4387'. [ 712.807020][T23976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4389'. [ 712.839270][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 712.862926][T23978] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4390'. [ 712.927389][T23983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4391'. [ 712.928350][T23982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4391'. [ 713.081300][T23983] team0: Port device team_slave_0 removed [ 713.426525][T24003] netlink: 'syz.0.4395': attribute type 3 has an invalid length. [ 713.564108][T24006] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 713.583722][T23999] netlink: 'syz.0.4395': attribute type 12 has an invalid length. [ 713.879408][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 714.040628][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.121761][T24031] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 714.197131][T24031] netlink: 'syz.1.4404': attribute type 11 has an invalid length. [ 714.438091][T24053] netlink: 'syz.1.4408': attribute type 1 has an invalid length. [ 714.449846][ T6992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.919301][ C0] net_ratelimit: 1 callbacks suppressed [ 714.919322][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 715.959306][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 716.242888][T24136] netlink: 'syz.1.4423': attribute type 11 has an invalid length. [ 716.285172][T24136] __nla_validate_parse: 10 callbacks suppressed [ 716.285189][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4423'. [ 716.704017][T24154] netlink: 'syz.1.4430': attribute type 30 has an invalid length. [ 716.733660][T24154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4430'. [ 716.928712][T24174] tipc: Enabling of bearer rejected, failed to enable media [ 716.946135][T24171] netlink: 'syz.3.4434': attribute type 2 has an invalid length. [ 716.959447][T24171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4434'. [ 716.986267][T24172] netlink: 'syz.3.4434': attribute type 2 has an invalid length. [ 716.999731][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 717.028105][T24172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4434'. [ 717.081466][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.111824][T24184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4438'. [ 717.127592][T24186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4438'. [ 717.360806][T24197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4441'. [ 717.394384][T24197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4441'. [ 717.639980][ T6992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.648362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.867093][T24217] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4445'. [ 717.962714][T24220] tipc: Enabling of bearer rejected, already enabled [ 718.039312][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 718.566855][T24248] netlink: 296 bytes leftover after parsing attributes in process `syz.1.4453'. [ 718.627098][T24250] netlink: 'syz.4.4454': attribute type 1 has an invalid length. [ 718.741780][T24250] 8021q: adding VLAN 0 to HW filter on device bond2 [ 718.846987][T24250] bond2: entered promiscuous mode [ 718.857006][T24250] bond2: entered allmulticast mode [ 719.079315][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 719.451178][T24291] lo: entered allmulticast mode [ 719.467507][T24291] lo: left allmulticast mode [ 720.119311][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 720.135570][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.209476][T10186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.217781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.008346][T24363] netlink: 'syz.4.4486': attribute type 11 has an invalid length. [ 721.030472][T24363] netlink: 'syz.4.4486': attribute type 13 has an invalid length. [ 721.159330][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 721.228186][T24371] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 721.361445][T24375] __nla_validate_parse: 8 callbacks suppressed [ 721.361462][T24375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4490'. [ 721.438813][T24375] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4490'. [ 722.199404][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 722.459909][T24385] dummy0: left promiscuous mode [ 722.566114][T24385] xfrm0: left allmulticast mode [ 722.593094][T24397] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20264 [ 722.668960][T24385] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 722.678420][T24385] mac80211_hwsim hwsim18 wlan0: left allmulticast mode [ 722.699025][T24385] geneve2: left allmulticast mode [ 722.724168][T24385] geneve3: left promiscuous mode [ 722.737651][T24385] ip6tnl5: left allmulticast mode [ 722.896520][T24385] bond5: left promiscuous mode [ 722.908391][T24385] bond5: left allmulticast mode [ 722.924943][T24385] bridge4: left promiscuous mode [ 722.933475][T24385] bridge4: left allmulticast mode [ 722.943703][T24385] bridge5: left promiscuous mode [ 722.948717][T24385] bridge5: left allmulticast mode [ 722.955090][T24385] bridge6: left promiscuous mode [ 722.960467][T24385] bridge6: left allmulticast mode [ 722.965724][T24385] bridge7: left promiscuous mode [ 722.970813][T24385] bridge7: left allmulticast mode [ 722.976085][T24385] bridge8: left promiscuous mode [ 722.982105][T24385] bridge8: left allmulticast mode [ 722.987372][T24385] bridge9: left promiscuous mode [ 722.993004][T24385] bridge9: left allmulticast mode [ 722.998265][T24385] bridge10: left promiscuous mode [ 723.004276][T24385] bridge10: left allmulticast mode [ 723.010047][T24385] bridge11: left promiscuous mode [ 723.015125][T24385] bridge11: left allmulticast mode [ 723.025939][T24385] bridge12: left promiscuous mode [ 723.031502][T24385] bridge12: left allmulticast mode [ 723.036885][T24385] bridge13: left promiscuous mode [ 723.042989][T24385] bridge13: left allmulticast mode [ 723.048399][T24385] bridge14: left promiscuous mode [ 723.054110][T24385] bridge14: left allmulticast mode [ 723.059745][T24385] bridge15: left promiscuous mode [ 723.064908][T24385] bridge15: left allmulticast mode [ 723.122331][T24385] erspan1: left promiscuous mode [ 723.136147][T24385] erspan1: left allmulticast mode [ 723.175454][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.239301][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 723.368854][T24388] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.376526][T24388] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.401670][ T1183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.410758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.374068][T24388] geneve0: left promiscuous mode [ 724.510285][T24388] veth0: left allmulticast mode [ 724.835454][ T6995] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.873812][ T6995] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.908146][ T6995] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 60081 - 0 [ 724.933915][ T6995] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.968330][ T6995] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.991623][ T6995] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 60081 - 0 [ 725.031151][ T6995] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.071605][ T6995] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.106711][ T6995] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 60081 - 0 [ 725.123365][T24433] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4505'. [ 725.138651][ T6995] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.153809][ T6995] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.170773][T24435] netlink: 'syz.2.4506': attribute type 1 has an invalid length. [ 725.178713][ T6995] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 60081 - 0 [ 725.190449][T24435] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4506'. [ 725.200689][ T6995] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.213715][ T6995] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.233694][ T6995] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.264272][ T6995] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.297250][ T6995] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.319627][ C0] net_ratelimit: 1 callbacks suppressed [ 725.319642][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 725.335674][ T6995] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.355758][ T6995] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.375036][T24442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4507'. [ 725.386551][ T6995] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.557899][T24455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4508'. [ 725.702325][T24459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4509'. [ 725.739683][T24459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4509'. [ 725.795554][T24472] netlink: 'syz.0.4512': attribute type 1 has an invalid length. [ 725.823893][T24472] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 725.957698][T24483] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 725.976432][ T1183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.984852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.015530][T24486] netlink: 'syz.4.4515': attribute type 8 has an invalid length. [ 726.200941][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.247560][T24495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4518'. [ 726.359502][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 726.374171][T24502] syzkaller0: entered promiscuous mode [ 726.410396][T24502] syzkaller0: entered allmulticast mode [ 726.601419][ T1647] block nbd1: Possible stuck request ffff888026e60000: control (read@0,1024B). Runtime 540 seconds [ 726.605480][T24520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4524'. [ 726.614969][ T1647] block nbd1: Possible stuck request ffff888026e601c0: control (read@1024,1024B). Runtime 540 seconds [ 726.632998][ T1647] block nbd1: Possible stuck request ffff888026e60380: control (read@2048,1024B). Runtime 540 seconds [ 726.644466][ T1647] block nbd1: Possible stuck request ffff888026e60540: control (read@3072,1024B). Runtime 540 seconds [ 726.787778][T24526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4525'. [ 726.822158][T24531] No such timeout policy "syz1" [ 727.133833][T24545] netlink: 480 bytes leftover after parsing attributes in process `syz.1.4529'. [ 727.143309][T24545] netlink: 480 bytes leftover after parsing attributes in process `syz.1.4529'. [ 727.162558][T24545] netlink: 1192 bytes leftover after parsing attributes in process `syz.1.4529'. [ 727.249364][T24558] syzkaller1: entered promiscuous mode [ 727.268877][T24558] syzkaller1: entered allmulticast mode [ 727.399350][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 727.408342][T24568] tipc: Enabled bearer , priority 0 [ 727.430033][T24563] syzkaller0: entered promiscuous mode [ 727.447878][T24563] syzkaller0: entered allmulticast mode [ 727.504069][T24573] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4535'. [ 727.542954][T24568] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4533'. [ 727.632259][T24582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4536'. [ 727.692900][T24582] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4536'. [ 727.770424][T24582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4536'. [ 728.388483][T24561] tipc: Resetting bearer [ 728.440261][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 728.601084][T24561] tipc: Disabling bearer [ 728.777494][T24620] bridge0: port 2(ipvlan0) entered blocking state [ 728.811938][T24620] bridge0: port 2(ipvlan0) entered disabled state [ 728.844412][T24620] ipvlan0: entered allmulticast mode [ 728.888010][T24620] bridge0: entered allmulticast mode [ 728.932004][T24620] ipvlan0: left allmulticast mode [ 728.949411][T24620] bridge0: left allmulticast mode [ 729.083469][ T30] audit: type=1804 audit(1782552883.335:15): pid=24657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4547" name="/newroot/354/cgroup.controllers" dev="tmpfs" ino=1836 res=1 errno=0 [ 729.231177][ T30] audit: type=1800 audit(1782552883.345:16): pid=24657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4547" name="cgroup.controllers" dev="tmpfs" ino=1836 res=0 errno=0 [ 729.255500][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.479298][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 729.979584][T24705] xfrm0: entered allmulticast mode [ 730.004447][T24705] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 730.044818][T24708] syz0: rxe_newlink: already configured on lo [ 730.281418][T24708] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 730.378306][T24708] bond7 (unregistering): Released all slaves [ 730.519273][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 731.169086][T24764] macsec0: entered promiscuous mode [ 731.208078][T24764] macsec0 (unregistering): left promiscuous mode [ 731.447995][T24779] batadv_slave_1: entered promiscuous mode [ 731.559308][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 731.723278][ T6276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.731782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.809113][T24800] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20002 [ 732.096051][T24810] __nla_validate_parse: 14 callbacks suppressed [ 732.096068][T24810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4581'. [ 732.140363][T24810] bridge9: entered promiscuous mode [ 732.153160][T24815] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4582'. [ 732.154031][T24810] bridge9: entered allmulticast mode [ 732.237069][T24770] batadv_slave_1: left promiscuous mode [ 732.280443][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.542240][T24836] netlink: 'syz.2.4587': attribute type 1 has an invalid length. [ 732.599329][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 732.637597][T24846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4587'. [ 732.725795][T24846] 8021q: adding VLAN 0 to HW filter on device bond3 [ 732.737848][T24856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4589'. [ 732.782761][T24841] lo speed is unknown, defaulting to 1000 [ 733.037362][T24871] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4595'. [ 733.078022][T24873] syzkaller1: entered promiscuous mode [ 733.093593][T24873] syzkaller1: entered allmulticast mode [ 733.196182][T24876] batadv_slave_0: entered promiscuous mode [ 733.263222][T24880] netlink: 'syz.1.4599': attribute type 11 has an invalid length. [ 733.271779][T24880] netlink: 'syz.1.4599': attribute type 4 has an invalid length. [ 733.280720][T24880] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4599'. [ 733.298490][T24880] netlink: 'syz.1.4599': attribute type 11 has an invalid length. [ 733.319728][T24880] netlink: 'syz.1.4599': attribute type 4 has an invalid length. [ 733.327673][T24880] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4599'. [ 733.359799][T24841] lo speed is unknown, defaulting to 1000 [ 733.639314][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 734.024260][T24875] batadv_slave_0: left promiscuous mode [ 734.297444][T24903] xt_connbytes: Forcing CT accounting to be enabled [ 734.552209][T24922] syzkaller1: entered promiscuous mode [ 734.576948][T24922] syzkaller1: entered allmulticast mode [ 734.679321][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 734.688656][T24927] syzkaller1: entered promiscuous mode [ 734.705232][T24927] syzkaller1: entered allmulticast mode [ 734.793946][T24941] netlink: 'syz.2.4618': attribute type 10 has an invalid length. [ 734.845070][T24940] netlink: 'syz.2.4618': attribute type 10 has an invalid length. [ 735.095807][T24950] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.252942][T24950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 735.264277][T24950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 735.280933][T24950] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 735.314501][T17716] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.321780][T17716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.333631][ T9312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.376260][T17716] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.383501][T17716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.719376][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 735.790744][T24989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4630'. [ 735.828641][T24989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4630'. [ 735.970719][T24998] block nbd2: Unsupported socket: should be TCP or UNIX. [ 736.183346][T25010] syzkaller0: entered promiscuous mode [ 736.223687][T24990] sctp: [Deprecated]: syz.2.4629 (pid 24990) Use of struct sctp_assoc_value in delayed_ack socket option. [ 736.223687][T24990] Use struct sctp_sack_info instead [ 736.231917][T25010] syzkaller0: entered allmulticast mode [ 736.288520][T25015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4636'. [ 736.510813][T25031] netlink: 'syz.2.4638': attribute type 1 has an invalid length. [ 736.759353][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 736.966587][T25049] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 737.405976][T25077] x_tables: duplicate underflow at hook 2 [ 737.482591][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.491023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.528603][T25068] __nla_validate_parse: 2 callbacks suppressed [ 737.528619][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4647'. [ 737.734595][T25088] xt_hashlimit: size too large, truncated to 1048576 [ 737.764974][T25087] xt_hashlimit: size too large, truncated to 1048576 [ 737.796356][T25086] bond7: (slave tunl0): Device is not bonding slave [ 737.799489][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 737.820513][T25086] bond7: option active_slave: invalid value (tunl0) [ 737.831927][T25086] bond7 (unregistering): Released all slaves [ 737.850091][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4653'. [ 737.901136][T25099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4653'. [ 738.308810][T25122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4658'. [ 738.350278][T25122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4658'. [ 738.360438][ T9310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.384741][T25125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4660'. [ 738.404390][T25125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4660'. [ 738.427844][T25125] netlink: 'syz.3.4660': attribute type 4 has an invalid length. [ 738.448229][T25129] team0: entered allmulticast mode [ 738.839267][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 739.885290][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 740.919249][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 740.932833][T25158] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 741.100160][T25188] netlink: 'syz.0.4671': attribute type 1 has an invalid length. [ 741.123262][T25187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4670'. [ 741.345345][T25202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4676'. [ 741.357729][T25202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4676'. [ 741.399656][ T9313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.961177][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 742.599831][T10186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.608199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.618197][ T6276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.626674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.999268][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 743.091928][T25253] __nla_validate_parse: 6 callbacks suppressed [ 743.091947][T25253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4689'. [ 743.220025][ T5645] block nbd2: Receive control failed (result -1) [ 743.233369][ T5645] [ 743.235810][ T5645] ====================================================== [ 743.242890][ T5645] WARNING: possible circular locking dependency detected [ 743.249972][ T5645] syzkaller #0 Not tainted [ 743.254420][ T5645] ------------------------------------------------------ [ 743.261439][ T5645] kworker/u9:3/5645 is trying to acquire lock: [ 743.267585][ T5645] ffff8880318d8260 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 743.277121][ T5645] [ 743.277121][ T5645] but task is already holding lock: [ 743.284481][ T5645] ffff88804e480a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 743.293421][ T5645] [ 743.293421][ T5645] which lock already depends on the new lock. [ 743.293421][ T5645] [ 743.303935][ T5645] [ 743.303935][ T5645] the existing dependency chain (in reverse order) is: [ 743.312949][ T5645] [ 743.312949][ T5645] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 743.320690][ T5645] __mutex_lock+0x19d/0x1550 [ 743.325829][ T5645] nbd_queue_rq+0x373/0x1150 [ 743.330949][ T5645] blk_mq_dispatch_rq_list+0x499/0x1990 [ 743.337100][ T5645] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 743.343975][ T5645] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 743.350483][ T5645] blk_mq_run_work_fn+0x16c/0x300 [ 743.356034][ T5645] process_scheduled_works+0xa8e/0x14e0 [ 743.362137][ T5645] worker_thread+0xa47/0xfb0 [ 743.367275][ T5645] kthread+0x388/0x470 [ 743.371881][ T5645] ret_from_fork+0x514/0xb70 [ 743.377022][ T5645] ret_from_fork_asm+0x1a/0x30 [ 743.382324][ T5645] [ 743.382324][ T5645] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 743.389562][ T5645] __mutex_lock+0x19d/0x1550 [ 743.394682][ T5645] nbd_queue_rq+0xc1/0x1150 [ 743.399711][ T5645] blk_mq_dispatch_rq_list+0x499/0x1990 [ 743.405801][ T5645] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 743.412653][ T5645] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 743.419173][ T5645] blk_mq_run_work_fn+0x16c/0x300 [ 743.424733][ T5645] process_scheduled_works+0xa8e/0x14e0 [ 743.430820][ T5645] worker_thread+0xa47/0xfb0 [ 743.435935][ T5645] kthread+0x388/0x470 [ 743.440530][ T5645] ret_from_fork+0x514/0xb70 [ 743.445651][ T5645] ret_from_fork_asm+0x1a/0x30 [ 743.450949][ T5645] [ 743.450949][ T5645] -> #4 (set->srcu){.+.+}-{0:0}: [ 743.458083][ T5645] __synchronize_srcu+0xc9/0x2f0 [ 743.463575][ T5645] elevator_switch+0x1e8/0x7b0 [ 743.468929][ T5645] elevator_change+0x2fa/0x480 [ 743.474225][ T5645] elevator_set_default+0x375/0x440 [ 743.479949][ T5645] blk_register_queue+0x3f3/0x4e0 [ 743.485523][ T5645] __add_disk+0x6cb/0xe30 [ 743.490385][ T5645] add_disk_fwnode+0xfb/0x4b0 [ 743.495585][ T5645] nbd_dev_add+0x733/0xb60 [ 743.500524][ T5645] nbd_init+0x15f/0x1e0 [ 743.505334][ T5645] do_one_initcall+0x250/0x870 [ 743.510623][ T5645] do_initcall_level+0x10a/0x1a0 [ 743.516141][ T5645] do_initcalls+0x59/0xa0 [ 743.520997][ T5645] kernel_init_freeable+0x29d/0x3e0 [ 743.526732][ T5645] kernel_init+0x1d/0x1d0 [ 743.531643][ T5645] ret_from_fork+0x514/0xb70 [ 743.536796][ T5645] ret_from_fork_asm+0x1a/0x30 [ 743.542094][ T5645] [ 743.542094][ T5645] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 743.549926][ T5645] __mutex_lock+0x19d/0x1550 [ 743.555035][ T5645] elevator_change+0x1af/0x480 [ 743.560332][ T5645] elevator_set_none+0xb5/0x140 [ 743.565719][ T5645] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 743.572059][ T5645] nbd_start_device+0x189/0xb30 [ 743.577440][ T5645] nbd_genl_connect+0x1597/0x1c10 [ 743.582984][ T5645] genl_family_rcv_msg_doit+0x233/0x340 [ 743.589138][ T5645] genl_rcv_msg+0x614/0x7a0 [ 743.594183][ T5645] netlink_rcv_skb+0x226/0x4a0 [ 743.599469][ T5645] genl_rcv+0x28/0x40 [ 743.604007][ T5645] netlink_unicast+0x7bb/0x940 [ 743.609294][ T5645] netlink_sendmsg+0x813/0xb40 [ 743.614581][ T5645] sock_sendmsg_nosec+0x13a/0x180 [ 743.620164][ T5645] ____sys_sendmsg+0x54e/0x850 [ 743.625457][ T5645] ___sys_sendmsg+0x2a5/0x360 [ 743.630658][ T5645] __x64_sys_sendmsg+0x1b1/0x290 [ 743.636114][ T5645] do_syscall_64+0x174/0x580 [ 743.641237][ T5645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.647662][ T5645] [ 743.647662][ T5645] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 743.656298][ T5645] blk_alloc_queue+0x544/0x690 [ 743.661593][ T5645] __blk_mq_alloc_disk+0x194/0x390 [ 743.667249][ T5645] nbd_dev_add+0x494/0xb60 [ 743.672197][ T5645] nbd_init+0x15f/0x1e0 [ 743.676887][ T5645] do_one_initcall+0x250/0x870 [ 743.682173][ T5645] do_initcall_level+0x10a/0x1a0 [ 743.687646][ T5645] do_initcalls+0x59/0xa0 [ 743.692509][ T5645] kernel_init_freeable+0x29d/0x3e0 [ 743.698236][ T5645] kernel_init+0x1d/0x1d0 [ 743.703085][ T5645] ret_from_fork+0x514/0xb70 [ 743.708200][ T5645] ret_from_fork_asm+0x1a/0x30 [ 743.713486][ T5645] [ 743.713486][ T5645] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 743.720697][ T5645] fs_reclaim_acquire+0x71/0x100 [ 743.726165][ T5645] __kmalloc_noprof+0xbc/0x720 [ 743.731456][ T5645] tls_sw_sendmsg+0x599/0x2860 [ 743.736819][ T5645] sock_sendmsg_nosec+0x90/0x180 [ 743.742375][ T5645] sock_sendmsg+0x1ca/0x2d0 [ 743.747410][ T5645] splice_to_socket+0xb5e/0x12a0 [ 743.752889][ T5645] direct_splice_actor+0x101/0x160 [ 743.758524][ T5645] splice_direct_to_actor+0x57b/0xcb0 [ 743.764415][ T5645] do_splice_direct+0x195/0x290 [ 743.769785][ T5645] do_sendfile+0x52e/0x7c0 [ 743.774730][ T5645] __se_sys_sendfile64+0x144/0x1a0 [ 743.780373][ T5645] do_syscall_64+0x174/0x580 [ 743.785496][ T5645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.791923][ T5645] [ 743.791923][ T5645] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 743.800024][ T5645] __lock_acquire+0x1520/0x2cf0 [ 743.805420][ T5645] lock_acquire+0x106/0x350 [ 743.810446][ T5645] lock_sock_nested+0x41/0x100 [ 743.815780][ T5645] inet_shutdown+0x6a/0x390 [ 743.820814][ T5645] nbd_mark_nsock_dead+0x2cb/0x550 [ 743.826461][ T5645] recv_work+0x1cee/0x1e10 [ 743.831405][ T5645] process_scheduled_works+0xa8e/0x14e0 [ 743.837568][ T5645] worker_thread+0xa47/0xfb0 [ 743.842696][ T5645] kthread+0x388/0x470 [ 743.847297][ T5645] ret_from_fork+0x514/0xb70 [ 743.852412][ T5645] ret_from_fork_asm+0x1a/0x30 [ 743.857709][ T5645] [ 743.857709][ T5645] other info that might help us debug this: [ 743.857709][ T5645] [ 743.867933][ T5645] Chain exists of: [ 743.867933][ T5645] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 743.867933][ T5645] [ 743.881044][ T5645] Possible unsafe locking scenario: [ 743.881044][ T5645] [ 743.888495][ T5645] CPU0 CPU1 [ 743.893883][ T5645] ---- ---- [ 743.899251][ T5645] lock(&nsock->tx_lock); [ 743.903669][ T5645] lock(&cmd->lock); [ 743.910176][ T5645] lock(&nsock->tx_lock); [ 743.917112][ T5645] lock(sk_lock-AF_INET6-NBD); [ 743.921964][ T5645] [ 743.921964][ T5645] *** DEADLOCK *** [ 743.921964][ T5645] [ 743.930115][ T5645] 3 locks held by kworker/u9:3/5645: [ 743.935459][ T5645] #0: ffff888026dda140 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 743.946741][ T5645] #1: ffffc90003f5fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 743.958516][ T5645] #2: ffff88804e480a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 743.967849][ T5645] [ 743.967849][ T5645] stack backtrace: [ 743.973750][ T5645] CPU: 1 UID: 0 PID: 5645 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 743.973770][ T5645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 743.973781][ T5645] Workqueue: nbd2-recv recv_work [ 743.973803][ T5645] Call Trace: [ 743.973810][ T5645] [ 743.973818][ T5645] dump_stack_lvl+0xe8/0x150 [ 743.973839][ T5645] print_circular_bug+0x2e1/0x300 [ 743.973862][ T5645] check_noncircular+0x12e/0x150 [ 743.973886][ T5645] __lock_acquire+0x1520/0x2cf0 [ 743.973909][ T5645] ? irqentry_exit+0x218/0x8f0 [ 743.973935][ T5645] ? lockdep_hardirqs_on+0x7a/0x110 [ 743.973961][ T5645] ? inet_shutdown+0x6a/0x390 [ 743.973992][ T5645] lock_acquire+0x106/0x350 [ 743.974007][ T5645] ? inet_shutdown+0x6a/0x390 [ 743.974037][ T5645] lock_sock_nested+0x41/0x100 [ 743.974059][ T5645] ? inet_shutdown+0x6a/0x390 [ 743.974084][ T5645] inet_shutdown+0x6a/0x390 [ 743.974110][ T5645] nbd_mark_nsock_dead+0x2cb/0x550 [ 743.974130][ T5645] recv_work+0x1cee/0x1e10 [ 743.974156][ T5645] ? lockdep_unlock+0x5d/0xd0 [ 743.974169][ T5645] ? __lock_acquire+0x13e8/0x2cf0 [ 743.974189][ T5645] ? __pfx_recv_work+0x10/0x10 [ 743.974211][ T5645] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 743.974235][ T5645] ? process_scheduled_works+0xa20/0x14e0 [ 743.974262][ T5645] ? rcu_is_watching+0x15/0xb0 [ 743.974283][ T5645] ? process_scheduled_works+0xa20/0x14e0 [ 743.974305][ T5645] process_scheduled_works+0xa8e/0x14e0 [ 743.974340][ T5645] ? __pfx_process_scheduled_works+0x10/0x10 [ 743.974365][ T5645] ? assign_work+0x3cf/0x5d0 [ 743.974389][ T5645] worker_thread+0xa47/0xfb0 [ 743.974424][ T5645] kthread+0x388/0x470 [ 743.974440][ T5645] ? __pfx_worker_thread+0x10/0x10 [ 743.974463][ T5645] ? __pfx_kthread+0x10/0x10 [ 743.974481][ T5645] ret_from_fork+0x514/0xb70 [ 743.974500][ T5645] ? __pfx_ret_from_fork+0x10/0x10 [ 743.974518][ T5645] ? __switch_to+0xc89/0x1420 [ 743.974544][ T5645] ? __pfx_kthread+0x10/0x10 [ 743.974561][ T5645] ret_from_fork_asm+0x1a/0x30 [ 743.974587][ T5645] [ 744.039294][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 746.119293][ C0] net_ratelimit: 2 callbacks suppressed [ 746.119311][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 747.159334][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 747.479397][ T9313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.719988][T17715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.728222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.199318][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 748.359960][T17716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.368299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.239353][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 750.279922][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 751.319297][ C0] net_ratelimit: 1 callbacks suppressed [ 751.319319][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 752.359311][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available