last executing test programs: 2m15.018358502s ago: executing program 2 (id=4404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 2m14.906048372s ago: executing program 2 (id=4406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r2, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4) 2m14.805455244s ago: executing program 2 (id=4409): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="500401a1"], 0x4) 2m14.675307096s ago: executing program 2 (id=4411): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 2m14.138117071s ago: executing program 2 (id=4416): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005"], 0x5b0}, 0x20008001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r2}, 0x18) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41083aeb894e76f3c7fc753f2fca40d24553fdd9396171c35ecfd0932f37aa306040bd37f78526b319e572be0ae8b40f01b3835c385e789683bed9c65ccd19545b738fb470ef7c7247c631882fe3cee1ad627ad729a685446e0c1b6ca16a98bececc6ed604084f0de672a6143", 0xa2}, {&(0x7f0000001840)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed6980a5794e38f83ba0c77252adc9d177719cb1f7991ee501ad1ff9d69f88d4bb7a70b76402fd5b363", 0x4f}, {&(0x7f0000000840)="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", 0x4bc}], 0x3}, 0x20000044) 2m14.01220746s ago: executing program 2 (id=4420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r7, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x7}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@fallback=r9, r10, 0x30, 0x1, r5, @void, @value=r5, @void, @void, r11}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001980)={0x6, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1b00000030200000000000007f81516d6a32771de596db1a140cd1f8a343e59bd3c068aac40dff00e5062d0820866ddbd2c5fc02667ede28ab60c4ef0c2df01a0efb54143716fb37dfee640b", @ANYRES32=r12, @ANYBLOB, @ANYRES64=r11], 0x20) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r13, 0xffffffffffffffff, 0x18, 0x8, 0x0, @void, @value, @void, @void, r11}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x24, 0x0, @val=@netkit={@void, @value=r3, @void, @void, r11}}, 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000019c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='6\x00\x00\x00E\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="f5a90d962b3072098d085e4f7bab7c3b1bdf59634610ca31ea000000000000000000000000c2b44836f49d120b12f74ca4211384d4f31a6cde9ab8fd31f4616eb815dbe8da7290008c927e23e18f43bfbc3db31caf6bed185ecad2c3c62b2697f648774c102fa546954a48fcb72b48aa77ac7a64e28c898774783d55077c977de9fefa4961c1885517b6666495d9c5a92c8f479d15aa92e227bb921df1b1e6edcb8a70fa345fa1009d", @ANYRES32=r0, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10) 1m58.817055616s ago: executing program 32 (id=4420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r7, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x7}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@fallback=r9, r10, 0x30, 0x1, r5, @void, @value=r5, @void, @void, r11}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001980)={0x6, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1b00000030200000000000007f81516d6a32771de596db1a140cd1f8a343e59bd3c068aac40dff00e5062d0820866ddbd2c5fc02667ede28ab60c4ef0c2df01a0efb54143716fb37dfee640b", @ANYRES32=r12, @ANYBLOB, @ANYRES64=r11], 0x20) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r13, 0xffffffffffffffff, 0x18, 0x8, 0x0, @void, @value, @void, @void, r11}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x24, 0x0, @val=@netkit={@void, @value=r3, @void, @void, r11}}, 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000019c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='6\x00\x00\x00E\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="f5a90d962b3072098d085e4f7bab7c3b1bdf59634610ca31ea000000000000000000000000c2b44836f49d120b12f74ca4211384d4f31a6cde9ab8fd31f4616eb815dbe8da7290008c927e23e18f43bfbc3db31caf6bed185ecad2c3c62b2697f648774c102fa546954a48fcb72b48aa77ac7a64e28c898774783d55077c977de9fefa4961c1885517b6666495d9c5a92c8f479d15aa92e227bb921df1b1e6edcb8a70fa345fa1009d", @ANYRES32=r0, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10) 1m0.867515342s ago: executing program 1 (id=5779): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20001810090007a74e8003", @ANYRES16=r1, @ANYBLOB="000829bd7000fbdbdf250b0000000c0006000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008004}, 0x800) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000009d40)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc050) 1m0.728228845s ago: executing program 1 (id=5781): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a400000000209"], 0x4c}}, 0x4000080) 1m0.705282071s ago: executing program 1 (id=5782): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e1e, 0x0, @mcast2, 0x1}, 0x1c) (async) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000063119d000000000007000000200000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) (async, rerun: 32) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000200)=0x8, 0x4) (async, rerun: 32) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000000c0)=0x10000, 0x4) (async) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0xfffffffffffffffe, {0x1, 0x1, 0x4}, 0x1}, 0x18) (async) sendmsg$inet(r4, &(0x7f0000001300)={&(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0}, 0x800) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) shutdown(r8, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000100)={r9}, 0x10) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800dd8d000000400000000002000000000000050000000006001500030000e413001680100008800c0003800500010081000000"], 0x38}}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) setsockopt(r7, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'team0\x00', 0x8000}) (async, rerun: 32) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r12, @ANYRESOCT=r3, @ANYRESOCT=r2], 0xfdef) (rerun: 32) 1m0.474798445s ago: executing program 1 (id=5784): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0xf, @broadcast}]}}}]}, 0x3c}, 0x1, 0xff7f}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xac}, 0x1, 0x0, 0x0, 0x44001}, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000200), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="e10d3175fb5cc3b562995ccceda3d13da9e919ee297c2322c7145bb28529f6e8aaeb829f8dfa93bda98dc6ea4437766f90957e5c0a658808d314f7fae58c", 0x3e}], 0x1) 1m0.230844095s ago: executing program 1 (id=5789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1m0.060846618s ago: executing program 1 (id=5792): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0x20, 0x70bd27, 0x25dfdbfe, {0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40800) 44.808453889s ago: executing program 33 (id=5792): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0x20, 0x70bd27, 0x25dfdbfe, {0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40800) 39.658967828s ago: executing program 0 (id=6063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250f0000000e006e657464657673696d0000000f0002006e657464657673696d30000008005d50f2caa8005fa58f4a6013d0a5f4cc0b00090000000600110002000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x50) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r6], 0x1a000}}, 0x40) (async) recvfrom$inet6(r6, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r8) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmmsg$inet6(r8, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x3, @loopback}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x4000890) (async) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}]}}]}, 0x44}}, 0x800) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="f7ff6a5402b5e59b2588d0bc76d07ae01b5a7e7687032bb0", @ANYRES16=r10, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x46044}, 0x4000000) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbff, 0x200}, 0xc) 38.778483127s ago: executing program 0 (id=6070): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x48}}, 0x0) socket$inet6(0xa, 0x1, 0x100) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000140100060000000000002bfa0000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d9000000", @ANYRES16=r4, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c000180080001"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 38.590653646s ago: executing program 0 (id=6071): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x559e, 0x0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xfc, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) 38.446831003s ago: executing program 0 (id=6074): mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x31f2552d984251b8, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 38.254145195s ago: executing program 0 (id=6078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x50}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x1402, 0x100, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) poll(&(0x7f0000000040)=[{r9, 0x16842e9bd142d0d5}], 0x1, 0x94) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x64, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0xfffffffffffffd50, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x124, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa27}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x100}}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x840) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 38.095271066s ago: executing program 0 (id=6082): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x10}], 0x1}, 0x80) (async) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x10}], 0x1}, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x165, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "0d5515", 0x127, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}, @srh={0x0, 0x6, 0x4, 0x3, 0xf7, 0x30, 0xffff, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x73, 0x2, 0x4, 0x1, 0x0, 0x10, 0x6, [@remote]}], {{}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7, 0x1, 0x1, 0x2, 0x2, 0x4}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x8, 0x2, 0x0, 0x1, 0x2, 0x5a}, 0x2, {0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "1e35af1e23be8ca949ecc3e35f2b432e67ea54d9fbc3a0a828edb7ea026f21cfd787f8a484821011a6e0e79a88c5438b8e62271dfef316e4589039f55dee30103f311fa4858f0bdc0b35bd04ffd43b3071727c665980235357f6ad86917654ec53d1c0c749b6df7e3dc0e8d817da167bb333d1"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x165, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "0d5515", 0x127, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}, @srh={0x0, 0x6, 0x4, 0x3, 0xf7, 0x30, 0xffff, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x73, 0x2, 0x4, 0x1, 0x0, 0x10, 0x6, [@remote]}], {{}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7, 0x1, 0x1, 0x2, 0x2, 0x4}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x8, 0x2, 0x0, 0x1, 0x2, 0x5a}, 0x2, {0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "1e35af1e23be8ca949ecc3e35f2b432e67ea54d9fbc3a0a828edb7ea026f21cfd787f8a484821011a6e0e79a88c5438b8e62271dfef316e4589039f55dee30103f311fa4858f0bdc0b35bd04ffd43b3071727c665980235357f6ad86917654ec53d1c0c749b6df7e3dc0e8d817da167bb333d1"}}}}}}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1d4}}, 0x0) 23.067032697s ago: executing program 34 (id=6082): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x10}], 0x1}, 0x80) (async) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x10}], 0x1}, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x165, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "0d5515", 0x127, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}, @srh={0x0, 0x6, 0x4, 0x3, 0xf7, 0x30, 0xffff, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x73, 0x2, 0x4, 0x1, 0x0, 0x10, 0x6, [@remote]}], {{}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7, 0x1, 0x1, 0x2, 0x2, 0x4}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x8, 0x2, 0x0, 0x1, 0x2, 0x5a}, 0x2, {0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "1e35af1e23be8ca949ecc3e35f2b432e67ea54d9fbc3a0a828edb7ea026f21cfd787f8a484821011a6e0e79a88c5438b8e62271dfef316e4589039f55dee30103f311fa4858f0bdc0b35bd04ffd43b3071727c665980235357f6ad86917654ec53d1c0c749b6df7e3dc0e8d817da167bb333d1"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x165, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "0d5515", 0x127, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}, @srh={0x0, 0x6, 0x4, 0x3, 0xf7, 0x30, 0xffff, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x73, 0x2, 0x4, 0x1, 0x0, 0x10, 0x6, [@remote]}], {{}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7, 0x1, 0x1, 0x2, 0x2, 0x4}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x8, 0x2, 0x0, 0x1, 0x2, 0x5a}, 0x2, {0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "1e35af1e23be8ca949ecc3e35f2b432e67ea54d9fbc3a0a828edb7ea026f21cfd787f8a484821011a6e0e79a88c5438b8e62271dfef316e4589039f55dee30103f311fa4858f0bdc0b35bd04ffd43b3071727c665980235357f6ad86917654ec53d1c0c749b6df7e3dc0e8d817da167bb333d1"}}}}}}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1d4}}, 0x0) 18.384613918s ago: executing program 4 (id=6355): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@deltaction={0x24, 0x31, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'ip6erspan0\x00', @multicast}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) (async) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfe3a) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r7 = socket$kcm(0x2, 0x3, 0x2) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="b58979"], 0x14c}}, 0x4810) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="080008000084040008"], 0x53) 18.169870053s ago: executing program 4 (id=6359): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$kcm(0xa, 0x2, 0x0) sendfile(r3, r3, &(0x7f0000000040)=0x8001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000480)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x50, r6, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x40010) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x200, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}}, 0x20}}, 0x0) 17.962659214s ago: executing program 4 (id=6361): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13000000000000b50000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000040)={0x10, 0x6}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9"], 0x0}, 0x94) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="03c886dd010000000000140000006000000004042f"], 0xfdef) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4$alg(r6, 0x0, 0x0, 0x800) sendmsg$alg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}, {&(0x7f00000002c0)=']', 0x1}], 0x2}, 0x55) 17.590197544s ago: executing program 4 (id=6368): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@loopback, 0x4e22, 0x0, 0x4e23, 0xed1, 0xa, 0x20, 0x20, 0x3b}, {0x7, 0x10, 0x9, 0x0, 0x6, 0xe6, 0xffffffffffffffff, 0x400}, {0x4, 0x7, 0xffffffffffffffff, 0x10000}, 0xfffffff9, 0x0, 0x2, 0x1, 0x1, 0x1}, {{@in=@multicast2, 0x4d5, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x2, 0x4, 0x7, 0x5, 0x1}}, 0xe8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) connect$rose(r3, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000140)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed1, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025a17000fedbdf250200000008000100ffffffff00a58b0b5e452d9e3f29527189"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x100059, @private0, 0x6}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x7d, &(0x7f00000000c0)=@assoc_value={r7}, 0x8) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6}, 0x1c) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r10) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r12, 0x3, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg0\x00'}}]}]}, 0x28}}, 0x4044844) getsockopt$sock_buf(r10, 0x1, 0x37, &(0x7f00000001c0)=""/174, &(0x7f0000000140)=0xae) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) r13 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r13, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca892f", 0xe}], 0x1}, 0x0) 17.33060616s ago: executing program 4 (id=6371): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000001c0)=0x8, 0x4) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmsg$unix(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000380)=""/230, 0xe6}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000240)}, {&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000000580)=""/224, 0xe0}], 0x6, &(0x7f00000006c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x7, 0x117, &(0x7f00000006c0)="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", 0x9, 0x1, 0xc45, 0x1012, 0xc3, 0x2, 0x7, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r8, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 17.025256709s ago: executing program 7 (id=6293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r3, 0x701}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008010) 16.938806211s ago: executing program 3 (id=6374): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001000)=ANY=[@ANYBLOB="900100001900010000000000000000001d0109003201108025b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b00000000000000000028002d802200be00c8ef6b8ced0c8ef9408a2c6c"], 0x190}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) 16.785064218s ago: executing program 7 (id=6377): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'vxcan1\x00', @ifru_addrs=@ax25={0x3, @null, 0x5}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x12}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff6203f0fff8ffffff71a4f0ff000000002d040300000000003d030000000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007913000000000000b5000000000000009500000000000000023bc065b7a379d183f9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c26f71b29ee35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6d150352e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa48f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae5630800c5363092adaa1d8964162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee96a1c685508e6ca4fe5a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9029bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f75c345edcb84ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f277b8a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba0af35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c320e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0bad3b0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcefb9303a7861fce422f3f9c422a1619e6c6c2dd825743b22a6f93604c73d886c25ecaaeafccdeb19bd0cdbc5d22dae879561ea5606fa0c9dc23c0f52621aaae42180aecfd32cd6a66a1efa0949bc195dfcb691a26344362989371f2d5bf274363416b3cafb9a3331285449dc1afe9af7fed27bd4e36fa423d6c05ffa2acee27e2444b5ca28fc16fe31bd1320d4415ec0f5471b0b671d7626f773"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="06000400d600f9fe"], 0xc) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="06000400d600f9fe"], 0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x110, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0xfd, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c"]}]}, 0x110}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4024080}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, 0x8) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r10, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000050000001f0800040001000000", 0x24) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000080)=""/62, 0x3e}, {&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000980)=""/182, 0xb6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000180)=""/113, 0x71}, {&(0x7f0000000a40)=""/21, 0x15}], 0x7, &(0x7f0000000c00)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000b00)}, &(0x7f0000000b40), 0x1e}}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffff0, 0x100f}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x81}, &(0x7f0000000b80)=0x643, &(0x7f0000000bc0)=0xfffffffffffffffa, 0x3, 0x9, 0xf3, 0x2, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x10001}}, @zcopy_cookie={0x18}], 0xd0, 0x80}, 0x80) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000080)=""/62, 0x3e}, {&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000980)=""/182, 0xb6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000180)=""/113, 0x71}, {&(0x7f0000000a40)=""/21, 0x15}], 0x7, &(0x7f0000000c00)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000b00)}, &(0x7f0000000b40), 0x1e}}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffff0, 0x100f}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x81}, &(0x7f0000000b80)=0x643, &(0x7f0000000bc0)=0xfffffffffffffffa, 0x3, 0x9, 0xf3, 0x2, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x10001}}, @zcopy_cookie={0x18}], 0xd0, 0x80}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=@gettclass={0x24, 0x2a, 0x8, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0x9, 0x1}, {0xf, 0x9}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000b00)={0x3, {0x22, 0x8, 0x42, 0x1, 0x400}}) bind$xdp(r6, &(0x7f0000000e80)={0x2c, 0x4, r8, 0x2d, r6}, 0x10) (async) bind$xdp(r6, &(0x7f0000000e80)={0x2c, 0x4, r8, 0x2d, r6}, 0x10) 16.784761762s ago: executing program 3 (id=6378): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) 16.726890861s ago: executing program 7 (id=6379): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x13, 0x0, 0xfffffffffffffd85}, 0x4008000) close(0x3) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) listen(r0, 0x3) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="85000000bc00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='N\x00'/14, @ANYRES16=r4, @ANYBLOB="00012bbd7000fbdbdf2512000000060028000200000005003000000000000800320000000000080034000800000008003a00d894000008002b0009000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0x400006, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)={0x5a4, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TESTDATA={0xc1, 0x45, "9cf4e2827a96db45d9363bef95d36e1c302effa6de4ebb94e29a7b3ade8a58a64246ba52f73b5817d0c36ccbfa57fa9603e9bc7f4cd4613f7b170eefbd9839e09eb5d6f81ce0ad988221e7c8b4f81405776a8f62eb7cb78554052e8431d31579af39571e1b02c5fabcdf773cf36e1f2746ae5b1aeddc785ccb3d1f652efe4fba98f81bec6e303ae3215b635dddd397228ed65494d0e25157f1d1253f5a7306c13c760322baa93df2b82cfac429a9d792127b2ce4eab551e69aa03d2721"}, @NL80211_ATTR_TESTDATA={0xe0, 0x45, "57b4279b138c1f999fdd504d855b782a5bfacb39e3e38d79907189b84078e54582d5d2ec7ee3f1a546723b32e753578768b8b5b9bde518b78c3ff449481fd9d8cc913405ed1b400d67823d09e51c65c3f0b51799db58b3000e5f6bf2ab0134bbb931c5505bac76ad8ce5aab2c23b041c7bfad13596f2ef325a46b85c0384bb0dfd5890b465f36cf4d233c3f9ecdf7418b9541f22521cd501bcc86262961d771deb8576bf14fdb0654307eb663d9bf615cb63e29a9e75a6da208c08422faee76f56c607a9106c2a800bf3404e42b63374ae2b2dd05dbd834f9185a02b"}, @NL80211_ATTR_TESTDATA={0x87, 0x45, "b8237c2e30dee7314af828ad4906d4f7dabf992a381ea5a2fe14370b4fac9d40df58d21ef256f3dba28ff61dedeb54df71d5be4d5fa8a756ccdf3e430dbc472b9260060580c688d73838e797140dc2767291354e8ef655b25bcc0d93b407317809268ef6b0b2d0363b4ebae292b243026ebe6579046e2ba747d0731ecd931fcad30ff2"}, @NL80211_ATTR_TESTDATA={0xf3, 0x45, "664bef0c221be4c0a99f4d825f2e48413403cbd4b5775c8ad326f4acf644668b0d690a0b3eb7b332e3445b45dbe4c7718096e1c2f693503065fb8857c49790377e92c41d1efc3a400ba1ae79eb44cd5f91a88355480c06bcfa6a62e271d578879f46196b66bb2b274725277b1a3ea32c21ecf88c2b908ed9c6527ea44c038a9aa5a373b17631a33a3e78815db40fbb46c3a861046821d6bdd57c79a1751214c2255be5676a9979b83b24103e5784f22b5c28ef39d95a841a54f719b1bc857aeeef6d1598a18c297de952d82abf20fcddfa755e9b37c76bb365496248521fff8aedde89c098f1e7c9f0c12f33d7d3aa"}, @NL80211_ATTR_TESTDATA={0xed, 0x45, "666b9e814a8413a44c7bf5cc2bec49298eeb03b7f280b97f6378bf30de31358ff8edd13e8c90f2c8d2697b29875b533d6d2c1548b83fab383539afd42d42e2d7cfebb820fe8469ac5d21d0579cfba4b3acabe90cbeae8866230382e280c77fd64fc28a9cb8185c06d1ef7f21cdad9fd143de3c52ed59953db78dd48b23012668be4cdf8d3b921c4e4e029d190160114580b0b02be22780611565ed30c31a919dfca8634f3c29e7a0bbfa21845f9e76d0cc04715b4b2253c1021a57f1d34255be30a123c9a84f914a4bc5406d125c63e704875577127a69424226a6f711825abf24454df91782b612f0"}, @NL80211_ATTR_TESTDATA={0x68, 0x45, "6f2ea22a4d8f8281eef51e13c1f92e355dd8d1409c0fb38527b2763a67be7b6114c8d7415ccfa92dbafa195b341039a89055204b0abd724742579cb1a7c7f33ff8056a7f068d1b87477b2d3688bd3b6285b57753a43e68f17c6e708869b6bff426da3ea9"}, @NL80211_ATTR_TESTDATA={0x58, 0x45, "a5f244756a8fc37d80badc4dada1786d1369ced28cea9bbb0f6b29e93a788b4e122383eda162162ecdb162469950daa3429b3d952f3fdd1bf12f23e9806d0116c08233fac357a495b116abb439ec18f14ce47ff4"}, @NL80211_ATTR_TESTDATA={0xb7, 0x45, "05feb5142b6e1b8cca08b5e782d688ffdbbe2d93283989ba9d0b3ea811e957e849f12469cfee78e72d669f88f375de4da7f6b7c76cccddcc496ac3f98b635f83c57b7537c6ce372e9d66ac278546eb77a7c631f89303b7436fa76198ced7910d64ad4d0a0a19ded26356f854bb98e32c38768066b335e808c849a8da35bad20a9de2e832673e34962705632b0664b9cfc969d56da747061b14117dd4546c7f6815d37240c526df1216df76a85b9278c0f4a2ad"}]}, 0x5a4}, 0x1, 0x0, 0x0, 0x4000800}, 0x804) 16.518183059s ago: executing program 3 (id=6383): unshare(0x26020480) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0), 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40995}, 0x20008040) 16.413473404s ago: executing program 3 (id=6386): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x5, 0x1, 0x0, 0x0, 0xc, 0xffff}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="0002000000000000140012800b00010067656e6576650000040002800a0001000f", @ANYBLOB="400000001000010400000000000000000800c28a", @ANYRES8=r1, @ANYRES16, @ANYBLOB="54576e2f719c67fc", @ANYRESOCT=r1, @ANYBLOB="166ecf6286c002a7187dacfb9209692d423f74982debc6130c05aea6564dd2f0d419d3123b3894c16204f78f033c0937586af67f83b70033b741106f9454740bc8fa6964c8195ad4c19f25779fad788d820d90663d7c9377c9818c7f3b241fdf31b78071f9db888aa89ce92d947d521b65a762a2637c566ff69e685791d633ebe55eb74098b9bfe33284dd3a8b5d6f4dbf"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x885) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'veth0_to_bridge\x00', {0x3}, 0x7f}) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[], 0x234}}, 0x4895) 16.406826266s ago: executing program 4 (id=6387): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, r4, 0x1}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20044004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r6, 0xf01, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}}, 0x28}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) close(0x3) 16.239356579s ago: executing program 5 (id=6389): r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000004a00003000600000006000000000000dd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r2}, 0xc) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendfile(r3, r1, &(0x7f0000000140)=0x9, 0x7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000200)="b0e08dca39ffa594373d1d6f47264dfbb2e01442305ce0dcd9b71dd9a695cc8f7b8de3e203d48fcc4912c0826b5632b24a424d4991358eaa0b63ecf4e0c705af0e6608b2d933d1af4a9125c065c5b4ea896fb8fc835daab15413580ff1be0a1d6ab010583bc4999b256ee839b2eaa8f6aa8aed0e40948a3fd524d082af88a001be6d7fd97b230823dda3410a068e557996b6f18be9e14ed04e98514cf8245bd679b245ab751c5549c9f804c617aeafaa3c19260260f6a95993d530050dd58927f884aa3d160e04b1c603965a6ec242c7e91361ddcf38c60d979a1808f8ad713329e94e831773c8d7bf71a27e", &(0x7f0000000140), 0x3, 0x1, 0x4}, 0x38) r4 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 16.188023389s ago: executing program 6 (id=6390): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xff, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5], 0x0, [0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100], [0x2, 0x9543, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 16.102762976s ago: executing program 3 (id=6391): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x100, {0xa, 0x0, 0x0, 0x0, 0x0, 0x20}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@setlink={0x3c, 0x13, 0x1, 0x70bd2d, 0x25dfdbf7, {0x0, 0x0, 0x0, r3, 0x0, 0x28090}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3000c850}, 0x20000000) 16.084161131s ago: executing program 3 (id=6392): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x7, 0x6361, 0x5, 0xf, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtclass={0x2c, 0x28, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xa, 0x10}, {0x8, 0xfff3}, {0x6, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000002000)=[{{&(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0xc}}], 0xc}}], 0x1, 0x44) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r0, @ANYBLOB="21e8cf99b3ea66b6b3cc229dd9cd485b205104a3db90fd1f36f10b05308d88c1199b4052d749f33bcd67228461ee3fb58cfc1590d8fe03e280e68a16ad148219a3cae5ae565ab7bb076a6cbde3a8e722a26d0a9361cb1a87a96b77ade1ad84db64ba3cc1135cdf22bfccca18af48bf5cca0c44c24e6c94508d12ba98588acc2ad5971f5ff35084611f1410"], 0x38}}, 0x40400d0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000100001042dbd70000000000000000000", @ANYRES32=r8, @ANYBLOB="10c2000000000000180100736974000c00028008000300ffffffffbc"], 0x38}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/237, 0xed, 0x1, &(0x7f0000000000)=""/11, 0xb}, &(0x7f00000000c0)=0x40) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x1ff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl0\x00', r7, 0x7800, 0x8740, 0x1, 0x8, {{0x1f, 0x4, 0x3, 0x3, 0x7c, 0x68, 0x0, 0x18, 0x29, 0x0, @broadcast, @local, {[@end, @timestamp_prespec={0x44, 0x4c, 0x15, 0x3, 0xc, [{@local, 0xe5}, {@remote, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x6}, {@empty, 0x4}, {@multicast1, 0x9}, {@multicast2, 0x9}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0xed2}, {@local, 0x1}]}, @rr={0x7, 0x17, 0xa1, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x27}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @end, @end]}}}}}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x7, 0x6361, 0x5, 0xf, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$802154_dgram(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000540)={&(0x7f0000000300)="9c5795472cc7613d63ff5642f70006356d1c3f021961542eb3ef8af3216c9cd50063c35461d440b96c2958fd672a132f4b04c899e0d9a0424ad112b1c5fd", 0x3e}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x3}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x9}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x58}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x95}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x35bb}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000001200)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000004980)={'batadv_slave_1\x00'}) 16.069563543s ago: executing program 5 (id=6393): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000480)='GPL\x00'}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x2, 0x4) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x1d8, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) 15.969600799s ago: executing program 6 (id=6394): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x7, 0x202, 0x1ff, 0x2, 0x9, 0x6, 0xa3d, r3}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32], 0x38}}, 0x0) 15.928064168s ago: executing program 6 (id=6395): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x409, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) 15.758418489s ago: executing program 7 (id=6396): syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) (async) recvmmsg(r4, &(0x7f0000001d00)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001540)=""/60, 0x3c}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x2}}], 0x2, 0x10000, 0x0) (async) close(r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup, 0x3, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0}, 0x9c) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, &(0x7f0000000280)="bad38847", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r1, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) 15.430757526s ago: executing program 5 (id=6397): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000100)=0x28) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f000000a240)=0x40000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000155a6bfa0000001100000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000002702000014000000b70300000000000085000000a1000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000006c000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) 15.43027489s ago: executing program 6 (id=6398): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.231786654s ago: executing program 5 (id=6399): r0 = socket$inet6(0xa, 0x800, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1, 0x0, 0x0, 0x0, 0xc5f, 0x2, 0x20}, {0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}, {}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32, @ANYBLOB="0000d40000000000a5"], 0x2c}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x84, @empty, 0x4e22, 0x4, 'sed\x00', 0x24, 0x4, 0x7e}, {@multicast2, 0x4e23, 0x2000, 0x8, 0x2, 0x7}}, 0x44) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x36, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 15.231399089s ago: executing program 6 (id=6400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) 15.230826638s ago: executing program 6 (id=6401): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0xe8, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3ff, 0x800}}}, {{@arp={@local, @empty, 0x0, 0x0, 0x0, 0xfd, {@mac=@local, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast1, @multicast2, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$packet(0x11, 0x4000000000002, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000540)=[{&(0x7f00000006c0)="89e7ee2c21fe62a3b47380c988ca", 0xe}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x2000}, 0x48) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711067000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 15.228092984s ago: executing program 5 (id=6402): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000440)="800000800000008100"/18, 0x12, 0x40040, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]}) 15.199759695s ago: executing program 5 (id=6403): syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x4, 0x0, 0x0, 0xff, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc3"}}}}, 0x0) socketpair(0x5, 0x574b6bf1ef1ec59f, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$802154_dgram(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20080091}, 0x44810) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0xe}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x104, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ffff0000007106fb06000000e787440a62d2d310950000000000"], &(0x7f0000000200)='GPL\x00', 0xe}, 0x94) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r11 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r11, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'ip6erspan0\x00'}) ioctl$sock_ifreq(r10, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x4) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, 0x34}]}, &(0x7f00000010c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, 0x0, 0x0) writev(r12, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYRES64=r9], 0x20) 1.166390227s ago: executing program 35 (id=6387): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, r4, 0x1}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20044004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r6, 0xf01, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}}, 0x28}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) close(0x3) 147.258536ms ago: executing program 36 (id=6396): syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) (async) recvmmsg(r4, &(0x7f0000001d00)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001540)=""/60, 0x3c}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x2}}], 0x2, 0x10000, 0x0) (async) close(r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup, 0x3, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0}, 0x9c) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, &(0x7f0000000280)="bad38847", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r1, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) 100.052305ms ago: executing program 37 (id=6401): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0xe8, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3ff, 0x800}}}, {{@arp={@local, @empty, 0x0, 0x0, 0x0, 0xfd, {@mac=@local, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast1, @multicast2, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$packet(0x11, 0x4000000000002, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000540)=[{&(0x7f00000006c0)="89e7ee2c21fe62a3b47380c988ca", 0xe}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x2000}, 0x48) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711067000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 49.816458ms ago: executing program 38 (id=6403): syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x4, 0x0, 0x0, 0xff, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) socketpair(0x5, 0x574b6bf1ef1ec59f, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$802154_dgram(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20080091}, 0x44810) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0xe}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x104, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ffff0000007106fb06000000e787440a62d2d310950000000000"], &(0x7f0000000200)='GPL\x00', 0xe}, 0x94) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r11 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r11, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'ip6erspan0\x00'}) ioctl$sock_ifreq(r10, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x4) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, 0x34}]}, &(0x7f00000010c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, 0x0, 0x0) writev(r12, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYRES64=r9], 0x20) 0s ago: executing program 39 (id=6392): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x7, 0x6361, 0x5, 0xf, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtclass={0x2c, 0x28, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xa, 0x10}, {0x8, 0xfff3}, {0x6, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000002000)=[{{&(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0xc}}], 0xc}}], 0x1, 0x44) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r0, @ANYBLOB="21e8cf99b3ea66b6b3cc229dd9cd485b205104a3db90fd1f36f10b05308d88c1199b4052d749f33bcd67228461ee3fb58cfc1590d8fe03e280e68a16ad148219a3cae5ae565ab7bb076a6cbde3a8e722a26d0a9361cb1a87a96b77ade1ad84db64ba3cc1135cdf22bfccca18af48bf5cca0c44c24e6c94508d12ba98588acc2ad5971f5ff35084611f1410"], 0x38}}, 0x40400d0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000100001042dbd70000000000000000000", @ANYRES32=r8, @ANYBLOB="10c2000000000000180100736974000c00028008000300ffffffffbc"], 0x38}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/237, 0xed, 0x1, &(0x7f0000000000)=""/11, 0xb}, &(0x7f00000000c0)=0x40) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x1ff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl0\x00', r7, 0x7800, 0x8740, 0x1, 0x8, {{0x1f, 0x4, 0x3, 0x3, 0x7c, 0x68, 0x0, 0x18, 0x29, 0x0, @broadcast, @local, {[@end, @timestamp_prespec={0x44, 0x4c, 0x15, 0x3, 0xc, [{@local, 0xe5}, {@remote, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x6}, {@empty, 0x4}, {@multicast1, 0x9}, {@multicast2, 0x9}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0xed2}, {@local, 0x1}]}, @rr={0x7, 0x17, 0xa1, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x27}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @end, @end]}}}}}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x7, 0x6361, 0x5, 0xf, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$802154_dgram(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000540)={&(0x7f0000000300)="9c5795472cc7613d63ff5642f70006356d1c3f021961542eb3ef8af3216c9cd50063c35461d440b96c2958fd672a132f4b04c899e0d9a0424ad112b1c5fd", 0x3e}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x3}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x9}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x58}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x95}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x35bb}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000001200)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000004980)={'batadv_slave_1\x00'}) kernel console output (not intermixed with test programs): ified does not support setting the MAC address [ 397.322189][T20723] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 397.376079][T20718] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 397.388629][T20718] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 397.421910][T20716] gretap0: entered promiscuous mode [ 397.439424][T20716] bond4: (slave gretap0): making interface the new active one [ 397.447522][T20716] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 397.614024][T20748] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 397.626971][T20748] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 397.636606][T20748] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 397.666402][T20750] netlink: 'syz.1.4244': attribute type 33 has an invalid length. [ 397.678526][T20750] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4244'. [ 397.700376][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 397.798347][T20752] syzkaller0: entered promiscuous mode [ 397.808629][T20752] syzkaller0: entered allmulticast mode [ 397.940847][T20758] netlink: ct family unspecified [ 397.945997][T20758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.956338][T20758] nbd: illegal input index -8454144 [ 398.058598][T20765] Cannot find del_set index 512 as target [ 398.128537][T20770] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 398.142020][T20770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.725267][T20803] pimreg: left allmulticast mode [ 398.943469][T20810] syzkaller1: entered promiscuous mode [ 398.952260][T20810] syzkaller1: entered allmulticast mode [ 400.236906][T20859] sctp: [Deprecated]: syz.1.4287 (pid 20859) Use of int in maxseg socket option. [ 400.236906][T20859] Use struct sctp_assoc_value instead [ 400.389756][T14875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.926266][T20822] warn_alloc: 1 callbacks suppressed [ 400.926287][T20822] syz.3.4276: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 400.985996][T20822] CPU: 0 UID: 0 PID: 20822 Comm: syz.3.4276 Not tainted syzkaller #0 PREEMPT(full) [ 400.986025][T20822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 400.986044][T20822] Call Trace: [ 400.986052][T20822] [ 400.986062][T20822] dump_stack_lvl+0x189/0x250 [ 400.986104][T20822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.986130][T20822] ? __pfx__printk+0x10/0x10 [ 400.986151][T20822] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 400.986176][T20822] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 400.986205][T20822] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 400.986233][T20822] warn_alloc+0x214/0x310 [ 400.986268][T20822] ? __pfx_warn_alloc+0x10/0x10 [ 400.986305][T20822] ? __get_vm_area_node+0x28f/0x300 [ 400.986330][T20822] ? hash_netiface_create+0x358/0xfe0 [ 400.986359][T20822] __vmalloc_node_range_noprof+0x690/0x12d0 [ 400.986388][T20822] ? alloc_vmap_area+0xda0/0x14c0 [ 400.986439][T20822] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 400.986464][T20822] ? hash_netiface_create+0x358/0xfe0 [ 400.986488][T20822] ? __get_vm_area_node+0x28f/0x300 [ 400.986513][T20822] ? hash_netiface_create+0x358/0xfe0 [ 400.986537][T20822] __vmalloc_node_range_noprof+0x578/0x12d0 [ 400.986563][T20822] ? hash_netiface_create+0x358/0xfe0 [ 400.986586][T20822] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 400.986632][T20822] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 400.986659][T20822] ? hash_netiface_create+0x358/0xfe0 [ 400.986687][T20822] ? rcu_is_watching+0x15/0xb0 [ 400.986709][T20822] ? hash_netiface_create+0x358/0xfe0 [ 400.986734][T20822] __kvmalloc_node_noprof+0x674/0x910 [ 400.986762][T20822] ? hash_netiface_create+0x358/0xfe0 [ 400.986784][T20822] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 400.986810][T20822] ? hash_netiface_create+0x2fe/0xfe0 [ 400.986840][T20822] hash_netiface_create+0x358/0xfe0 [ 400.986873][T20822] ? __nla_parse+0x40/0x60 [ 400.986893][T20822] ? __pfx_hash_netiface_create+0x10/0x10 [ 400.986920][T20822] ip_set_create+0xa97/0x1940 [ 400.986945][T20822] ? ip_set_create+0x4a2/0x1940 [ 400.986985][T20822] ? __pfx_ip_set_create+0x10/0x10 [ 400.987047][T20822] nfnetlink_rcv_msg+0xb4d/0x1130 [ 400.987080][T20822] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 400.987125][T20822] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 400.987148][T20822] ? kasan_save_track+0x4f/0x80 [ 400.987233][T20822] netlink_rcv_skb+0x208/0x470 [ 400.987260][T20822] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.987286][T20822] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 400.987312][T20822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 400.987351][T20822] ? bpf_lsm_capable+0x9/0x20 [ 400.987374][T20822] ? security_capable+0x7e/0x2e0 [ 400.987406][T20822] nfnetlink_rcv+0x282/0x2590 [ 400.987434][T20822] ? __dev_queue_xmit+0x27b/0x3b50 [ 400.987457][T20822] ? __dev_queue_xmit+0x1d79/0x3b50 [ 400.987476][T20822] ? kasan_save_track+0x3e/0x80 [ 400.987499][T20822] ? __kasan_slab_alloc+0x6c/0x80 [ 400.987535][T20822] ? __dev_queue_xmit+0x27b/0x3b50 [ 400.987569][T20822] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 400.987593][T20822] ? __pfx___dev_queue_xmit+0x10/0x10 [ 400.987628][T20822] ? ref_tracker_free+0x63a/0x7d0 [ 400.987647][T20822] ? __asan_memcpy+0x40/0x70 [ 400.987670][T20822] ? __pfx_ref_tracker_free+0x10/0x10 [ 400.987705][T20822] ? skb_clone+0x246/0x3a0 [ 400.987729][T20822] ? __netlink_deliver_tap+0x807/0x850 [ 400.987756][T20822] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.987790][T20822] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.987826][T20822] netlink_unicast+0x82f/0x9e0 [ 400.987861][T20822] ? __pfx_netlink_unicast+0x10/0x10 [ 400.987888][T20822] ? netlink_sendmsg+0x642/0xb30 [ 400.987903][T20822] ? skb_put+0x11b/0x210 [ 400.987924][T20822] netlink_sendmsg+0x805/0xb30 [ 400.987952][T20822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.987983][T20822] ? aa_sock_msg_perm+0xf1/0x1d0 [ 400.988012][T20822] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.988030][T20822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.988058][T20822] __sock_sendmsg+0x21c/0x270 [ 400.988092][T20822] ____sys_sendmsg+0x505/0x830 [ 400.988118][T20822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.988155][T20822] ? import_iovec+0x74/0xa0 [ 400.988182][T20822] ___sys_sendmsg+0x21f/0x2a0 [ 400.988205][T20822] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.988264][T20822] ? __fget_files+0x2a/0x420 [ 400.988281][T20822] ? __fget_files+0x3a0/0x420 [ 400.988310][T20822] __x64_sys_sendmsg+0x19b/0x260 [ 400.988332][T20822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.988370][T20822] ? do_syscall_64+0xbe/0xfa0 [ 400.988399][T20822] do_syscall_64+0xfa/0xfa0 [ 400.988420][T20822] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.988442][T20822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.988461][T20822] ? clear_bhb_loop+0x60/0xb0 [ 400.988484][T20822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.988509][T20822] RIP: 0033:0x7f5d1298efc9 [ 400.988532][T20822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.988548][T20822] RSP: 002b:00007f5d1374a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.988570][T20822] RAX: ffffffffffffffda RBX: 00007f5d12be5fa0 RCX: 00007f5d1298efc9 [ 400.988584][T20822] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 400.988596][T20822] RBP: 00007f5d12a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 400.988608][T20822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.988619][T20822] R13: 00007f5d12be6038 R14: 00007f5d12be5fa0 R15: 00007fffd501d538 [ 400.988653][T20822] [ 401.520100][T20822] Mem-Info: [ 401.523250][T20822] active_anon:9439 inactive_anon:0 isolated_anon:0 [ 401.523250][T20822] active_file:2628 inactive_file:39998 isolated_file:0 [ 401.523250][T20822] unevictable:768 dirty:50 writeback:0 [ 401.523250][T20822] slab_reclaimable:12883 slab_unreclaimable:128382 [ 401.523250][T20822] mapped:35928 shmem:6333 pagetables:994 [ 401.523250][T20822] sec_pagetables:0 bounce:0 [ 401.523250][T20822] kernel_misc_reclaimable:0 [ 401.523250][T20822] free:1261521 free_pcp:13643 free_cma:0 [ 401.569275][T20822] Node 0 active_anon:38156kB inactive_anon:0kB active_file:10512kB inactive_file:159788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143712kB dirty:200kB writeback:0kB shmem:23796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17364kB pagetables:3832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 401.576723][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.601856][T20822] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 401.639627][T20822] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.670522][T20822] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 401.676315][T20822] Node 0 DMA32 free:1128496kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38256kB inactive_anon:0kB active_file:10512kB inactive_file:159788kB unevictable:1536kB writepending:200kB zspages:0kB present:3129332kB managed:2565180kB mlocked:0kB bounce:0kB free_pcp:41296kB local_pcp:26888kB free_cma:0kB [ 401.711040][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 401.730448][T20822] lowmem_reserve[]: 0 0 0 0 0 [ 401.735216][T20822] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.820663][T20822] lowmem_reserve[]: 0 0 0 0 0 [ 401.825526][T20822] Node 1 Normal free:3900228kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:6912kB free_cma:0kB [ 401.858820][T20822] lowmem_reserve[]: 0 0 0 0 0 [ 401.863618][T20822] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 401.876552][T20822] Node 0 DMA32: 2*4kB (UM) 3*8kB (UME) 1*16kB (M) 1*32kB (U) 1*64kB (U) 19*128kB (UM) 32*256kB (M) 25*512kB (UME) 11*1024kB (ME) 6*2048kB (UME) 264*4096kB (M) = 1128464kB [ 401.899211][T20822] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 401.911037][T20822] Node 1 Normal: 165*4kB (UM) 52*8kB (UME) 35*16kB (UME) 167*32kB (UME) 44*64kB (UME) 4*128kB (UM) 5*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3900228kB [ 401.930136][T20822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.939931][T20822] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.949423][T20822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.959303][T20822] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.968602][T20822] 47489 total pagecache pages [ 401.973512][T20822] 0 pages in swap cache [ 401.977677][T20822] Free swap = 124996kB [ 401.986849][T20822] Total swap = 124996kB [ 401.992151][T20822] 2097051 pages RAM [ 401.995978][T20822] 0 pages HighMem/MovableOnly [ 402.000722][T20822] 424114 pages reserved [ 402.005007][T20822] 0 pages cma reserved [ 402.215204][T20891] __nla_validate_parse: 10 callbacks suppressed [ 402.215222][T20891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4300'. [ 402.266846][T20892] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4303'. [ 402.305936][ C1] vcan0: j1939_session_tx_dat: 0xffff88804b402c00: queue data error: -100 [ 402.319840][T14875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.414795][T20899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4304'. [ 402.786847][T20906] netlink: 'syz.2.4305': attribute type 1 has an invalid length. [ 402.856807][T20906] bond4: entered promiscuous mode [ 402.868644][T20906] 8021q: adding VLAN 0 to HW filter on device bond4 [ 402.961177][T20912] 8021q: adding VLAN 0 to HW filter on device bond4 [ 402.979867][T20912] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 402.990244][T20912] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 403.013749][T20912] bond4: (slave gre1): making interface the new active one [ 403.021232][T20912] gre1: entered promiscuous mode [ 403.028249][T20912] bond4: (slave gre1): Enslaving as an active interface with an up link [ 403.080716][T20909] hsr0 speed is unknown, defaulting to 1000 [ 404.232883][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.697240][T20949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4323'. [ 404.725995][T20949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4323'. [ 404.744672][T20954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4325'. [ 404.755177][T20951] smc: net device bond0 applied user defined pnetid SYZ0 [ 404.763417][T20951] smc: net device bond0 erased user defined pnetid SYZ0 [ 404.903327][T20960] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4326'. [ 404.909305][T20961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4327'. [ 405.250006][T20976] 0ªî{X¹¦: left allmulticast mode [ 405.257590][T20979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4334'. [ 405.321924][T20976] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.329242][T20976] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.448888][T20976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.467490][T20976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.506745][T20976] veth1_virt_wifi: left promiscuous mode [ 405.513593][T20976] veth1_virt_wifi: left allmulticast mode [ 405.685011][T20976] geneve2: left promiscuous mode [ 405.692209][T20976] geneve2: left allmulticast mode [ 405.701115][T20976] bond1: left allmulticast mode [ 405.707911][T20976] veth3: left promiscuous mode [ 405.715277][T20976] veth5: left allmulticast mode [ 405.722562][T20976] gretap0: left promiscuous mode [ 405.729185][ T4184] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.729760][T20983] netlink: 'syz.3.4336': attribute type 5 has an invalid length. [ 405.746668][ T4184] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.762991][ T4184] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 405.772359][ T4184] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.781922][ T4184] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.791778][ T4184] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 405.815411][T20983] batman_adv: batadv0: Adding interface: vxlan0 [ 405.824803][T20983] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.856163][T20983] batman_adv: batadv0: Interface activated: vxlan0 [ 405.881604][T20990] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 405.899331][ T4184] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.924235][ T4184] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.967556][ T4184] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 406.009492][ T4184] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.037742][ T4184] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.056275][ T4184] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 406.084299][ T4184] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.106825][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4343'. [ 406.116229][ T4184] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.127700][ T4184] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.150040][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.190177][ T4184] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.313343][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 406.546133][T21028] lo: entered allmulticast mode [ 407.442117][T21061] tipc: Enabled bearer , priority 0 [ 407.471920][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.473002][T21055] tipc: Resetting bearer [ 407.482869][T14854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.559637][ T5955] tipc: Node number set to 2909911993 [ 409.287494][T14875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.220994][T21033] Set syz1 is full, maxelem 65536 reached [ 410.540346][T21055] tipc: Disabling bearer [ 410.692468][T21078] netlink: 'syz.3.4378': attribute type 30 has an invalid length. [ 410.990481][T21101] __nla_validate_parse: 2 callbacks suppressed [ 410.990500][T21101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4389'. [ 411.063651][T21104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4390'. [ 411.090357][T21107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4392'. [ 411.410282][T21126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4401'. [ 411.429316][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 411.500394][T21126] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 411.920049][T14875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.085904][T21126] bond5 (unregistering): Released all slaves [ 412.552176][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.649654][T21180] siw: device registration error -23 [ 412.733093][T21185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4426'. [ 412.988135][T21203] veth0: mtu less than device minimum [ 413.079221][T21209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4435'. [ 413.189923][T14854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.286165][T21220] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 413.376874][T21226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4443'. [ 413.636308][T21237] pim6reg: left allmulticast mode [ 413.702327][T21237] pim6reg: entered allmulticast mode [ 413.708673][T21237] pim6reg: left allmulticast mode [ 413.712893][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4451'. [ 414.310068][T14748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.477207][T21292] veth0_to_team: entered promiscuous mode [ 414.522278][T21295] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4473'. [ 414.531690][T21295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4473'. [ 415.426065][T21323] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 415.438615][T21323] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 415.447760][T21323] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 416.133390][T21349] __nla_validate_parse: 4 callbacks suppressed [ 416.133408][T21349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4499'. [ 416.938299][T21379] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4509'. [ 417.040928][T14748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.298510][T21349] bridge0: port 3(dummy0) entered disabled state [ 417.305135][T21349] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.524893][T21349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.543371][T21349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.596539][ T916] page_pool_release_retry() stalled pool shutdown: id 75, 2 inflight 60 sec [ 417.670362][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.713153][T21349] batman_adv: batadv0: Interface deactivated: vxlan0 [ 417.757056][T21379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.772485][T21379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.786034][T21379] bond0 (unregistering): Released all slaves [ 417.833306][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.860508][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.879033][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.888015][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.941787][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.959052][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.967976][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.998070][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.310791][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.355242][T21411] veth4: entered promiscuous mode [ 418.376426][T21411] veth4: entered allmulticast mode [ 418.637094][T21433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4535'. [ 419.174194][T21450] IPv6: NLM_F_CREATE should be specified when creating new route [ 419.276148][T21456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4546'. [ 419.301551][T21456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4546'. [ 419.386907][T21462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4549'. [ 419.587087][T21469] netlink: 'syz.0.4551': attribute type 13 has an invalid length. [ 419.602183][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.650468][T21473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4554'. [ 419.789130][T21479] bond0: Caught tx_queue_len zero misconfig [ 420.024101][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4561'. [ 420.113661][T21504] wg2: entered promiscuous mode [ 420.129355][T21504] wg2: entered allmulticast mode [ 420.319217][T21514] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4569'. [ 421.119458][T21533] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4579'. [ 421.251017][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4585'. [ 421.669709][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 421.700710][T21560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4592'. [ 421.713799][T21562] atomic_op ffff8880544db998 conn xmit_atomic 0000000000000000 [ 422.151778][T21588] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4603'. [ 422.252667][T21595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4607'. [ 422.262580][T21598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4608'. [ 422.269113][T21595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4607'. [ 422.395081][T21595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4607'. [ 422.405679][T21595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4607'. [ 422.596876][T21595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4607'. [ 422.607092][T21595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4607'. [ 422.625633][T21616] siw: device registration error -23 [ 422.800404][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.809162][T14748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.828192][T21622] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.840699][T21622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.074526][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.186513][T21690] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 424.656978][T21715] veth4: entered promiscuous mode [ 424.664986][T21715] veth4: entered allmulticast mode [ 424.879884][T21731] netlink: 'syz.3.4663': attribute type 30 has an invalid length. [ 424.900472][T21733] xt_hashlimit: size too large, truncated to 1048576 [ 424.907977][T21733] xt_hashlimit: max too large, truncated to 1048576 [ 424.946657][T21733] Cannot find del_set index 3 as target [ 425.045877][T21735] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (65485) ! [ 425.353366][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.952824][T21782] syzkaller0: entered promiscuous mode [ 425.958468][T21782] syzkaller0: entered allmulticast mode [ 425.966720][T21784] bridge0: port 3(30ªî{X¹¦) entered blocking state [ 425.978498][T21784] bridge0: port 3(30ªî{X¹¦) entered disabled state [ 425.986460][T21784] 0ªî{X¹¦: entered allmulticast mode [ 425.994333][T21784] 0ªî{X¹¦: entered promiscuous mode [ 426.000600][T21784] bridge0: port 3(30ªî{X¹¦) entered blocking state [ 426.007403][T21784] bridge0: port 3(30ªî{X¹¦) entered forwarding state [ 427.831409][T21822] xt_hashlimit: max too large, truncated to 1048576 [ 427.846078][T21822] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 428.053172][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 428.063249][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 428.072216][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 428.084287][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 428.093949][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 428.112979][T21838] __nla_validate_parse: 10 callbacks suppressed [ 428.112997][T21838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4707'. [ 428.335719][T21835] chnl_net:caif_netlink_parms(): no params data found [ 428.435997][T21835] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.443708][T21835] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.451347][T21835] bridge_slave_0: entered allmulticast mode [ 428.458470][T21835] bridge_slave_0: entered promiscuous mode [ 428.467351][T21835] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.474754][T21835] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.482719][T21835] bridge_slave_1: entered allmulticast mode [ 428.491039][T21835] bridge_slave_1: entered promiscuous mode [ 428.522530][T21835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.534973][T21835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.559487][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.568176][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.598417][T21835] team0: Port device team_slave_0 added [ 428.618796][T21835] team0: Port device team_slave_1 added [ 428.741362][T21859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4714'. [ 428.742731][T21835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.761767][T21859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4714'. [ 428.770841][T21835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.770872][T21835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.773112][T21835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.836226][T21835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.863774][T21835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.938433][T21859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4714'. [ 428.953602][T21859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4714'. [ 428.963513][T21866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 428.970924][T21866] IPv6: NLM_F_CREATE should be set when creating new route [ 428.978199][T21866] IPv6: NLM_F_CREATE should be set when creating new route [ 428.991147][T21866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.017485][T21835] hsr_slave_0: entered promiscuous mode [ 429.034564][T21835] hsr_slave_1: entered promiscuous mode [ 429.054745][T21835] debugfs: 'hsr0' already exists in 'hsr' [ 429.069534][T21835] Cannot create hsr debugfs directory [ 429.117765][T21859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4714'. [ 429.126926][T21859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4714'. [ 429.333773][T21883] pimreg: entered allmulticast mode [ 429.357930][T21883] pimreg: left allmulticast mode [ 429.569249][ T30] audit: type=1107 audit(1761746295.065:10): pid=21893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 429.769604][T21835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 429.800770][T21835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 429.823577][T21835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 429.832376][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.861344][T21835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 430.015493][T21835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.053705][T21835] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.076857][T14843] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.084070][T14843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.136368][T14843] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.143553][T14843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.151073][ T5833] Bluetooth: hci3: command tx timeout [ 430.285927][T21932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4744'. [ 430.311954][T21932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4744'. [ 430.390990][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.674388][T21835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.906752][T21969] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4758'. [ 431.230860][T21835] veth0_vlan: entered promiscuous mode [ 431.253109][T21835] veth1_vlan: entered promiscuous mode [ 431.262660][T21988] netlink: 'syz.0.4765': attribute type 1 has an invalid length. [ 431.320012][T21988] bond5: entered promiscuous mode [ 431.325600][T21988] 8021q: adding VLAN 0 to HW filter on device bond5 [ 431.406076][T21988] bond5: entered allmulticast mode [ 432.121305][T22007] ksmbd: Unknown IPC event: 3, ignore. [ 432.234479][ T5833] Bluetooth: hci3: command tx timeout [ 433.076755][T22001] team0: entered promiscuous mode [ 433.082012][T22001] team0: entered allmulticast mode [ 433.087443][T22001] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.149496][T22009] __nla_validate_parse: 3 callbacks suppressed [ 433.149515][T22009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4775'. [ 433.205798][T21835] veth0_macvtap: entered promiscuous mode [ 433.232848][T21835] veth1_macvtap: entered promiscuous mode [ 433.307158][T21835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.363959][T21835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.423810][ T4184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.444483][ T4184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.469770][ T4184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.490059][ T4184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.648093][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.670448][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.679155][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.710495][ T4184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.729707][ T4184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.740958][T22038] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4789'. [ 433.861379][T22044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4792'. [ 433.873799][T22044] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4792'. [ 433.892002][T22044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4792'. [ 433.915955][T22044] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4792'. [ 433.997802][T22048] syzkaller0: entered allmulticast mode [ 434.020677][T22048] syzkaller0: entered promiscuous mode [ 434.046275][T22048] syzkaller0 (unregistering): left allmulticast mode [ 434.055176][T22048] syzkaller0 (unregistering): left promiscuous mode [ 434.122875][T22057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4798'. [ 434.134918][T22058] netlink: 'syz.3.4797': attribute type 84 has an invalid length. [ 434.310796][ T5833] Bluetooth: hci3: command tx timeout [ 434.353560][T22070] syzkaller0: entered promiscuous mode [ 434.361745][T22070] syzkaller0: entered allmulticast mode [ 434.513002][T22084] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4805'. [ 434.524311][T22078] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4805'. [ 434.790397][T22101] pim6reg: entered allmulticast mode [ 434.813917][T22101] pim6reg: left allmulticast mode [ 435.429786][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.591260][T14875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.600696][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.692941][T22139] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 435.782988][T22144] syzkaller1: entered promiscuous mode [ 435.800237][T22144] syzkaller1: entered allmulticast mode [ 436.392499][ T5833] Bluetooth: hci3: command tx timeout [ 437.166184][T22220] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.268515][T22224] netlink: 'syz.0.4874': attribute type 3 has an invalid length. [ 437.752343][T22258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4887'. [ 437.838842][T22258] vlan2: entered allmulticast mode [ 437.872798][T22258] dummy0: entered allmulticast mode [ 438.106359][T22244] infiniband syz!: set down [ 438.145318][T22244] infiniband syz!: added team_slave_0 [ 438.246832][T22244] RDS/IB: syz!: added [ 438.259618][T22244] smc: adding ib device syz! with port count 1 [ 438.271629][T22244] smc: ib device syz! port 1 has no pnetid [ 438.799784][T22304] __nla_validate_parse: 1 callbacks suppressed [ 438.799804][T22304] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4905'. [ 439.260820][T22329] batadv_slave_0: Caught tx_queue_len zero misconfig [ 439.490161][T22337] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 439.607440][T22339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4918'. [ 439.800226][T22343] lo: Caught tx_queue_len zero misconfig [ 440.074357][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.554038][T22377] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.4935'. [ 440.825904][T22388] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.4940'. [ 441.026604][T22398] netlink: 133536 bytes leftover after parsing attributes in process `syz.5.4943'. [ 441.204154][T22401] netlink: 'syz.4.4945': attribute type 4 has an invalid length. [ 441.352056][T14878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.362122][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.812107][T22425] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.819879][T22425] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.981766][T22425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.001398][T22425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.157021][T22425] vlan2: left allmulticast mode [ 442.162529][T22425] dummy0: left allmulticast mode [ 442.213196][T14843] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.253228][T14843] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.282891][T14843] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.304754][T14843] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.464530][T22447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4962'. [ 442.559728][T22447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4962'. [ 442.631764][T22454] ip6gre0: Caught tx_queue_len zero misconfig [ 442.649114][T22454] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 442.802052][T22465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4969'. [ 442.950872][T22470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4970'. [ 443.328242][T22484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4978'. [ 444.594193][T22546] sock: sock_set_timeout: `syz.0.5007' (pid 22546) tries to set negative timeout [ 444.920359][T22564] rdma_op ffff88807a8741f0 conn xmit_rdma 0000000000000000 [ 445.251340][T22591] IPv6: NLM_F_CREATE should be specified when creating new route [ 446.328471][T22657] bridge0: port 3(gretap0) entered blocking state [ 446.335982][T22657] bridge0: port 3(gretap0) entered disabled state [ 446.346608][T22657] gretap0: entered allmulticast mode [ 446.354776][T22657] gretap0: entered promiscuous mode [ 446.364019][T22657] gretap0: left allmulticast mode [ 446.370218][T22657] gretap0: left promiscuous mode [ 446.375508][T22657] bridge0: port 3(gretap0) entered disabled state [ 446.583337][T22671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5066'. [ 446.611261][T22671] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 446.619968][T22671] team0: Device ipvlan2 is already an upper device of the team interface [ 447.110703][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.118827][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.480346][T22714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5083'. [ 447.999055][T22752] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5099'. [ 448.010166][T22752] ksmbd: Unknown IPC event: 3, ignore. [ 448.075667][T22756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5101'. [ 448.090459][T22756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5101'. [ 449.220768][T22798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5119'. [ 449.246103][T22798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5119'. [ 449.382584][T22810] team_slave_1: Caught tx_queue_len zero misconfig [ 449.670197][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.107966][T22856] @ÿ: renamed from hsr0 [ 450.123810][T22855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5147'. [ 450.219231][ T30] audit: type=1107 audit(1761746315.725:11): pid=22858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 450.346066][T22868] erspan0: left promiscuous mode [ 450.354094][T22868] erspan0: left allmulticast mode [ 450.366186][T22868] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 450.395960][T22868] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 450.441885][T22868] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 450.478372][T22868] xfrm1: left allmulticast mode [ 450.494641][T22868] bond2: left promiscuous mode [ 450.517382][T22868] bridge4: left promiscuous mode [ 450.591444][T22868] team0: left promiscuous mode [ 450.613548][T22868] team0: left allmulticast mode [ 450.692882][T22872] bond0: entered promiscuous mode [ 450.718710][T22872] bond0: entered allmulticast mode [ 450.740536][T22872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.984303][T22872] bond0 (unregistering): Released all slaves [ 451.144327][T22894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5163'. [ 451.155542][T22894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5163'. [ 451.165597][T22894] netlink: 'syz.3.5163': attribute type 6 has an invalid length. [ 451.481963][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.501746][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.521707][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.539595][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.706434][T22931] __nla_validate_parse: 2 callbacks suppressed [ 451.706453][T22931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5178'. [ 451.733318][T22931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5178'. [ 451.857471][T22931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5178'. [ 451.871256][T22931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5178'. [ 451.879287][T22940] netlink: 'syz.0.5185': attribute type 3 has an invalid length. [ 451.933519][T14878] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.951230][T14878] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.973336][T14878] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.036429][T14878] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.055517][T22931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5178'. [ 452.067699][T22931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5178'. [ 452.090975][T22948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5186'. [ 452.102427][T22948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5186'. [ 452.352248][T22970] netlink: 'syz.5.5196': attribute type 16 has an invalid length. [ 452.367777][T22970] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5196'. [ 452.444878][T22977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5199'. [ 452.830150][T22999] team1: entered promiscuous mode [ 452.835285][T22999] team1: entered allmulticast mode [ 452.841229][T22999] 8021q: adding VLAN 0 to HW filter on device team1 [ 452.871417][T14875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.879602][T14875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.887693][T14748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.995338][T23005] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 453.828187][T23060] wg2: entered promiscuous mode [ 453.835523][T23060] wg2: entered allmulticast mode [ 454.232814][T23077] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 454.852558][T23107] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 454.879355][T23107] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 454.898430][T23107] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 455.241645][T23127] wg2: left promiscuous mode [ 455.251845][T23127] wg2: left allmulticast mode [ 455.297533][T23127] vlan2: left promiscuous mode [ 455.332782][T23127] bridge0: left promiscuous mode [ 455.364216][T23127] ipvlan2: left promiscuous mode [ 455.383263][T23127] ip6erspan0: left promiscuous mode [ 455.390367][T23127] ip6erspan0: left allmulticast mode [ 455.401314][T23132] netlink: 'syz.0.5268': attribute type 1 has an invalid length. [ 455.413744][T23127] veth4: left promiscuous mode [ 455.418621][T23127] veth4: left allmulticast mode [ 455.431416][T23127] team1: left promiscuous mode [ 455.436313][T23127] team1: left allmulticast mode [ 455.451891][T14878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.498524][T23131] syzkaller0: entered promiscuous mode [ 455.504716][T23131] syzkaller0: entered allmulticast mode [ 456.027836][T23148] netlink: 'syz.0.5273': attribute type 10 has an invalid length. [ 457.638420][T23148] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 457.649076][T23165] kthread_run failed with err -4 [ 457.655877][T23167] netlink: 'syz.4.5284': attribute type 3 has an invalid length. [ 457.761445][T23169] bridge0: port 3(30ªî{X¹¦) entered disabled state [ 457.867549][T23176] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 457.977736][T23180] syzkaller0: entered promiscuous mode [ 457.983537][T23180] syzkaller0: entered allmulticast mode [ 457.991201][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.630526][T14748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.639318][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.038489][T23244] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 460.383730][T23238] netlink: 'syz.4.5310': attribute type 5 has an invalid length. [ 460.407884][T23258] wg2: left promiscuous mode [ 460.413075][T23258] wg2: left allmulticast mode [ 460.489618][T23261] __nla_validate_parse: 12 callbacks suppressed [ 460.489635][T23261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5319'. [ 460.643820][T23277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5325'. [ 460.861781][T23287] netlink: zone id is out of range [ 461.016775][T23301] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 461.031558][T23301] bond1 (unregistering): Released all slaves [ 461.065213][T23304] wg1: left promiscuous mode [ 461.072797][T23304] veth0_to_team: left promiscuous mode [ 461.108522][T23304] vlan2: left promiscuous mode [ 461.124299][T23304] vlan2: left allmulticast mode [ 461.124321][T23316] Cannot find add_set index 2 as target [ 461.136104][T23304] hsr_slave_1: left allmulticast mode [ 461.143655][T23304] vlan4: left allmulticast mode [ 461.148696][T23304] gretap0: left allmulticast mode [ 461.163592][T23304] bond3: left promiscuous mode [ 461.175037][T23304] veth4: left promiscuous mode [ 461.180076][T23304] veth4: left allmulticast mode [ 461.186984][T23304] bond5: left promiscuous mode [ 461.192540][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.203802][T23304] bond5: left allmulticast mode [ 461.234409][T23316] tipc: Enabled bearer , priority 0 [ 461.273907][T23308] syzkaller0: mtu less than device minimum [ 461.356337][T23317] syzkaller0: entered promiscuous mode [ 461.371676][T23317] syzkaller0: entered allmulticast mode [ 461.609740][T23306] tipc: Resetting bearer [ 461.638336][T23306] tipc: Disabling bearer [ 462.184235][T23379] netlink: 'syz.3.5358': attribute type 1 has an invalid length. [ 462.236736][T23384] netlink: 184 bytes leftover after parsing attributes in process `syz.5.5359'. [ 462.481847][T23400] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5365'. [ 462.855895][T23425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5372'. [ 462.988304][T23439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5378'. [ 463.167569][T23452] netlink: 'syz.1.5383': attribute type 10 has an invalid length. [ 463.196769][T23452] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 463.216725][T23452] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 463.244940][T23455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5384'. [ 463.268222][T23455] netlink: 'syz.3.5384': attribute type 3 has an invalid length. [ 463.291922][T23455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5384'. [ 463.303048][T23455] netlink: 'syz.3.5384': attribute type 83 has an invalid length. [ 463.313069][T23463] netlink: 'syz.4.5386': attribute type 21 has an invalid length. [ 463.504255][T23480] netlink: 'syz.1.5392': attribute type 2 has an invalid length. [ 463.754891][T14878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.907804][T23503] netlink: 'syz.3.5402': attribute type 1 has an invalid length. [ 463.942023][T23503] 8021q: adding VLAN 0 to HW filter on device bond7 [ 464.025409][T23503] 8021q: adding VLAN 0 to HW filter on device bond7 [ 464.040741][T23503] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 464.079305][T23503] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 464.116770][T23516] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5406'. [ 464.271471][T23509] veth5: entered promiscuous mode [ 464.285126][T23509] bond7: (slave veth5): Enslaving as an active interface with a down link [ 464.306116][T23512] vlan2: entered allmulticast mode [ 464.313688][T23512] bond7: entered allmulticast mode [ 464.392610][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.407020][T14878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.903845][T23556] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20000 [ 465.040186][T23566] tipc: Enabled bearer , priority 0 [ 465.060327][T23566] syzkaller0: entered promiscuous mode [ 465.090674][T23566] syzkaller0: entered allmulticast mode [ 465.154787][T23567] tipc: Resetting bearer [ 465.198029][T23567] tipc: Disabling bearer [ 465.236138][T23587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5428'. [ 465.575988][T23612] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5437'. [ 465.628304][T23613] Bluetooth: MGMT ver 1.23 [ 465.767159][T23623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5441'. [ 466.001499][T23639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5449'. [ 466.134922][T23648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5452'. [ 466.187338][T23654] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 466.686011][T23678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5462'. [ 466.717952][T23678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5462'. [ 466.741004][T23683] netlink: 'syz.4.5463': attribute type 1 has an invalid length. [ 466.771866][T23683] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 466.949811][T23694] netlink: 'syz.1.5465': attribute type 10 has an invalid length. [ 466.949914][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.975697][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5465'. [ 467.103030][T23700] pim6reg1: entered promiscuous mode [ 467.125149][T23700] pim6reg1: entered allmulticast mode [ 468.029222][T23755] netlink: 'syz.5.5480': attribute type 1 has an invalid length. [ 468.096728][T23759] veth0_to_team: entered promiscuous mode [ 468.153251][T23759] netlink: 'syz.0.5479': attribute type 1 has an invalid length. [ 468.343609][T23774] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 468.355469][T23774] netlink: 'syz.4.5485': attribute type 1 has an invalid length. [ 468.364202][T23774] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5485'. [ 468.434536][T23778] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5487'. [ 468.566835][T23787] 8021q: VLANs not supported on lo [ 469.295447][T23833] netlink: 'syz.5.5508': attribute type 5 has an invalid length. [ 469.509865][T14875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.518027][T14878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.150250][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.394633][T23914] 8021q: VLANs not supported on ip_vti0 [ 470.571279][T23926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5537'. [ 470.717696][T23935] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5542'. [ 470.727487][T23935] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5542'. [ 470.738259][T23935] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5542'. [ 470.748091][T23935] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5542'. [ 470.807001][T23940] pim6reg1: entered promiscuous mode [ 470.815529][T23940] pim6reg1: entered allmulticast mode [ 470.871241][T23944] syzkaller0: entered promiscuous mode [ 470.876928][T23944] syzkaller0: entered allmulticast mode [ 471.052654][T23953] syzkaller1: entered promiscuous mode [ 471.058571][T23953] syzkaller1: entered allmulticast mode [ 471.275378][T23968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5553'. [ 471.285083][T23968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5553'. [ 471.328698][T23970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5553'. [ 471.376080][T23970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5553'. [ 471.478284][T23979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5555'. [ 471.488462][T23985] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5557'. [ 472.182027][T24016] netlink: 'syz.3.5567': attribute type 13 has an invalid length. [ 472.269473][T24016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.295233][T24016] bridge0: port 3(dummy0) entered blocking state [ 472.302037][T24016] bridge0: port 3(dummy0) entered forwarding state [ 472.315860][T24016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.627467][T24042] tipc: Started in network mode [ 472.637404][T24042] tipc: Node identity , cluster identity 4711 [ 472.643828][T24042] tipc: Failed to obtain node identity [ 472.690385][T24042] tipc: Enabling of bearer rejected, failed to enable media [ 472.706427][T24051] syzkaller0: entered promiscuous mode [ 472.710094][T14875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.714442][T24051] syzkaller0: entered allmulticast mode [ 472.894068][T24066] syzkaller0: entered promiscuous mode [ 472.901051][T24066] syzkaller0: entered allmulticast mode [ 472.935762][T24066] netlink: 'syz.3.5583': attribute type 29 has an invalid length. [ 472.985043][T24069] netlink: 'syz.3.5583': attribute type 29 has an invalid length. [ 473.113809][T24079] netlink: 'syz.0.5589': attribute type 10 has an invalid length. [ 473.137258][T24079] bridge_slave_1: left allmulticast mode [ 473.143244][T24079] bridge_slave_1: left promiscuous mode [ 473.154102][T24079] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.196379][T24079] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 473.269475][T24088] ip6tnl0: Caught tx_queue_len zero misconfig [ 473.370755][T24092] syzkaller1: entered promiscuous mode [ 473.378037][T24092] syzkaller1: entered allmulticast mode [ 473.422145][T24092] pim6reg1: entered promiscuous mode [ 473.436127][T24092] pim6reg1: entered allmulticast mode [ 473.695528][T24124] netlink: 'syz.0.5603': attribute type 3 has an invalid length. [ 473.777392][T24128] netlink: 'syz.0.5604': attribute type 1 has an invalid length. [ 474.388591][T24111] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 474.633429][T14748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.853515][T24207] netlink: 'syz.4.5629': attribute type 33 has an invalid length. [ 474.868399][T24207] sctp: [Deprecated]: syz.4.5629 (pid 24207) Use of int in max_burst socket option deprecated. [ 474.868399][T24207] Use struct sctp_assoc_value instead [ 475.007435][T24218] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 475.269967][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.590455][ T5833] Bluetooth: hci0: command 0x0405 tx timeout [ 475.783780][T24267] __nla_validate_parse: 10 callbacks suppressed [ 475.783958][T24267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5647'. [ 475.814298][T24270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5647'. [ 475.871988][T24267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5647'. [ 475.892823][T24284] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5649'. [ 475.910953][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.112639][T24289] x_tables: duplicate underflow at hook 2 [ 476.272803][T24300] xt_l2tp: missing protocol rule (udp|l2tpip) [ 476.410022][T24311] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5659'. [ 476.814777][T24343] netlink: 'syz.1.5666': attribute type 1 has an invalid length. [ 476.894273][T24346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5666'. [ 476.918072][T24343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.953143][T24350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5668'. [ 476.979864][T24354] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 477.469743][T24385] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5677'. [ 477.478845][T24385] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5677'. [ 477.498235][T24385] netlink: 'syz.5.5677': attribute type 5 has an invalid length. [ 477.510340][T24385] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5677'. [ 477.556980][T24389] netlink: 'syz.4.5680': attribute type 3 has an invalid length. [ 477.759679][ T5846] Bluetooth: hci3: link tx timeout [ 477.765019][T24409] netlink: 'syz.0.5686': attribute type 4 has an invalid length. [ 477.766319][ T5846] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 477.831379][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.986284][T24420] syzkaller0: entered promiscuous mode [ 477.993324][T24420] syzkaller0: entered allmulticast mode [ 478.078838][T24422] bond7: entered promiscuous mode [ 478.088547][T24422] bond7: entered allmulticast mode [ 478.124554][T24422] 8021q: adding VLAN 0 to HW filter on device bond7 [ 478.892046][T24478] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 479.287835][T24484] sock: sock_set_timeout: `syz.4.5708' (pid 24484) tries to set negative timeout [ 479.509914][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 480.399470][T14854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.534523][T24496] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 480.541834][T24496] syzkaller1: Refused to change device type [ 480.618198][T24506] netlink: 'syz.3.5713': attribute type 1 has an invalid length. [ 480.690398][T24506] 8021q: adding VLAN 0 to HW filter on device bond8 [ 480.776488][T24506] bond8: (slave veth7): Enslaving as an active interface with a down link [ 480.821915][T24518] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 481.031495][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.241839][T24553] delete_channel: no stack [ 481.365178][T24563] netlink: 'syz.4.5733': attribute type 9 has an invalid length. [ 481.591038][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 481.653407][T24582] __nla_validate_parse: 10 callbacks suppressed [ 481.653426][T24582] netlink: 288 bytes leftover after parsing attributes in process `syz.4.5738'. [ 481.670463][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.861147][T24592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5742'. [ 482.024349][T24599] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5745'. [ 482.084965][T24601] netlink: 'syz.0.5746': attribute type 30 has an invalid length. [ 482.357762][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 482.370618][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 482.387169][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 482.396627][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 482.405489][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 482.810940][T24636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5752'. [ 482.852242][T24631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.984492][T24641] netlink: 'syz.0.5754': attribute type 1 has an invalid length. [ 483.091125][T14875] batadv0: left allmulticast mode [ 483.096596][T14875] batadv0: left promiscuous mode [ 483.119485][T14875] bridge0: port 3(batadv0) entered disabled state [ 483.140236][T24645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5756'. [ 483.205386][T14875] bridge_slave_1: left allmulticast mode [ 483.224092][T14875] bridge_slave_1: left promiscuous mode [ 483.242032][T14875] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.271645][T14875] bridge_slave_0: left allmulticast mode [ 483.277632][T14875] bridge_slave_0: left promiscuous mode [ 483.287927][T14875] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.438994][T24668] netlink: 'syz.0.5762': attribute type 2 has an invalid length. [ 483.594307][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.241963][T14875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.252819][T14875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.263507][T14875] bond0 (unregistering): (slave team0): Releasing backup interface [ 484.273159][T14875] bond0 (unregistering): Released all slaves [ 484.388365][T14875] bond1 (unregistering): (slave bond2): Releasing backup interface [ 484.397918][T14875] bond1 (unregistering): Released all slaves [ 484.473189][ T5846] Bluetooth: hci6: command tx timeout [ 484.525185][T14875] bond2 (unregistering): Released all slaves [ 484.538092][T14875] bond3 (unregistering): Released all slaves [ 484.554467][T14875] bond4 (unregistering): (slave bond5): Releasing backup interface [ 484.564029][T14875] bond4 (unregistering): Released all slaves [ 484.684659][T14875] bond5 (unregistering): Released all slaves [ 484.697332][T14875] bond6 (unregistering): Released all slaves [ 484.806816][T14875] bond7 (unregistering): Released all slaves [ 484.827124][T24652] bond0: Caught tx_queue_len zero misconfig [ 484.834178][T24652] sch_tbf: peakrate 4 is lower than or equals to rate 7935204924471480528 ! [ 484.970579][T14875] tipc: Left network mode [ 485.122295][T24694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5769'. [ 485.197121][T24698] netlink: 'syz.1.5770': attribute type 1 has an invalid length. [ 485.242331][T24698] netlink: 'syz.1.5770': attribute type 4 has an invalid length. [ 485.251385][T24698] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5770'. [ 485.513173][T24720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5777'. [ 485.570084][T24609] chnl_net:caif_netlink_parms(): no params data found [ 485.679578][T24733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5780'. [ 485.696190][T24733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5780'. [ 485.709975][T24733] netlink: 'syz.0.5780': attribute type 12 has an invalid length. [ 485.718435][T24733] netlink: 'syz.0.5780': attribute type 11 has an invalid length. [ 485.790930][T24609] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.808409][T24609] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.826315][T24609] bridge_slave_0: entered allmulticast mode [ 485.842818][T24609] bridge_slave_0: entered promiscuous mode [ 485.860900][T24609] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.878439][T24609] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.898760][T24609] bridge_slave_1: entered allmulticast mode [ 485.920460][T24609] bridge_slave_1: entered promiscuous mode [ 486.008525][T24609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.021513][T24754] netlink: 'syz.1.5784': attribute type 15 has an invalid length. [ 486.024006][T24609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.148845][T24609] team0: Port device team_slave_0 added [ 486.164948][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.173417][T24609] team0: Port device team_slave_1 added [ 486.243258][T24609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.251647][T24609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.278533][T24609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.323015][T24609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.341046][T24609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.393453][T24609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.550064][ T5846] Bluetooth: hci6: command tx timeout [ 486.603632][T24609] hsr_slave_0: entered promiscuous mode [ 486.621532][T24609] hsr_slave_1: entered promiscuous mode [ 486.634447][T24609] debugfs: 'hsr0' already exists in 'hsr' [ 486.646081][T24609] Cannot create hsr debugfs directory [ 486.658608][T24779] bridge_slave_0: left allmulticast mode [ 486.668550][T24779] bridge_slave_0: left promiscuous mode [ 486.685402][T24779] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.712337][T24779] bridge_slave_1: left allmulticast mode [ 486.728257][T24779] bridge_slave_1: left promiscuous mode [ 486.748736][T24779] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.780327][T24779] bond0: (slave bond_slave_0): Releasing backup interface [ 486.800565][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.811287][T24779] bond0: (slave bond_slave_1): Releasing backup interface [ 486.820029][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.838415][T24779] team0: Port device team_slave_0 removed [ 486.848530][T24779] team0: Port device team_slave_1 removed [ 486.855959][T24779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.864992][T24779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.874410][T24779] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 486.907959][T24781] team0: Mode changed to "loadbalance" [ 487.108066][T24789] openvswitch: netlink: Message has 592 unknown bytes. [ 487.130525][T24789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.157078][T24789] __nla_validate_parse: 3 callbacks suppressed [ 487.157096][T24789] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5795'. [ 487.213389][T24794] netlink: 'syz.0.5798': attribute type 1 has an invalid length. [ 487.533639][T24811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5803'. [ 487.866450][T24609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 487.878301][T24609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 487.890607][T24609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 487.903778][T24609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 487.971132][T24841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5812'. [ 487.981909][T24841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5812'. [ 488.025872][T24841] geneve3: entered promiscuous mode [ 488.032135][T24841] geneve3: entered allmulticast mode [ 488.040771][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.076120][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.086341][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.098601][T24846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5814'. [ 488.115523][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.161269][T24853] IPVS: Unknown mcast interface: vcan0 [ 488.284918][T24609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.316219][T24609] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.331885][T14748] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.339076][T14748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.376112][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.383314][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.615169][T24876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5825'. [ 488.633275][ T5846] Bluetooth: hci6: command tx timeout [ 488.711251][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.755826][T24609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.012376][T24899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5831'. [ 489.083062][T24904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5831'. [ 489.092574][T24904] netlink: 'syz.3.5831': attribute type 5 has an invalid length. [ 489.119640][T24904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5831'. [ 489.151771][T24904] geneve3: entered promiscuous mode [ 489.157150][T24904] geneve3: entered allmulticast mode [ 489.167399][T14843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 489.178665][T14843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 489.205084][T14843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 489.214390][T14843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 489.237090][T24906] syzkaller0: entered promiscuous mode [ 489.243291][T24906] syzkaller0: entered allmulticast mode [ 489.273664][T24609] veth0_vlan: entered promiscuous mode [ 489.286069][T24609] veth1_vlan: entered promiscuous mode [ 489.328542][T24609] veth0_macvtap: entered promiscuous mode [ 489.338728][T24609] veth1_macvtap: entered promiscuous mode [ 489.359912][T24609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.376619][T24609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.396457][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.415709][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.427113][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.452675][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.560213][ T4184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.577374][ T4184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.602072][T24915] netlink: 'syz.0.5837': attribute type 1 has an invalid length. [ 489.614995][T14748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.624239][T14748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.277873][T24943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5846'. [ 490.331993][T24945] xt_NFQUEUE: number of total queues is 0 [ 490.507063][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 490.525119][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 490.534369][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 490.544078][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 490.553295][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 490.711514][ T5846] Bluetooth: hci6: command tx timeout [ 490.756247][T24967] sctp: [Deprecated]: syz.4.5855 (pid 24967) Use of int in max_burst socket option. [ 490.756247][T24967] Use struct sctp_assoc_value instead [ 491.195541][T24954] chnl_net:caif_netlink_parms(): no params data found [ 491.275125][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.362603][T24988] IPv6: sit1: Disabled Multicast RS [ 491.374268][T24988] sit1: entered allmulticast mode [ 491.628632][T24993] IPVS: Unknown mcast interface: vcan0 [ 491.635520][T24954] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.646714][T24954] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.655690][T24954] bridge_slave_0: entered allmulticast mode [ 491.664559][T24954] bridge_slave_0: entered promiscuous mode [ 491.674881][T24954] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.682272][T24954] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.689843][T24954] bridge_slave_1: entered allmulticast mode [ 491.697705][T24954] bridge_slave_1: entered promiscuous mode [ 491.773297][T24954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.787666][T24954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.885479][T24954] team0: Port device team_slave_0 added [ 491.903629][T24954] team0: Port device team_slave_1 added [ 491.933278][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.994006][T24954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.009583][T24954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.038566][T24954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.054733][T24954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.066408][T24954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.098751][T24954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.226532][T24954] hsr_slave_0: entered promiscuous mode [ 492.240319][T24954] hsr_slave_1: entered promiscuous mode [ 492.247108][T24954] debugfs: 'hsr0' already exists in 'hsr' [ 492.253762][T24954] Cannot create hsr debugfs directory [ 492.552393][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.632591][ T5846] Bluetooth: hci0: command tx timeout [ 492.732900][T24954] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.803417][T24954] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.812858][T25059] __nla_validate_parse: 1 callbacks suppressed [ 492.812876][T25059] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5885'. [ 492.878768][T24954] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.927068][T25066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5887'. [ 492.937526][T25066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5887'. [ 492.951074][T25066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5887'. [ 492.961406][T25066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5887'. [ 492.973190][T24954] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.987509][T25066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5887'. [ 492.997132][T25066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5887'. [ 493.006680][T25066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5887'. [ 493.016267][T25066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5887'. [ 493.025919][T25066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5887'. [ 493.578217][T24954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 493.625352][T24954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 493.634888][T25077] nbd: device at index 4 is going down [ 493.673501][T24954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 493.688653][T24954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 493.822435][T25087] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 493.831908][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.857671][T25090] gretap1: entered promiscuous mode [ 493.927528][T24954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.947411][T25089] macvlan2: entered promiscuous mode [ 493.956392][T25089] macvlan2: entered allmulticast mode [ 493.992602][T25099] lo: Caught tx_queue_len zero misconfig [ 494.037460][T24954] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.065882][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.073097][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.109250][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.116423][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.233618][T24954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.491831][T25125] vlan2: entered promiscuous mode [ 494.496971][T25125] bridge0: entered promiscuous mode [ 494.642266][T24954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.712146][ T5846] Bluetooth: hci0: command tx timeout [ 494.719582][T24954] veth0_vlan: entered promiscuous mode [ 494.787204][T24954] veth1_vlan: entered promiscuous mode [ 494.828445][T24954] veth0_macvtap: entered promiscuous mode [ 494.838551][T24954] veth1_macvtap: entered promiscuous mode [ 494.860452][T24954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.879662][T24954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.895405][T14854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.906905][T14854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.925234][T14854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.940155][T14854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.991739][T25148] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.999213][T25148] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.092776][T25148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.107447][T25148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.213658][T25148] macvlan2: left promiscuous mode [ 495.218714][T25148] macvlan2: left allmulticast mode [ 495.224547][T25148] vlan2: left promiscuous mode [ 495.230101][T25148] bridge0: left promiscuous mode [ 495.248499][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.263431][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.281632][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.301644][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.358199][T14854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.374133][T14854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.384337][T25151] bridge_slave_0: left allmulticast mode [ 495.390837][T25151] bridge_slave_0: left promiscuous mode [ 495.396634][T25151] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.406432][T25151] bridge_slave_1: left allmulticast mode [ 495.412582][T25151] bridge_slave_1: left promiscuous mode [ 495.418452][T25151] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.432653][T25151] bond0: (slave bond_slave_0): Releasing backup interface [ 495.442713][T25151] bond0: (slave bond_slave_1): Releasing backup interface [ 495.452582][T25151] team0: Port device team_slave_0 removed [ 495.460964][T25151] team0: Port device team_slave_1 removed [ 495.466957][T25151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.474832][T25151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.483355][T25151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 495.551091][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.562622][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.713487][T25161] netlink: 'syz.5.5912': attribute type 5 has an invalid length. [ 495.965524][T25173] syzkaller0: entered promiscuous mode [ 495.981518][T25173] syzkaller0: entered allmulticast mode [ 496.160717][T25180] netlink: 'syz.4.5920': attribute type 13 has an invalid length. [ 496.190816][T25180] netlink: 'syz.4.5920': attribute type 58 has an invalid length. [ 496.231757][T25180] netlink: 'syz.4.5920': attribute type 1 has an invalid length. [ 496.314255][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 496.324260][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 496.334073][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 496.347718][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 496.357193][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.378855][T25182] bond1: (slave bridge1): making interface the new active one [ 496.388874][T25182] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 496.796366][ T5846] Bluetooth: hci0: command tx timeout [ 497.030477][T14878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.040819][T14854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.182941][T25233] dvmrp0: entered allmulticast mode [ 497.235988][T25183] chnl_net:caif_netlink_parms(): no params data found [ 497.300778][T25239] IPVS: set_ctl: invalid protocol: 23 172.20.20.170:20002 [ 497.664554][T25183] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.675451][T25183] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.679954][T14878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.700868][T25183] bridge_slave_0: entered allmulticast mode [ 497.708694][T25183] bridge_slave_0: entered promiscuous mode [ 497.721406][T25183] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.737279][T25183] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.746906][T25183] bridge_slave_1: entered allmulticast mode [ 497.760488][T25183] bridge_slave_1: entered promiscuous mode [ 497.837091][T25183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.856450][T25267] __nla_validate_parse: 35 callbacks suppressed [ 497.856468][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5941'. [ 497.878835][T25183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.912725][T25267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5941'. [ 497.976798][T25183] team0: Port device team_slave_0 added [ 498.008802][T25183] team0: Port device team_slave_1 added [ 498.058418][T25183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.069914][T25183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.118675][T25183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.144940][T25183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.153277][T25183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.206961][T25183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.319928][T25183] hsr_slave_0: entered promiscuous mode [ 498.326917][T25183] hsr_slave_1: entered promiscuous mode [ 498.340298][T25183] debugfs: 'hsr0' already exists in 'hsr' [ 498.346123][T25183] Cannot create hsr debugfs directory [ 498.390472][ T5846] Bluetooth: hci1: command tx timeout [ 498.416105][T25296] : entered promiscuous mode [ 498.596335][T25303] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.603870][T25303] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.622898][T25307] netlink: 'syz.5.5954': attribute type 11 has an invalid length. [ 498.704752][T25303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.723862][T25303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.872059][ T5846] Bluetooth: hci0: command tx timeout [ 498.897003][T14748] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.915796][T14748] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.925497][T14748] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.935043][T14748] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.062652][T25183] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 499.165523][T25183] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 499.280788][T25183] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 499.386931][T25183] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 499.590853][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.600512][T25354] netlink: 'syz.4.5970': attribute type 83 has an invalid length. [ 499.676567][T25183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 499.691341][T25358] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5971'. [ 499.707964][T25183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 499.726147][T25183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 499.754418][T25183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 499.901837][T25376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5975'. [ 500.051482][T25183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.125858][T25183] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.183109][T14748] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.190301][T14748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.247847][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.255050][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.337868][T25183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 500.350072][T25183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.475743][ T5833] Bluetooth: hci1: command tx timeout [ 500.796138][T25183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.910089][T25183] veth0_vlan: entered promiscuous mode [ 500.936249][T25183] veth1_vlan: entered promiscuous mode [ 501.036802][T25183] veth0_macvtap: entered promiscuous mode [ 501.056025][T25183] veth1_macvtap: entered promiscuous mode [ 501.095494][T25183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.121756][T25183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.151695][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.172309][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.198775][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.221001][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.388330][T14748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.404451][T14748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.414274][T25441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5992'. [ 501.449463][T25441] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 501.480382][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.488427][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.512282][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.567127][T25444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5992'. [ 501.844552][T25452] netlink: 'syz.3.5995': attribute type 23 has an invalid length. [ 502.221235][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 502.232233][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.242478][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 502.262056][T25471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5998'. [ 502.278129][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.287705][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 502.555715][ T52] Bluetooth: hci1: command 0x040f tx timeout [ 502.596737][T25488] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6002'. [ 502.797504][T14748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.812387][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.976064][T25503] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6007'. [ 502.988069][T25503] gretap0: entered promiscuous mode [ 502.995784][T25503] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6007'. [ 503.005852][T25503] 0ªî{X¹¦: renamed from gretap0 [ 503.018756][T25503] 0ªî{X¹¦: left promiscuous mode [ 503.030796][T25503] 0ªî{X¹¦: entered allmulticast mode [ 503.043393][T25508] netlink: 'syz.3.6009': attribute type 3 has an invalid length. [ 503.055463][T25503] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 503.430593][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.459661][T25528] syzkaller0: entered promiscuous mode [ 503.465354][T25528] syzkaller0: entered allmulticast mode [ 503.551605][T25533] netlink: 'syz.4.6018': attribute type 1 has an invalid length. [ 503.653585][T25533] bond2: entered promiscuous mode [ 503.659705][T25533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 503.688044][T25544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6019'. [ 503.728106][T25533] bond2: (slave bridge2): making interface the new active one [ 503.736143][T25533] bridge2: entered promiscuous mode [ 503.742892][T25533] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 503.753389][T25467] chnl_net:caif_netlink_parms(): no params data found [ 503.778045][T25544] vlan0: entered promiscuous mode [ 503.789204][T25544] vlan0: entered allmulticast mode [ 503.794471][T25544] veth0_vlan: entered allmulticast mode [ 504.158779][T25467] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.197366][T25467] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.221099][T25467] bridge_slave_0: entered allmulticast mode [ 504.247979][T25467] bridge_slave_0: entered promiscuous mode [ 504.272405][T25467] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.281276][T25467] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.289955][T25467] bridge_slave_1: entered allmulticast mode [ 504.298109][T25467] bridge_slave_1: entered promiscuous mode [ 504.391764][ T52] Bluetooth: hci2: command tx timeout [ 504.477396][T25467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.516367][T25467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.532189][T25594] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 504.587273][T25467] team0: Port device team_slave_0 added [ 504.607810][T25467] team0: Port device team_slave_1 added [ 504.630886][ T52] Bluetooth: hci1: command 0x040f tx timeout [ 504.728472][T25467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.748651][T25467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.801049][T25467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.816211][T25467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.824704][T25467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.853242][T25467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.956470][T25609] Bluetooth: MGMT ver 1.23 [ 504.992563][T25467] hsr_slave_0: entered promiscuous mode [ 505.010718][T25467] hsr_slave_1: entered promiscuous mode [ 505.023462][T25467] debugfs: 'hsr0' already exists in 'hsr' [ 505.030836][T25467] Cannot create hsr debugfs directory [ 505.275959][T25616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6041'. [ 505.349881][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.358852][T25617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6041'. [ 505.445485][T25622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6043'. [ 505.578174][T25467] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 505.646629][T25467] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 505.681391][T25467] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 505.714006][T25467] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 505.839109][T25640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6048'. [ 506.008830][T25467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.064327][T25467] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.095930][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.103189][ T4184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.137720][T14878] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.144909][T14878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.473407][ T52] Bluetooth: hci2: command tx timeout [ 506.709807][ T52] Bluetooth: hci1: command 0x040f tx timeout [ 506.767988][T25467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.967038][T25701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6064'. [ 507.027091][T25703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6064'. [ 507.133897][T25710] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6065'. [ 507.300757][T25467] veth0_vlan: entered promiscuous mode [ 507.321964][T25467] veth1_vlan: entered promiscuous mode [ 507.374611][T25467] veth0_macvtap: entered promiscuous mode [ 507.386776][T25467] veth1_macvtap: entered promiscuous mode [ 507.417634][T25467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.438407][T25467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.462843][T14878] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.493582][T14878] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.530774][ T4184] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.541314][ T4184] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.684233][T14878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.697404][T14878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.702937][T25720] xt_hashlimit: max too large, truncated to 1048576 [ 507.772180][T14878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.792953][T14878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.995207][T25733] xt_cgroup: xt_cgroup: no path or classid specified [ 508.283111][T25751] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6078'. [ 508.481073][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.537000][T25770] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6080'. [ 508.552930][ T52] Bluetooth: hci2: command tx timeout [ 508.562144][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.571375][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.646437][T25754] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.654189][T25754] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.768643][T25778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6080'. [ 508.789916][ T52] Bluetooth: hci1: command 0x040f tx timeout [ 508.846498][T25754] bridge_slave_0: left allmulticast mode [ 508.856105][T25754] bridge_slave_0: left promiscuous mode [ 508.866710][T25754] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.895897][T25754] bridge_slave_1: left allmulticast mode [ 508.902120][T25754] bridge_slave_1: left promiscuous mode [ 508.908163][T25754] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.934365][T25754] bond0: (slave bond_slave_0): Releasing backup interface [ 508.955453][T25754] bond0: (slave bond_slave_1): Releasing backup interface [ 508.975831][T25754] team0: Port device team_slave_0 removed [ 508.993150][T25754] team0: Port device team_slave_1 removed [ 509.005765][T25754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.018715][T25754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.038246][T25754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.051767][T25754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.073139][T25754] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 509.126663][T25775] pim6reg: entered allmulticast mode [ 509.310773][T25780] netlink: 'syz.6.6084': attribute type 9 has an invalid length. [ 509.462972][T25788] netlink: 'syz.6.6088': attribute type 1 has an invalid length. [ 509.540661][T25788] netlink: 'syz.6.6088': attribute type 16 has an invalid length. [ 509.579685][T25788] netlink: 'syz.6.6088': attribute type 17 has an invalid length. [ 509.680866][T25788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 509.707815][T25797] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6093'. [ 509.734402][T25800] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6093'. [ 509.776145][T25799] netdevsim0: mtu less than device minimum [ 509.782660][T25797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6093'. [ 509.782800][T25797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6093'. [ 509.782947][T25797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6093'. [ 509.783052][T25797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6093'. [ 509.783156][T25797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6093'. [ 509.859619][T25807] sctp: [Deprecated]: syz.3.6092 (pid 25807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.859619][T25807] Use struct sctp_sack_info instead [ 510.057993][T25806] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.065769][T25806] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.240394][T25806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.261333][T25806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.389673][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.543123][T14854] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.562770][T14854] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.608053][T14843] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.628198][T14843] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.641531][ T52] Bluetooth: hci2: command tx timeout [ 510.703635][T25842] bridge0: entered promiscuous mode [ 510.711790][T25840] bridge0: left promiscuous mode [ 510.718535][T25844] ipt_rpfilter: unknown options [ 511.148135][T25873] can: request_module (can-proto-3) failed. [ 511.917734][T25910] syzkaller0: entered promiscuous mode [ 511.930076][T25910] syzkaller0: entered allmulticast mode [ 511.960382][T25917] syzkaller1: entered promiscuous mode [ 511.966099][T25917] syzkaller1: entered allmulticast mode [ 512.535122][T25920] rdma_op ffff888024b091f0 conn xmit_rdma 0000000000000000 [ 512.669937][T25927] 0ªî{X¹¦: entered promiscuous mode [ 512.689455][T25927] 0ªî{X¹¦: left allmulticast mode [ 512.798381][T25929] batadv0: entered promiscuous mode [ 512.813238][T25929] dummy0: entered promiscuous mode [ 512.824253][T25929] debugfs: 'hsr1' already exists in 'hsr' [ 512.830768][T25929] Cannot create hsr debugfs directory [ 512.836765][T25929] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 512.855240][T25929] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 512.956612][T25944] netlink: 'syz.6.6138': attribute type 18 has an invalid length. [ 512.977937][ T49] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.998127][ T49] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.018564][ T49] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.033801][ T49] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.068101][T25946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.085571][T25948] Cannot find del_set index 3 as target [ 513.148733][T25953] sock: sock_set_timeout: `syz.4.6139' (pid 25953) tries to set negative timeout [ 513.216594][T25958] netlink: 'syz.6.6143': attribute type 10 has an invalid length. [ 513.226825][T25958] batman_adv: batadv0: Adding interface: netdevsim0 [ 513.240225][T25958] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.292321][T25958] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 513.322751][T25964] __nla_validate_parse: 76 callbacks suppressed [ 513.322770][T25964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6145'. [ 513.385737][T25965] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6145'. [ 513.387774][T25968] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6145'. [ 513.424171][T25967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6146'. [ 513.484612][T25970] pim6reg: entered allmulticast mode [ 513.606984][T25977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6148'. [ 513.616805][T25977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6148'. [ 513.628072][T25934] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 513.635603][T25934] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 513.669511][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.327900][T14878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.340062][T25934] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 514.345996][T25934] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 514.435210][T26000] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6155'. [ 514.439226][T25934] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 514.468468][T25934] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 514.483716][T26002] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20004 [ 514.484710][T25934] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 514.499983][T26002] IPVS: set_ctl: invalid protocol: 29 100.1.1.2:20003 [ 514.503140][T25934] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 514.564892][T25934] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 514.571082][T25934] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 514.618738][T25934] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 514.640988][T25934] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 514.771185][T25934] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 514.787695][T25934] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 514.976038][T26021] netlink: 'syz.3.6160': attribute type 2 has an invalid length. [ 514.998220][T26021] netlink: 'syz.3.6160': attribute type 2 has an invalid length. [ 515.244432][T26036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6166'. [ 515.255125][T26036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6166'. [ 515.288778][T26036] netlink: 'syz.3.6166': attribute type 2 has an invalid length. [ 515.329423][T26036] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6166'. [ 515.364959][T26036] tap0: tun_chr_ioctl cmd 1074025672 [ 515.371540][T26036] tap0: ignored: set checksum disabled [ 515.592658][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.594312][T26055] netlink: 'syz.3.6175': attribute type 1 has an invalid length. [ 515.908459][T26084] ipt_REJECT: TCP_RESET invalid for non-tcp [ 516.026891][T26093] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20003 [ 516.185504][T26103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 516.201847][T26105] gtp0: entered promiscuous mode [ 516.215638][T26105] gtp0: entered allmulticast mode [ 516.473568][T26135] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 2, id = 0 [ 516.886414][T26161] openvswitch: netlink: Message has 6 unknown bytes. [ 517.151195][T26183] netlink: 'syz.6.6212': attribute type 2 has an invalid length. [ 517.174435][T26184] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 517.365156][T26191] team0: No ports can be present during mode change [ 517.477596][T26201] netlink: 'syz.4.6220': attribute type 4 has an invalid length. [ 517.566568][T26205] netlink: 'syz.4.6220': attribute type 1 has an invalid length. [ 517.576066][T26205] netlink: 'syz.4.6220': attribute type 3 has an invalid length. [ 517.890293][T26220] netlink: 'syz.4.6226': attribute type 1 has an invalid length. [ 517.945609][T26220] 8021q: adding VLAN 0 to HW filter on device bond3 [ 518.007458][T26221] bond3: (slave veth3): Enslaving as an active interface with a down link [ 518.043819][T26226] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 518.161031][T14842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.481893][T26236] __nla_validate_parse: 48 callbacks suppressed [ 518.481911][T26236] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6231'. [ 518.543470][T26237] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6231'. [ 519.433278][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.441698][T14854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.373603][T26247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.417660][T26252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6234'. [ 520.435304][T26252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6234'. [ 520.436439][T26248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.451694][T26257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.532520][T26252] Cannot find add_set index 1 as target [ 520.639645][T26264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6239'. [ 520.712155][T14878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.853695][T26286] netlink: 'syz.4.6243': attribute type 3 has an invalid length. [ 520.975357][T26294] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6246'. [ 520.986910][T26294] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6246'. [ 521.001949][T26295] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6248'. [ 521.155322][T26309] syz_tun: entered allmulticast mode [ 521.167143][T26308] syz_tun: left allmulticast mode [ 521.174532][T26308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6252'. [ 521.382030][T26322] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 521.808162][T26328] tipc: Invalid UDP bearer configuration [ 521.808215][T26328] tipc: Enabling of bearer rejected, failed to enable media [ 522.246632][T26349] mac80211_hwsim hwsim54 syzkaller0: entered promiscuous mode [ 522.270786][T26349] mac80211_hwsim hwsim54 syzkaller0: entered allmulticast mode [ 522.281463][T26353] tipc: Enabling of bearer rejected, failed to enable media [ 522.437674][T26368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6272'. [ 522.540546][T26374] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 522.729703][T26385] netlink: 'syz.5.6276': attribute type 1 has an invalid length. [ 522.749666][T26382] netlink: 'syz.5.6276': attribute type 1 has an invalid length. [ 522.945063][T26400] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 522.992054][T26392] Cannot find add_set index 0 as target [ 523.026578][T26403] netlink: 'syz.3.6284': attribute type 1 has an invalid length. [ 523.035951][T26403] netlink: 'syz.3.6284': attribute type 2 has an invalid length. [ 523.518493][T26446] __nla_validate_parse: 3 callbacks suppressed [ 523.518513][T26446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6295'. [ 523.871643][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 523.889945][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 523.898970][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 523.910297][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 523.910822][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.927864][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 523.951774][ T5846] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 523.960837][ T5846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 523.976873][ T5846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 523.987208][ T5846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 523.997769][ T5846] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 524.024439][T26460] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6300'. [ 524.301447][T26469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6303'. [ 524.318026][T26469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6303'. [ 524.337224][T26469] netlink: 'syz.4.6303': attribute type 30 has an invalid length. [ 524.346077][T26469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6303'. [ 524.550654][T14854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.631362][T26454] chnl_net:caif_netlink_parms(): no params data found [ 524.834071][T26454] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.844968][T26454] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.855414][T26454] bridge_slave_0: entered allmulticast mode [ 524.864277][T26454] bridge_slave_0: entered promiscuous mode [ 524.877606][T26454] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.885649][T26454] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.893097][T26454] bridge_slave_1: entered allmulticast mode [ 524.901407][T26454] bridge_slave_1: entered promiscuous mode [ 524.966038][T26454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.986145][T26454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.004454][T26506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6313'. [ 525.070981][T26454] team0: Port device team_slave_0 added [ 525.090631][T26454] team0: Port device team_slave_1 added [ 525.178692][T26515] geneve2: entered promiscuous mode [ 525.188450][T26515] geneve2: entered allmulticast mode [ 525.194563][T14854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.246443][T26454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.260691][T26454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.319297][T26454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.330588][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 525.342149][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 525.362913][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 525.398711][T26528] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 525.418071][T26454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.427014][T26454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.459413][T26454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.471574][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 525.537025][T26530] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6320'. [ 525.617545][T26454] hsr_slave_0: entered promiscuous mode [ 525.647682][T26454] hsr_slave_1: entered promiscuous mode [ 525.658791][T26454] debugfs: 'hsr0' already exists in 'hsr' [ 525.670205][T26454] Cannot create hsr debugfs directory [ 525.831696][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.937598][T26551] netlink: 'syz.5.6326': attribute type 1 has an invalid length. [ 525.974897][T26550] bond1: entered promiscuous mode [ 526.069568][ T5846] Bluetooth: hci7: command tx timeout [ 526.091979][T26558] netlink: 'syz.6.6327': attribute type 10 has an invalid length. [ 526.123502][T26550] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 526.135777][T26550] bond1: (slave macvlan3): making interface the new active one [ 526.143968][T26550] macvlan3: entered promiscuous mode [ 526.149766][T26550] bond0: entered promiscuous mode [ 526.156113][T26550] bond_slave_0: entered promiscuous mode [ 526.163605][T26550] bond_slave_1: entered promiscuous mode [ 526.171327][T26550] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 526.195379][T26558] bridge0: entered promiscuous mode [ 526.220652][T26558] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 526.354433][T26564] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6329'. [ 526.437019][T26564] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6329'. [ 526.461219][T26567] netlink: 'syz.6.6330': attribute type 2 has an invalid length. [ 526.604695][T26454] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 526.634527][T26454] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 526.691917][T26454] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 526.704629][T26454] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 526.731731][T26581] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 526.920209][T26594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6335'. [ 526.942769][T26454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.954282][T26598] x_tables: duplicate underflow at hook 3 [ 527.055064][T26454] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.063091][T26600] netlink: 'syz.4.6338': attribute type 1 has an invalid length. [ 527.124360][T14842] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.131554][T14842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.146003][T26603] delete_channel: no stack [ 527.165839][T14854] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.173040][T14854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.430347][ T5846] Bluetooth: hci0: command tx timeout [ 527.686220][T26630] netlink: 'syz.3.6348': attribute type 8 has an invalid length. [ 527.850616][T26454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.866001][T26640] pim6reg: entered allmulticast mode [ 528.051323][T26649] netem: incorrect gi model size [ 528.056885][T26649] netem: change failed [ 528.076399][T26649] tipc: Enabling of bearer rejected, failed to enable media [ 528.115336][T26649] bond5: Invalid ad_actor_system MAC address. [ 528.120290][T26652] netlink: 'syz.3.6356': attribute type 10 has an invalid length. [ 528.130389][T26649] bond5: option ad_actor_system: invalid value (1) [ 528.141557][T26649] bond5 (unregistering): Released all slaves [ 528.150232][ T5846] Bluetooth: hci7: command tx timeout [ 528.716976][T26454] veth0_vlan: entered promiscuous mode [ 528.737496][T26454] veth1_vlan: entered promiscuous mode [ 528.810896][T26454] veth0_macvtap: entered promiscuous mode [ 528.832088][T26454] veth1_macvtap: entered promiscuous mode [ 528.875662][T26688] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 528.886549][T26454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.908668][T26454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.940095][T26691] tipc: Enabling of bearer rejected, failed to enable media [ 528.981953][T14854] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.996802][T14854] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.016323][T14854] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.023494][T26696] __nla_validate_parse: 9 callbacks suppressed [ 529.023513][T26696] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6370'. [ 529.059907][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.080257][T14854] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.202906][ T4184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.212863][ T4184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.285019][ T24] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x1 [ 529.297316][ T24] hid-generic 0005:0C45:1012.0002: ignoring exceeding usage max [ 529.307330][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.317980][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.324535][T26701] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6372'. [ 529.326303][ T24] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x4 [ 529.344999][ T24] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x5 [ 529.365618][ T24] hid-generic 0005:0C45:1012.0002: reserved main item tag 0xd [ 529.375259][ T24] hid-generic 0005:0C45:1012.0002: unexpected long global item [ 529.391529][ T24] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22 [ 529.454169][T26712] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6293'. [ 529.495098][T26712] bond1 (unregistering): Released all slaves [ 529.544800][T26716] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6374'. [ 529.598201][T26719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6375'. [ 529.653638][T26721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.910505][T26744] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6382'. [ 529.921530][T26744] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6382'. [ 529.932334][T26744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6382'. [ 529.976521][T26700] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 530.231041][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.243988][ T5846] Bluetooth: hci7: command tx timeout [ 530.252415][T26769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6387'. [ 530.310517][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.348344][T26773] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6390'. [ 530.937286][T26755] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 530.944696][T26755] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 531.046357][T26803] netlink: 'syz.5.6397': attribute type 3 has an invalid length. [ 531.048130][T26805] netlink: 'syz.6.6398': attribute type 26 has an invalid length. [ 531.067814][T26805] netlink: 'syz.6.6398': attribute type 26 has an invalid length. [ 531.301265][T26820] tipc: Started in network mode [ 531.306146][T26820] tipc: Node identity 080211, cluster identity 4711 [ 531.313237][T26820] tipc: Enabled bearer , priority 0 [ 531.424356][T26821] netlink: 'syz.5.6403': attribute type 11 has an invalid length. [ 531.433066][T26821] netlink: 'syz.5.6403': attribute type 11 has an invalid length. [ 531.477587][T26826] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 531.590956][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.310750][ T24] tipc: Node number set to 134353152 [ 534.791029][T14842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.069663][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.077793][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.352270][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.552024][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.191246][T14842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.829918][T14842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.110654][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.326879][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.592216][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.230930][T14854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.869887][T14843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.070065][T14854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.349787][T14854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.357913][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.911672][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.831458][ T31] INFO: task syz.2.4420:21173 blocked for more than 143 seconds. [ 557.832702][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.840884][ T31] Not tainted syzkaller #0 [ 557.852621][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.861473][ T31] task:syz.2.4420 state:D stack:23944 pid:21173 tgid:21170 ppid:16970 task_flags:0x400140 flags:0x00080002 [ 557.873473][ T31] Call Trace: [ 557.876763][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 557.880418][ T31] __schedule+0x1798/0x4cc0 [ 557.885437][ T31] ? validate_chain+0x897/0x2140 [ 557.891439][ T31] ? __lock_acquire+0xab9/0xd20 [ 557.896317][ T31] ? __pfx___schedule+0x10/0x10 [ 557.901938][ T31] ? schedule+0x91/0x360 [ 557.929385][ T31] schedule+0x165/0x360 [ 557.933582][ T31] schedule_timeout+0x9a/0x270 [ 557.938355][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 557.960009][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 557.965248][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.973162][ T31] ? wait_for_completion+0x267/0x5d0 [ 557.978482][ T31] wait_for_completion+0x2bf/0x5d0 [ 557.987750][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 557.993581][ T31] ? up_write+0x1c4/0x420 [ 557.997947][ T31] ? remove_client_context+0xc0/0x1e0 [ 558.003441][ T31] disable_device+0x1c6/0x320 [ 558.008124][ T31] ? __pfx_disable_device+0x10/0x10 [ 558.013710][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 558.019328][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 558.025231][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 558.030987][ T31] nldev_dellink+0x2d1/0x320 [ 558.035562][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 558.041302][ T31] ? apparmor_capable+0x137/0x1b0 [ 558.046333][ T31] ? bpf_lsm_capable+0x9/0x20 [ 558.051125][ T31] ? security_capable+0x7e/0x2e0 [ 558.056049][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 558.061611][ T31] rdma_nl_rcv+0x6ae/0x980 [ 558.066045][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 558.071875][ T31] ? __lock_acquire+0xab9/0xd20 [ 558.076730][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 558.082501][ T31] netlink_unicast+0x82f/0x9e0 [ 558.087286][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 558.093200][ T31] ? netlink_sendmsg+0x642/0xb30 [ 558.098123][ T31] ? skb_put+0x11b/0x210 [ 558.102743][ T31] netlink_sendmsg+0x805/0xb30 [ 558.107515][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.113160][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 558.118092][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 558.124015][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.129736][ T31] __sock_sendmsg+0x21c/0x270 [ 558.134402][ T31] ____sys_sendmsg+0x505/0x830 [ 558.139402][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.144734][ T31] ? import_iovec+0x74/0xa0 [ 558.149934][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 558.154621][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.159905][ T31] ? __fget_files+0x2a/0x420 [ 558.164495][ T31] ? __fget_files+0x3a0/0x420 [ 558.169915][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 558.174868][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 558.180946][ T31] ? do_syscall_64+0xbe/0xfa0 [ 558.185628][ T31] do_syscall_64+0xfa/0xfa0 [ 558.190567][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.195759][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.202102][ T31] ? clear_bhb_loop+0x60/0xb0 [ 558.206769][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.213518][ T31] RIP: 0033:0x7ff5f6f8efc9 [ 558.217926][ T31] RSP: 002b:00007ff5f7d76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.226704][ T31] RAX: ffffffffffffffda RBX: 00007ff5f71e5fa0 RCX: 00007ff5f6f8efc9 [ 558.235165][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 558.243698][ T31] RBP: 00007ff5f7011f91 R08: 0000000000000000 R09: 0000000000000000 [ 558.252019][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.260570][ T31] R13: 00007ff5f71e6038 R14: 00007ff5f71e5fa0 R15: 00007fffe8af6b98 [ 558.268559][ T31] [ 558.272306][ T31] [ 558.272306][ T31] Showing all locks held in the system: [ 558.280594][ T31] 1 lock held by khungtaskd/31: [ 558.285428][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 558.295644][ T31] 3 locks held by kworker/0:2/916: [ 558.301865][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 558.313329][ T31] #1: ffffc900035ffba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 558.327106][ T31] #2: ffffffff8f5aa6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 558.339550][ T31] 2 locks held by getty/5590: [ 558.344217][ T31] #0: ffff888033e6a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 558.354238][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 558.364690][ T31] 4 locks held by kworker/u8:34/14875: [ 558.370694][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 558.382007][ T31] #1: ffffc9001be9fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 558.393221][ T31] #2: ffffffff8f2be230 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 558.403443][ T31] #3: ffff888023c5c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 558.414981][ T31] 2 locks held by syz.2.4420/21173: [ 558.420538][ T31] #0: ffffffff99b628b8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 558.431229][ T31] #1: ffff888023c5c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 558.442764][ T31] 2 locks held by syz.1.5792/24773: [ 558.448027][ T31] #0: ffffffff8f2be230 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 558.457459][ T31] #1: ffff888023c5c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 558.472067][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.472295][ T31] 2 locks held by syz.0.6082/25769: [ 558.485862][ T31] #0: ffffffff8f2be230 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 558.495618][ T31] #1: ffff888023c5c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 558.507564][ T31] 2 locks held by syz.4.6387/26755: [ 558.513133][ T31] #0: ffffffff8f5aa6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 558.523574][ T31] #1: ffff88804636d100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 558.533933][ T31] 2 locks held by syz.4.6387/26767: [ 558.539678][ T31] #0: ffff88804636d100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 558.550090][ T31] #1: ffffffff8f5aa6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 558.560746][ T31] 2 locks held by syz.4.6387/26769: [ 558.565923][ T31] #0: ffffffff8e7750a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.574742][ T31] #1: ffffffff8f5aa6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 558.585144][ T31] 1 lock held by syz.4.6387/26777: [ 558.590873][ T31] #0: ffffffff8e7750a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.599634][ T31] 1 lock held by syz.3.6392/26783: [ 558.604850][ T31] #0: ffffffff8e7750a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.613725][ T31] 1 lock held by syz.7.6396/26798: [ 558.618818][ T31] #0: ffffffff8e7750a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.628287][ T31] 1 lock held by syz.6.6401/26814: [ 558.633796][ T31] #0: ffffffff8e7750a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.642528][ T31] 1 lock held by syz.6.6401/26817: [ 558.647617][ T31] #0: ffffffff8e7750a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.656754][ T31] 1 lock held by syz.5.6403/26819: [ 558.662412][ T31] #0: ffffffff8e7750a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.671248][ T31] 3 locks held by syz.5.6403/26821: [ 558.676423][ T31] #0: ffffffff8f330d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 558.685160][ T31] #1: ffffffff8f330b68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 558.694457][ T31] #2: ffffffff8f5aa6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 558.704750][ T31] 1 lock held by syz-executor/26828: [ 558.710689][ T31] #0: ffffffff8e7750a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.719794][ T31] 1 lock held by syz-executor/26833: [ 558.725123][ T31] #0: ffffffff8e7750a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.733724][ T31] 1 lock held by syz-executor/26834: [ 558.739546][ T31] #0: ffffffff8e7750a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.748008][ T31] 1 lock held by syz-executor/26835: [ 558.753429][ T31] #0: ffffffff8e7750a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.762169][ T31] 1 lock held by syz-executor/26836: [ 558.767434][ T31] #0: ffffffff8e7750a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.776497][ T31] [ 558.778824][ T31] ============================================= [ 558.778824][ T31] [ 558.793911][ T31] NMI backtrace for cpu 0 [ 558.793930][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 558.793949][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 558.793960][ T31] Call Trace: [ 558.793967][ T31] [ 558.793976][ T31] dump_stack_lvl+0x189/0x250 [ 558.794007][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.794030][ T31] ? __pfx__printk+0x10/0x10 [ 558.794062][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 558.794083][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 558.794104][ T31] ? __pfx__printk+0x10/0x10 [ 558.794127][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 558.794154][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 558.794180][ T31] watchdog+0xf60/0xfa0 [ 558.794203][ T31] ? watchdog+0x1e2/0xfa0 [ 558.794227][ T31] kthread+0x711/0x8a0 [ 558.794253][ T31] ? __pfx_watchdog+0x10/0x10 [ 558.794269][ T31] ? __pfx_kthread+0x10/0x10 [ 558.794293][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.794313][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.794332][ T31] ? __pfx_kthread+0x10/0x10 [ 558.794355][ T31] ret_from_fork+0x4bc/0x870 [ 558.794376][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 558.794402][ T31] ? __switch_to_asm+0x39/0x70 [ 558.794416][ T31] ? __switch_to_asm+0x33/0x70 [ 558.794429][ T31] ? __pfx_kthread+0x10/0x10 [ 558.794452][ T31] ret_from_fork_asm+0x1a/0x30 [ 558.794485][ T31] [ 558.794491][ T31] Sending NMI from CPU 0 to CPUs 1: [ 558.945660][ C1] NMI backtrace for cpu 1 [ 558.945676][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 558.945693][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 558.945704][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 558.945728][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 558.945742][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 558.945758][ C1] RAX: 38d8aa50fb183800 RBX: ffffffff81967b87 RCX: 38d8aa50fb183800 [ 558.945771][ C1] RDX: 0000000000000001 RSI: ffffffff8d70c9b0 RDI: ffffffff8bbf0460 [ 558.945782][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 558.945794][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cd370 [ 558.945805][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 558.945816][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 558.945830][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.945841][ C1] CR2: 000055c09d27ef40 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 558.945855][ C1] Call Trace: [ 558.945862][ C1] [ 558.945868][ C1] default_idle+0x13/0x20 [ 558.945888][ C1] default_idle_call+0x73/0xb0 [ 558.945911][ C1] do_idle+0x1e7/0x510 [ 558.945931][ C1] ? __pfx_do_idle+0x10/0x10 [ 558.945955][ C1] cpu_startup_entry+0x44/0x60 [ 558.945971][ C1] start_secondary+0x101/0x110 [ 558.945994][ C1] common_startup_64+0x13e/0x147 [ 558.946022][ C1] [ 559.114859][T14842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.952505][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.590039][T14854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.598185][ T4184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.870632][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog