last executing test programs: 5.463582269s ago: executing program 2 (id=8562): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00100029bd7000000000000a0000000000ff00000a00002800060004000000080006007d05000008001000"], 0x34}}, 0x20040810) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000900)={{r1, &(0x7f0000000140)=')%:\x00', 0x8800, &(0x7f0000000740)={@_ha_fsid={[0x5, 0x7]}, {0x1, 0x6, 0x3, 0x9}}, 0xfffffffb, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)=0x4a}, 0x1, &(0x7f00000008c0)=[{0x3, 0x6, &(0x7f0000000800)='+}\x00', &(0x7f0000000840)="db288b4bd76fe88eacf31e97fed5eda71e7b2c4ae6fee57f0906e59f6817c499b5b040fdd6f7e5eb3304a77e9a6657782b8831eb6e56082dbed44e9a572e5b5a4fccc31496f670e218f512c55823535c3bb9e90eac4815b643c5a0281705baac26debaca3ef73d6b317f9d59b253bf", 0x6f, 0x28}]}) write$cgroup_devices(r4, &(0x7f0000000980)={'b', ' *:* ', 'rwm\x00'}, 0xa) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) (async) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) (async) close(r2) (async) write(r0, 0x0, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xd) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0xdc, 0x43, 0x107, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x148}, @nested={0xc4, 0x1, 0x0, 0x1, [@nested={0xbc, 0x14c, 0x0, 0x1, [@nested={0xb6, 0x9a, 0x0, 0x1, [@typed={0x14, 0x105, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x41}}, @generic="7c4dfd890b3d67758d2b35752ac0a669f91286c052112b86554095347f6f2abc306629592785771fe5f50830c501d6021234255ae560df712c08147fdfcb65c85b1589ac32ec0f3df21124e22b89bac4e910ba03b5c31696b6e37a62f65874f96f24f7e9bde4932ba4e5418ff5d3bc867f8c6c06628fd48749f5f1ab2435e784461c7423de0577ffa27ea3a7efe8c78a55da41bb1cd26aef0b802b52cd2d"]}]}, @nested={0x4, 0x8f}]}]}, 0xdc}}, 0xc010) (async) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000200)=0x0) syz_open_procfs$namespace(r8, &(0x7f0000000280)='ns/pid_for_children\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7) sendmsg$TIPC_NL_PUBL_GET(r9, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x184, r10, 0xc09, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6057}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 5.17793095s ago: executing program 2 (id=8565): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000018c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @rand_addr=0x64010102, 0xffffffff, 0x0, 0x8, 0x2, {@mac=@random="80dc9ec7db18", {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff]}}, 0x4e6c, 0x7f, 0x8, 0x499, 0x9, 0x7, 'ip6tnl0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x0, 0x817c6ba29a46e749}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x4, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x54, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x6ef, 0xfffb, 0x8632, 0x80000}, {0x6, 0x3, 0x6, 0xfeff, 0x6c, 0x200}, 0x6aba0e4b, 0x1, 0xd04}}, @TCA_TBF_RATE64={0xc, 0x4, 0x9b3bc4fd75e29128}, @TCA_TBF_PBURST={0x8, 0x7, 0x15e0}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb91e316295c500f1}, @TCA_TBF_PBURST={0x8, 0x7, 0x888}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) socketpair(0x1, 0x3, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r2, 0x0, 0x0, 0x4004800, &(0x7f0000000080)={0x11, 0x15, r9, 0x1, 0x7f, 0x6, @remote}, 0x14) 2.830581568s ago: executing program 2 (id=8598): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000180)='ns/ipc\x00') write$cgroup_pid(r3, &(0x7f0000000200)=r4, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r6, 0x0, 0x6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0x100000de99, 0x8e9, 0xc, 0x1d, 0x45, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7ffffffffffffff8, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r5) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f00000003c0)={"97ac1e06eee6d4e8bc1861289825d351", r9, r8, {0x3, 0xc}, {0xe9d, 0x5}, 0x2, [0xe, 0x4e36, 0xffffffff80000001, 0x100000001, 0xd237, 0xd, 0xfffffffffffffc01, 0x7, 0x9, 0x1, 0x9, 0x7, 0x6, 0x2, 0x2, 0x32]}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f00000004c0)={{r0}, r10, 0x8, @unused=[0x3, 0x0, 0x5, 0x3ff], @name="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"}) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000080)=0x46a, 0x4) sendmmsg$inet(r11, &(0x7f0000000a40)=[{{&(0x7f0000000300)={0x2, 0x4e1b, @empty}, 0x10, 0x0}}], 0x1, 0x4008100) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.791458151s ago: executing program 1 (id=8599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r2, 0x0, &(0x7f0000000300), 0x80800) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000540)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x28543634fae43ad, 0xfffffff8, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000340)=0x6e) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x7eb, @mcast1, 0x8}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0xc) r8 = socket(0x1, 0x1, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r10, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe8, r11, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0xbc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x78d9a2e}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9f0f46b7}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xe8}, 0x1, 0x0, 0x0, 0x85}, 0x8800) r12 = socket$nl_rdma(0x10, 0x3, 0x14) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x9, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x1004, r13}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r13, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x28, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @printk={@lx}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xb, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r15 = syz_open_procfs$namespace(0x0, &(0x7f0000000b80)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(r12, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, 0x1402, 0x11, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r15}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x40) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x409}, {0xffffffffffffffff, 0x100}, {r5, 0x8000}, {r6, 0x80}, {r7, 0x440}, {r12, 0x2d8ce6089ab764b8}], 0x6, &(0x7f0000000240)={r16, r17+10000000}, &(0x7f0000000280)={[0x80]}, 0x8) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) 2.047349458s ago: executing program 4 (id=8606): r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003e0000000080000000000008000280fa9e4645"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fbfffffffcdbdf2400000000", @ANYRES32=0x0, @ANYBLOB="07570000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) r4 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x8, 0x12) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x3}, 0x28, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004000000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 1.813264564s ago: executing program 1 (id=8609): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x10, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x99af8e632bfb392d, 0x11, r0, 0x100000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0xf) close(0x3) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) 1.701287086s ago: executing program 3 (id=8610): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x0, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x5, 0x5, 0x4003, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141694029f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001e00010026bd7000fedbdf25070000", @ANYRES32=0x0, @ANYBLOB="0000001cbd30"], 0x20}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) 1.700534329s ago: executing program 2 (id=8611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x90) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000040)='\xca@$\x00', 0xc0d81, &(0x7f00000000c0)={@align=0x6, {0x1, 0x3, 0x1, 0xfffffffffffffffd}}, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x1000}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x31, &(0x7f0000000180)=0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000001c0)={@empty, @rand_addr=0x64010100}, 0x8) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x20000040, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x2, 0x6, 0x628, 0x488, 0x290, 0x488, 0x0, 0x0, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x168, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x400, 0x5}}, @common=@srh1={{0x90}, {0x6, 0x81, 0x3, 0x1, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @private2, [0xffffff, 0xffffffff, 0xffffff00, 0xffffff00], [0xff, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xffff00, 0xff, 0xffffff00], 0x800, 0x2041}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x1, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) 1.699798262s ago: executing program 4 (id=8612): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@private1, 0x0}, &(0x7f0000000480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x0, 0x64, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xc, 0xf}, {0xd, 0x3}, {0x13, 0x4}}, [@TCA_RATE={0x0, 0x5, {0x9, 0x9}}]}, 0xd}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) accept(r2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000000080000006b1149000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}, @typed={0x6, 0x12, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000700"/20, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x22020600) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2, 0x4}, 0x10}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@private1}, &(0x7f0000000480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x0, 0x64, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xc, 0xf}, {0xd, 0x3}, {0x13, 0x4}}, [@TCA_RATE={0x0, 0x5, {0x9, 0x9}}]}, 0xd}}, 0x20040000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) accept(r2, 0x0, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000000080000006b1149000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}, @typed={0x6, 0x12, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000700"/20, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) unshare(0x22020600) (async) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2, 0x4}, 0x10}, 0x94) (async) 1.639999801s ago: executing program 1 (id=8613): syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0x22, 0x80c, 0x6) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1.494179823s ago: executing program 3 (id=8614): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x0, 0x1fd, 0x1, 0x3, 0x0, 0x0, 0x5, 0x40009, 0x1, 0xca1, 0xfff, 0x81, 0x6, 0xff, 0x9, 0x6, 0x7, 0x7, 0xb, 0x66, 0x1002, 0xc}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x38, r5, 0x101, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x43}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x38}}, 0x24044884) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) socket(0x10, 0x803, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0003f30e0a050000000000000000000a0000000900010073797a31000000000900020073797a310000000020000000000a03000000000000000000050000070900010073797a3100000000140000001100010000000000000000000100000a"], 0xf0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x8, 0x0, 0x1000, 0x0, 0x400000, 0x7ff, 0x40004, 0xc0000000, 0x402, 0x9, 0x4, 0x5, 0x3, 0x4006, 0x84, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x5, 0x424f, 0x3}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="840100001a000100feffffff00010000fe8000000000000000000000000000aafc0100000000000000000000000000014001071c4e2300080200000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000000004d4000000000000000000000000fcffffffffffffff9201000000000000a39b000000000000ffff0000000000001c25080000000000050000000000000081000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000fbffffffffffffff09000000fc030000ff0000008000000000350000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000873e27c60000000000000000004c001400736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x184}}, 0x844) 1.487628101s ago: executing program 0 (id=8615): socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) (async, rerun: 64) r0 = socket$nl_crypto(0x10, 0x3, 0x15) (rerun: 64) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44dbce2d715f5f5f290a9423debbb86f9dbafc12f6ace1d097a74a2dba4dbe076c02262600c446a5e12647832e90fa67de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681000000140000800d000000c606f93f6b8199f9"], 0xe0}], 0x1}, 0x40040) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) (async, rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async, rerun: 64) pipe(&(0x7f0000000500)={0xffffffffffffffff}) (rerun: 64) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf251b0000000c00018008000100f8f2f74c3fa4b1a10e6655a68f4cb669cec3c19853345e14d84802b3079eb308b59ebd51dc8060c977a50f170461e5c11777047be28ef9ac85e9c1f79c9196eb88891c88423764704933201c4417111217da3bbd8d7ea76980c25fb796cfbd834f56f97872a9fe9601150ed0c90dd918383ae84b93081388f7f98e1305bd2fd7639e936a61bdc7815e6f378176e86652cd5d1f7964436f57bafe1faba87330", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048810}, 0x30000800) (async, rerun: 32) write$cgroup_freezer_state(r2, &(0x7f0000000000)='FREEZING\x00', 0x9) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="600000001000ffff27bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c7600231e0000400012800e00010069703667726574617014000600fc000000000000000000000100000000140007002001000000000000000000000000000100000000000000351648dac184b763c6c450d595af5d3b481b746b9bdc7e4dff9ddf8f00d15ac690f5b670ad37885ee2f63445a6a08f7b6e109b8ef040b93d07162d23004f6b9012eea99f2a94c3a5a5809a744810e9"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r8, 0x0, 0x2, 0x0) (async) write$rfkill(r7, &(0x7f0000000080)={0x40000, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async) write$rfkill(r7, &(0x7f0000000200)={0x6, 0x8, 0x2, 0x0, 0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async, rerun: 32) read(r9, &(0x7f0000000080)=""/38, 0x26) (rerun: 32) 1.486314637s ago: executing program 4 (id=8616): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x24}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f8", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) connect$phonet_pipe(r2, &(0x7f0000000400)={0x23, 0x0, 0x7f, 0x8}, 0x10) socket$inet(0x2, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r4, 0x0, 0x0) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.356162361s ago: executing program 2 (id=8617): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000048027b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000380)={{0x8, 0xb3}, 0x100, './file0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021001e0000080500010004"], 0x4c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x6000831}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r10, 0x0, 0xfffffffffffffffc}, 0x10) socket$netlink(0x10, 0x3, 0x0) 1.179901085s ago: executing program 1 (id=8618): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x80) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31, 0x3ff}, 0x6f) r4 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) pwritev(r4, 0x0, 0x0, 0x2, 0x80) pwrite64(r4, 0x0, 0x0, 0xda8) (async) sendmsg$NLBL_MGMT_C_ADD(r2, 0x0, 0x4000080) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000809fff0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0920000000000055090100000000809500000000000000bf91000000000000b7020000030000008500000084000000b7000000000500009500000000000000"], 0x0, 0xb, 0xfed, &(0x7f0000001780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @empty}, {0x0, @random="4d8ab36b2919"}, 0x6, {0x2, 0x4e20, @remote}, 'lo\x00'}) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x400c040) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[], 0x38}}, 0x8080) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) (async) pwritev(r8, &(0x7f0000000540)=[{&(0x7f0000000640)=' 2', 0x2}], 0x1, 0x8, 0x2) 1.055510335s ago: executing program 0 (id=8619): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2f, 0xe, 0x0, &(0x7f00000002c0)="41dfb080ca21db08098e002f86dd", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r5, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90", 0x2}], 0x1, 0x1) close(r9) splice(r8, 0x0, r9, 0x0, 0xfffd, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x1, &(0x7f00000005c0)=@raw=[@ldst={0x2, 0x0, 0x6, 0xb, 0x4, 0x20, 0x8}], &(0x7f0000000640)='GPL\x00', 0x5, 0x0, &(0x7f0000000680), 0x40f00, 0x0, '\x00', r2, 0x1b, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x2, 0x29, 0x1b7}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000800)=[r0, r6, r0, r7, r9, r0], &(0x7f0000000840)=[{0x2, 0x4, 0x8, 0x7}, {0x5, 0x5, 0x6, 0x2}], 0x10, 0x1}, 0xfffffcdf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x60bd2d, 0x25dfdbf9, {0x2, 0x20, 0x30, 0xc, 0xff, 0x4, 0x0, 0x1, 0x7c00}, [@RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040804}, 0x80) 1.034187572s ago: executing program 1 (id=8620): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001200010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000387d0500140003006e657464657673696d3000"], 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x8804) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001e002119febd7000290000001700000005002a000000000008000f80"], 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r6, 0xa1) accept4$bt_l2cap(r6, 0x0, 0x0, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000010000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000500)={r10, 0x5}, &(0x7f0000000540)=0x8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 789.649092ms ago: executing program 0 (id=8621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) 730.186457ms ago: executing program 2 (id=8622): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) 659.981844ms ago: executing program 4 (id=8623): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) (async) 659.249558ms ago: executing program 3 (id=8624): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x20000400) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4c, 0x0, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x3, 0x3}, 0x10) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x30150, 0x4) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_batadv\x00'}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r6, 0x0, 0x4}, 0xc) (async) socket$kcm(0x29, 0x5, 0x0) (async) setsockopt$inet6_buf(r4, 0x29, 0xcd, &(0x7f0000000200)="c105e092a5b3f5a920e920a20f32fed712b459c35f308e9936b1d1ccfa2d040c9e1332b0985416e1919aac61f9b18506c0cc96b5bd31645a30cda7bab4df3c3ef8a79acba429215a33ab6ee7cdfe801125b5b364a2f924541973ff7a73b0a11d", 0x60) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x268, 0x268, 0x268, 0x1d0, 0x268, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x88, 0x1, 0x19}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x0, 0x2}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {}, 0x33, 0x3, 0x1b}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x33, 0x0, 0x15}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x3}, {0xffffffffffffffff, 0x5, 0x1}, {0x0, 0x1, 0x3}, 0x1, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) (async) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0xfe, 0x8, 0xfffffffa, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x20, 0x8000, 0x5000000, 0x4}}) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008014) r9 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x27}}, 0x10, 0x0}, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4a0, 0x338, 0x1e0, 0xffffffff, 0x0, 0x1e0, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, 0x0, {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, 0xff000000, 0x0, 'bond0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0x2, 0x1d}, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@empty, @port=0x4e21, @icmp_id=0x68}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffffff, 0xffffff00, 'caif0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x0, 0x3}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3, @multicast1, @remote, @port=0x4e24, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) 567.352171ms ago: executing program 0 (id=8625): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x4, 0x0, 0x1, 0x0, 0x0, 0xa001}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) recvmsg$can_raw(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/124, 0x7c}, {0x0}, {&(0x7f0000000440)=""/216, 0xd8}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f00000006c0)=""/38, 0x26}], 0x5}, 0x1021) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delchain={0x48, 0x64, 0xf31, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff3, 0xb}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x4804) 537.001305ms ago: executing program 3 (id=8626): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000001000000000006000000850000002e00000085000000070000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$inet_mptcp_buf(r0, 0x6, 0x3, 0xfffffffffffffffd, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x44, 0x32, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x40000000}}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000680001002cbd7080fddbdf250f"], 0x18}, 0x1, 0x0, 0x0, 0x4402}, 0x100000000000000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x2, [@restrict, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0x4, 0xfffffffd}, {0x2, 0x2}, {0x2}, {0x2, 0x1}, {0x2}, {0x6, 0x3}, {0x3, 0x4}]}]}}, &(0x7f0000001b80)=""/4090, 0x72, 0xffa, 0xa}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r4, 0x3, 0x5, 0x4}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff0300"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000001c0), 0x0, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0x1}, &(0x7f0000000e80), &(0x7f0000000ec0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x20, 0x11, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0xcc, &(0x7f0000000b00)=""/204, 0x40f00, 0x6, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c80)={0x4, 0x0, 0x8, 0xe}, 0x10, 0xffffffffffffffff, r5, 0x4, 0x0, &(0x7f0000000f80)=[{0x1, 0x3, 0xe, 0x7}, {0x0, 0x3, 0xb, 0x8}, {0x1, 0x2, 0xc, 0x2}, {0x4, 0x1, 0xa, 0x8}], 0x10, 0x9}, 0x94) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0x9, 0xb, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, 0xffff, 0xd4bf, 0x3, 0x4, 0x101, 0x7, 'nr0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@multicast, @local, @empty, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @remote, 0x2}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xffffff00, 0xe, 0x3, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x7, 0x5, 0x2, 0x0, 0xff, 0x7, 'wg0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x0, 0x14}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mac=@remote, @multicast2, @multicast2, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 404.012303ms ago: executing program 4 (id=8627): socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) pipe(0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000100", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf2502000000"], 0x14}}, 0x40041) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0x5}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0x7fffffff, 0x20000000, 0x8, 0x3}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="00000000000000001800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7, r6}, 0x41) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 283.176172ms ago: executing program 0 (id=8628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000740)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) 250.001862ms ago: executing program 3 (id=8629): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x32, 0x0, 0xa}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff02000014010000033800000f130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e5"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x78, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x78}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf251b0000000400cc0008009a00"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 143.696897ms ago: executing program 4 (id=8630): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)}, 0x101}], 0x3, 0x20, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(r3, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$inet6(r4, &(0x7f0000001c80)={&(0x7f0000000080)={0xa, 0x4e20, 0xfffff97a, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001b80)=[@dstopts={{0x18}}, @dstopts={{0x18, 0x29, 0x37, {0x3c}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, r6}}}], 0x58}, 0x8800) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) ioctl$XFS_IOC_FREE_EOFBLOCKS(r7, 0x8080583a, &(0x7f00000006c0)={0x7f, 0x6, 0x80000001, 0x0, 0xffffffff, 0x0, 0x4}) r8 = socket(0xa, 0x1, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r8) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r9, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x124, r9, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="af8cbb85f7e0abec91234c321afd6c33526a12ed233bdaf81c1b5d1fc60eebc0069e7a60562643d9d7217680f1b09c60bacfd28a2b306c3ed3c82e67382c4cf34191328ad8427dd5fa7dabc6eb31fb8519a1be260a0436315a48b9c8ed128470bcafb8d705b4b58357f44508fda7d88f52c0e1a75d677365fb5676ca18316358d088dd593701835cdca81b3dbabbb512f58ca5dcefbba9defc646105bca6ab76f1098a3505c4213bb1185b3c3921c5fc27c3f5503bcec14877f03afec720df6d52d7545de23ebd7a2bb79869d8a55c799eed4ae2b4e8f620d41f4ef879732e35"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00f6e87b5040d44d1a735f9a75917df701000000000000"], &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2}, 0x20) 115.743765ms ago: executing program 0 (id=8631): r0 = socket(0x2b, 0x1, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="c289060000000000240012800b00010067656e6576650000140002800600050080b805dd9941599e05c28b4e2200000500080001000000"], 0x44}}, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x20004800) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000340)=0xfb78, 0x4) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) (async) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003500010025bd7000fddbdf2507ab290e45c308d53d6faed1d655e3e8ca000000100001800c00c80002000000000000000800048004009280"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000001c0)=0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x34040017}, 0x4c080) 112.256447ms ago: executing program 1 (id=8632): r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x8000}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x0, 0x2, {0x0, 0x0, 0xe403, 0x0, 0x62a1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 0s ago: executing program 3 (id=8633): socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x400) pipe(&(0x7f0000000200)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400"], 0x50) recvmmsg(r2, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000200)=""/41, 0x29}], 0x2, &(0x7f00000008c0)=""/4096, 0x1000}, 0x1}], 0x2, 0x20, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000040)=@tcp=r2}, 0x20) shutdown(r2, 0x1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) kernel console output (not intermixed with test programs): : Enslaving as an active interface with an up link [ 1066.511363][ T2809] lo speed is unknown, defaulting to 1000 [ 1067.381232][ T2809] erspan0 speed is unknown, defaulting to 1000 [ 1067.719488][ T2848] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7126'. [ 1067.830215][ T2854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7125'. [ 1068.021251][ T2842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7125'. [ 1068.051244][ T2842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7125'. [ 1068.097813][ T2809] lo speed is unknown, defaulting to 1000 [ 1068.480195][ T2871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.765477][ T2880] __nla_validate_parse: 1 callbacks suppressed [ 1068.765499][ T2880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7131'. [ 1068.846339][ T2880] geneve2: entered promiscuous mode [ 1069.232381][ T2890] netlink: 'syz.4.7132': attribute type 4 has an invalid length. [ 1069.453130][ T2894] netlink: 277 bytes leftover after parsing attributes in process `syz.4.7133'. [ 1069.647818][ T2899] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7133'. [ 1069.757145][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1069.796513][ T2902] ip6t_rpfilter: unknown options [ 1069.835043][ T2904] netlink: 'syz.1.7136': attribute type 1 has an invalid length. [ 1069.880710][ T2904] netlink: 'syz.1.7136': attribute type 1 has an invalid length. [ 1069.901903][ T2904] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7136'. [ 1070.047539][ T2907] ip6gre1: entered promiscuous mode [ 1070.063835][ T2910] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1070.971920][ T2961] nbd: must specify a size in bytes for the device [ 1071.063365][ T2942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7146'. [ 1071.336457][ T2973] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7156'. [ 1071.377284][ T2976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7157'. [ 1071.389816][ T30] audit: type=1107 audit(1777928049.308:33): pid=2970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='–/¬ÂÀ³zðvZsCýãlmZk÷Úÿ¼c¿…rë#¥ñÝMŠy¬Æ ³˜ÛŒãA²Ï…Ì2ëcÊiß"zöÀ=*pŽï;åküü8ï>6”hª­”ù„ÂdKæ4~&ÍÉË|h7ç–¶ÒÍŸPDà|ªóÔv°ø¿ã€…[좿`)¦BQXfrL–‡½è˜`nøë' [ 1071.706840][ T2986] syzkaller0: entered promiscuous mode [ 1071.713298][ T2986] syzkaller0: entered allmulticast mode [ 1071.811887][ T2991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7160'. [ 1071.835252][ T2991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7160'. [ 1071.864170][ T2991] netlink: 'syz.0.7160': attribute type 31 has an invalid length. [ 1072.104989][ T3001] netlink: 'syz.1.7163': attribute type 3 has an invalid length. [ 1072.128730][ T3001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7163'. [ 1072.167941][ T3000] ip6gre3: entered promiscuous mode [ 1072.197110][ T3000] ip6gre3: entered allmulticast mode [ 1072.333276][ T3010] siw: device registration error -23 [ 1072.517572][ T3022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.836574][ T3081] __nla_validate_parse: 63 callbacks suppressed [ 1073.836591][ T3081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7185'. [ 1073.873524][ T3081] vlan2: entered allmulticast mode [ 1073.880349][ T3081] bridge3: entered allmulticast mode [ 1073.907400][ T3081] bridge3: port 1(bond7) entered blocking state [ 1073.914045][ T3081] bridge3: port 1(bond7) entered disabled state [ 1073.921377][ T3081] bond7: entered allmulticast mode [ 1073.929013][ T3081] bond7: entered promiscuous mode [ 1074.367372][ T3064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1074.588989][ T3097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1074.606550][ T3101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7190'. [ 1075.094753][ T3134] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1075.346689][ T3148] ip6tnl0: Caught tx_queue_len zero misconfig [ 1075.980314][ T3192] netlink: 'syz.1.7208': attribute type 1 has an invalid length. [ 1076.125086][ T3197] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1076.150763][ T3197] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 1076.246724][ T3192] macvlan2: entered promiscuous mode [ 1076.264735][ T3192] macvlan2: entered allmulticast mode [ 1076.290891][ T3192] bond8: entered promiscuous mode [ 1076.310361][ T3192] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1076.348471][ T3192] bond8: left promiscuous mode [ 1076.431267][ T3233] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7216'. [ 1076.544453][ T3233] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 1076.816499][ T3250] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1076.838023][ T3250] syzkaller1: linktype set to 825 [ 1077.459366][ T3278] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:65152 [ 1077.574441][ T3283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7226'. [ 1077.640769][ T3291] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7228'. [ 1078.357352][ T3309] sctp: [Deprecated]: syz.2.7234 (pid 3309) Use of int in max_burst socket option. [ 1078.357352][ T3309] Use struct sctp_assoc_value instead [ 1078.415115][ T3310] sctp: [Deprecated]: syz.2.7234 (pid 3310) Use of int in max_burst socket option. [ 1078.415115][ T3310] Use struct sctp_assoc_value instead [ 1078.569588][ T3320] team_slave_1: Caught tx_queue_len zero misconfig [ 1078.740396][ T3329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7238'. [ 1078.879701][ T3336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7239'. [ 1078.936106][ T3341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7239'. [ 1078.974261][ T3341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7239'. [ 1079.375999][ T3366] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7245'. [ 1079.509853][ T3365] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7246'. [ 1079.539023][ T3365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7246'. [ 1079.560019][ T3365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7246'. [ 1079.572515][ T3378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7248'. [ 1079.582828][ T3376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7248'. [ 1079.716445][ T3390] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7247'. [ 1079.863495][ T3383] lo speed is unknown, defaulting to 1000 [ 1080.290677][ T3404] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 1080.762523][ T3409] openvswitch: netlink: Flow key attr not present in new flow. [ 1081.038141][ T3432] netlink: 'syz.1.7256': attribute type 13 has an invalid length. [ 1081.123900][ T3432] gretap0: refused to change device tx_queue_len [ 1081.148731][ T3432] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1081.199346][ T3383] erspan0 speed is unknown, defaulting to 1000 [ 1081.670208][ T3447] syzkaller1: entered promiscuous mode [ 1081.688399][ T3447] syzkaller1: entered allmulticast mode [ 1081.890589][ T3383] lo speed is unknown, defaulting to 1000 [ 1082.156505][ T3465] nbd: nbd64 already in use [ 1082.518742][ T2900] udevd[2900]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1082.717210][ T3428] Bluetooth: hci3: command 0x0406 tx timeout [ 1083.037097][ T5641] Bluetooth: hci2: command 0x0405 tx timeout [ 1085.018465][ T5748] IPVS: starting estimator thread 0... [ 1085.122324][ T3556] IPVS: using max 30 ests per chain, 72000 per kthread [ 1085.901777][ T3500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1085.981731][ T3562] __nla_validate_parse: 10 callbacks suppressed [ 1085.981753][ T3562] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7289'. [ 1086.004828][ T3562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7289'. [ 1086.397218][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1086.506726][ T3591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7296'. [ 1086.615177][ T3596] netlink: 'syz.3.7298': attribute type 13 has an invalid length. [ 1086.631503][ T3585] openvswitch: netlink: IP tunnel dst address not specified [ 1086.635287][ T3596] netlink: 'syz.3.7298': attribute type 17 has an invalid length. [ 1086.681832][ T3598] 8021q: VLANs not supported on nlmon0 [ 1086.753207][ T3601] netlink: 'syz.4.7300': attribute type 16 has an invalid length. [ 1086.770987][ T3601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7300'. [ 1086.844275][ T3596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.862663][ T3596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.014541][ T3596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.035960][ T3596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1087.049466][ T3596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1087.072796][ T3596] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1087.100164][ T3596] veth1_vlan: left promiscuous mode [ 1087.121571][ T3596] veth0_vlan: left promiscuous mode [ 1087.139401][ T3596] veth0_vlan: entered promiscuous mode [ 1087.161659][ T3620] rdma_rxe: rxe_newlink: failed to add wg1 [ 1087.164124][ T3596] veth1_vlan: entered promiscuous mode [ 1087.216074][ T3596] veth1_macvtap: left promiscuous mode [ 1087.226572][ T3596] veth0_macvtap: left promiscuous mode [ 1087.258977][ T3596] veth0_macvtap: entered promiscuous mode [ 1087.275868][ T3596] veth1_macvtap: entered promiscuous mode [ 1087.308360][ T3596] netdevsim netdevsim3 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1087.320185][ T3596] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1087.332667][ T3596] netdevsim netdevsim3 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1087.345108][ T3596] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1087.355079][ T3596] netdevsim netdevsim3 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1087.370728][ T3596] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1087.383491][ T3596] netdevsim netdevsim3 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1087.395121][ T3596] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1087.412550][ T3596] geneve2: left promiscuous mode [ 1087.418537][ T3596] geneve2: left allmulticast mode [ 1087.426872][ T3596] bond1: left promiscuous mode [ 1087.432698][ T3596] bond1: left allmulticast mode [ 1087.441229][ T3596] bond2: left promiscuous mode [ 1087.455776][ T3596] ip6gre1: left promiscuous mode [ 1087.475530][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.483072][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.496518][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.503827][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.554276][ T3608] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7302'. [ 1087.564794][ T1017] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 4352 - 0 [ 1087.587397][ T1017] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1087.604363][ T1017] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 4352 - 0 [ 1087.623632][ T1017] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1087.659427][ T1017] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 4352 - 0 [ 1087.681905][ T1017] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1087.707989][ T1017] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 4352 - 0 [ 1087.752397][ T1017] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1087.765915][ T3634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7305'. [ 1087.796448][ T3633] netlink: 'syz.1.7307': attribute type 7 has an invalid length. [ 1087.912485][ T3637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7308'. [ 1088.100704][ T3642] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7310'. [ 1088.123768][ T3642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7310'. [ 1088.343920][ T3659] veth0: entered promiscuous mode [ 1088.589252][ T3671] x_tables: duplicate underflow at hook 3 [ 1088.714399][ T3657] veth0: left promiscuous mode [ 1088.965949][ T3684] syzkaller0: entered promiscuous mode [ 1088.989060][ T3684] syzkaller0: entered allmulticast mode [ 1089.106869][ T3687] lo speed is unknown, defaulting to 1000 [ 1089.158086][ T3696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7324'. [ 1089.231750][ T3699] netlink: 'syz.1.7326': attribute type 1 has an invalid length. [ 1089.245670][ T3699] netlink: 'syz.1.7326': attribute type 1 has an invalid length. [ 1089.356001][ T3697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.363620][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.522605][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.844153][T12287] erspan0 speed is unknown, defaulting to 1000 [ 1089.856763][T12287] syz0: Port: 1 Link DOWN [ 1089.948305][ T1162] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1089.979173][ T1162] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1089.988356][ T1162] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1089.999361][T17391] erspan0 speed is unknown, defaulting to 1000 [ 1090.014671][ T1162] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1090.025478][ T1162] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1090.035070][ T1162] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1090.053317][ T1162] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1090.063385][ T1162] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1090.107564][ T1162] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1090.129366][ T3687] erspan0 speed is unknown, defaulting to 1000 [ 1090.129400][ T1162] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1090.156691][ T1162] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1090.201855][ T1162] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1090.501114][ T3724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.539433][ T3724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.596264][ T3724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.660132][T12800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.670684][T12800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.684231][ T8886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.702016][T12806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.712373][T12806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.722887][ T5036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.741389][T17391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.753329][T25539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.764422][T12287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.809050][ T3724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.834277][ T3724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.869188][ T3724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1090.903269][ T3724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1090.934776][ T3724] veth1_vlan: left promiscuous mode [ 1090.950107][ T3724] veth0_vlan: left promiscuous mode [ 1090.956682][ T3724] veth0_vlan: entered promiscuous mode [ 1090.980031][ T3724] tipc: Resetting bearer [ 1090.985827][ T3724] tipc: Resetting bearer [ 1091.001517][ T3724] __nla_validate_parse: 60 callbacks suppressed [ 1091.001536][ T3724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7333'. [ 1091.047865][ T3724] veth1_vlan: entered promiscuous mode [ 1091.058764][ T3724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7333'. [ 1091.102203][ T3724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7333'. [ 1091.128412][ T3724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7333'. [ 1091.149138][ T3724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7333'. [ 1091.159582][ T3724] veth1_macvtap: left promiscuous mode [ 1091.166342][ T3724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7333'. [ 1091.178690][ T3724] veth0_macvtap: left promiscuous mode [ 1091.185627][ T3724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7333'. [ 1091.221179][ T3724] veth0_macvtap: entered promiscuous mode [ 1091.233472][ T3724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7333'. [ 1091.246410][ T3724] veth1_macvtap: entered promiscuous mode [ 1091.254667][ T3724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7333'. [ 1091.269172][ T3724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7333'. [ 1091.283759][ T3724] ip6gre1: left promiscuous mode [ 1091.289978][ T3724] ip6gre1: left allmulticast mode [ 1091.301314][ T3724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1091.315867][ T3724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1091.326332][ T3724] mac80211_hwsim hwsim76 syzkaller0: left promiscuous mode [ 1091.334596][ T3724] mac80211_hwsim hwsim76 syzkaller0: left allmulticast mode [ 1091.419161][T12815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.426383][T12815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.436978][T12815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.444145][T12815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.492483][T12815] bridge0: port 3(team0) entered blocking state [ 1091.499190][T12815] bridge0: port 3(team0) entered forwarding state [ 1091.523083][T12806] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.531926][T12806] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.540758][ T3687] lo speed is unknown, defaulting to 1000 [ 1091.548677][T12806] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.677787][ C1] net_ratelimit: 2 callbacks suppressed [ 1091.679575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.710996][T12806] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.801784][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.812916][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.839887][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.848182][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.717229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.802360][T17391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.810946][T17391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.884983][T25539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.912775][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.582130][ T3834] nft_compat: unsupported protocol 0 [ 1094.974760][ T3846] netlink: 'syz.3.7357': attribute type 6 has an invalid length. [ 1095.089509][ T3849] netlink: 'syz.3.7357': attribute type 8 has an invalid length. [ 1096.813287][ T3793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1096.877218][ C1] net_ratelimit: 18 callbacks suppressed [ 1096.877240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.892284][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.511234][ T3884] netlink: 'syz.4.7369': attribute type 29 has an invalid length. [ 1097.917620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.927851][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.074012][ T3913] netlink: 'syz.1.7377': attribute type 2 has an invalid length. [ 1098.106572][ T3913] netlink: 'syz.1.7377': attribute type 1 has an invalid length. [ 1098.132277][ T3912] lo speed is unknown, defaulting to 1000 [ 1098.134855][ T3913] __nla_validate_parse: 15 callbacks suppressed [ 1098.134875][ T3913] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7377'. [ 1098.188802][ T3914] netlink: 'syz.1.7377': attribute type 2 has an invalid length. [ 1098.216423][ T3914] netlink: 'syz.1.7377': attribute type 1 has an invalid length. [ 1098.244812][ T3914] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7377'. [ 1098.310079][ T3919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7378'. [ 1098.790106][ T3936] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.7383'. [ 1098.807433][ T3937] sctp: [Deprecated]: syz.1.7382 (pid 3937) Use of int in max_burst socket option. [ 1098.807433][ T3937] Use struct sctp_assoc_value instead [ 1098.818560][ T3912] erspan0 speed is unknown, defaulting to 1000 [ 1098.957448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.972726][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.075079][ T3939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7385'. [ 1099.220685][ T3952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.231845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.390489][ T3950] xt_hashlimit: size too large, truncated to 1048576 [ 1099.453311][ T3912] lo speed is unknown, defaulting to 1000 [ 1099.927275][ T3961] netlink: 324 bytes leftover after parsing attributes in process `syz.4.7389'. [ 1099.999310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.013787][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.105700][ T3970] netlink: 'syz.1.7392': attribute type 1 has an invalid length. [ 1100.183471][ T3976] netlink: 'syz.4.7394': attribute type 2 has an invalid length. [ 1100.239059][ T3980] netlink: 'syz.4.7394': attribute type 2 has an invalid length. [ 1100.412168][ T3983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7392'. [ 1100.602116][ T3978] bond9: (slave veth13): Enslaving as an active interface with a down link [ 1100.629866][ T4009] netlink: 'syz.2.7400': attribute type 11 has an invalid length. [ 1100.643188][ T4009] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.7400'. [ 1100.753538][ T3982] bond9: (slave veth15): Enslaving as an active interface with a down link [ 1100.796379][ T3983] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1101.053832][ T4016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7401'. [ 1101.086388][ T4016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1101.305028][ T4016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1101.803155][ T4040] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7408'. [ 1101.830339][ T4037] lo speed is unknown, defaulting to 1000 [ 1101.939601][ T4047] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1101.959435][ T4047] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1101.978767][ T4047] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1101.998005][ T4047] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1102.016422][ T4047] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1102.037858][ T4047] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1102.061248][ T4047] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1102.077378][ C1] net_ratelimit: 4 callbacks suppressed [ 1102.077400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.095034][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.109785][ T4047] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1102.151316][ T4047] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1102.192433][ T4047] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1102.201270][ T4052] bridge0: port 3(team0) entered disabled state [ 1102.208684][ T4052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.216374][ T4052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.668658][ T4057] vxcan1: entered promiscuous mode [ 1103.054572][ T4073] netlink: 'syz.2.7419': attribute type 10 has an invalid length. [ 1103.055214][ T4079] netlink: 'syz.0.7416': attribute type 13 has an invalid length. [ 1103.093232][ T4037] erspan0 speed is unknown, defaulting to 1000 [ 1103.102116][ T4073] dummy0: left promiscuous mode [ 1103.110900][ T4073] dummy0: left allmulticast mode [ 1103.117253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.126114][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.149543][ T4073] team0: Port device dummy0 added [ 1103.215157][ T4083] syzkaller0: entered promiscuous mode [ 1103.229290][ T4083] syzkaller0: entered allmulticast mode [ 1103.621207][ T4104] netlink: 'syz.1.7427': attribute type 1 has an invalid length. [ 1103.640964][ T4104] __nla_validate_parse: 4 callbacks suppressed [ 1103.641013][ T4104] netlink: 216 bytes leftover after parsing attributes in process `syz.1.7427'. [ 1103.716361][ T4037] lo speed is unknown, defaulting to 1000 [ 1103.749271][ T4109] wg2: Caught tx_queue_len zero misconfig [ 1103.764114][ T4110] netlink: 'syz.1.7427': attribute type 3 has an invalid length. [ 1103.867709][ T4115] netlink: 'syz.4.7432': attribute type 4 has an invalid length. [ 1104.157321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.166068][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.318176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.563186][ T4144] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7440'. [ 1105.016855][ T4168] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7445'. [ 1105.019090][ T4167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7445'. [ 1105.197182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.212618][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.570786][ T4191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7447'. [ 1105.636102][ T4196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7447'. [ 1106.017160][ T4210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7453'. [ 1106.124118][ T4205] lo speed is unknown, defaulting to 1000 [ 1106.241371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.409369][ T4227] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7456'. [ 1106.823054][ T4240] netlink: 'syz.4.7459': attribute type 1 has an invalid length. [ 1106.888817][ T4242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7459'. [ 1107.014555][ T4240] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1107.158814][ T4237] netlink: 'syz.4.7459': attribute type 1 has an invalid length. [ 1107.188341][ T4205] erspan0 speed is unknown, defaulting to 1000 [ 1107.277214][ C1] net_ratelimit: 2 callbacks suppressed [ 1107.277235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.291654][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.333287][ T4242] bond5: (slave batadv1): Opening slave failed [ 1108.005851][ T4205] lo speed is unknown, defaulting to 1000 [ 1108.085153][T12800] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1108.317305][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.326961][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.730295][ T4285] syzkaller0: entered promiscuous mode [ 1108.748112][ T4285] syzkaller0: entered allmulticast mode [ 1109.071823][ T4277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7464'. [ 1109.115254][ T4277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7464'. [ 1109.357261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.366688][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.543572][ T4324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7471'. [ 1109.572445][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7471'. [ 1109.594037][ T4324] netlink: 'syz.3.7471': attribute type 18 has an invalid length. [ 1110.404446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.413377][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.437275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.446690][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.491748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.501665][T25539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.517255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.525971][T25539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.059655][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7470'. [ 1114.069016][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7470'. [ 1114.342436][ T4340] netlink: 'syz.2.7472': attribute type 13 has an invalid length. [ 1114.377046][ T4340] netlink: 'syz.2.7472': attribute type 17 has an invalid length. [ 1114.543129][ T4351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1114.557230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.566302][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.747786][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.757793][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.778059][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.886049][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.896603][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.907240][ T4340] xfrm0: left allmulticast mode [ 1114.919883][ T4340] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1114.931156][ T4340] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1114.944465][ T4340] 0·: left allmulticast mode [ 1114.949473][ T4340] hsr_slave_0: left allmulticast mode [ 1114.972385][ T4340] hsr_slave_1: left allmulticast mode [ 1114.995898][ T4340] veth1_vlan: left promiscuous mode [ 1115.004963][ T4340] veth0_vlan: left promiscuous mode [ 1115.015676][ T4340] veth0_vlan: entered promiscuous mode [ 1115.031579][ T4375] netlink: 492 bytes leftover after parsing attributes in process `syz.0.7482'. [ 1115.033894][ T4340] veth1_vlan: entered promiscuous mode [ 1115.065887][ T4340] veth1_macvtap: left promiscuous mode [ 1115.083855][ T4340] veth0_macvtap: left promiscuous mode [ 1115.092473][ T4340] veth0_macvtap: entered promiscuous mode [ 1115.115046][ T4340] veth1_macvtap: entered promiscuous mode [ 1115.141217][ T4340] geneve0: left allmulticast mode [ 1115.170478][ T4340] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1115.199738][ T4340] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1115.213784][ T4386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.216247][ T4340] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1115.225273][ T4386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.249795][ T4340] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1115.266472][ T4340] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1115.285714][T12809] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.298338][T12809] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.597177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.665560][ T4366] bond10: ARP target 9.0.0.0 is already present [ 1115.673102][ T4366] bond10: option arp_ip_target: invalid value (9) [ 1115.691435][ T4366] bond10 (unregistering): Released all slaves [ 1115.755940][T12809] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.771260][T12809] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.003279][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7492'. [ 1116.084386][ T4427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7491'. [ 1116.133529][ T4428] netlink: 'syz.1.7493': attribute type 13 has an invalid length. [ 1116.155982][ T4428] netlink: 'syz.1.7493': attribute type 17 has an invalid length. [ 1116.412842][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.430252][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.591864][ T4439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7495'. [ 1116.658382][T17394] lo speed is unknown, defaulting to 1000 [ 1116.668221][T17394] syz2: Port: 1 Link DOWN [ 1116.721851][ T4428] bridge0: left promiscuous mode [ 1116.729677][ T4428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.738943][ T4428] bridge0: port 3(team0) entered blocking state [ 1116.745587][ T4428] bridge0: port 3(team0) entered forwarding state [ 1116.752960][ T4428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.765422][ T4428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.809912][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.817148][ T4428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.829160][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.836356][ T4428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.862318][ T4428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.872662][ T4428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.889932][ T4428] veth1_vlan: left promiscuous mode [ 1116.896373][ T4428] veth0_vlan: left promiscuous mode [ 1116.903524][ T4428] veth0_vlan: entered promiscuous mode [ 1116.914635][ T4428] veth1_vlan: entered promiscuous mode [ 1116.928771][ T4428] veth1_macvtap: left promiscuous mode [ 1116.935623][ T4428] veth0_macvtap: left promiscuous mode [ 1116.949428][ T4428] veth0_macvtap: entered promiscuous mode [ 1116.957689][ T4428] veth1_macvtap: entered promiscuous mode [ 1116.969914][ T4428] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1116.977457][ T4428] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1116.984946][ T4428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1116.997643][ T4428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1117.009457][ T4428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1117.021549][ T4428] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1117.035204][ T4428] veth3: left promiscuous mode [ 1117.043154][ T4428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1117.054552][ T4428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1117.064233][ T4428] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1117.073259][ T4428] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1117.083620][ T4428] bond5: left promiscuous mode [ 1117.088934][ T4428] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1117.190538][ T5748] lo speed is unknown, defaulting to 1000 [ 1117.202632][ T1017] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1117.216476][ T5748] syz2: Port: 1 Link ACTIVE [ 1117.535325][ T4460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7500'. [ 1117.559675][ T4462] syzkaller1: entered promiscuous mode [ 1117.582713][ T4462] syzkaller1: entered allmulticast mode [ 1117.587139][ T4468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7500'. [ 1117.630465][ T4468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7500'. [ 1117.656814][ T4460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7500'. [ 1117.677374][ C1] net_ratelimit: 8 callbacks suppressed [ 1117.677397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.693701][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.103170][ T4486] openvswitch: netlink: Key type 142 is out of range max 32 [ 1118.202379][ T4489] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1118.295725][ T4503] netlink: 'syz.1.7511': attribute type 1 has an invalid length. [ 1118.315845][ T4504] netlink: 'syz.1.7511': attribute type 1 has an invalid length. [ 1118.458700][ T4503] bond10: entered promiscuous mode [ 1118.473207][ T4503] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1118.491523][ T4509] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004 [ 1118.564326][ T4516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7515'. [ 1118.717184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.729354][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.923655][ T4532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.968933][ T4532] batadv0: entered promiscuous mode [ 1118.980934][T12809] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1118.990359][T12809] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1119.007827][ T4532] batadv0: entered allmulticast mode [ 1119.025921][ T4532] team0: Port device batadv0 added [ 1119.037420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.148416][ T4551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1119.381836][ T4563] : renamed from veth0_to_bond (while UP) [ 1119.411758][ T4563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7527'. [ 1119.513467][ T4565] lo speed is unknown, defaulting to 1000 [ 1119.602778][ T4569] hmac(sha2: entered promiscuous mode [ 1119.637724][ T4577] syzkaller0: entered promiscuous mode [ 1119.648816][ T4577] syzkaller0: entered allmulticast mode [ 1119.757204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.765905][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.238938][ T4565] erspan0 speed is unknown, defaulting to 1000 [ 1120.285436][ T4611] team0: left allmulticast mode [ 1120.305212][ T4611] team_slave_0: left allmulticast mode [ 1120.332991][ T4611] team_slave_1: left allmulticast mode [ 1120.349946][ T4611] batadv0: left allmulticast mode [ 1120.375743][ T4611] team0: left promiscuous mode [ 1120.394489][ T4611] team_slave_0: left promiscuous mode [ 1120.433069][ T4611] team_slave_1: left promiscuous mode [ 1120.456964][ T4611] bridge0: port 3(team0) entered disabled state [ 1120.471778][ T4620] __nla_validate_parse: 4 callbacks suppressed [ 1120.471800][ T4620] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7541'. [ 1120.611906][ T4629] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7542'. [ 1120.973633][ T4611] team0: Port device batadv0 removed [ 1120.985001][ T4611] bridge_slave_0: left allmulticast mode [ 1121.008945][ T4611] bridge_slave_0: left promiscuous mode [ 1121.029092][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.044142][ T4611] bridge_slave_1: left allmulticast mode [ 1121.054279][ T4611] bridge_slave_1: left promiscuous mode [ 1121.061184][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.078746][ T4611] bond0: (slave 45ÿ): Releasing backup interface [ 1121.104352][ T4611] bond0: (slave bond_slave_1): Releasing backup interface [ 1121.117419][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1121.136523][ T4611] team0: Port device team_slave_0 removed [ 1121.153901][ T4611] team0: Port device team_slave_1 removed [ 1121.161907][ T4611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1121.171337][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.181587][ T4611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1121.190978][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.211614][ T4641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7544'. [ 1121.257157][ T4565] lo speed is unknown, defaulting to 1000 [ 1121.571842][ T4657] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7549'. [ 1121.582156][ T4657] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7549'. [ 1121.592705][ T4657] netlink: 'syz.4.7549': attribute type 5 has an invalid length. [ 1121.605035][ T4657] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7549'. [ 1121.813588][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7550'. [ 1121.829867][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7550'. [ 1122.169938][ T4675] lo speed is unknown, defaulting to 1000 [ 1122.175480][ T4677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7553'. [ 1122.314963][T12800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.345708][T12800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.376220][T12800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.424639][T12800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.596196][ T4690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7557'. [ 1122.880585][ C1] net_ratelimit: 9 callbacks suppressed [ 1122.880608][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.896676][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.400598][ T4696] lo speed is unknown, defaulting to 1000 [ 1123.411630][ T4675] erspan0 speed is unknown, defaulting to 1000 [ 1123.917920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.938597][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.049775][ T4738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.078444][ T4738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.100590][ T4734] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.110511][ T4738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.133252][ T4734] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.211314][ T4737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.226634][ T4737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.242898][ T4675] lo speed is unknown, defaulting to 1000 [ 1124.250111][ T4696] erspan0 speed is unknown, defaulting to 1000 [ 1124.409881][ T4734] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.426399][ T4734] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.684473][ T4734] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.733873][ T4734] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.783988][ T4696] lo speed is unknown, defaulting to 1000 [ 1124.957319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.113257][ T4734] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.161989][ T4734] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.223528][ T4756] netlink: 'syz.0.7574': attribute type 64 has an invalid length. [ 1125.985387][ T1117] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.015616][ T1117] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.064785][ T4783] Bluetooth: MGMT ver 1.23 [ 1126.304621][ T4788] xfrm1: entered allmulticast mode [ 1126.312302][ T1017] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.326402][ T1017] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.419648][ T1017] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.430488][ T1017] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.441553][ T4792] netlink: 'syz.4.7578': attribute type 12 has an invalid length. [ 1126.502284][T12804] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.514994][T12804] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.874684][ T4805] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1126.910556][ T4805] netlink: 'syz.2.7582': attribute type 1 has an invalid length. [ 1126.948432][ T4805] __nla_validate_parse: 3 callbacks suppressed [ 1126.948456][ T4805] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7582'. [ 1127.007195][ T4805] netlink: 'syz.2.7582': attribute type 1 has an invalid length. [ 1127.032672][ T4816] sctp: [Deprecated]: syz.4.7584 (pid 4816) Use of int in maxseg socket option. [ 1127.032672][ T4816] Use struct sctp_assoc_value instead [ 1127.052654][ T4805] netlink: 634 bytes leftover after parsing attributes in process `syz.2.7582'. [ 1127.064525][ T4810] netlink: 'syz.2.7582': attribute type 1 has an invalid length. [ 1127.081491][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7584'. [ 1127.097461][ T4810] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7582'. [ 1127.131343][ T4810] netlink: 'syz.2.7582': attribute type 1 has an invalid length. [ 1127.155359][ T4810] netlink: 634 bytes leftover after parsing attributes in process `syz.2.7582'. [ 1127.322270][ T4816] lo speed is unknown, defaulting to 1000 [ 1127.323061][ T4824] netlink: 'syz.0.7587': attribute type 4 has an invalid length. [ 1127.379245][ T4827] tipc: Started in network mode [ 1127.403825][ T4827] tipc: Node identity fef2d20000000000000000000000001, cluster identity 4711 [ 1127.440188][ T4827] tipc: Enabling of bearer rejected, failed to enable media [ 1127.558542][ T4838] netlink: 'syz.2.7590': attribute type 13 has an invalid length. [ 1127.571113][ T4837] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7591'. [ 1127.600188][ T4838] netlink: 'syz.2.7590': attribute type 17 has an invalid length. [ 1127.619820][ T4837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7591'. [ 1127.697652][ T4844] netlink: 'syz.1.7593': attribute type 1 has an invalid length. [ 1127.727787][ T4844] netlink: 'syz.1.7593': attribute type 2 has an invalid length. [ 1127.779450][ T4853] netlink: 'syz.1.7593': attribute type 1 has an invalid length. [ 1127.990156][ T4834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.004843][ T4834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.077255][ C1] net_ratelimit: 8 callbacks suppressed [ 1128.077279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.106198][T25535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.245083][ T4838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.272973][ T4838] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.307719][ T4838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.375193][ T4838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.384939][ T4838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.397912][ T4838] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1128.408770][ T4838] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1128.423436][ T4838] veth1_vlan: left promiscuous mode [ 1128.430669][ T4838] veth0_vlan: left promiscuous mode [ 1128.436679][ T4838] veth0_vlan: entered promiscuous mode [ 1128.445037][ T4838] veth1_vlan: entered promiscuous mode [ 1128.454323][ T4838] veth1_macvtap: left promiscuous mode [ 1128.461134][ T4838] veth0_macvtap: left promiscuous mode [ 1128.468337][ T4838] veth0_macvtap: entered promiscuous mode [ 1128.475272][ T4838] veth1_macvtap: entered promiscuous mode [ 1128.492781][ T4838] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1128.587734][ T4867] xt_TCPMSS: Only works on TCP SYN packets [ 1128.690255][ T4816] erspan0 speed is unknown, defaulting to 1000 [ 1128.691763][ T1017] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1128.973592][ T4878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7599'. [ 1129.007413][ T4878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7599'. [ 1129.117181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.126117][ T8883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.264235][ T4887] xt_hashlimit: size too large, truncated to 1048576 [ 1129.304927][ T4816] lo speed is unknown, defaulting to 1000 [ 1129.441457][ T4896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7603'. [ 1130.157204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.171820][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.381347][ T4940] sctp: [Deprecated]: syz.2.7614 (pid 4940) Use of int in max_burst socket option. [ 1130.381347][ T4940] Use struct sctp_assoc_value instead [ 1130.814209][ T4952] ip6t_srh: unknown srh invflags 4000 [ 1131.197931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.207902][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.218825][ T4991] FAULT_INJECTION: forcing a failure. [ 1131.218825][ T4991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.265961][ T4991] CPU: 0 UID: 0 PID: 4991 Comm: syz.4.7628 Not tainted syzkaller #0 PREEMPT(full) [ 1131.265992][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1131.266005][ T4991] Call Trace: [ 1131.266014][ T4991] [ 1131.266023][ T4991] dump_stack_lvl+0xe8/0x150 [ 1131.266055][ T4991] should_fail_ex+0x412/0x560 [ 1131.266090][ T4991] _copy_to_user+0x31/0xb0 [ 1131.266123][ T4991] simple_read_from_buffer+0xe1/0x170 [ 1131.266155][ T4991] proc_fail_nth_read+0x1bb/0x230 [ 1131.266186][ T4991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1131.266216][ T4991] ? rw_verify_area+0x2a6/0x4d0 [ 1131.266241][ T4991] ? tun_chr_write_iter+0x18a/0x200 [ 1131.266265][ T4991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1131.266293][ T4991] vfs_read+0x20c/0xa70 [ 1131.266327][ T4991] ? __pfx___mutex_lock+0x10/0x10 [ 1131.266356][ T4991] ? __pfx_vfs_read+0x10/0x10 [ 1131.266387][ T4991] ? __fget_files+0x2a/0x420 [ 1131.266418][ T4991] ? __fget_files+0x3a0/0x420 [ 1131.266441][ T4991] ? __fget_files+0x2a/0x420 [ 1131.266477][ T4991] ksys_read+0x150/0x270 [ 1131.266509][ T4991] ? __pfx_ksys_read+0x10/0x10 [ 1131.266547][ T4991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.266572][ T4991] do_syscall_64+0x15f/0xf80 [ 1131.266596][ T4991] ? trace_irq_disable+0x3b/0x140 [ 1131.266627][ T4991] ? clear_bhb_loop+0x40/0x90 [ 1131.266654][ T4991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.266675][ T4991] RIP: 0033:0x7f8f78d5d60e [ 1131.266696][ T4991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1131.266714][ T4991] RSP: 002b:00007f8f79bc5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1131.266738][ T4991] RAX: ffffffffffffffda RBX: 00007f8f79bc66c0 RCX: 00007f8f78d5d60e [ 1131.266754][ T4991] RDX: 000000000000000f RSI: 00007f8f79bc60a0 RDI: 0000000000000006 [ 1131.266767][ T4991] RBP: 00007f8f79bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.266781][ T4991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.266793][ T4991] R13: 00007f8f79016038 R14: 00007f8f79015fa0 R15: 00007fff0ff5b3d8 [ 1131.266829][ T4991] [ 1132.105828][ T5020] __nla_validate_parse: 4 callbacks suppressed [ 1132.105850][ T5020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7635'. [ 1132.237352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.304320][ T5026] validate_nla: 5 callbacks suppressed [ 1132.304342][ T5026] netlink: 'syz.0.7638': attribute type 1 has an invalid length. [ 1132.384640][ T5026] bond6: entered promiscuous mode [ 1132.392234][ T5026] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1132.412514][ T5026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7638'. [ 1132.470322][ T5026] bond6: left promiscuous mode [ 1132.483733][ T5026] bond6: entered allmulticast mode [ 1132.493219][ T5024] lo speed is unknown, defaulting to 1000 [ 1132.602770][ T5041] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7640'. [ 1132.625976][ T5030] bond6: (slave bridge3): making interface the new active one [ 1132.656525][ T5030] bridge3: entered allmulticast mode [ 1132.680127][ T5030] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 1132.798589][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1132.814707][ T5046] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7641'. [ 1132.946376][ T5052] netlink: 'syz.1.7644': attribute type 1 has an invalid length. [ 1132.986055][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7644'. [ 1133.236453][ T5024] erspan0 speed is unknown, defaulting to 1000 [ 1133.277319][ C1] net_ratelimit: 2 callbacks suppressed [ 1133.277343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.296809][ T8883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.413372][ T5071] netlink: 'syz.1.7650': attribute type 1 has an invalid length. [ 1133.414138][ T5073] IPv6: NLM_F_CREATE should be specified when creating new route [ 1133.433138][ T5073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1133.440674][ T5073] IPv6: NLM_F_CREATE should be set when creating new route [ 1133.448107][ T5073] IPv6: NLM_F_CREATE should be set when creating new route [ 1133.455615][ T5073] IPv6: NLM_F_CREATE should be set when creating new route [ 1133.520945][ T5071] bond11: entered promiscuous mode [ 1133.526801][ T5071] bond11: entered allmulticast mode [ 1133.541924][ T5071] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1133.557309][ T5024] lo speed is unknown, defaulting to 1000 [ 1133.875795][ T5085] lo speed is unknown, defaulting to 1000 [ 1134.038585][ T5097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7656'. [ 1134.065239][ T5097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7656'. [ 1134.177677][ T5099] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1134.283400][ T5107] mac80211_hwsim hwsim76 syzkaller0: entered promiscuous mode [ 1134.315661][ T5107] mac80211_hwsim hwsim76 syzkaller0: entered allmulticast mode [ 1134.317421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.334705][ T8883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.352698][ T5103] netlink: 'syz.0.7658': attribute type 11 has an invalid length. [ 1134.409375][ T5108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7657'. [ 1134.475164][ T5085] erspan0 speed is unknown, defaulting to 1000 [ 1134.511297][ T5117] netlink: 'syz.2.7660': attribute type 9 has an invalid length. [ 1134.559763][ T5117] netlink: 'syz.2.7660': attribute type 21 has an invalid length. [ 1134.574825][ T5117] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7660'. [ 1134.600915][ T5117] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7660'. [ 1134.806798][ T5122] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.039719][ T4863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.053532][ T5122] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.190232][ T5122] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.313210][ T5085] lo speed is unknown, defaulting to 1000 [ 1135.359243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.368599][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.470270][ T5122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.554898][ T5129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.566694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.470849][ T5147] netlink: 'syz.2.7671': attribute type 13 has an invalid length. [ 1136.497624][ T5147] netlink: 'syz.2.7671': attribute type 17 has an invalid length. [ 1137.044226][ T5145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1137.077649][ T5145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1137.417749][ T5147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.426006][ T5147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.441164][ T5147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.483949][ T5147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1137.494228][ T5147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.519452][ T5147] veth1_vlan: left promiscuous mode [ 1137.525701][ T5147] veth0_vlan: left promiscuous mode [ 1137.533390][ T5147] veth0_vlan: entered promiscuous mode [ 1137.542737][ T5147] veth1_vlan: entered promiscuous mode [ 1137.553449][ T5147] veth1_macvtap: left promiscuous mode [ 1137.560318][ T5147] veth0_macvtap: left promiscuous mode [ 1137.567669][ T5147] veth0_macvtap: entered promiscuous mode [ 1137.575025][ T5147] veth1_macvtap: entered promiscuous mode [ 1137.689495][T12804] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1137.952988][ T5186] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7679'. [ 1138.345805][ T5201] net_ratelimit: 10 callbacks suppressed [ 1138.345828][ T5201] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1138.477467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.486654][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.783001][ T5221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7689'. [ 1138.997466][ T5235] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7692'. [ 1139.257908][ T5251] lo speed is unknown, defaulting to 1000 [ 1139.387828][ T5257] netlink: 'syz.1.7699': attribute type 1 has an invalid length. [ 1139.408325][ T5257] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7699'. [ 1139.517291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.527421][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.996191][ T5641] block nbd8: Receive control failed (result -32) [ 1140.032479][ T5251] erspan0 speed is unknown, defaulting to 1000 [ 1140.200731][ T5294] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1140.209698][ T5294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1140.321444][ T5641] Bluetooth: hci2: command 0x0405 tx timeout [ 1140.515253][ T5303] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7708'. [ 1140.557264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.566797][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.727478][ T5315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7711'. [ 1140.730973][ T5314] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7711'. [ 1140.762714][ T5251] lo speed is unknown, defaulting to 1000 [ 1140.775455][ T5314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7711'. [ 1140.976288][ T5331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7712'. [ 1141.163511][ T5336] netlink: 'syz.2.7714': attribute type 1 has an invalid length. [ 1141.182697][ T5336] nbd: illegal input index 871591272 [ 1141.192160][ T5338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7712'. [ 1141.300601][ T8882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1141.518619][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1141.599209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.783140][ T5368] bond0: entered promiscuous mode [ 1141.787729][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1141.803478][ T5368] bond_slave_0: entered promiscuous mode [ 1141.815290][ T5368] bond_slave_1: entered promiscuous mode [ 1141.885088][ T5368] batadv_slave_0: entered promiscuous mode [ 1141.926170][ T5368] batadv_slave_0: left promiscuous mode [ 1141.956029][ T5368] bond0: left promiscuous mode [ 1141.986997][ T5368] bond_slave_0: left promiscuous mode [ 1141.993079][ T5368] bond_slave_1: left promiscuous mode [ 1142.493333][ T5414] vcan0: entered promiscuous mode [ 1142.762667][ T5421] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1142.903308][ T5438] netlink: 'syz.2.7737': attribute type 11 has an invalid length. [ 1143.396456][ T5457] siw: device registration error -23 [ 1143.474650][ T5468] __nla_validate_parse: 10 callbacks suppressed [ 1143.474673][ T5468] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7741'. [ 1143.526815][ T5468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7741'. [ 1143.677283][ C1] net_ratelimit: 3 callbacks suppressed [ 1143.677306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.691962][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.862927][ T5484] openvswitch: netlink: Key type 142 is out of range max 32 [ 1144.178408][ T5497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7752'. [ 1144.465800][ T5514] geneve2: entered promiscuous mode [ 1144.638488][ T4864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.717309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.728036][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.805172][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7761'. [ 1144.864206][ T5533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7762'. [ 1144.866765][ T5525] bridge0: port 3(team0) entered disabled state [ 1144.880587][ T5525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.884139][ T5533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7762'. [ 1144.888263][ T5525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.177591][ T5545] netlink: 'syz.1.7764': attribute type 1 has an invalid length. [ 1145.182311][ T5525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1145.186639][ T5545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7764'. [ 1145.232914][ T5525] tipc: Resetting bearer [ 1145.265343][ T5525] tipc: Resetting bearer [ 1145.372493][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7764'. [ 1145.382494][ T5547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7764'. [ 1145.402840][T12804] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.413340][T12804] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.430236][T12804] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.452088][T12804] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.791938][ T5571] IPVS: Error connecting to the multicast addr [ 1145.981535][ T5583] syzkaller0: entered promiscuous mode [ 1145.992953][ T5583] syzkaller0: entered allmulticast mode [ 1146.111336][ T5583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7773'. [ 1146.726426][ T5623] netlink: 'syz.1.7782': attribute type 1 has an invalid length. [ 1146.828422][ T5628] IPVS: length: 528 != 1256 [ 1146.937011][ T5624] tipc: Resetting bearer [ 1147.041902][ T5634] netlink: 'syz.2.7785': attribute type 1 has an invalid length. [ 1147.070310][ T5634] netlink: 'syz.2.7785': attribute type 3 has an invalid length. [ 1147.303440][ T5649] netlink: 'syz.0.7789': attribute type 1 has an invalid length. [ 1147.421488][ T5650] bond7: (slave geneve3): making interface the new active one [ 1147.446366][ T5650] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 1147.462712][T12806] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1147.473047][T12806] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1147.487749][T12806] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1147.503183][T12806] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1147.512719][ T5624] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1147.530929][ T5624] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1147.580697][ T5624] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1147.606533][ T5624] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1147.635173][ T5660] netlink: 'syz.1.7792': attribute type 1 has an invalid length. [ 1147.649198][ T5660] netlink: 'syz.1.7792': attribute type 2 has an invalid length. [ 1147.661546][ T5660] netlink: 'syz.1.7792': attribute type 2 has an invalid length. [ 1147.669652][ T5660] netlink: 'syz.1.7792': attribute type 2 has an invalid length. [ 1147.678342][ T5660] netlink: 'syz.1.7792': attribute type 1 has an invalid length. [ 1147.733985][ T5624] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1147.746179][ T5624] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1147.860808][ T5624] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1147.870145][ T5624] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1149.035366][ T5705] syzkaller0: entered promiscuous mode [ 1149.070716][ T5705] syzkaller0: entered allmulticast mode [ 1149.117960][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1149.201819][ T5719] vlan3: entered promiscuous mode [ 1149.230933][ T5719] veth0: entered promiscuous mode [ 1154.299322][ T5737] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1154.300928][ T5742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1154.514198][ T5755] __nla_validate_parse: 5 callbacks suppressed [ 1154.514224][ T5755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7815'. [ 1154.543293][ T5753] validate_nla: 3 callbacks suppressed [ 1154.543314][ T5753] netlink: 'syz.0.7813': attribute type 1 has an invalid length. [ 1154.605185][T12800] veth0_to_bond: left allmulticast mode [ 1154.620413][ T5753] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7813'. [ 1154.630246][T12800] veth0_to_bond: left promiscuous mode [ 1154.639423][T12800] bridge3: port 2(veth0_to_bond) entered disabled state [ 1154.660367][T12800] veth9: left allmulticast mode [ 1154.662465][ T5765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7815'. [ 1154.667971][T12800] veth9: left promiscuous mode [ 1154.680456][T12800] bridge3: port 1(veth9) entered disabled state [ 1154.711175][ T5763] IPv6: NLM_F_CREATE should be specified when creating new route [ 1154.725342][T12800] pimreg9: left allmulticast mode [ 1154.776590][T12800] tipc: Disabling bearer [ 1154.875304][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7819'. [ 1154.965693][ T5779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7819'. [ 1155.487236][ T5794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7821'. [ 1155.684375][T12800] bond0 (unregistering): left promiscuous mode [ 1155.716361][T12800] ÿ: left promiscuous mode [ 1155.744603][T12800] bond_slave_1: left promiscuous mode [ 1155.812779][T12800] bond0 (unregistering): (slave 07ÿ): Releasing backup interface [ 1155.879653][T12800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1155.919104][T12800] bond0 (unregistering): Released all slaves [ 1155.958422][T12800] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1155.972375][T12800] bond1 (unregistering): Released all slaves [ 1156.009741][ T5803] udevd[5803]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1156.024901][T12800] bond2 (unregistering): Released all slaves [ 1156.069754][T12800] bond3 (unregistering): Released all slaves [ 1156.108699][T12800] bond4 (unregistering): Released all slaves [ 1156.131242][T12800] bond5 (unregistering): Released all slaves [ 1156.155605][T12800] bond6 (unregistering): Released all slaves [ 1156.193391][T12800] bond7 (unregistering): Released all slaves [ 1156.296445][ T5774] : entered promiscuous mode [ 1156.348944][ T5779] openvswitch: : Dropping previously announced user features [ 1156.454760][T12800] tipc: Disabling bearer [ 1156.462427][T12800] tipc: Left network mode [ 1156.545805][ T5827] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7822'. [ 1156.576744][ T5826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1156.588899][ T5827] openvswitch: netlink: Message has 3 unknown bytes. [ 1156.746614][ T5842] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 1156.885639][ T5837] netlink: 'syz.4.7825': attribute type 1 has an invalid length. [ 1157.041932][ T5830] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1157.162959][ T5830] bond12 (unregistering): Released all slaves [ 1158.151866][ T5885] netlink: 'syz.2.7834': attribute type 1 has an invalid length. [ 1158.180617][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7834'. [ 1159.000642][ T5916] netlink: 'syz.2.7839': attribute type 1 has an invalid length. [ 1159.178566][ T5920] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1159.521704][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7841'. [ 1159.968966][ T5940] bond3: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1160.014399][ T5940] bond3 (unregistering): Released all slaves [ 1160.072221][T12800] batadv0: left promiscuous mode [ 1160.155083][T12800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.199788][T12800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.208332][T12806] smc: removing ib device sqz0 [ 1161.245415][T12806] smbdirect: ib_dev[sqz0] removed [ 1162.225568][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7858'. [ 1162.680756][ T6060] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.7864'. [ 1162.752302][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7865'. [ 1162.942826][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7866'. [ 1163.009370][ T6072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.256377][ T6079] netlink: 'syz.0.7868': attribute type 11 has an invalid length. [ 1163.389249][ T6087] netlink: 'syz.3.7871': attribute type 10 has an invalid length. [ 1163.424884][ T6087] team0: Device veth1_virt_wifi failed to register rx_handler [ 1163.469499][ T6092] netlink: 'syz.3.7871': attribute type 83 has an invalid length. [ 1163.668258][ T6094] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7873'. [ 1163.769287][ T6083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1163.776689][ T6083] IPv6: NLM_F_CREATE should be set when creating new route [ 1163.784111][ T6083] IPv6: NLM_F_CREATE should be set when creating new route [ 1164.478574][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1164.781616][ T5641] block nbd9: Receive control failed (result -32) [ 1164.796165][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7881'. [ 1164.796817][ T5641] block nbd9: Receive control failed (result -32) [ 1165.928520][T12800] IPVS: stop unused estimator thread 0... [ 1166.109788][ T6143] bond8: option miimon: invalid value (18446744073709551607) [ 1166.120745][ T6143] bond8: option miimon: allowed values 0 - 2147483647 [ 1166.141854][ T6143] bond8 (unregistering): Released all slaves [ 1166.378286][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7889'. [ 1166.409096][ T6158] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7890'. [ 1166.409809][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7888'. [ 1166.435006][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7886'. [ 1166.445093][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7889'. [ 1166.466131][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7886'. [ 1166.474740][ T6157] netlink: 'syz.3.7889': attribute type 5 has an invalid length. [ 1166.563358][ T6154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.585798][ T6154] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.624366][ T6154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.719041][ T6154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.736394][ T6154] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1166.757082][ T6154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1166.773192][ T6154] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1166.829327][ T4863] erspan0 speed is unknown, defaulting to 1000 [ 1166.847415][ T4863] syz0: Port: 1 Link ACTIVE [ 1166.882202][ T6162] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1167.030267][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.046478][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.060629][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.067921][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.126708][T12815] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.148878][ T4863] erspan0 speed is unknown, defaulting to 1000 [ 1167.159354][T12815] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.201094][T12815] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.210973][T12815] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.350345][ T6183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7895'. [ 1167.768624][ T6205] netlink: 'syz.2.7901': attribute type 13 has an invalid length. [ 1167.795232][ T6205] netlink: 'syz.2.7901': attribute type 17 has an invalid length. [ 1167.912766][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.972371][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.226713][ T6205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.245155][ T6205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.264635][ T6205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.326730][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1168.352825][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.372359][ T6205] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1168.383443][ T6205] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1168.416672][ T6205] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1168.428371][ T6230] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7909'. [ 1168.472245][ T1162] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1168.502920][ T1162] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.530330][ T1162] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1168.549149][ T1162] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.580212][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7911'. [ 1168.613982][ T1162] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1168.636796][ T1162] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.651905][ T1162] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1168.667257][ T1162] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.806380][T12806] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1168.873462][ T8882] IPVS: starting estimator thread 0... [ 1168.967578][ T6253] IPVS: using max 23 ests per chain, 55200 per kthread [ 1168.995843][ T6256] pim6reg: entered allmulticast mode [ 1169.004888][ T6251] erspan0 speed is unknown, defaulting to 1000 [ 1169.014118][ T6255] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1169.034437][ T6259] netlink: 'syz.0.7917': attribute type 1 has an invalid length. [ 1169.272959][ T6264] netlink: 'syz.0.7919': attribute type 8 has an invalid length. [ 1169.291558][ T6268] netlink: 'syz.3.7918': attribute type 1 has an invalid length. [ 1169.321746][ T6269] hmac(sha224: entered promiscuous mode [ 1169.382248][ T6264] veth1_to_team: entered promiscuous mode [ 1169.394997][ T6264] gretap0: entered promiscuous mode [ 1169.417507][ T6264] veth1_to_team: left promiscuous mode [ 1169.476172][ T6264] gretap0: left promiscuous mode [ 1169.560911][ T6271] : renamed from bond0 (while UP) [ 1169.771045][ T6251] lo speed is unknown, defaulting to 1000 [ 1169.943690][ T6294] netlink: 'syz.1.7927': attribute type 1 has an invalid length. [ 1169.990891][ T6294] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1170.242113][ T6315] __nla_validate_parse: 9 callbacks suppressed [ 1170.242139][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7931'. [ 1170.258246][ T6313] xt_hashlimit: invalid rate [ 1170.273981][ T6303] netlink: 'syz.3.7929': attribute type 6 has an invalid length. [ 1170.297482][ T6303] netlink: 'syz.3.7929': attribute type 7 has an invalid length. [ 1170.305933][ T6303] netlink: 'syz.3.7929': attribute type 8 has an invalid length. [ 1170.423571][ T6317] xt_CT: No such helper "snmp_trap" [ 1170.513911][ T6306] netlink: 'syz.3.7929': attribute type 6 has an invalid length. [ 1170.524106][ T6306] netlink: 'syz.3.7929': attribute type 7 has an invalid length. [ 1170.535478][ T6306] netlink: 'syz.3.7929': attribute type 8 has an invalid length. [ 1170.942262][ T6343] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1171.296051][ T6343] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1171.477747][ T6343] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1171.612572][ T6343] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1171.662755][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7946'. [ 1171.707098][ T6378] vlan2: entered promiscuous mode [ 1171.714056][ T6378] bridge0: entered promiscuous mode [ 1171.809725][ T6385] hsr_slave_0 (unregistering): left promiscuous mode [ 1171.857906][ T30] audit: type=1800 audit(1777928149.778:34): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7949" name="memory.events" dev="tmpfs" ino=1602 res=0 errno=0 [ 1171.939359][ T30] audit: type=1804 audit(1777928149.808:35): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7949" name="/newroot/309/memory.events" dev="tmpfs" ino=1602 res=1 errno=0 [ 1171.994802][ T6396] netlink: 136 bytes leftover after parsing attributes in process `syz.4.7950'. [ 1172.213469][T12815] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1172.225927][ T1117] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1172.259498][ T6401] dvmrp8: entered allmulticast mode [ 1172.289930][T12800] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1172.332781][ T1117] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1172.371154][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7956'. [ 1172.380746][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7956'. [ 1172.392436][ T6419] netlink: 504 bytes leftover after parsing attributes in process `syz.3.7955'. [ 1172.718564][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1172.872303][ T6435] erspan0 speed is unknown, defaulting to 1000 [ 1173.770874][ T6435] lo speed is unknown, defaulting to 1000 [ 1173.973356][ T6484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7973'. [ 1174.172760][ T6489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7976'. [ 1174.596088][ T6484] xfrm0: left promiscuous mode [ 1174.612966][ T6484] xfrm0: left allmulticast mode [ 1174.695475][ T6484] geneve2: left promiscuous mode [ 1174.889719][ T6510] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1174.934923][ T6528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7985'. [ 1175.311960][ T6541] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7990'. [ 1175.586241][ T6541] can: request_module (can-proto-0) failed. [ 1175.801612][ T6562] validate_nla: 4 callbacks suppressed [ 1175.801636][ T6562] netlink: 'syz.4.7995': attribute type 1 has an invalid length. [ 1175.817764][ T6562] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7995'. [ 1175.924798][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7996'. [ 1175.935601][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7997'. [ 1175.964236][ T6571] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7998'. [ 1175.990477][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7998'. [ 1176.098659][ T6570] bond6: (slave vcan0): refused to change device type [ 1176.162774][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8001'. [ 1176.468977][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8006'. [ 1176.572419][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8005'. [ 1176.608036][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8005'. [ 1176.641347][ T6599] erspan0 speed is unknown, defaulting to 1000 [ 1177.412655][ T6641] netlink: 'syz.1.8017': attribute type 1 has an invalid length. [ 1177.562430][ T6628] erspan0 speed is unknown, defaulting to 1000 [ 1177.570880][ T6599] lo speed is unknown, defaulting to 1000 [ 1177.629472][ T6649] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 1178.342673][ T6628] lo speed is unknown, defaulting to 1000 [ 1178.514416][ T6675] IPVS: Unknown mcast interface: vcan0 [ 1179.632096][ T6710] bridge0: port 4(syz_tun) entered blocking state [ 1179.669748][ T6710] bridge0: port 4(syz_tun) entered disabled state [ 1179.696498][ T6710] syz_tun: entered allmulticast mode [ 1179.705859][ T6710] syz_tun: entered promiscuous mode [ 1179.840861][ T6718] erspan0 speed is unknown, defaulting to 1000 [ 1180.361094][ T6718] lo speed is unknown, defaulting to 1000 [ 1181.118554][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1181.284240][ T6786] xt_hashlimit: size too large, truncated to 1048576 [ 1182.040949][ T6827] __nla_validate_parse: 6 callbacks suppressed [ 1182.040974][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8086'. [ 1182.240805][ T6838] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8088'. [ 1182.485517][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8090'. [ 1182.612745][ T6854] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8092'. [ 1182.625316][ T6854] netlink: 'syz.1.8092': attribute type 1 has an invalid length. [ 1182.669800][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8090'. [ 1182.680359][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8090'. [ 1182.697965][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8090'. [ 1182.709133][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8090'. [ 1182.744164][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8090'. [ 1182.771274][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8090'. [ 1182.790786][ T6865] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 1183.299752][ T6880] sit1: entered promiscuous mode [ 1183.329777][ T6885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1183.356588][ T6885] team0: Port device batadv0 added [ 1183.405870][ T6891] bridge0: port 1(team0) entered blocking state [ 1183.424247][ T6891] bridge0: port 1(team0) entered disabled state [ 1183.431759][ T6891] team0: entered allmulticast mode [ 1183.457073][ T6891] batadv0: entered allmulticast mode [ 1183.470246][ T6891] team0: entered promiscuous mode [ 1183.481593][ T1162] bridge0: port 1(team0) entered blocking state [ 1183.488144][ T1162] bridge0: port 1(team0) entered forwarding state [ 1183.507790][ T6888] bond0: entered promiscuous mode [ 1183.529276][ T6888] bond_slave_0: entered promiscuous mode [ 1183.537738][ T6888] bond_slave_1: entered promiscuous mode [ 1183.556510][ T6888] batadv0: entered promiscuous mode [ 1183.665417][ T6896] bond1: left promiscuous mode [ 1183.676656][ T6896] bridge0: left promiscuous mode [ 1183.688506][ T1162] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1183.692939][ T6896] geneve3: left promiscuous mode [ 1183.697923][ T1162] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1184.259346][ T6918] netlink: 'syz.1.8107': attribute type 5 has an invalid length. [ 1184.311476][ T6918] geneve3: entered promiscuous mode [ 1184.333923][ T6924] netlink: 'syz.4.8110': attribute type 3 has an invalid length. [ 1184.342230][ T6918] geneve3: entered allmulticast mode [ 1184.358642][T12815] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1184.389268][T12815] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1184.413309][T12815] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1184.447758][ T1162] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1184.987730][ T6958] syzkaller0: entered promiscuous mode [ 1185.019548][ T6958] syzkaller0: entered allmulticast mode [ 1185.588970][ T6982] erspan0 speed is unknown, defaulting to 1000 [ 1185.842963][ T6996] bridge5: entered promiscuous mode [ 1185.996472][ T6999] netlink: 'syz.0.8128': attribute type 4 has an invalid length. [ 1186.033619][ T6999] netlink: 'syz.0.8128': attribute type 4 has an invalid length. [ 1186.696272][ T7007] erspan0 speed is unknown, defaulting to 1000 [ 1186.708600][ T6982] lo speed is unknown, defaulting to 1000 [ 1187.125382][ T7029] Cannot find set identified by id 65534 to match [ 1187.185978][ T7007] lo speed is unknown, defaulting to 1000 [ 1187.533451][ T7034] xt_CONNSECMARK: invalid mode: 0 [ 1187.770248][ T7054] __nla_validate_parse: 36 callbacks suppressed [ 1187.770271][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8143'. [ 1187.924804][ T7057] openvswitch: netlink: Flow actions attr not present in new flow. [ 1188.268130][ T7068] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8151'. [ 1188.363827][ T7066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8149'. [ 1188.384840][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8149'. [ 1188.412442][ T7066] netlink: 'syz.2.8149': attribute type 3 has an invalid length. [ 1188.417100][ T7071] hmac(sha224): entered promiscuous mode [ 1188.432685][ T7066] netlink: 'syz.2.8149': attribute type 2 has an invalid length. [ 1188.447560][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8149'. [ 1188.770755][ T7086] bond8: entered promiscuous mode [ 1188.776037][ T7086] bond8: entered allmulticast mode [ 1188.937357][ T7097] xt_hashlimit: size too large, truncated to 1048576 [ 1189.079471][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8158'. [ 1189.102993][ T7106] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8158'. [ 1189.507839][ T7119] sctp: [Deprecated]: syz.0.8162 (pid 7119) Use of int in maxseg socket option. [ 1189.507839][ T7119] Use struct sctp_assoc_value instead [ 1189.750489][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8166'. [ 1189.769773][ T7127] bond0: Unable to set up delay as MII monitoring is disabled [ 1189.788884][ T7127] bond0 (unregistering): Released all slaves [ 1189.895522][ T7142] netlink: 'syz.2.8169': attribute type 1 has an invalid length. [ 1189.916361][ T7137] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 1189.988928][ T7142] bond7: entered promiscuous mode [ 1189.994144][ T7142] bond7: entered allmulticast mode [ 1190.002274][ T7142] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1190.030123][ T7144] erspan1: entered allmulticast mode [ 1190.040800][ T7144] bond7: (slave erspan1): making interface the new active one [ 1190.050353][ T7144] erspan1: entered promiscuous mode [ 1190.067388][ T7144] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 1190.198126][ T7142] netlink: 'syz.2.8169': attribute type 1 has an invalid length. [ 1190.232617][ T7151] netlink: 209104 bytes leftover after parsing attributes in process `syz.0.8171'. [ 1190.639999][ T7172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8175'. [ 1191.214692][ T7193] erspan0: entered promiscuous mode [ 1191.228567][ T7197] netlink: 'syz.2.8184': attribute type 39 has an invalid length. [ 1191.239412][ T7192] erspan0: left promiscuous mode [ 1191.748835][ T7236] netlink: 'syz.1.8191': attribute type 13 has an invalid length. [ 1191.779525][ T7236] netlink: 'syz.1.8191': attribute type 17 has an invalid length. [ 1191.809284][ T7240] netlink: 'syz.2.8187': attribute type 1 has an invalid length. [ 1191.817012][ T7236] netlink: 'syz.1.8191': attribute type 27 has an invalid length. [ 1191.941443][ T7232] erspan0 speed is unknown, defaulting to 1000 [ 1192.269994][ T7254] erspan0: entered promiscuous mode [ 1192.822627][ T7232] lo speed is unknown, defaulting to 1000 [ 1193.201702][ T7294] __nla_validate_parse: 3 callbacks suppressed [ 1193.201750][ T7294] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8203'. [ 1193.229104][ T7295] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8199'. [ 1193.885568][ T7316] netlink: 'syz.3.8208': attribute type 1 has an invalid length. [ 1194.021620][ T7318] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1194.034005][ T7318] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1194.141926][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8210'. [ 1194.204804][ T7324] vlan3: entered allmulticast mode [ 1194.215449][ T7324] macvtap0: entered allmulticast mode [ 1195.089496][ T7340] netlink: 'syz.2.8215': attribute type 3 has an invalid length. [ 1195.113183][ T7356] xt_hashlimit: size too large, truncated to 1048576 [ 1195.126240][ T7359] netlink: 'syz.0.8221': attribute type 1 has an invalid length. [ 1195.179467][ T7363] bridge_slave_0 (unregistering): left allmulticast mode [ 1195.206399][ T7363] bridge_slave_0 (unregistering): left promiscuous mode [ 1195.238691][ T7366] netlink: 'syz.4.8219': attribute type 1 has an invalid length. [ 1195.268588][ T7363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.307634][ T7366] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8219'. [ 1195.355602][ T7366] block nbd0: must specify backend [ 1195.398746][ T7366] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8219'. [ 1195.470407][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8224'. [ 1195.504097][ T7375] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8224'. [ 1195.517599][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8224'. [ 1195.804777][ T7390] netlink: 'syz.0.8225': attribute type 83 has an invalid length. [ 1196.071996][ T7407] syz_tun: left allmulticast mode [ 1196.093967][ T7407] syz_tun: left promiscuous mode [ 1196.148707][ T7408] netlink: 'syz.0.8226': attribute type 1 has an invalid length. [ 1196.231053][ T7407] bridge0: port 4(syz_tun) entered disabled state [ 1196.322192][ T7408] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.8226'. [ 1196.338208][ T7413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1196.364544][ T7413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8227'. [ 1196.423521][ T7407] team0: left allmulticast mode [ 1196.460594][ T7407] team_slave_0: left allmulticast mode [ 1196.480092][ T7407] team_slave_1: left allmulticast mode [ 1196.486661][ T7407] bond4: left allmulticast mode [ 1196.494186][ T7407] batadv0: left allmulticast mode [ 1196.507021][ T7407] team0: left promiscuous mode [ 1196.519045][ T7407] team_slave_0: left promiscuous mode [ 1196.532528][ T7407] team_slave_1: left promiscuous mode [ 1196.548585][ T7407] bond4: left promiscuous mode [ 1196.553900][ T7407] batadv0: left promiscuous mode [ 1196.560657][ T7407] bridge0: port 3(team0) entered disabled state [ 1196.579516][ T7407] team0: Port device batadv0 removed [ 1196.591273][ T7407] bridge_slave_0: left allmulticast mode [ 1196.607618][ T7407] bridge_slave_0: left promiscuous mode [ 1196.616145][ T7414] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1196.631144][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.668768][ T7407] bridge_slave_1: left allmulticast mode [ 1196.682536][ T7407] bridge_slave_1: left promiscuous mode [ 1196.704651][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.726590][ T7407] bond0: (slave bond_slave_0): Releasing backup interface [ 1196.765254][ T7407] bond0: (slave bond_slave_1): Releasing backup interface [ 1196.825349][ T7407] team0: Port device team_slave_0 removed [ 1196.854204][ T7407] team0: Port device team_slave_1 removed [ 1196.869279][ T7407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.888655][ T7407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1197.757826][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1197.936181][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.948059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.958799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.988821][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.018164][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.040044][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.067909][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.085591][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.311692][ T7489] Cannot find map_set index 1 as target [ 1198.349896][ T7484] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1198.365469][ T7492] __nla_validate_parse: 5 callbacks suppressed [ 1198.365491][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8247'. [ 1198.928691][ T7505] syzkaller0: entered promiscuous mode [ 1198.943081][ T7505] syzkaller0: entered allmulticast mode [ 1199.508825][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8262'. [ 1199.754861][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8265'. [ 1199.928232][ T7561] syzkaller0: entered promiscuous mode [ 1199.939535][ T7561] syzkaller0: entered allmulticast mode [ 1200.006230][ T7563] tipc: Enabling of bearer rejected, failed to enable media [ 1200.304958][ T7580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8272'. [ 1200.421535][ T7580] netlink: 'syz.0.8272': attribute type 1 has an invalid length. [ 1200.505350][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8272'. [ 1200.724691][ T7603] netlink: 'syz.2.8276': attribute type 12 has an invalid length. [ 1200.893979][ T7610] erspan0 speed is unknown, defaulting to 1000 [ 1200.949487][ T7613] IPVS: set_ctl: invalid protocol: 135 172.20.20.29:20003 [ 1201.159056][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8283'. [ 1201.512266][ T30] audit: type=1804 audit(1777928179.438:36): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8286" name="/newroot/496/memory.events" dev="tmpfs" ino=2553 res=1 errno=0 [ 1201.564240][ T7629] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1201.583440][ T7629] bond9 (unregistering): Released all slaves [ 1201.599197][T12804] net_ratelimit: 1029 callbacks suppressed [ 1201.599219][T12804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.616386][ T4859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.631406][ T4859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.642330][ T30] audit: type=1800 audit(1777928179.438:37): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8286" name="memory.events" dev="tmpfs" ino=2553 res=0 errno=0 [ 1201.677225][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.781306][ T7610] lo speed is unknown, defaulting to 1000 [ 1201.997714][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.177673][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8285'. [ 1202.202453][ T7630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.241377][ T4859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.255920][ T7630] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1202.289300][ T7654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1202.314103][ T7650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.326522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.514746][ T7661] netlink: 'syz.0.8292': attribute type 1 has an invalid length. [ 1202.545841][ T7655] erspan0 speed is unknown, defaulting to 1000 [ 1202.794033][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8293'. [ 1202.935952][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8295'. [ 1203.292200][ T7695] x_tables: duplicate underflow at hook 1 [ 1203.639592][ T7655] lo speed is unknown, defaulting to 1000 [ 1203.675846][ T7719] netlink: 'syz.0.8301': attribute type 1 has an invalid length. [ 1203.781147][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8302'. [ 1203.926005][ T7727] syzkaller0: entered promiscuous mode [ 1203.943328][ T7727] syzkaller0: entered allmulticast mode [ 1204.417791][ T7758] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.8311'. [ 1204.652942][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8316'. [ 1204.901958][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8321'. [ 1204.966434][ T7786] bond9: (slave vcan1): refused to change device type [ 1204.984055][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8322'. [ 1205.252751][ T7797] netlink: 'syz.0.8326': attribute type 10 has an invalid length. [ 1205.261092][ T7797] team0: Cannot enslave team device to itself [ 1205.432476][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8323'. [ 1205.800945][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8331'. [ 1205.837625][ T7818] block nbd0: must specify backend [ 1205.855420][ T7818] netlink: 8624 bytes leftover after parsing attributes in process `syz.0.8332'. [ 1205.979531][ T7826] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8334'. [ 1206.470374][ T7836] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1206.483234][ T7836] CPU: 1 UID: 0 PID: 7836 Comm: syz.3.8336 Not tainted syzkaller #0 PREEMPT(full) [ 1206.483265][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1206.483279][ T7836] Call Trace: [ 1206.483288][ T7836] [ 1206.483298][ T7836] dump_stack_lvl+0xe8/0x150 [ 1206.483331][ T7836] sysfs_warn_dup+0x8e/0xa0 [ 1206.483358][ T7836] sysfs_do_create_link_sd+0xc0/0x110 [ 1206.483395][ T7836] device_add_class_symlinks+0x1cf/0x240 [ 1206.483426][ T7836] device_add+0x475/0xbb0 [ 1206.483455][ T7836] wiphy_register+0x21e8/0x32e0 [ 1206.483504][ T7836] ? __pfx_wiphy_register+0x10/0x10 [ 1206.483533][ T7836] ? __pfx_netdev_run_todo+0x10/0x10 [ 1206.483561][ T7836] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1206.483601][ T7836] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1206.483634][ T7836] ieee80211_register_hw+0x3d82/0x4a70 [ 1206.483682][ T7836] ? ieee80211_register_hw+0x1981/0x4a70 [ 1206.483740][ T7836] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1206.483772][ T7836] ? __asan_memset+0x22/0x50 [ 1206.483799][ T7836] ? __hrtimer_setup+0x1b7/0x260 [ 1206.483825][ T7836] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1206.483855][ T7836] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 1206.483914][ T7836] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1206.483936][ T7836] ? kstrndup+0xbf/0x160 [ 1206.483969][ T7836] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1206.484022][ T7836] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1206.484055][ T7836] ? rcu_is_watching+0x15/0xb0 [ 1206.484079][ T7836] ? trace_kmalloc+0x2a/0xf0 [ 1206.484113][ T7836] ? __nla_parse+0x40/0x60 [ 1206.484157][ T7836] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1206.484188][ T7836] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1206.484229][ T7836] genl_family_rcv_msg_doit+0x22a/0x330 [ 1206.484269][ T7836] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1206.484315][ T7836] ? bpf_lsm_capable+0x9/0x20 [ 1206.484335][ T7836] ? security_capable+0x7e/0x2c0 [ 1206.484368][ T7836] genl_rcv_msg+0x61c/0x7a0 [ 1206.484409][ T7836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1206.484440][ T7836] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1206.484481][ T7836] netlink_rcv_skb+0x232/0x4b0 [ 1206.484509][ T7836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1206.484543][ T7836] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1206.484589][ T7836] ? down_read+0x270/0x2e0 [ 1206.484616][ T7836] ? genl_rcv+0xd/0x40 [ 1206.484649][ T7836] genl_rcv+0x28/0x40 [ 1206.484679][ T7836] netlink_unicast+0x75c/0x8e0 [ 1206.484716][ T7836] netlink_sendmsg+0x813/0xb40 [ 1206.484757][ T7836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1206.484787][ T7836] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1206.484817][ T7836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1206.484850][ T7836] ____sys_sendmsg+0x972/0x9f0 [ 1206.484879][ T7836] ? __might_fault+0xaf/0x130 [ 1206.484913][ T7836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1206.484952][ T7836] ? import_iovec+0x73/0xa0 [ 1206.484988][ T7836] ___sys_sendmsg+0x2a5/0x360 [ 1206.485016][ T7836] ? __lock_acquire+0x6b5/0x2cf0 [ 1206.485044][ T7836] ? __pfx____sys_sendmsg+0x10/0x10 [ 1206.485080][ T7836] ? futex_wake+0x4ac/0x580 [ 1206.485153][ T7836] ? __fget_files+0x2a/0x420 [ 1206.485178][ T7836] ? __fget_files+0x3a0/0x420 [ 1206.485216][ T7836] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1206.485250][ T7836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1206.485289][ T7836] ? rcu_is_watching+0x15/0xb0 [ 1206.485328][ T7836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.485353][ T7836] do_syscall_64+0x15f/0xf80 [ 1206.485378][ T7836] ? trace_irq_disable+0x3b/0x140 [ 1206.485410][ T7836] ? clear_bhb_loop+0x40/0x90 [ 1206.485437][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.485458][ T7836] RIP: 0033:0x7f3809b9cdd9 [ 1206.485481][ T7836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.485500][ T7836] RSP: 002b:00007f380a976028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1206.485525][ T7836] RAX: ffffffffffffffda RBX: 00007f3809e15fa0 RCX: 00007f3809b9cdd9 [ 1206.485540][ T7836] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 1206.485554][ T7836] RBP: 00007f3809c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1206.485567][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.485580][ T7836] R13: 00007f3809e16038 R14: 00007f3809e15fa0 R15: 00007ffc7182a748 [ 1206.485618][ T7836] [ 1207.112167][ T7840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8336'. [ 1207.190233][ T7847] netlink: 'syz.1.8338': attribute type 1 has an invalid length. [ 1207.202193][ T5748] net_ratelimit: 371 callbacks suppressed [ 1207.202223][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.249120][ T7847] bond0: entered promiscuous mode [ 1207.255442][ T7847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.358667][T12815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.368864][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.390364][ T5330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.402681][T17395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.690182][ T7883] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1207.757130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.773639][ T7883] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1207.873579][ T7891] netlink: 'syz.2.8350': attribute type 1 has an invalid length. [ 1208.069316][ T7896] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1208.094723][ T7896] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 1208.211187][ T7891] bond8: (slave gretap3): making interface the new active one [ 1208.220848][ T7891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.235273][ T7891] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 1208.245682][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.263591][ T7899] tipc: New replicast peer: 255.255.255.255 [ 1208.276236][ T7899] tipc: Enabled bearer , priority 10 [ 1208.292580][ T7901] macvlan3: entered promiscuous mode [ 1208.298861][ T7901] macvlan3: entered allmulticast mode [ 1208.305121][ T7901] bond8: entered promiscuous mode [ 1208.311375][ T7901] gretap3: entered promiscuous mode [ 1208.318846][ T7901] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1208.328513][ T7901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.338482][ T7901] bond8: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 1208.351055][ T7901] bond8: left promiscuous mode [ 1208.355887][ T7901] gretap3: left promiscuous mode [ 1208.370721][ T7902] syzkaller1: entered promiscuous mode [ 1208.385853][ T7902] syzkaller1: entered allmulticast mode [ 1208.976033][ T7947] __nla_validate_parse: 7 callbacks suppressed [ 1208.976056][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8364'. [ 1209.034023][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8365'. [ 1209.389396][ T7970] vlan3: entered promiscuous mode [ 1209.421900][ T7975] netlink: 'syz.1.8370': attribute type 1 has an invalid length. [ 1209.423858][ T7970] erspan0: entered promiscuous mode [ 1209.437363][ T7975] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8370'. [ 1209.575322][ T7980] netlink: 'syz.2.8371': attribute type 39 has an invalid length. [ 1209.610896][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8373'. [ 1209.620560][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8373'. [ 1209.869686][ T7960] erspan0 speed is unknown, defaulting to 1000 [ 1209.876093][ T5748] tipc: Node number set to 4277326352 [ 1209.940058][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8374'. [ 1210.007892][ T7990] bond12: entered promiscuous mode [ 1210.013829][ T7990] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1210.273217][ T7997] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8376'. [ 1210.614991][ T8013] bridge4: entered promiscuous mode [ 1210.624425][ T8019] netlink: 'syz.1.8381': attribute type 1 has an invalid length. [ 1210.635736][ T7960] lo speed is unknown, defaulting to 1000 [ 1210.759832][ T8019] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1210.889364][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8382'. [ 1210.927581][ T8022] ip6tnl2: entered allmulticast mode [ 1211.095080][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8386'. [ 1211.925622][ T8075] team0: entered promiscuous mode [ 1211.932637][ T8075] team_slave_0: entered promiscuous mode [ 1211.939245][ T8075] team_slave_1: entered promiscuous mode [ 1211.970828][ T8075] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (32769) ! [ 1212.238873][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8404'. [ 1212.338920][ T8100] netlink: 'syz.4.8404': attribute type 1 has an invalid length. [ 1212.400660][ T5748] net_ratelimit: 18 callbacks suppressed [ 1212.400684][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.414866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.478184][ T5330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.506987][ T30] audit: type=1800 audit(1777928190.428:38): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8404" name="r" dev="tmpfs" ino=2099 res=0 errno=0 [ 1212.508435][ T4859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.542389][T17393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.018001][T12806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.440657][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.449118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.536220][ T8167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.544745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.742364][ T8184] syzkaller0: entered promiscuous mode [ 1213.748381][ T8184] syzkaller0: entered allmulticast mode [ 1213.794121][ T8184] tipc: Started in network mode [ 1213.800851][ T8184] tipc: Node identity cadebaacc05, cluster identity 4711 [ 1213.809547][ T8184] tipc: Enabled bearer , priority 0 [ 1213.824032][ T8183] tipc: Resetting bearer [ 1213.827572][ T8189] netlink: 'syz.2.8425': attribute type 1 has an invalid length. [ 1213.839094][ T8189] netlink: 'syz.2.8425': attribute type 2 has an invalid length. [ 1213.882216][ T8183] tipc: Disabling bearer [ 1214.021000][ T8201] __nla_validate_parse: 5 callbacks suppressed [ 1214.021023][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8429'. [ 1214.036689][ T8201] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 1214.500868][ T8221] bond10 (unregistering): Released all slaves [ 1214.552545][ T8224] syzkaller0: entered promiscuous mode [ 1214.561596][ T8224] syzkaller0: entered allmulticast mode [ 1214.837983][ T8240] netlink: 'syz.1.8440': attribute type 30 has an invalid length. [ 1214.852812][ T8242] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8441'. [ 1214.955593][ T8247] syzkaller1: entered promiscuous mode [ 1214.984935][ T8247] syzkaller1: entered allmulticast mode [ 1215.053373][ T8253] vcan0: left promiscuous mode [ 1215.594319][ T8282] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1215.620468][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8449'. [ 1215.655773][ T8281] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8449'. [ 1215.809735][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8451'. [ 1215.857480][ T8290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8451'. [ 1215.874400][ T8292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1216.375049][ T8320] sock: sock_timestamping_bind_phc: sock not bind to device [ 1216.532812][ T8315] dummy0: entered promiscuous mode [ 1216.553585][ T8315] dummy0: left promiscuous mode [ 1216.764305][ T8336] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1216.839710][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8466'. [ 1216.862099][ T8339] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8466'. [ 1216.905338][ T8339] vlan2: entered allmulticast mode [ 1216.913162][ T8339] veth0_to_bond: entered allmulticast mode [ 1217.001049][ T8352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8471'. [ 1217.010674][ T8350] syzkaller0: entered promiscuous mode [ 1217.021963][ T8350] syzkaller0: entered allmulticast mode [ 1217.037894][ T8356] SET target dimension over the limit! [ 1217.258695][ T8366] erspan0 speed is unknown, defaulting to 1000 [ 1217.312224][ T8372] netlink: 'syz.3.8477': attribute type 1 has an invalid length. [ 1217.481463][ T8372] block nbd10: server does not support multiple connections per device. [ 1217.496265][ T8372] block nbd10: shutting down sockets [ 1217.531789][ T7723] net_ratelimit: 16 callbacks suppressed [ 1217.531811][ T7723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.593961][ T8380] sctp: [Deprecated]: syz.4.8479 (pid 8380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1217.593961][ T8380] Use struct sctp_sack_info instead [ 1217.597259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.624459][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.633090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.665953][ T8383] sctp: [Deprecated]: syz.4.8479 (pid 8383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1217.665953][ T8383] Use struct sctp_sack_info instead [ 1217.694262][ T8366] lo speed is unknown, defaulting to 1000 [ 1217.727340][ T8380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1217.892387][ T8388] netlink: 'syz.0.8481': attribute type 8 has an invalid length. [ 1217.987845][ T8393] netlink: 'syz.0.8484': attribute type 1 has an invalid length. [ 1218.152341][ T8407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8484'. [ 1218.213796][ T8410] SET target dimension over the limit! [ 1218.242320][ T8401] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1218.257115][ T8401] bond10: (slave bond11): making interface the new active one [ 1218.267933][ T8401] bond10: (slave bond11): Enslaving as an active interface with an up link [ 1218.292743][ T8393] bond10: (slave gretap2): Enslaving as a backup interface with an up link [ 1218.331804][ T8407] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1218.493021][ T8417] netlink: 'syz.4.8487': attribute type 1 has an invalid length. [ 1218.640236][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.648716][ T4859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.656916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.671814][ T8422] syzkaller0: entered promiscuous mode [ 1218.678344][T12815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.697299][ T8422] syzkaller0: entered allmulticast mode [ 1218.818062][ T8422] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1219.214216][ T8437] __nla_validate_parse: 5 callbacks suppressed [ 1219.214239][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8494'. [ 1219.589763][ T8460] netlink: 'syz.2.8500': attribute type 13 has an invalid length. [ 1219.609779][ T8460] netlink: 'syz.2.8500': attribute type 17 has an invalid length. [ 1219.640655][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8500'. [ 1219.678342][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.694517][ T8468] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1219.869871][ T8472] netlink: 'syz.1.8501': attribute type 1 has an invalid length. [ 1219.937819][ T8472] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8501'. [ 1220.005260][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8506'. [ 1220.064154][ T8483] IPVS: Error connecting to the multicast addr [ 1220.174656][ T8486] macsec1: entered promiscuous mode [ 1220.187485][ T8486] batadv0: entered promiscuous mode [ 1220.204295][ T8486] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1220.228864][ T8486] batadv0: left promiscuous mode [ 1220.310662][ T8476] erspan0 speed is unknown, defaulting to 1000 [ 1220.319078][ T8493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8509'. [ 1220.341629][ T8492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8509'. [ 1220.361747][ T8495] netlink: 105 bytes leftover after parsing attributes in process `syz.4.8510'. [ 1220.566667][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8512'. [ 1220.796050][ T8507] bridge0: port 1(vlan3) entered blocking state [ 1220.828449][ T8507] bridge0: port 1(vlan3) entered disabled state [ 1220.835233][ T8507] vlan3: entered allmulticast mode [ 1220.840737][ T8507] geneve0: entered allmulticast mode [ 1220.880686][ T8476] lo speed is unknown, defaulting to 1000 [ 1220.891359][ T8514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8516'. [ 1220.960131][ T8517] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8517'. [ 1221.634298][ T8542] netlink: 'syz.3.8526': attribute type 10 has an invalid length. [ 1221.975566][ T8537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.017471][ T8557] netlink: 'syz.4.8529': attribute type 1 has an invalid length. [ 1222.062702][ T8537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.164098][ T8537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.428022][ T8537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1222.462800][ T8537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1222.512768][ T8542] ipvlan0: entered allmulticast mode [ 1222.519665][ T8542] veth0_vlan: entered allmulticast mode [ 1222.539916][ T8542] team0: Device ipvlan0 failed to register rx_handler [ 1222.730985][ T5748] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1222.798426][ T24] net_ratelimit: 21 callbacks suppressed [ 1222.798449][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.812618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.077234][ T8580] netlink: 'syz.2.8534': attribute type 39 has an invalid length. [ 1223.094281][ T7723] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1223.148548][ T7712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.223823][ T8580] hsr_slave_0 (unregistering): left promiscuous mode [ 1223.267746][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1223.839401][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.848090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.158696][ T7723] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1224.187697][ T7723] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1224.213520][ T8630] netlink: 'syz.0.8548': attribute type 1 has an invalid length. [ 1224.240518][ T8630] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1224.280029][ T7723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.723085][T17393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.851692][ T8675] syzkaller1: entered promiscuous mode [ 1224.867579][ T8675] syzkaller1: entered allmulticast mode [ 1224.877201][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.885594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.887676][T17395] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1225.168829][ T8682] lo: entered allmulticast mode [ 1225.459919][ T8660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.842243][ T8713] __nla_validate_parse: 1 callbacks suppressed [ 1225.842265][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8564'. [ 1225.925606][ T8696] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8555'. [ 1225.944596][ T8716] netem: change failed [ 1226.075446][ T8721] netlink: 'syz.0.8567': attribute type 1 has an invalid length. [ 1226.086617][ T8719] erspan0 speed is unknown, defaulting to 1000 [ 1226.136560][ T8717] syzkaller0: entered promiscuous mode [ 1226.167329][ T8717] syzkaller0: entered allmulticast mode [ 1226.668397][ T8743] syzkaller0: entered promiscuous mode [ 1226.682645][ T8743] syzkaller0: entered allmulticast mode [ 1226.823471][ T8719] lo speed is unknown, defaulting to 1000 [ 1227.045006][ T8769] netlink: 'syz.1.8582': attribute type 10 has an invalid length. [ 1227.083062][ T8769] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8582'. [ 1227.786261][ T8794] ip6tnl5: entered promiscuous mode [ 1227.811631][ T8793] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8588'. [ 1227.839403][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1227.999175][ T5748] net_ratelimit: 9 callbacks suppressed [ 1227.999197][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.013495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.428033][ T8824] block nbd10: server does not support multiple connections per device. [ 1228.450531][ T8824] block nbd10: shutting down sockets [ 1228.796553][ T8849] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8603'. [ 1228.810355][ T8663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.861683][ T8843] bond8: entered promiscuous mode [ 1228.867757][ T8843] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1228.895386][ T8847] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8605'. [ 1229.038405][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.045361][ T8855] ip6tnl2: entered promiscuous mode [ 1229.046874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.063529][ T8855] ip6tnl2: entered allmulticast mode [ 1229.223444][ T8860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8608'. [ 1229.338586][ T8865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1229.352695][ T8868] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1229.395592][ T8871] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1229.395796][ T8869] tap0: tun_chr_ioctl cmd 1074025677 [ 1229.420756][ T8869] tap0: linktype set to 6 [ 1229.573199][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8614'. [ 1229.673032][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8616'. [ 1229.759408][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1229.791134][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8617'. [ 1229.920518][ T8663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.008927][ T8900] bond10: option broadcast_neighbor: invalid value (30) [ 1230.018522][ T8900] bond10 (unregistering): Released all slaves [ 1230.077682][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.122912][ T8657] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.151191][ T8657] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.172295][ T8657] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.211931][ T8657] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.598549][ T8941] tc_dump_action: action bad kind [ 1230.976939][ T8956] [ 1230.979376][ T8956] ====================================================== [ 1230.986533][ T8956] WARNING: possible circular locking dependency detected [ 1230.993585][ T8956] syzkaller #0 Not tainted [ 1230.998037][ T8956] ------------------------------------------------------ [ 1231.005154][ T8956] syz.0.8631/8956 is trying to acquire lock: [ 1231.011135][ T8956] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1231.021164][ T8956] [ 1231.021164][ T8956] but task is already holding lock: [ 1231.028706][ T8956] ffff888068b9ee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1231.038386][ T8956] [ 1231.038386][ T8956] which lock already depends on the new lock. [ 1231.038386][ T8956] [ 1231.048882][ T8956] [ 1231.048882][ T8956] the existing dependency chain (in reverse order) is: [ 1231.057987][ T8956] [ 1231.057987][ T8956] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 1231.066271][ T8956] lock_sock_nested+0x41/0x100 [ 1231.071751][ T8956] mptcp_connect+0x4c3/0x830 [ 1231.077070][ T8956] __inet_stream_connect+0x25a/0xdd0 [ 1231.083011][ T8956] inet_stream_connect+0x66/0xa0 [ 1231.088589][ T8956] __sys_connect+0x312/0x450 [ 1231.093779][ T8956] __x64_sys_connect+0x7a/0x90 [ 1231.099088][ T8956] do_syscall_64+0x15f/0xf80 [ 1231.104211][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.110657][ T8956] [ 1231.110657][ T8956] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1231.118401][ T8956] lock_sock_nested+0x41/0x100 [ 1231.123714][ T8956] inet_shutdown+0x6a/0x390 [ 1231.128751][ T8956] nbd_mark_nsock_dead+0x2e9/0x560 [ 1231.134431][ T8956] sock_shutdown+0x15e/0x260 [ 1231.139547][ T8956] nbd_clear_sock+0x24/0x170 [ 1231.144751][ T8956] nbd_config_put+0x2dd/0x580 [ 1231.149963][ T8956] nbd_genl_connect+0x19d5/0x1cf0 [ 1231.155515][ T8956] genl_family_rcv_msg_doit+0x22a/0x330 [ 1231.161595][ T8956] genl_rcv_msg+0x61c/0x7a0 [ 1231.166725][ T8956] netlink_rcv_skb+0x232/0x4b0 [ 1231.172035][ T8956] genl_rcv+0x28/0x40 [ 1231.176645][ T8956] netlink_unicast+0x75c/0x8e0 [ 1231.182025][ T8956] netlink_sendmsg+0x813/0xb40 [ 1231.187674][ T8956] ____sys_sendmsg+0x972/0x9f0 [ 1231.193489][ T8956] ___sys_sendmsg+0x2a5/0x360 [ 1231.198966][ T8956] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1231.204612][ T8956] do_syscall_64+0x15f/0xf80 [ 1231.209739][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.216249][ T8956] [ 1231.216249][ T8956] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1231.224097][ T8956] __mutex_lock+0x1a3/0x1550 [ 1231.229227][ T8956] nbd_queue_rq+0x37b/0x1100 [ 1231.234474][ T8956] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1231.240649][ T8956] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1231.247602][ T8956] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1231.254144][ T8956] blk_mq_run_hw_queue+0x348/0x4f0 [ 1231.259790][ T8956] blk_mq_dispatch_list+0xd16/0xe10 [ 1231.265521][ T8956] blk_mq_flush_plug_list+0x48d/0x570 [ 1231.271434][ T8956] __blk_flush_plug+0x3ed/0x4d0 [ 1231.276820][ T8956] __submit_bio+0x28d/0x580 [ 1231.281870][ T8956] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1231.288388][ T8956] block_read_full_folio+0x599/0x830 [ 1231.294205][ T8956] filemap_read_folio+0x137/0x3b0 [ 1231.299766][ T8956] do_read_cache_folio+0x358/0x590 [ 1231.305423][ T8956] read_part_sector+0xb6/0x2b0 [ 1231.310746][ T8956] adfspart_check_ICS+0xb1/0x960 [ 1231.316246][ T8956] bdev_disk_changed+0x817/0x1770 [ 1231.321909][ T8956] blkdev_get_whole+0x380/0x510 [ 1231.327300][ T8956] bdev_open+0x31e/0xd30 [ 1231.332084][ T8956] blkdev_open+0x470/0x610 [ 1231.337029][ T8956] do_dentry_open+0x785/0x14e0 [ 1231.342410][ T8956] vfs_open+0x3b/0x340 [ 1231.347008][ T8956] path_openat+0x2e08/0x3860 [ 1231.352139][ T8956] do_file_open+0x23e/0x4a0 [ 1231.357175][ T8956] do_sys_openat2+0x113/0x200 [ 1231.362468][ T8956] __x64_sys_openat+0x138/0x170 [ 1231.367847][ T8956] do_syscall_64+0x15f/0xf80 [ 1231.372967][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.379390][ T8956] [ 1231.379390][ T8956] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1231.386786][ T8956] __mutex_lock+0x1a3/0x1550 [ 1231.391998][ T8956] nbd_queue_rq+0xc6/0x1100 [ 1231.397117][ T8956] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1231.403369][ T8956] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1231.410581][ T8956] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1231.417185][ T8956] blk_mq_run_hw_queue+0x348/0x4f0 [ 1231.422919][ T8956] blk_mq_dispatch_list+0xd16/0xe10 [ 1231.428654][ T8956] blk_mq_flush_plug_list+0x48d/0x570 [ 1231.434665][ T8956] __blk_flush_plug+0x3ed/0x4d0 [ 1231.440059][ T8956] __submit_bio+0x28d/0x580 [ 1231.445097][ T8956] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1231.451275][ T8956] block_read_full_folio+0x599/0x830 [ 1231.457112][ T8956] filemap_read_folio+0x137/0x3b0 [ 1231.462676][ T8956] do_read_cache_folio+0x358/0x590 [ 1231.468423][ T8956] read_part_sector+0xb6/0x2b0 [ 1231.473761][ T8956] adfspart_check_ICS+0xb1/0x960 [ 1231.479260][ T8956] bdev_disk_changed+0x817/0x1770 [ 1231.484823][ T8956] blkdev_get_whole+0x380/0x510 [ 1231.490209][ T8956] bdev_open+0x31e/0xd30 [ 1231.494985][ T8956] blkdev_open+0x470/0x610 [ 1231.500016][ T8956] do_dentry_open+0x785/0x14e0 [ 1231.505305][ T8956] vfs_open+0x3b/0x340 [ 1231.509905][ T8956] path_openat+0x2e08/0x3860 [ 1231.515032][ T8956] do_file_open+0x23e/0x4a0 [ 1231.520077][ T8956] do_sys_openat2+0x113/0x200 [ 1231.525371][ T8956] __x64_sys_openat+0x138/0x170 [ 1231.530766][ T8956] do_syscall_64+0x15f/0xf80 [ 1231.536150][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.542605][ T8956] [ 1231.542605][ T8956] -> #3 (set->srcu){.+.+}-{0:0}: [ 1231.549855][ T8956] __synchronize_srcu+0xca/0x300 [ 1231.555333][ T8956] elevator_switch+0x1e8/0x7a0 [ 1231.560652][ T8956] elevator_change+0x2cc/0x450 [ 1231.566151][ T8956] elevator_set_default+0x36c/0x430 [ 1231.571972][ T8956] blk_register_queue+0x3e9/0x4e0 [ 1231.577560][ T8956] __add_disk+0x677/0xd50 [ 1231.582529][ T8956] add_disk_fwnode+0xfb/0x480 [ 1231.587736][ T8956] nbd_dev_add+0x72c/0xb50 [ 1231.592727][ T8956] nbd_init+0x168/0x1f0 [ 1231.597493][ T8956] do_one_initcall+0x250/0x870 [ 1231.602827][ T8956] do_initcall_level+0x104/0x190 [ 1231.608412][ T8956] do_initcalls+0x59/0xa0 [ 1231.613275][ T8956] kernel_init_freeable+0x2a6/0x3e0 [ 1231.619005][ T8956] kernel_init+0x1d/0x1d0 [ 1231.623870][ T8956] ret_from_fork+0x514/0xb70 [ 1231.628988][ T8956] ret_from_fork_asm+0x1a/0x30 [ 1231.634296][ T8956] [ 1231.634296][ T8956] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1231.642308][ T8956] __mutex_lock+0x1a3/0x1550 [ 1231.647528][ T8956] elevator_change+0x1b3/0x450 [ 1231.652828][ T8956] elevator_set_none+0xb5/0x140 [ 1231.658213][ T8956] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1231.664545][ T8956] nbd_start_device+0x17f/0xb10 [ 1231.669927][ T8956] nbd_genl_connect+0x165b/0x1cf0 [ 1231.675476][ T8956] genl_family_rcv_msg_doit+0x22a/0x330 [ 1231.681562][ T8956] genl_rcv_msg+0x61c/0x7a0 [ 1231.686759][ T8956] netlink_rcv_skb+0x232/0x4b0 [ 1231.692055][ T8956] genl_rcv+0x28/0x40 [ 1231.696660][ T8956] netlink_unicast+0x75c/0x8e0 [ 1231.701954][ T8956] netlink_sendmsg+0x813/0xb40 [ 1231.707251][ T8956] ____sys_sendmsg+0x972/0x9f0 [ 1231.712567][ T8956] ___sys_sendmsg+0x2a5/0x360 [ 1231.717777][ T8956] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1231.723331][ T8956] do_syscall_64+0x15f/0xf80 [ 1231.728450][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.734873][ T8956] [ 1231.734873][ T8956] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1231.743665][ T8956] blk_alloc_queue+0x546/0x680 [ 1231.748963][ T8956] __blk_mq_alloc_disk+0x197/0x390 [ 1231.754618][ T8956] nbd_dev_add+0x499/0xb50 [ 1231.759563][ T8956] nbd_init+0x168/0x1f0 [ 1231.764345][ T8956] do_one_initcall+0x250/0x870 [ 1231.769644][ T8956] do_initcall_level+0x104/0x190 [ 1231.775117][ T8956] do_initcalls+0x59/0xa0 [ 1231.779980][ T8956] kernel_init_freeable+0x2a6/0x3e0 [ 1231.785714][ T8956] kernel_init+0x1d/0x1d0 [ 1231.790597][ T8956] ret_from_fork+0x514/0xb70 [ 1231.795720][ T8956] ret_from_fork_asm+0x1a/0x30 [ 1231.801009][ T8956] [ 1231.801009][ T8956] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1231.808235][ T8956] __lock_acquire+0x15a5/0x2cf0 [ 1231.813776][ T8956] lock_acquire+0x106/0x350 [ 1231.818808][ T8956] fs_reclaim_acquire+0x71/0x100 [ 1231.824723][ T8956] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1231.831149][ T8956] __alloc_skb+0x1d0/0x7d0 [ 1231.836099][ T8956] tcp_stream_alloc_skb+0x3f/0x580 [ 1231.841744][ T8956] tcp_connect+0x1570/0x5400 [ 1231.846876][ T8956] tcp_v4_connect+0x10f7/0x19b0 [ 1231.852269][ T8956] tcp_v6_connect+0xbbb/0x1b10 [ 1231.857567][ T8956] __inet_stream_connect+0x25a/0xdd0 [ 1231.863386][ T8956] inet_stream_connect+0x66/0xa0 [ 1231.868856][ T8956] __sys_connect+0x312/0x450 [ 1231.873995][ T8956] __x64_sys_connect+0x7a/0x90 [ 1231.879398][ T8956] do_syscall_64+0x15f/0xf80 [ 1231.884532][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.890968][ T8956] [ 1231.890968][ T8956] other info that might help us debug this: [ 1231.890968][ T8956] [ 1231.901549][ T8956] Chain exists of: [ 1231.901549][ T8956] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 1231.901549][ T8956] [ 1231.914511][ T8956] Possible unsafe locking scenario: [ 1231.914511][ T8956] [ 1231.921965][ T8956] CPU0 CPU1 [ 1231.927341][ T8956] ---- ---- [ 1231.932720][ T8956] lock(k-sk_lock-AF_INET6); [ 1231.937441][ T8956] lock(sk_lock-AF_INET6); [ 1231.944565][ T8956] lock(k-sk_lock-AF_INET6); [ 1231.951771][ T8956] lock(fs_reclaim); [ 1231.955806][ T8956] [ 1231.955806][ T8956] *** DEADLOCK *** [ 1231.955806][ T8956] [ 1231.963966][ T8956] 1 lock held by syz.0.8631/8956: [ 1231.968989][ T8956] #0: ffff888068b9ee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1231.979188][ T8956] [ 1231.979188][ T8956] stack backtrace: [ 1231.985097][ T8956] CPU: 1 UID: 0 PID: 8956 Comm: syz.0.8631 Not tainted syzkaller #0 PREEMPT(full) [ 1231.985116][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1231.985127][ T8956] Call Trace: [ 1231.985135][ T8956] [ 1231.985143][ T8956] dump_stack_lvl+0xe8/0x150 [ 1231.985163][ T8956] print_circular_bug+0x2e1/0x300 [ 1231.985186][ T8956] check_noncircular+0x12e/0x150 [ 1231.985208][ T8956] __lock_acquire+0x15a5/0x2cf0 [ 1231.985230][ T8956] ? __lock_acquire+0x6b5/0x2cf0 [ 1231.985248][ T8956] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1231.985269][ T8956] lock_acquire+0x106/0x350 [ 1231.985284][ T8956] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1231.985309][ T8956] fs_reclaim_acquire+0x71/0x100 [ 1231.985332][ T8956] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1231.985351][ T8956] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1231.985372][ T8956] ? __alloc_skb+0x1d0/0x7d0 [ 1231.985389][ T8956] ? ipv4_default_advmss+0x20/0x340 [ 1231.985413][ T8956] __alloc_skb+0x1d0/0x7d0 [ 1231.985432][ T8956] tcp_stream_alloc_skb+0x3f/0x580 [ 1231.985455][ T8956] ? __asan_memset+0x22/0x50 [ 1231.985475][ T8956] tcp_connect+0x1570/0x5400 [ 1231.985505][ T8956] ? get_random_u16+0x139/0x910 [ 1231.985523][ T8956] ? __pfx_tcp_connect+0x10/0x10 [ 1231.985548][ T8956] ? __asan_memset+0x22/0x50 [ 1231.985568][ T8956] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1231.985585][ T8956] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 1231.985607][ T8956] ? sk_setup_caps+0x9ef/0xc40 [ 1231.985628][ T8956] ? sk_setup_caps+0x29/0xc40 [ 1231.985648][ T8956] tcp_v4_connect+0x10f7/0x19b0 [ 1231.985670][ T8956] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1231.985687][ T8956] ? aa_label_sk_perm+0x52b/0x6e0 [ 1231.985705][ T8956] ? tcp_v6_connect+0x62d/0x1b10 [ 1231.985729][ T8956] tcp_v6_connect+0xbbb/0x1b10 [ 1231.985752][ T8956] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1231.985772][ T8956] ? __lock_acquire+0x6b5/0x2cf0 [ 1231.985789][ T8956] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1231.985815][ T8956] __inet_stream_connect+0x25a/0xdd0 [ 1231.985839][ T8956] ? do_raw_spin_lock+0x12b/0x2f0 [ 1231.985860][ T8956] ? lock_sock_nested+0x6a/0x100 [ 1231.985882][ T8956] ? __pfx___inet_stream_connect+0x10/0x10 [ 1231.985905][ T8956] ? inet_stream_connect+0x51/0xa0 [ 1231.985926][ T8956] ? __local_bh_enable_ip+0xd0/0x130 [ 1231.985945][ T8956] inet_stream_connect+0x66/0xa0 [ 1231.985967][ T8956] __sys_connect+0x312/0x450 [ 1231.985985][ T8956] ? __pfx___sys_connect+0x10/0x10 [ 1231.986006][ T8956] ? rcu_is_watching+0x15/0xb0 [ 1231.986026][ T8956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.986042][ T8956] __x64_sys_connect+0x7a/0x90 [ 1231.986060][ T8956] do_syscall_64+0x15f/0xf80 [ 1231.986079][ T8956] ? trace_irq_disable+0x3b/0x140 [ 1231.986102][ T8956] ? clear_bhb_loop+0x40/0x90 [ 1231.986119][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.986135][ T8956] RIP: 0033:0x7f0de8b9cdd9 [ 1231.986151][ T8956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.986166][ T8956] RSP: 002b:00007f0de998e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1231.986183][ T8956] RAX: ffffffffffffffda RBX: 00007f0de8e15fa0 RCX: 00007f0de8b9cdd9 [ 1231.986195][ T8956] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000003 [ 1231.986206][ T8956] RBP: 00007f0de8c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1231.986216][ T8956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1231.986226][ T8956] R13: 00007f0de8e16038 R14: 00007f0de8e15fa0 R15: 00007ffd755343c8 [ 1231.986243][ T8956] [ 1232.399825][ T8957] block nbd10: server does not support multiple connections per device. [ 1232.409047][ T8957] block nbd10: shutting down sockets [ 1233.449408][ T8882] net_ratelimit: 6 callbacks suppressed [ 1233.449425][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.463406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.477464][ T8663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.837610][ T4859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.488809][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.497424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.607723][ T8657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.517009][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1235.525230][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.533613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.727245][ T8657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.650567][ T5748] net_ratelimit: 7 callbacks suppressed [ 1238.650592][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.664583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.097624][ T8660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.679895][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.688171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.917761][T17395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.207611][ T8643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.637363][ T4859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.645765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.719871][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog