last executing test programs: 3.920079454s ago: executing program 1 (id=1575): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25077c0000080001800400dd808c0003"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x6, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000, 0x1}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980282000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000004) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000100)=0xdb, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 3.420572424s ago: executing program 2 (id=1580): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000540)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x65}, @map_fd={0x18, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000051c0)={0x2}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x45, &(0x7f00000017c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfc}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/114, 0x72}], 0x1}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r4], 0x38}}, 0x20044804) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000001c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r6, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x40) 3.162690203s ago: executing program 1 (id=1582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000800001c"], 0x4a) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)={@fallback=r6, r6, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r6, r6, 0x2f, 0x10, 0x4, @void, @value=r7}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000ffffff1f18230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000063000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000200025a729bd7000fddbdf25020000cdff00000102000100080006000000000014000100fc00"/51], 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 2.872392885s ago: executing program 3 (id=1584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) unshare(0x2c020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x35, 0x7f, 0x2, 0x10, r0, 0xff, '\x00', 0x0, r1, 0x2, 0x2, 0x5, 0xe}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) 2.676650847s ago: executing program 3 (id=1586): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xa}, {0x3}, {0x0, 0x2}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x20004800) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000060000002600010000112233445566778899aabb0200000088a80000000001170000010203040100070800000c00020006002000080000000c"], 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x20000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@int=0x9, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r4], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="500001c5e9001000010001000000010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="20000000a006000008000a00", @ANYRES32=r6, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB="e14625488c7b648adb97a95f37c99da69f558e6c84f55479ac06cd8f5ecb161e2e3f454b150fdc17b2a59c328777a5e8b27f9c16aec0d9bf7a4bb9ffc931227cfcf13eceb8e3d4c4249b50eee81e70399b2512e894d62bc662e5899a4ee0ca607df6a26d2f97556af7850a6e22da7cf10621754ab9c3ad402c3562b2809637115ecb728f09f3148a4c66a18ef4988c471b80411992fa37211e35509cc3c43841974698c4b577074ed8b457a9680cb9d1851438ef8d26d512f2df7bf5b16ea12d7cd839896df62bdc"], 0x3c}}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r9, 0x1, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000104000000200000020000003c000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x6, 0x11, 0x0, 0x1, [@generic="2ff9"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="68000000300005060000000d000000000000010054000100500001000900010067617465"], 0x68}], 0x1}, 0x0) 2.611668468s ago: executing program 0 (id=1587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000000000000008000d"], 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000fedbdf85dd61ea8976ae0c20b2462af8dc7b32251700000008000300146d06187881c0a17fa440bf006259", @ANYRES32=r4, @ANYBLOB="48003080140004004000000080c0049d66fdf3120000000005000200020000002800018008000100020000000c0005006f0000000000000008000100020000000500020000000000"], 0x64}}, 0x4008040) r5 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x4, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x6, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44080) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b280063301"], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) (async) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r10, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000100)="89d39156", 0x4}], 0x1}}], 0x1, 0x24040040) (async) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000340), &(0x7f0000000380)=0x8) (async) ioctl$sock_ifreq(r8, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x2, 0x6, @cisco=0x0}}) (async) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f00000002c0)={{@_ha_fsid={[0x3, 0x5]}, {0x4, 0x7, 0x1, 0x7}}, {{[0x0, 0x3, 0x7c, 0x3]}, 0x0, 0x2, 0x9, 0x0, &(0x7f00000001c0)=[{{@_ha_fsid={[0xfffff443, 0x40]}, {0x1, 0x714, 0x3, 0x8000000000000000}}, 0xfffffac7, 0x0, '[\x00'}, {{@align=0x8, {0x4, 0x9, 0x7, 0xfff}}, 0x697e, 0x0, '\xd7\x00'}, {{@align=0x2, {0x3, 0x0, 0x7, 0x95}}, 0x5, 0x0, '\x00'}, {{@align=0x100000001, {0x3, 0x2, 0x7e, 0x3}}, 0x2, 0x0, '#%&}!S\x00'}, {{@align=0x2dee, {0x9, 0x101, 0x4, 0x8}}, 0x42, 0x0, '+#\x00'}, {{@align=0x1000, {0xff, 0x7f, 0x6, 0x4}}, 0x3, 0x0, '@^%\\-@\x00'}, {{@_ha_fsid={[0x7, 0x19]}, {0x9, 0x81, 0x101, 0x100000000}}, 0x7ff, 0x0, '.\x00'}]}}) 2.547099494s ago: executing program 2 (id=1588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a010400000000000000000a0000010900010073797a31000000002400048020000180070001006374000014000280080002400000000608000140000000090900020073797a32000000001400000011"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff020000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r2], 0x24}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x1b}, [@exit, @call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xe, 0x0, &(0x7f0000000140)="5bd6bc1996ff006859a121fc0e0d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$netlink(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYBLOB="580a00001e002102000000000000000007000000440a1980400af380080028800400b900340a31"], 0xa58}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10, 0x80800) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000380)={0x2, 0x1}) close(0x4) 2.420556655s ago: executing program 1 (id=1589): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) unshare(0x22020400) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r3, &(0x7f0000000200)=""/196, 0xc4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x4, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a00000000000061115400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) (async) unshare(0x22020400) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) read(r3, &(0x7f0000000200)=""/196, 0xc4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x4, 0x4, 0x4, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a00000000000061115400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) 2.41501121s ago: executing program 4 (id=1590): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x1}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xac, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801}, [@IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '#\x00'}, @IFLA_PORT_REQUEST={0x0, 0x6, 0x5}, @IFLA_PORT_PROFILE={0xf, 0x2, 'veth1_vlan\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5c75435656426db5dfe0732381f2eb67"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x5}]}}}, @IFLA_AF_SPEC={0x30, 0x1a, 0x0, 0x1, [@AF_INET6={0x71, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) 2.394384677s ago: executing program 0 (id=1591): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x3c, r1, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syz_tun\x00'}) 2.244772795s ago: executing program 2 (id=1592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a310000000009"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r8, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x114, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="b7000000f8180000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d100200000000001d400200000000004704000001ed0000620300007e0000001d440000000000007a0a00fe00ffffffc3030000e10000009f000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d66a77ac8daab82167606068067500c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923030000000000000014e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049ef6a989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270fa3d0ee281eaa11ad47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42e54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65807ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91c11ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffff458}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_emit_ethernet(0x256, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9202203afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000030aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df"], 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r13 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r15, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x202}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008080}, 0x44080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r12, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x1, 0x2, 0x614, 0x4, 0x9f, 0x7, 0x4}, 0x9c) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x28, r3, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x20040890) 2.202718706s ago: executing program 1 (id=1593): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa100000000000007010000f8fffeffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xc, 0xb}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0x600, 0x8}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r8, 0x8, 0x12, 0x1}, [@NDA_LLADDR={0xa, 0x2, @random="0a728e138cab"}]}, 0x28}, 0x1, 0x0, 0x0, 0xd804}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x28, 0x1, 0x0) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x54815}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0x3896, 0x80, 0x2, 0xf, 0xb}}, {0x4}}, {{0x1c, 0x1, {0xa3, 0x6, 0x4, 0x7, 0x0, 0x9, 0xa, 0x2}}, {0x8, 0x2, [0x3389, 0x2]}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x80}}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x40, 0x80, 0x7, 0x1000, {{0x2a, 0x4, 0x1, 0x23, 0xa8, 0x64, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x2c, 0x30, 0x3, 0x7, [{@multicast1, 0xffff489f}, {@empty, 0x4}, {@local}, {@empty, 0x8001}, {@remote, 0xd1}]}, @timestamp={0x44, 0xc, 0xc6, 0x0, 0x3, [0xafbc, 0xe]}, @cipso={0x86, 0x58, 0xffffffffffffffff, [{0x7, 0x2}, {0x7, 0xf, "9adf059da4b8a624cdc74cc551"}, {0x5, 0x5, "d29ac4"}, {0x6, 0xb, "ef89eff060ec26c5a7"}, {0x2, 0x11, "f6b963bd373706e3802fa08a0d8e14"}, {0x2, 0x12, "c7b64e666f19a90351ef3960426231f9"}, {0x6, 0xe, "2a99ebf3de0754e29915451f"}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000a80)={0x8c4, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x2, 0xfe, 0x8}, {0xc, 0x4}, {0x9e7, 0x0, 0xe1, 0x4}, {0x1614, 0x9, 0xfa, 0xffffffff}, {0xe, 0x5, 0x81, 0x3df}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x84e1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9f86}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r17}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}]}}, {{0x8, 0x1, r19}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) 2.094417734s ago: executing program 3 (id=1594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0xe26, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0xfffa, @local}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b421eba833d4b156", "57df2292bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000280)=""/50, 0x32}], 0x1}, 0xfff}], 0x1, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007", 0x4}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.044991702s ago: executing program 0 (id=1595): socket$kcm(0x21, 0x2, 0xa) (async) socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONERANGE(r1, 0x4020940d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32, @ANYRESHEX=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa20000", @ANYRES32=0x0, @ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) unshare(0x22020600) (async, rerun: 64) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000ac0)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x80, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000180)='ipvlan0\x00', 0x7fffffffffffffff, 0x2, 0x90}) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, 0x0, &(0x7f0000000000)) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="400053d0", @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf2515000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x2050) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4a8, 0x288, 0x0, 0xffffffff, 0x288, 0x330, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x26, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x1c}, @port=0x4e24, @port=0x4e24}}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000080)='GPL\x00'}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387c95aabc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) (rerun: 32) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) (async, rerun: 64) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) shutdown(r12, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 1.956484191s ago: executing program 0 (id=1596): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x7, 0x7800, 0x2, 0x0, {{0x19, 0x4, 0x1, 0x4, 0x64, 0x64, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x24}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4c, 0xc5, 0x1, 0x0, [{@broadcast, 0x99d}, {@remote, 0x1}, {@multicast2, 0x6}, {@private=0xeee, 0x10000}, {@empty, 0x7fff}, {@broadcast, 0x6}, {@empty, 0x2}, {@multicast2, 0x5c}, {@multicast1, 0x3}]}]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x90) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000600000000000000ed00000018110000", @ANYRES32, @ANYBLOB="0000000000000000784d2f21a440aecfd2769140eae1c5b090f31e443425b7020000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='GPL\x00', 0x80000000, 0xea, &(0x7f0000000d80)=""/234, 0x41100, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xd, 0x40, 0xffff}, 0x10, 0x3037d, r8, 0x7, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x4, 0xd, 0x5}, {0x1, 0x3, 0x7, 0x2}, {0x2, 0x5, 0x200, 0x2}, {0x0, 0x4, 0x1000007, 0xc}, {0x5, 0x5, 0x7, 0x9}, {0x5, 0x1, 0x7, 0x4}, {0x5, 0x3, 0xe, 0x4}], 0x10, 0x1}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000040)='./file0\x00', r9}, 0x18) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r10, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x4044010}, 0x4000000) write$cgroup_pid(r10, &(0x7f0000000000), 0x2a979d) write$cgroup_int(r10, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r9, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0x9c, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b80)={r9, r10, 0x17, 0x0, @val=@target_btf_id=r11}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x4, 0x5, 0x4, 0xfcc, 0x958, r1, 0x401, '\x00', r5, r10, 0x4, 0x1, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x7, &(0x7f0000001e00)=""/4088}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r13 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r13, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r13, 0x29, 0xc8, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.84004293s ago: executing program 4 (id=1597): r0 = socket$packet(0x11, 0x2, 0x300) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x51) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xff1a, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="c79eeace2c494fb1ad521bb46fe5e2a15ded1f0e183dead88e1f6f3de76339cd3a0aa293890ae423044e8abcc92acd", @ANYRES64=0x0], 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00082dbd7000fedbdf252700000006000600ffff000049770400ffff000008002c000500000006000400feff0000050031000500000008002c0000000000"], 0x44}, 0x1, 0x0, 0x0, 0xc041}, 0x4000000) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="e3dd273eff9a520bbb13c873c4c960858d87b3dae12a057715885537c86d57b986adbcb100d4a93d37d56bf6b79dfeb5931c57391de309bbb4ea8fbd14c05aaa7b921785795a93acbfb5b48e493602c761e264cea355ea08861152fab35603d6366d45150975504e21229b9037fd69809721301f0b40be32d0151ae95d62579695b830062b6970c149dd9f8e9b62891abf456d8f4352a3cefc92fb188ec18412aa60db5cc7f4215560192816656a7bc67f20e5a27c3c0998aaa03c1d016519bfc6019261748e6cd63f473f9ee995364edb533b10b606ac6f00"/233, @ANYRESHEX=r0], 0x20) r9 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}}, 0x4008014) 1.660455956s ago: executing program 1 (id=1598): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x1800, 0x0, 0x10, 0x4}]}}, 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'fo\x00', 0x11, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0xd07, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40345, 0x6c101}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xf}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48010}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x9, 0x7ffffffd, 0x8001, 0xffffffff, 0x1}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r5, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000400)="2b00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x54}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84c17ab1025ce32b1301ff8ba83303e82c29bc", 0x13}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.611386777s ago: executing program 4 (id=1599): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd24, 0x25dfdbfb, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00090025bd700000000002040000000c"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1, 0x0, 0x0, 0x9000000}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 1.345243805s ago: executing program 2 (id=1600): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x400000, &(0x7f00000000c0)={@align=0x3, {0xfff7, 0x4, 0x1, 0xc}}, 0x4e, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d", 0x29}], 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0x200, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x4, 0x4a, 0x5}, [@NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0xc090) (async) sendmsg$nl_generic(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25047c0000080001800400dd808c0003"], 0xa8}, 0x1, 0x0, 0x0, 0x14008084}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x31) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e8000380080001"], 0x2dc}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c0000080001804ee4c0103c14028036"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) 1.132339713s ago: executing program 3 (id=1601): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, 0x15, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000994}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x4004804) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) 1.131642796s ago: executing program 1 (id=1602): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000004d81dae089e138d754c200"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5bfc5a750c1c1a00000706010400000000000000000a000004050001fa7e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x3}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r11, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x8, 0x8}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000000000008400000002"], 0x10}}], 0x2, 0x44000044) 1.008965614s ago: executing program 3 (id=1603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000040000000f"], 0x50) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c80)={0x0, "7d463de6e274cba50d4d5f0d1b6ff12c"}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c80)={0x0, "7d463de6e274cba50d4d5f0d1b6ff12c"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001c80)={0x1c, 0x1, {0x219, @usage=0xbc4, 0x0, 0x2af, 0x8001, 0x1, 0x7, 0x1ff, 0x422, @struct={0x3, 0x1ff}, 0xffffffff, 0x9, [0x2, 0x4, 0x5, 0x3a, 0x10, 0xd84]}, {0x2, @struct={0x5, 0x400}, 0x0, 0x4, 0x2, 0x81, 0x3, 0xc5, 0x1d, @usage=0x3, 0x5c, 0x5, [0x7fffffff, 0xfffffffffffffff8, 0x7fffffff, 0xff, 0x50000000000000, 0x2]}, {0x98, @usage=0x40, r1, 0x6, 0x7fffffff, 0x2, 0x5, 0xffff, 0x400, @usage=0x80, 0x30, 0xa8, [0x0, 0x2, 0x7fffffff, 0x2, 0x3, 0x1]}, {0x8000, 0xe29, 0x6}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001c80)={0x1c, 0x1, {0x219, @usage=0xbc4, 0x0, 0x2af, 0x8001, 0x1, 0x7, 0x1ff, 0x422, @struct={0x3, 0x1ff}, 0xffffffff, 0x9, [0x2, 0x4, 0x5, 0x3a, 0x10, 0xd84]}, {0x2, @struct={0x5, 0x400}, 0x0, 0x4, 0x2, 0x81, 0x3, 0xc5, 0x1d, @usage=0x3, 0x5c, 0x5, [0x7fffffff, 0xfffffffffffffff8, 0x7fffffff, 0xff, 0x50000000000000, 0x2]}, {0x98, @usage=0x40, r1, 0x6, 0x7fffffff, 0x2, 0x5, 0xffff, 0x400, @usage=0x80, 0x30, 0xa8, [0x0, 0x2, 0x7fffffff, 0x2, 0x3, 0x1]}, {0x8000, 0xe29, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$rds(0x15, 0x5, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x888, 0x0, 0xffffffffffffffff, 0x8b, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3d89}, @ldst={0x0, 0x0, 0x4, 0x8, 0x7, 0x0, 0x8}], &(0x7f0000000c40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 970.799655ms ago: executing program 0 (id=1604): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022cbd7000fcdbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="1400020077673000000000000000000600000000"], 0x30}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r13 = accept4(r12, 0x0, 0x0, 0x800) sendmmsg$alg(r13, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b575", 0x2}], 0x1, 0x0, 0x0, 0x24040010}], 0x1, 0x8844) getsockopt(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000000c0)=""/159, &(0x7f0000000040)=0x9f) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000005000000fd0900008800000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r14}, 0x38) 816.367965ms ago: executing program 4 (id=1605): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket(0xa, 0x3, 0xff) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}, {0x0}], 0x2}, 0x30008b08) unshare(0x2020600) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x2}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@getchain={0x64, 0x66, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xa, 0x5}, {0x1, 0x2}, {0xffff, 0xd}}, [{0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xa97}]}, 0x64}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb70b, 0x58f, [{0x1, 0x69d, 0x8, 0x5}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) (async, rerun: 64) socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000761315000000000001800000000000000000000615d089758d25a190000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 815.392153ms ago: executing program 2 (id=1606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x100) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001300)={'nat\x00', 0x0, [0x5, 0x88980000, 0x2, 0x7, 0xa]}, &(0x7f0000000140)=0x54) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x124, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xef, 0x8, "de0bf07c56982221d02f7ca94c106282940491a2315d6a627e7835d265ff73d7cabb465311fecebd0e9cafda28d9f338595907b2427b27484a1e5721d090affcc3128e2c6ae642c8b450a9df707e624a901dae173c9cd1a0747dcdaa4dbd66d82d3783934c0dc217f2d784a84b92459b875ace3eed096084acc1ca8c92b5cb08eac6650f37f3431e1aa9f7737e929e71141b912922614def9d22b15bb8852979156ec74880a65891b24610b0789380d076910e0e853670ddef001525b3b6c7a20052e2c464108d9ee766e02d00b9c3c0d58b544cb11963116b4070afc9c390b6622e137a150e594597de0b"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x14c}, 0x1, 0x0, 0x0, 0x40891}, 0x4400c861) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x100) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x80001, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001300)={'nat\x00', 0x0, [0x5, 0x88980000, 0x2, 0x7, 0xa]}, &(0x7f0000000140)=0x54) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x124, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xef, 0x8, "de0bf07c56982221d02f7ca94c106282940491a2315d6a627e7835d265ff73d7cabb465311fecebd0e9cafda28d9f338595907b2427b27484a1e5721d090affcc3128e2c6ae642c8b450a9df707e624a901dae173c9cd1a0747dcdaa4dbd66d82d3783934c0dc217f2d784a84b92459b875ace3eed096084acc1ca8c92b5cb08eac6650f37f3431e1aa9f7737e929e71141b912922614def9d22b15bb8852979156ec74880a65891b24610b0789380d076910e0e853670ddef001525b3b6c7a20052e2c464108d9ee766e02d00b9c3c0d58b544cb11963116b4070afc9c390b6622e137a150e594597de0b"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x14c}, 0x1, 0x0, 0x0, 0x40891}, 0x4400c861) (async) 729.086715ms ago: executing program 3 (id=1607): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x800000, 0x0, {0x2, 0x20, 0x20}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010101}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x4000) setsockopt$inet_opts(r3, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) socket$inet6_sctp(0xa, 0x6, 0x84) sendfile(r0, r5, 0x0, 0x20000000002) epoll_wait(r5, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x6) 292.235728ms ago: executing program 4 (id=1608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x2c}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da80006"], 0x1e8}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0xb, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x3}, {0x0, 0x3}, {0xd, 0x3}, {0x4, 0x4}]}, @const={0x3, 0x0, 0x0, 0xa, 0x4}, @var={0x3, 0x0, 0x0, 0xe, 0x5, 0x1}, @typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x5}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x1}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x30, 0x61, 0x0, 0x5f, 0x61, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000000100)=""/86, 0xaf, 0x56, 0x1, 0x3}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x2c}, 0x20) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x6, 0x4) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da80006"], 0x1e8}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0xb, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x3}, {0x0, 0x3}, {0xd, 0x3}, {0x4, 0x4}]}, @const={0x3, 0x0, 0x0, 0xa, 0x4}, @var={0x3, 0x0, 0x0, 0xe, 0x5, 0x1}, @typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x5}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x1}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x30, 0x61, 0x0, 0x5f, 0x61, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000000100)=""/86, 0xaf, 0x56, 0x1, 0x3}, 0x28) (async) 141.30522ms ago: executing program 0 (id=1609): socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) recvmsg$kcm(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x40010002) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x0) socket$inet(0x2, 0x3, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socket$kcm(0x10, 0x100000000002, 0x4) (async) recvmsg$kcm(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x40010002) (async) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x0) (async) 136.181162ms ago: executing program 2 (id=1610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) 0s ago: executing program 4 (id=1611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @generic={0x7, 0xd, 0xa, 0xe0a, 0xfffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x1fa, 0x19, &(0x7f0000000600)=""/25, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x1, 0x5, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[r0, r0, r0], &(0x7f0000000700)=[{0x3, 0x1, 0x5, 0x2}, {0x3, 0x4, 0x6, 0x6}], 0x10, 0xe0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000090059000000001100"/28, @ANYRESOCT=r1, @ANYRESOCT=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000001c0)=0x4, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "c096dcefaa53bea2", "c47227d4032a4938ce29340e5e1ac72dfb676daa74228fd5368fd7f341242b81", "649f7f20", "cb2c59f62b52db8e"}, 0x38) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/42, 0x2a}], 0x1}, 0xfff}], 0x1, 0x10103, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0) recvfrom(r2, 0x0, 0x0, 0x17, 0x0, 0x0) writev(r2, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007", 0x4}], 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) kernel console output (not intermixed with test programs): 620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.456806][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.483449][ T5616] Bluetooth: hci0: command tx timeout [ 97.484256][ T5625] Bluetooth: hci1: command tx timeout [ 97.502819][ T5612] Bluetooth: hci2: command tx timeout [ 97.561501][ T5625] Bluetooth: hci3: command tx timeout [ 97.597352][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.613060][ T5609] veth0_macvtap: entered promiscuous mode [ 97.641110][ T5625] Bluetooth: hci4: command tx timeout [ 97.671236][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.687687][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.704964][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.710688][ T5609] veth1_macvtap: entered promiscuous mode [ 97.813954][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.830260][ T1146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.859709][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.869458][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.883631][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.901374][ T5619] veth0_vlan: entered promiscuous mode [ 97.921585][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.945414][ T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.977992][ T5619] veth1_vlan: entered promiscuous mode [ 98.010234][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.015658][ T5608] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.080269][ T967] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.111453][ T967] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.240948][ T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.267621][ T5613] veth0_vlan: entered promiscuous mode [ 98.346751][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.357988][ T5613] veth1_vlan: entered promiscuous mode [ 98.374363][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.381036][ T5620] veth0_vlan: entered promiscuous mode [ 98.492168][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.493785][ T5619] veth0_macvtap: entered promiscuous mode [ 98.503928][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.541740][ T5620] veth1_vlan: entered promiscuous mode [ 98.559222][ T5619] veth1_macvtap: entered promiscuous mode [ 98.667770][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.700712][ T5613] veth0_macvtap: entered promiscuous mode [ 98.775014][ T5613] veth1_macvtap: entered promiscuous mode [ 98.813952][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.848765][ T5620] veth0_macvtap: entered promiscuous mode [ 98.932274][ T5620] veth1_macvtap: entered promiscuous mode [ 98.989803][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.027936][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.070545][ T148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.111991][ T5816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'. [ 99.146963][ T5816] ipvlan0: entered promiscuous mode [ 99.155983][ T5816] ipvlan0: left promiscuous mode [ 99.199968][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.210145][ T5815] syzkaller0: entered allmulticast mode [ 99.245065][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.281242][ T1146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.363636][ T5822] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10'. [ 99.378538][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.396423][ T5822] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10'. [ 99.463334][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.476668][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.510502][ T148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.610410][ T63] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.641705][ T63] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.663579][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.673979][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.690179][ T1146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.717438][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.730786][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.755055][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.770722][ T63] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.784525][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.839911][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.849754][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.882789][ T1146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.024420][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.052672][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.070410][ T967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.122121][ T1146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.150614][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.216438][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 100.252203][ T5833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 100.279104][ T5835] Zero length message leads to an empty skb [ 100.502320][ T5838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12'. [ 100.833122][ T5853] x_tables: ip_tables: ah match: only valid for protocol 51 [ 101.075008][ T5865] Bluetooth: MGMT ver 1.23 [ 101.147356][ T5865] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 101.307872][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 101.363100][ T5873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'. [ 101.417626][ T5878] netlink: 'syz.1.22': attribute type 1 has an invalid length. [ 102.072159][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 102.134183][ T5919] Cannot find set identified by id 0 to match [ 102.134766][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 102.619708][ T5934] netlink: 'syz.2.34': attribute type 16 has an invalid length. [ 102.807549][ T5944] syz_tun: entered allmulticast mode [ 102.943111][ T5942] dvmrp8: entered allmulticast mode [ 102.980974][ T5941] syz_tun: left allmulticast mode [ 103.103991][ T5953] syz.3.40 uses obsolete (PF_INET,SOCK_PACKET) [ 103.189238][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.549326][ T5976] warning: `syz.4.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.590603][ T5977] syzkaller0: entered promiscuous mode [ 103.608893][ T5977] syzkaller0: entered allmulticast mode [ 103.725471][ T5977] tipc: Started in network mode [ 103.778989][ T5977] tipc: Node identity fa5bab2844e6, cluster identity 4711 [ 103.827090][ T5977] tipc: Enabled bearer , priority 0 [ 103.868557][ T5985] tipc: Resetting bearer [ 103.898914][ T5974] tipc: Resetting bearer [ 103.928002][ T5993] Bluetooth: MGMT ver 1.23 [ 103.934892][ T5974] tipc: Disabling bearer [ 103.968932][ T5994] syzkaller0: entered promiscuous mode [ 103.983036][ T5994] syzkaller0: entered allmulticast mode [ 104.268414][ T5999] __nla_validate_parse: 11 callbacks suppressed [ 104.268437][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.54'. [ 105.151552][ T30] audit: type=1800 audit(1787346506.973:2): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.58" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 105.155682][ T6013] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 105.333972][ T6013] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 105.378021][ T6013] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 105.969810][ T6046] bond1: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 105.991674][ T6046] bond1: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 106.016616][ T6046] bond1: entered allmulticast mode [ 106.024386][ T6046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.065680][ T6055] syz_tun: entered allmulticast mode [ 106.125997][ T6059] dvmrp8: entered allmulticast mode [ 106.184654][ T6051] syz_tun: left allmulticast mode [ 106.258970][ T6063] x_tables: ip_tables: osf match: only valid for protocol 6 [ 106.272820][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 106.302467][ T6063] veth1_to_bridge: mtu greater than device maximum [ 106.559457][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.567915][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.053477][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.080728][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.309916][ T6090] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 107.355514][ T30] audit: type=1800 audit(1787346509.183:3): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.70" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 107.356018][ T6081] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 107.430991][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.461401][ T6081] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 107.475256][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.510858][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.534141][ T6081] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 107.551409][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.373961][ T6123] xt_hashlimit: size too large, truncated to 1048576 [ 108.417238][ T6124] netlink: 72 bytes leftover after parsing attributes in process `syz.2.85'. [ 108.428483][ T6121] netlink: 'syz.4.83': attribute type 1 has an invalid length. [ 108.523520][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 108.764221][ T6140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.90'. [ 109.255553][ T6152] netlink: 324 bytes leftover after parsing attributes in process `syz.2.93'. [ 109.397373][ T6162] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 109.443035][ T6158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'. [ 109.914183][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.176205][ T6190] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 110.217942][ T6190] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 110.282307][ T6190] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 110.336784][ T6190] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 110.376532][ T6190] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 110.765466][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.776081][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.925415][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.092751][ T6221] netlink: 'syz.4.111': attribute type 32 has an invalid length. [ 111.146083][ T6221] netlink: 56 bytes leftover after parsing attributes in process `syz.4.111'. [ 111.599586][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.115'. [ 111.742529][ T6231] syzkaller0: entered promiscuous mode [ 111.760555][ T6231] syzkaller0: entered allmulticast mode [ 111.781716][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 111.961701][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.317918][ T6261] netlink: 128 bytes leftover after parsing attributes in process `syz.2.119'. [ 112.446779][ T6262] netlink: 280 bytes leftover after parsing attributes in process `syz.0.120'. [ 112.540203][ T6271] netlink: 'syz.3.122': attribute type 5 has an invalid length. [ 112.683932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.002973][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.053483][ T6286] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 113.159008][ T6290] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 113.485361][ T6304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.130'. [ 113.604695][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 113.733199][ T6317] netlink: 'syz.4.131': attribute type 4 has an invalid length. [ 113.802841][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.848366][ T6325] netlink: 64 bytes leftover after parsing attributes in process `syz.2.132'. [ 113.890551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.896044][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'. [ 113.969213][ T6298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.991669][ T6298] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.042209][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.055275][ T6298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.161087][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.204536][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.304608][ T6298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.324468][ T6298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.362470][ T6298] veth1_vlan: left promiscuous mode [ 114.372713][ T6298] veth0_vlan: left promiscuous mode [ 114.383802][ T6298] veth0_vlan: entered promiscuous mode [ 114.394032][ T6298] veth1_vlan: entered promiscuous mode [ 114.410587][ T6298] veth1_macvtap: left promiscuous mode [ 114.420834][ T6298] veth0_macvtap: left promiscuous mode [ 114.429290][ T6298] veth0_macvtap: entered promiscuous mode [ 114.438955][ T6298] veth1_macvtap: entered promiscuous mode [ 114.453881][ T6298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.465038][ T6298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.477112][ T6298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.489291][ T6298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.672347][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.679668][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.746625][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.755164][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.930202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.043820][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.054753][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.082900][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.086026][ T6366] __nla_validate_parse: 1 callbacks suppressed [ 115.086045][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 115.110723][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.970158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.122005][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.161954][ T5820] net_ratelimit: 1 callbacks suppressed [ 117.161976][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.620875][ T1169] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.648910][ T1169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.690387][ T1169] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.717080][ T1169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.757797][ T1169] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.789042][ T1169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.804151][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.839762][ T6414] netlink: 'syz.1.139': attribute type 5 has an invalid length. [ 117.875170][ T6412] openvswitch: netlink: IP tunnel dst address not specified [ 117.979442][ T6420] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 118.068819][ T6420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.201927][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.295033][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 118.658598][ T6449] bridge_slave_0: default FDB implementation only supports local addresses [ 118.840229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.936440][ T6461] nbd: must specify a size in bytes for the device [ 119.049866][ T6464] netlink: 'syz.0.153': attribute type 11 has an invalid length. [ 119.240868][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.503817][ T6481] tc action pedit 'at' offset -2147483645 out of bounds [ 119.516289][ T6481] tc action pedit 'at' offset -2147483645 out of bounds [ 119.526989][ T6481] tc action pedit 'at' offset -2147483645 out of bounds [ 119.539021][ T6481] tc action pedit 'at' offset -2147483645 out of bounds [ 119.548584][ T6481] tc action pedit 'at' offset -2147483645 out of bounds [ 119.558283][ T6481] tc action pedit 'at' offset -2147483645 out of bounds [ 119.568577][ T6481] tc action pedit 'at' offset -2147483645 out of bounds [ 119.578369][ T6481] tc action pedit 'at' offset -2147483645 out of bounds [ 119.587277][ T6481] tc action pedit 'at' offset -2147483645 out of bounds [ 119.596445][ T6481] tc action pedit 'at' offset -2147483645 out of bounds [ 119.604991][ T6481] TC_ACT_REPEAT abuse ? [ 119.890237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.904187][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.285275][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.445008][ T6502] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 120.488191][ T6502] bond2 (unregistering): Released all slaves [ 120.886728][ T6510] syzkaller0: entered promiscuous mode [ 120.917741][ T6510] syzkaller0: entered allmulticast mode [ 121.139527][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 122.363853][ T29] net_ratelimit: 5 callbacks suppressed [ 122.363875][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.002783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.401512][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.040441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.053260][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.090084][ T6573] netlink: 'syz.4.176': attribute type 2 has an invalid length. [ 124.441111][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.723501][ T6593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.181'. [ 124.794916][ T6601] tipc: Started in network mode [ 124.823408][ T6601] tipc: Node identity ac14140f, cluster identity 4711 [ 124.849272][ T6601] tipc: New replicast peer: 255.255.255.255 [ 124.853556][ T6599] syzkaller0: create flow: hash 2722861667 index 2 [ 124.875704][ T6601] tipc: Enabled bearer , priority 10 [ 124.893009][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 124.916598][ T6599] syzkaller0: delete flow: hash 2722861667 index 2 [ 124.934249][ T6601] netlink: 'syz.1.182': attribute type 1 has an invalid length. [ 124.947164][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.958837][ T49] syzkaller0: tun_net_xmit 76 [ 124.992982][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.005711][ T5344] syzkaller0: tun_net_xmit 76 [ 125.012204][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.024201][ T5344] syzkaller0: tun_net_xmit 48 [ 125.080177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.137986][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.182'. [ 125.173967][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 125.184453][ T6601] bond2: entered promiscuous mode [ 125.195584][ T6601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.324765][ T6608] bond2: entered allmulticast mode [ 125.434281][ T63] IPVS: starting estimator thread 0... [ 125.444536][ T6592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 125.459246][ T6601] bond2: (slave bridge1): making interface the new active one [ 125.488095][ T6601] bridge1: entered promiscuous mode [ 125.503068][ T6601] bridge1: entered allmulticast mode [ 125.538681][ T6601] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 125.550420][ T6624] IPVS: using max 32 ests per chain, 76800 per kthread [ 125.959672][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 125.992418][ T24] tipc: Node number set to 2886997007 [ 126.316783][ T6647] nbd: must specify an index to disconnect [ 126.495755][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.191'. [ 127.130490][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 127.386646][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.199'. [ 127.410502][ T5731] net_ratelimit: 6 callbacks suppressed [ 127.410524][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.560706][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.601056][ T6707] netlink: 'syz.4.201': attribute type 9 has an invalid length. [ 127.895930][ T6716] syzkaller0: entered promiscuous mode [ 127.915804][ T6716] syzkaller0: entered allmulticast mode [ 127.954061][ T6716] tipc: Started in network mode [ 127.978782][ T6716] tipc: Node identity f2ad9a5ff744, cluster identity 4711 [ 128.002968][ T6716] tipc: Enabled bearer , priority 0 [ 128.083308][ T6716] tipc: Resetting bearer [ 128.139693][ T6727] ip_tables: iptables: counters copy to user failed while replacing table [ 128.200243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.222119][ T6715] tipc: Resetting bearer [ 128.337166][ T6715] tipc: Disabling bearer [ 128.407205][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'. [ 128.600336][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.725041][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 128.834569][ T6746] batadv0: entered promiscuous mode [ 128.847717][ T6746] macvtap1: entered promiscuous mode [ 128.883777][ T6746] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 129.136279][ T6754] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 129.159320][ T6754] netlink: 224 bytes leftover after parsing attributes in process `syz.2.216'. [ 129.191846][ T6754] netlink: 68 bytes leftover after parsing attributes in process `syz.2.216'. [ 129.216884][ T6754] xt_hashlimit: max too large, truncated to 1048576 [ 129.240268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.267755][ T6753] raw_sendmsg: syz.4.215 forgot to set AF_INET. Fix it! [ 129.310003][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 129.390949][ T6758] tc_dump_action: action bad kind [ 129.648825][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.732727][ T6762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.762063][ T6771] netlink: 'syz.3.219': attribute type 3 has an invalid length. [ 130.089313][ T6762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.127577][ T6779] netlink: NAT attribute has 4 unknown bytes [ 130.155789][ T6779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.280471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.419018][ T6762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.450526][ T967] IPVS: starting estimator thread 0... [ 130.481276][ T6791] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 130.499178][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'. [ 130.511503][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'. [ 130.550390][ T6792] IPVS: using max 30 ests per chain, 72000 per kthread [ 130.714388][ T6762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.147734][ T6808] bridge_slave_0: left allmulticast mode [ 131.160508][ T5612] Bluetooth: hci4: command 0x0405 tx timeout [ 131.175605][ T6808] bridge_slave_0: left promiscuous mode [ 131.204034][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.226598][ T6808] bridge_slave_1: left allmulticast mode [ 131.260810][ T6808] bridge_slave_1: left promiscuous mode [ 131.279163][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.338799][ T6808] bond0: (slave bond_slave_0): Releasing backup interface [ 131.386738][ T6808] bond0: (slave bond_slave_1): Releasing backup interface [ 131.431672][ T6808] team0: Port device team_slave_0 removed [ 131.460707][ T6808] team0: Port device team_slave_1 removed [ 131.481503][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.497252][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.512367][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.523219][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.570766][ T5731] syz1: Port: 1 Link DOWN [ 131.741437][ T967] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.844608][ T63] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.903241][ T63] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.013627][ T1169] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.217618][ T6845] netlink: 'syz.4.238': attribute type 2 has an invalid length. [ 132.418729][ T6864] Bluetooth: MGMT ver 1.23 [ 132.570752][ T6871] __nla_validate_parse: 1 callbacks suppressed [ 132.570772][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 132.680516][ T6871] wireguard0: entered promiscuous mode [ 132.693010][ T6880] netlink: 'syz.3.246': attribute type 12 has an invalid length. [ 132.763988][ T5820] net_ratelimit: 6 callbacks suppressed [ 132.764008][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.144077][ T6891] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 133.179278][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.191176][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.484653][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.615516][ T6904] netlink: 'syz.3.250': attribute type 1 has an invalid length. [ 133.800786][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.865071][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.928446][ T6904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.108802][ T6915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.251'. [ 134.246310][ T6918] syzkaller0: entered promiscuous mode [ 134.253921][ T6918] syzkaller0: entered allmulticast mode [ 134.540427][ T6933] netlink: 56 bytes leftover after parsing attributes in process `syz.3.256'. [ 134.685450][ T6938] netlink: 'syz.2.257': attribute type 1 has an invalid length. [ 134.840358][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.920161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.967306][ T6938] bond1: entered promiscuous mode [ 134.973364][ T6938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.055494][ T6936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.093751][ T6936] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 135.107232][ T6936] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 135.170905][ T6936] bond1: (slave vti0): making interface the new active one [ 135.212317][ T6936] vti0: entered promiscuous mode [ 135.233463][ T6952] netlink: 'syz.3.262': attribute type 2 has an invalid length. [ 135.247903][ T6936] bond1: (slave vti0): Enslaving as an active interface with an up link [ 135.266710][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 135.407882][ T6952] ¿: entered promiscuous mode [ 135.880909][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.960215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.533178][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.630117][ T6966] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 136.640917][ T30] audit: type=1800 audit(1787346538.453:4): pid=6966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.266" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 136.650277][ T6968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.266'. [ 136.669008][ T6966] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 136.692986][ T6966] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 136.801813][ T6973] syzkaller0: entered promiscuous mode [ 136.820619][ T6973] syzkaller0: entered allmulticast mode [ 136.912775][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 136.924389][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.373924][ T6998] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 137.962098][ T5820] net_ratelimit: 2 callbacks suppressed [ 137.962118][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.054262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.005456][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.080589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.188301][ T6999] gretap1: entered allmulticast mode [ 139.659092][ T7022] netlink: 148 bytes leftover after parsing attributes in process `syz.2.277'. [ 140.047218][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.047544][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.283'. [ 140.103415][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.120609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.458753][ T7054] netlink: 236 bytes leftover after parsing attributes in process `syz.0.286'. [ 140.500609][ T7054] netlink: 236 bytes leftover after parsing attributes in process `syz.0.286'. [ 140.683911][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.995578][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 141.079027][ T7077] netlink: 104 bytes leftover after parsing attributes in process `syz.2.293'. [ 141.080660][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.160809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.515804][ T7094] sctp: [Deprecated]: syz.1.294 (pid 7094) Use of int in maxseg socket option. [ 141.515804][ T7094] Use struct sctp_assoc_value instead [ 142.121117][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.169937][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 142.680796][ T7145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.309'. [ 142.828560][ T7150] vlan0: entered promiscuous mode [ 142.855411][ T7150] team0: Port device vlan0 added [ 142.938653][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 142.996999][ T7153] netlink: 144 bytes leftover after parsing attributes in process `syz.3.311'. [ 143.011690][ T7156] netlink: 'syz.0.312': attribute type 13 has an invalid length. [ 143.161018][ T29] net_ratelimit: 1 callbacks suppressed [ 143.161038][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.241509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.536142][ T7183] ip6tnl0: Caught tx_queue_len zero misconfig [ 143.721137][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.201586][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.280291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.241003][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.280401][ T7116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.324755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.512850][ T7191] __nla_validate_parse: 1 callbacks suppressed [ 145.512869][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 145.779349][ T7191] team0: Port device team_slave_0 removed [ 145.793480][ T7205] netlink: 'syz.3.324': attribute type 49 has an invalid length. [ 145.822012][ T7204] tipc: Started in network mode [ 145.839971][ T7204] tipc: Node identity 7f000001, cluster identity 4711 [ 145.850979][ T7204] tipc: New replicast peer: 127.0.0.2 [ 145.868996][ T7204] tipc: Enabled bearer , priority 10 [ 145.905027][ T7207] tipc: Disabling bearer [ 146.282031][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.290392][ T7193] netlink: 'syz.0.320': attribute type 10 has an invalid length. [ 146.307199][ T7193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.360472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.396993][ T7193] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 146.760803][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.285099][ T7252] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 147.773676][ T7258] ip6gretap0: entered promiscuous mode [ 148.361601][ T24] net_ratelimit: 2 callbacks suppressed [ 148.361622][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.389864][ T7274] netlink: 68 bytes leftover after parsing attributes in process `syz.4.340'. [ 148.440256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.485586][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 149.432998][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.480490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.609026][ T7287] syzkaller0: entered promiscuous mode [ 149.636318][ T7287] syzkaller0: entered allmulticast mode [ 149.687844][ T7287] tipc: Enabled bearer , priority 0 [ 149.737363][ T7286] tipc: Resetting bearer [ 149.802530][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.824886][ T7286] tipc: Disabling bearer [ 150.219846][ T30] audit: type=1800 audit(1787346552.043:5): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.348" name=CB dev="tmpfs" ino=326 res=0 errno=0 [ 150.442046][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.494812][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.530120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.551428][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.775400][ T7325] netlink: 'syz.4.353': attribute type 10 has an invalid length. [ 150.795818][ T7325] netlink: 40 bytes leftover after parsing attributes in process `syz.4.353'. [ 150.809625][ T7326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.819952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.027751][ T7304] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 151.052016][ T7304] vlan0: left promiscuous mode [ 151.088621][ T7304] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 151.382316][ T7340] netlink: 68 bytes leftover after parsing attributes in process `syz.0.357'. [ 151.568936][ T7346] netlink: 60 bytes leftover after parsing attributes in process `syz.0.357'. [ 153.355181][ T7311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.561077][ T24] net_ratelimit: 6 callbacks suppressed [ 153.561097][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.569236][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 153.592427][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 153.640745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.768035][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.365'. [ 153.964455][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 154.214175][ T7416] netlink: 'syz.1.368': attribute type 2 has an invalid length. [ 154.272956][ T7416] : entered promiscuous mode [ 154.600596][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.621260][ T7438] lo: Caught tx_queue_len zero misconfig [ 154.680119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.970370][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 155.030486][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 155.088968][ T7451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.374'. [ 155.155242][ T7457] geneve2: entered promiscuous mode [ 155.249800][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.626982][ T7476] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.640373][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.894673][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.089145][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 156.204481][ T1146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.417512][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'. [ 156.681648][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.786303][ T7527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.392'. [ 156.797154][ T7526] netlink: 40 bytes leftover after parsing attributes in process `syz.4.392'. [ 157.071470][ T7542] No such timeout policy "syz0" [ 157.157212][ T7545] netlink: 'syz.4.396': attribute type 1 has an invalid length. [ 157.309801][ T7553] dvmrp1: entered allmulticast mode [ 157.472247][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 157.536637][ T7561] netlink: 'syz.2.401': attribute type 1 has an invalid length. [ 157.993194][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056e18000: rx timeout, send abort [ 158.212325][ T7577] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.504518][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056e18000: abort rx timeout. Force session deactivation [ 158.538573][ T7595] bridge3: entered allmulticast mode [ 158.568773][ T7595] netlink: 160 bytes leftover after parsing attributes in process `syz.3.409'. [ 158.634209][ T7595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.409'. [ 158.765898][ T24] net_ratelimit: 4 callbacks suppressed [ 158.765919][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.925215][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.967941][ T7613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.412'. [ 159.074379][ T7613] hsr_slave_1 (unregistering): left promiscuous mode [ 159.240622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.268804][ T7621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.320493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.407835][ T7628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.493486][ T7638] netlink: 48 bytes leftover after parsing attributes in process `syz.1.415'. [ 159.559143][ T5273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.586760][ T7638] block nbd0: not configured, cannot reconfigure [ 159.800391][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.106501][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 160.164249][ T7663] netlink: 'syz.3.422': attribute type 10 has an invalid length. [ 160.219699][ T7663] netlink: 'syz.3.422': attribute type 8 has an invalid length. [ 160.288513][ T7663] netlink: 'syz.3.422': attribute type 1 has an invalid length. [ 160.360147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.461665][ T7675] x_tables: duplicate underflow at hook 1 [ 160.669213][ T7685] tipc: Enabled bearer , priority 0 [ 160.840611][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.881829][ T7685] syzkaller0: entered promiscuous mode [ 160.890429][ T7685] syzkaller0: entered allmulticast mode [ 160.897652][ T7685] tipc: Resetting bearer [ 160.930254][ T7697] tipc: Enabling of bearer rejected, media not registered [ 161.012967][ T7690] tipc: Resetting bearer [ 161.400208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.717449][ T7716] __nla_validate_parse: 4 callbacks suppressed [ 161.717469][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 161.880411][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.964888][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.422627][ T7690] tipc: Disabling bearer [ 163.436460][ T7714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.438'. [ 163.446954][ T7714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.438'. [ 163.457607][ T5731] tipc: Node number set to 2130706433 [ 163.679894][ T7731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.441'. [ 163.684152][ T7737] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 163.708967][ T7736] netlink: 'syz.1.444': attribute type 16 has an invalid length. [ 163.735872][ T7736] netlink: 'syz.1.444': attribute type 30 has an invalid length. [ 163.768038][ T7736] netlink: 'syz.1.444': attribute type 1 has an invalid length. [ 163.805095][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'. [ 163.925363][ T7751] netlink: 'syz.0.447': attribute type 2 has an invalid length. [ 163.961551][ T24] net_ratelimit: 4 callbacks suppressed [ 163.961570][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.995658][ T7755] netlink: 'syz.0.447': attribute type 2 has an invalid length. [ 164.029050][ T5625] block nbd0: Receive control failed (result -32) [ 164.037951][ T5612] block nbd0: Receive control failed (result -32) [ 164.087979][ T7757] syzkaller1: entered promiscuous mode [ 164.107666][ T7757] syzkaller1: entered allmulticast mode [ 164.181921][ T7761] syzkaller0: entered promiscuous mode [ 164.188229][ T7761] syzkaller0: entered allmulticast mode [ 164.246374][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 164.503848][ T7757] netlink: 'syz.4.448': attribute type 4 has an invalid length. [ 164.520752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.004719][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.013744][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.561285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.043591][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.229079][ T7768] kthread_run failed with err -4 [ 166.524668][ T7779] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 166.600135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.806836][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 166.831653][ T7792] netlink: 72 bytes leftover after parsing attributes in process `syz.2.458'. [ 167.080573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.095092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.158824][ T7794] syzkaller0: entered promiscuous mode [ 167.166954][ T7794] syzkaller0: entered allmulticast mode [ 167.271407][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 167.282191][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 167.487401][ T7814] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 167.745078][ T7815] netlink: 36 bytes leftover after parsing attributes in process `syz.1.467'. [ 168.025502][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 168.474781][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 169.016429][ T7886] netlink: 'syz.2.480': attribute type 6 has an invalid length. [ 169.164780][ T29] net_ratelimit: 6 callbacks suppressed [ 169.164800][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.241810][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.252601][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.342681][ T7898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.481'. [ 169.370553][ T7892] bridge0: entered allmulticast mode [ 169.425951][ T7896] bridge_slave_1: left allmulticast mode [ 169.471513][ T7896] bridge_slave_1: left promiscuous mode [ 169.485632][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.481'. [ 169.494442][ T7896] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.631825][ T7896] bridge_slave_0: left allmulticast mode [ 169.654031][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.486'. [ 169.675320][ T7896] bridge_slave_0: left promiscuous mode [ 169.720159][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.749287][ T7896] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.201268][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.515517][ T7938] sctp: [Deprecated]: syz.0.493 (pid 7938) Use of int in max_burst socket option deprecated. [ 170.515517][ T7938] Use struct sctp_assoc_value instead [ 170.760221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.080338][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.241952][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.282246][ T7941] FAULT_INJECTION: forcing a failure. [ 171.282246][ T7941] name failslab, interval 1, probability 0, space 0, times 1 [ 171.296475][ T7941] CPU: 1 UID: 0 PID: 7941 Comm: syz.4.494 Not tainted syzkaller #0 PREEMPT(full) [ 171.296502][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.296513][ T7941] Call Trace: [ 171.296520][ T7941] [ 171.296528][ T7941] dump_stack_lvl+0xe8/0x150 [ 171.296562][ T7941] should_fail_ex+0x410/0x560 [ 171.296598][ T7941] should_failslab+0xa8/0x100 [ 171.296627][ T7941] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 171.296649][ T7941] ? local_lock_release+0x9c/0x160 [ 171.296675][ T7941] ? __alloc_skb+0x1db/0x7a0 [ 171.296698][ T7941] ? __alloc_skb+0x1db/0x7a0 [ 171.296741][ T7941] __alloc_skb+0x1db/0x7a0 [ 171.296770][ T7941] alloc_skb_with_frags+0xc6/0x760 [ 171.296810][ T7941] tls_decrypt_sg+0x3e8/0x3110 [ 171.296862][ T7941] ? __asan_memcpy+0x40/0x70 [ 171.296882][ T7941] ? skb_copy_header+0x2e/0x2c0 [ 171.296911][ T7941] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 171.296938][ T7941] ? skb_copy_header+0x2e/0x2c0 [ 171.296966][ T7941] ? tls_strp_load_anchor_with_queue+0x1ea/0x380 [ 171.296996][ T7941] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 171.297032][ T7941] ? do_raw_spin_lock+0x12b/0x2f0 [ 171.297055][ T7941] ? __pfx__copy_to_iter+0x10/0x10 [ 171.297083][ T7941] ? tls_strp_msg_load+0x36c/0x7c0 [ 171.297105][ T7941] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 171.297133][ T7941] ? tls_rx_rec_wait+0x97e/0xaa0 [ 171.297166][ T7941] tls_rx_one_record+0x209/0x1950 [ 171.297206][ T7941] ? __pfx_tls_rx_rec_wait+0x10/0x10 [ 171.297234][ T7941] ? __pfx_tls_rx_one_record+0x10/0x10 [ 171.297279][ T7941] tls_sw_recvmsg+0x885/0x1420 [ 171.297335][ T7941] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 171.297364][ T7941] ? __fget_files+0x2a/0x420 [ 171.297389][ T7941] ? aa_sock_msg_perm+0xf6/0x1c0 [ 171.297419][ T7941] ? inet6_recvmsg+0x10a/0x490 [ 171.297440][ T7941] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 171.297457][ T7941] ? security_socket_recvmsg+0x7e/0x2c0 [ 171.297480][ T7941] ? __pfx_inet6_recvmsg+0x10/0x10 [ 171.297499][ T7941] sock_recvmsg+0xfa/0x1e0 [ 171.297523][ T7941] __sys_recvfrom+0x231/0x3a0 [ 171.297545][ T7941] ? ksys_write+0x1e6/0x270 [ 171.297572][ T7941] ? __pfx___sys_recvfrom+0x10/0x10 [ 171.297592][ T7941] ? __mutex_unlock_slowpath+0x731/0x900 [ 171.297647][ T7941] ? __pfx_ksys_write+0x10/0x10 [ 171.297676][ T7941] __x64_sys_recvfrom+0xde/0x100 [ 171.297702][ T7941] do_syscall_64+0x166/0x520 [ 171.297727][ T7941] ? trace_irq_disable+0x3b/0x140 [ 171.297748][ T7941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.297768][ T7941] ? clear_bhb_loop+0x70/0xc0 [ 171.297793][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.297811][ T7941] RIP: 0033:0x7f7d6eb9e0d9 [ 171.297830][ T7941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.297845][ T7941] RSP: 002b:00007f7d6fb32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 171.297867][ T7941] RAX: ffffffffffffffda RBX: 00007f7d6ee25fa0 RCX: 00007f7d6eb9e0d9 [ 171.297880][ T7941] RDX: fffffffffffffdab RSI: 0000200000002800 RDI: 0000000000000003 [ 171.297891][ T7941] RBP: 00007f7d6fb32090 R08: 0000000000000000 R09: 0000000000000000 [ 171.297900][ T7941] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000001 [ 171.297910][ T7941] R13: 00007f7d6ee26038 R14: 00007f7d6ee25fa0 R15: 00007ffecd600a98 [ 171.297938][ T7941] [ 171.865171][ T7954] syz.2.498 (7954) used greatest stack depth: 17312 bytes left [ 172.108298][ T7981] netlink: 'syz.3.503': attribute type 26 has an invalid length. [ 172.127446][ T1146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.201414][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.282629][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.515743][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'. [ 172.525416][ T8001] netlink: 59 bytes leftover after parsing attributes in process `syz.1.509'. [ 172.538142][ T8001] smc: net device lo applied user defined pnetid SYZ0 [ 173.058949][ T8021] netlink: 112 bytes leftover after parsing attributes in process `syz.1.515'. [ 173.094182][ T8021] netlink: 56 bytes leftover after parsing attributes in process `syz.1.515'. [ 173.149862][ T8025] netlink: 68 bytes leftover after parsing attributes in process `syz.4.516'. [ 173.160677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.169064][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.517'. [ 173.184095][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.517'. [ 173.610694][ T8044] ipip0: entered promiscuous mode [ 173.623247][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.520'. [ 173.649809][ T8044] pimreg: entered allmulticast mode [ 173.657756][ T8044] pimreg: left allmulticast mode [ 173.692396][ T8051] sctp: [Deprecated]: syz.0.522 (pid 8051) Use of int in max_burst socket option. [ 173.692396][ T8051] Use struct sctp_assoc_value instead [ 174.047514][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 174.200198][ C0] net_ratelimit: 1 callbacks suppressed [ 174.200219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.367226][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.414259][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a969800: rx timeout, send abort [ 174.423672][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a969800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 174.659717][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 174.787184][ T8102] netlink: 'syz.3.533': attribute type 1 has an invalid length. [ 174.898400][ T8102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.945552][ T8112] tipc: Enabling of bearer rejected, failed to enable media [ 175.191695][ T8125] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.201348][ T8121] netlink: 'syz.1.537': attribute type 1 has an invalid length. [ 175.240406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.285986][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.403410][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.555826][ T8141] netlink: 'syz.4.543': attribute type 9 has an invalid length. [ 175.697243][ T8141] erspan0: entered promiscuous mode [ 175.832842][ T8141] macvlan3: entered promiscuous mode [ 175.839066][ T8141] macvlan3: entered allmulticast mode [ 175.845664][ T8141] erspan0: entered allmulticast mode [ 176.177359][ T8164] bridge0: port 3(batadv1) entered blocking state [ 176.202418][ T8164] bridge0: port 3(batadv1) entered disabled state [ 176.235329][ T8164] batadv1: entered allmulticast mode [ 176.251052][ T8164] batadv1: entered promiscuous mode [ 176.280230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.297618][ T8170] bond0: (slave bond_slave_1): Releasing backup interface [ 176.440342][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.664204][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 176.674363][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 176.685029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.685300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.685496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.881932][ T8191] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 176.910423][ T8191] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 177.632984][ T8214] __nla_validate_parse: 10 callbacks suppressed [ 177.633003][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.563'. [ 177.661836][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.563'. [ 178.349698][ T8247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.570'. [ 178.422948][ T8245] netlink: 60 bytes leftover after parsing attributes in process `syz.2.571'. [ 178.496229][ T8245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.571'. [ 178.514304][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 179.245257][ T8274] syzkaller1: entered promiscuous mode [ 179.251695][ T8274] syzkaller1: entered allmulticast mode [ 179.403123][ C0] net_ratelimit: 5 callbacks suppressed [ 179.403145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.560671][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.637898][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 179.653173][ T8293] openvswitch: netlink: Flow actions attr not present in new flow. [ 179.683344][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 179.708189][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 179.736733][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 179.750532][ T1146] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.773046][ T1146] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.806953][ T1146] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.990148][ T148] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.097616][ T8305] netdevsim netdevsim3 €Â: renamed from netdevsim0 (while UP) [ 180.440206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.602192][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.480479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.490801][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.640692][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.007595][ T8285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.422629][ T8336] netlink: 'syz.4.589': attribute type 1 has an invalid length. [ 182.525263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.686091][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.854533][ T8360] __nla_validate_parse: 3 callbacks suppressed [ 182.854554][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 183.055301][ T8374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.596'. [ 183.088703][ T8366] netlink: 'syz.1.598': attribute type 4 has an invalid length. [ 183.110950][ T8366] netlink: 17 bytes leftover after parsing attributes in process `syz.1.598'. [ 183.127903][ T8374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.596'. [ 183.449079][ T8385] xt_CT: No such helper "snmp_trap" [ 183.454468][ T8393] netlink: 'syz.3.603': attribute type 15 has an invalid length. [ 183.469475][ T8392] ip6tnl1: entered allmulticast mode [ 183.479859][ T8393] netlink: 666 bytes leftover after parsing attributes in process `syz.3.603'. [ 184.067256][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 184.231882][ T8418] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.240739][ T8418] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.403044][ T8418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.426873][ T8418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.522083][ T10] net_ratelimit: 3 callbacks suppressed [ 184.522104][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.600783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.697813][ T8403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.723352][ T8403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.842177][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.952001][ T1146] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.961043][ T1146] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.973631][ T8438] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 185.023767][ T1146] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.112566][ T1146] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.133085][ T1146] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.150159][ T1146] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.421320][ T1146] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.434625][ T1146] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.641446][ T8468] netlink: 11 bytes leftover after parsing attributes in process `syz.3.622'. [ 185.651536][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.880391][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.335262][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.623'. [ 186.432431][ T8450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.533192][ T8472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.623'. [ 186.609760][ T8450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.654545][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 186.680127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.855181][ T8450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.921676][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.025542][ T8486] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000 [ 187.026369][ T8450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.561222][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.620278][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.669539][ T8517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.770320][ T1146] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.930674][ T1146] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.963343][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.973999][ T63] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.506593][ T8536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.849825][ T8570] __nla_validate_parse: 7 callbacks suppressed [ 188.849849][ T8570] netlink: 44 bytes leftover after parsing attributes in process `syz.1.647'. [ 189.185416][ T8536] bridge3: left allmulticast mode [ 189.203646][ T8536] syzkaller0: left promiscuous mode [ 189.216120][ T8536] syzkaller0: left allmulticast mode [ 189.236252][ T8536] ip6tnl1: left allmulticast mode [ 189.250593][ T148] netdevsim netdevsim3 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.280230][ T148] netdevsim netdevsim3 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.410405][ T8570] team0: Port device syz_tun added [ 189.450958][ T148] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.478614][ T148] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.508803][ T148] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.553340][ T148] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.642855][ T1146] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.686483][ T1146] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.043826][ T29] net_ratelimit: 3 callbacks suppressed [ 190.043847][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.152987][ T8599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.654'. [ 190.175639][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 190.249186][ T8609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.656'. [ 190.280203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.339167][ T8612] syz_tun: entered allmulticast mode [ 190.375920][ T8605] syz_tun: left allmulticast mode [ 190.601448][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.796309][ T8625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.895573][ T8625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.077718][ T8642] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.662'. [ 191.090191][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.119855][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 191.148234][ T8640] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.662'. [ 191.320343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.399310][ T8659] netlink: 68 bytes leftover after parsing attributes in process `syz.1.667'. [ 191.699870][ T8671] netlink: 'syz.1.668': attribute type 13 has an invalid length. [ 191.885313][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 191.919894][ T10] hid-generic 0005:07C0:5505.0001: item fetching failed at offset 0/1 [ 191.944905][ T10] hid-generic 0005:07C0:5505.0001: probe with driver hid-generic failed with error -22 [ 191.985237][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 192.116403][ T8693] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 192.128794][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.360147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.581845][ T8714] ipvlan0: Caught tx_queue_len zero misconfig [ 192.746415][ T8718] nbd1: detected capacity change from 0 to 63 [ 192.855263][ T5625] block nbd1: Receive control failed (result -104) [ 193.094614][ T8735] bond4: ARP target 9.0.0.0 is already present [ 193.115411][ T8735] bond4: option arp_ip_target: invalid value (9) [ 193.149920][ T8735] bond4 (unregistering): Released all slaves [ 193.162112][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.235244][ T8744] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 193.400219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.648893][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.836896][ T8758] syzkaller1: entered promiscuous mode [ 193.905198][ T8758] syzkaller1: entered allmulticast mode [ 194.051451][ T63] IPVS: starting estimator thread 0... [ 194.154360][ T8780] IPVS: using max 30 ests per chain, 72000 per kthread [ 194.341778][ T8794] __nla_validate_parse: 4 callbacks suppressed [ 194.341800][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 194.384864][ T8791] netlink: 666 bytes leftover after parsing attributes in process `syz.3.701'. [ 194.547009][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 194.603495][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.610272][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.627441][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 194.660557][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'. [ 195.160611][ T8831] sctp: [Deprecated]: syz.1.711 (pid 8831) Use of int in max_burst socket option. [ 195.160611][ T8831] Use struct sctp_assoc_value instead [ 195.240891][ T5745] net_ratelimit: 5 callbacks suppressed [ 195.240913][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.480182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.571471][ T8853] netlink: 68 bytes leftover after parsing attributes in process `syz.2.718'. [ 195.687139][ T8859] lo: Caught tx_queue_len zero misconfig [ 195.690342][ T8853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.720509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.285297][ T8864] bridge_slave_0: left allmulticast mode [ 196.294013][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.333013][ T8864] bridge_slave_0: left promiscuous mode [ 196.354434][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.409060][ T8864] bridge_slave_1: left promiscuous mode [ 196.439127][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.482816][ T8877] sctp: [Deprecated]: syz.2.724 (pid 8877) Use of int in max_burst socket option. [ 196.482816][ T8877] Use struct sctp_assoc_value instead [ 196.520391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.569564][ T8864] bond0: (slave bond_slave_0): Releasing backup interface [ 196.681726][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.697980][ T8864] bond0: (slave bond_slave_1): Releasing backup interface [ 196.790553][ T8864] team0: Port device team_slave_1 removed [ 196.812987][ T8864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.825008][ T8864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.836542][ T8864] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.277174][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 197.327291][ T8898] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 197.387577][ T8898] netlink: 1 bytes leftover after parsing attributes in process `syz.0.729'. [ 197.712546][ T8923] SET target dimension over the limit! [ 198.122109][ T8940] netlink: 'syz.1.743': attribute type 8 has an invalid length. [ 198.190357][ T8944] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.743'. [ 198.259712][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 198.669775][ T8972] nbd: must specify at least one socket [ 199.346850][ T8996] netlink: 'syz.2.756': attribute type 1 has an invalid length. [ 199.429677][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 199.528996][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 199.537986][ T8996] bond2: entered promiscuous mode [ 199.570340][ T8996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.678699][ T9006] bond2: (slave bridge0): making interface the new active one [ 199.704822][ T9006] bridge0: entered promiscuous mode [ 199.715130][ T9006] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 200.239021][ T9030] C: renamed from veth1_to_team (while UP) [ 200.292372][ T9030] netlink: 'syz.1.762': attribute type 1 has an invalid length. [ 200.376066][ T9030] netlink: 128 bytes leftover after parsing attributes in process `syz.1.762'. [ 200.385979][ T9037] x_tables: duplicate underflow at hook 4 [ 200.428504][ T9030] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 200.580666][ T9046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.765'. [ 200.749961][ T9055] netlink: 'syz.2.767': attribute type 1 has an invalid length. [ 200.838400][ T9055] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.893534][ T9064] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 201.219733][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 201.693896][ T9093] syzkaller1: entered promiscuous mode [ 201.705975][ T9093] syzkaller1: entered allmulticast mode [ 201.879833][ T9096] block nbd2: server does not support multiple connections per device. [ 201.950797][ T9096] block nbd2: shutting down sockets [ 202.453318][ T9113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.779'. [ 202.500624][ T9113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.779'. [ 202.539248][ T9114] netlink: 'syz.4.779': attribute type 25 has an invalid length. [ 202.554530][ T9118] netlink: 'syz.4.779': attribute type 25 has an invalid length. [ 203.067132][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 203.078831][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'. [ 203.292146][ T9153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.788'. [ 204.282158][ T9201] tipc: Started in network mode [ 204.287230][ T9201] tipc: Node identity cafe7c8f7404, cluster identity 4711 [ 204.297007][ T9201] tipc: Enabled bearer , priority 0 [ 204.536669][ T30] audit: type=1800 audit(1787346606.363:6): pid=9208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.802" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=909 res=0 errno=0 [ 204.686754][ T9212] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 204.795192][ T9220] syzkaller0: entered promiscuous mode [ 204.801376][ T9220] syzkaller0: entered allmulticast mode [ 204.813243][ T9221] __nla_validate_parse: 6 callbacks suppressed [ 204.813263][ T9221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.806'. [ 204.887067][ T9225] netlink: 'syz.4.806': attribute type 30 has an invalid length. [ 205.290209][ T5731] tipc: Node number set to 3204086927 [ 205.694231][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.815'. [ 205.817913][ T9258] macvlan0: entered promiscuous mode [ 205.855591][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 205.888335][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.817'. [ 205.913120][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 205.921131][ T9267] syzkaller1: entered promiscuous mode [ 205.932810][ T9264] netlink: 112 bytes leftover after parsing attributes in process `syz.2.819'. [ 205.940303][ T9267] syzkaller1: entered allmulticast mode [ 205.992341][ T9265] ip6gre1: entered promiscuous mode [ 206.008800][ T9272] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.023951][ T9265] ip6gre1: entered allmulticast mode [ 206.053291][ T9267] batadv_slave_1: entered promiscuous mode [ 206.069528][ T9266] batadv_slave_1: left promiscuous mode [ 206.235587][ T9281] No such timeout policy "syz1" [ 206.271592][ T63] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.291058][ T63] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.302633][ T5710] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.505821][ T9306] netlink: 'syz.3.826': attribute type 12 has an invalid length. [ 206.520365][ T5710] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.534183][ T9293] block nbd2: server does not support multiple connections per device. [ 206.575887][ T9293] block nbd2: shutting down sockets [ 206.945511][ T9323] netlink: 208 bytes leftover after parsing attributes in process `syz.0.830'. [ 207.023896][ T9323] bond2: option ad_select: invalid value (34) [ 207.040459][ T9323] bond2 (unregistering): Released all slaves [ 207.243525][ T5710] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.267774][ T9333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.833'. [ 207.323820][ T9334] netlink: 248 bytes leftover after parsing attributes in process `syz.1.832'. [ 207.326035][ T9342] openvswitch: netlink: Unknown key attributes 2 [ 207.343428][ T9333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.833'. [ 207.987580][ T9366] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 208.099230][ T9366] bond4: entered promiscuous mode [ 208.119745][ T9366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.174920][ T9368] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.185255][ T9368] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 208.198192][ T9368] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 208.238177][ T9368] bond4: (slave gre1): making interface the new active one [ 208.247233][ T9368] gre1: entered promiscuous mode [ 208.255301][ T9368] bond4: (slave gre1): Enslaving as an active interface with an up link [ 208.979705][ T9371] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 209.015546][ T9375] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 209.177211][ T9402] bridge0: port 4(gretap0) entered blocking state [ 209.203627][ T9402] bridge0: port 4(gretap0) entered disabled state [ 209.225597][ T9402] gretap0: entered allmulticast mode [ 209.243700][ T9402] gretap0: entered promiscuous mode [ 209.249275][ T9409] netlink: 'syz.3.855': attribute type 16 has an invalid length. [ 209.259363][ T9402] bridge0: port 4(gretap0) entered blocking state [ 209.262891][ T9409] netlink: 'syz.3.855': attribute type 17 has an invalid length. [ 209.266068][ T9402] bridge0: port 4(gretap0) entered forwarding state [ 209.400450][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.722013][ T9421] bond2: option downdelay: invalid value (18446744073709551487) [ 209.753168][ T9421] bond2: option downdelay: allowed values 0 - 2147483647 [ 209.783677][ T9421] bond2 (unregistering): Released all slaves [ 209.829149][ T9423] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 209.846750][ T9441] sctp: [Deprecated]: syz.1.862 (pid 9441) Use of int in maxseg socket option. [ 209.846750][ T9441] Use struct sctp_assoc_value instead [ 210.238188][ T9452] __nla_validate_parse: 7 callbacks suppressed [ 210.238211][ T9452] netlink: 88 bytes leftover after parsing attributes in process `syz.4.864'. [ 210.290675][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.292607][ T9453] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 210.372156][ T9455] netlink: 'syz.1.865': attribute type 1 has an invalid length. [ 210.520550][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.715513][ T9455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.229424][ T9467] can: request_module (can-proto-0) failed. [ 211.815833][ T9492] tipc: Enabled bearer , priority 0 [ 211.883155][ T9492] syzkaller0: entered promiscuous mode [ 211.916078][ T9492] syzkaller0: entered allmulticast mode [ 211.944636][ T9497] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 211.979749][ T9502] netlink: 'syz.3.875': attribute type 1 has an invalid length. [ 212.020415][ T9507] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 212.050216][ T5610] Bluetooth: hci1: command 0x0406 tx timeout [ 212.050282][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.056594][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 212.108710][ T9502] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.117880][ T9497] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 212.133576][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'. [ 212.185890][ T9509] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 212.188429][ T9506] netlink: 'syz.4.877': attribute type 1 has an invalid length. [ 212.197074][ T9492] tipc: Resetting bearer [ 212.221038][ T1146] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 212.271950][ T9510] netlink: 64 bytes leftover after parsing attributes in process `syz.4.877'. [ 212.347387][ T1146] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 212.380393][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 212.397773][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 212.419267][ T9519] xt_TCPMSS: Only works on TCP SYN packets [ 212.426773][ T9506] bond2: entered promiscuous mode [ 212.435833][ T9506] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.448196][ T9489] tipc: Resetting bearer [ 212.480536][ T9489] tipc: Disabling bearer [ 212.528506][ T9524] netlink: 'syz.1.881': attribute type 1 has an invalid length. [ 212.559542][ T9524] netlink: 'syz.1.881': attribute type 2 has an invalid length. [ 212.951114][ T9536] netlink: 'syz.4.884': attribute type 1 has an invalid length. [ 212.967575][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.886'. [ 212.976222][ T9536] netlink: 240 bytes leftover after parsing attributes in process `syz.4.884'. [ 212.999877][ T9535] netlink: 48 bytes leftover after parsing attributes in process `syz.1.885'. [ 213.010636][ T9536] netlink: 'syz.4.884': attribute type 1 has an invalid length. [ 213.036570][ T9533] syzkaller0: entered promiscuous mode [ 213.080696][ T9533] syzkaller0: entered allmulticast mode [ 213.235218][ T9531] syzkaller0: entered promiscuous mode [ 213.254847][ T9531] syzkaller0: entered allmulticast mode [ 213.442886][ T9553] macvtap1: entered promiscuous mode [ 213.458646][ T9553] batadv0: entered promiscuous mode [ 213.471946][ T9553] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 213.493937][ T9553] batadv0: left promiscuous mode [ 213.674406][ T9563] syzkaller0: entered allmulticast mode [ 213.874553][ T9561] bond3 (unregistering): Released all slaves [ 214.378836][ T9583] IPVS: length: 161 != 8 [ 216.864498][ T9573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.964160][ T9638] xt_hashlimit: overflow, try lower: 0/0 [ 218.265888][ T9656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.912'. [ 218.317173][ T9656] netlink: 60 bytes leftover after parsing attributes in process `syz.4.912'. [ 218.365508][ T9654] netlink: 'syz.3.916': attribute type 2 has an invalid length. [ 218.904031][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'. [ 219.051323][ T9694] netlink: 'syz.0.927': attribute type 1 has an invalid length. [ 219.068119][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'. [ 219.112565][ T9689] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 219.124645][ T9689] bond3 (unregistering): Released all slaves [ 219.211321][ T9694] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.236720][ T9694] bond0: (slave batadv0): Releasing backup interface [ 219.301763][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 219.320283][ T9694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.368366][ T9694] bond2: (slave batadv0): making interface the new active one [ 219.385655][ T9694] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 219.463067][ T9710] netlink: 'syz.3.931': attribute type 4 has an invalid length. [ 219.483611][ T9712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.522936][ T9710] netlink: 'syz.3.931': attribute type 4 has an invalid length. [ 219.560249][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.635229][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 220.074604][ T9728] IPVS: Unknown mcast interface: netdevsim0 [ 220.400171][ T9751] sock: sock_timestamping_bind_phc: sock not bind to device [ 220.506525][ T9755] netlink: 'syz.1.944': attribute type 3 has an invalid length. [ 220.839624][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'. [ 220.860769][ T9778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.948'. [ 221.183588][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 221.238428][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 221.396927][ T9798] netlink: 'syz.1.956': attribute type 1 has an invalid length. [ 222.301911][ T9847] macvlan0: left promiscuous mode [ 222.518105][ T9820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.777839][ T9862] syzkaller0: entered promiscuous mode [ 222.783754][ T9858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.794598][ T9862] syzkaller0: entered allmulticast mode [ 222.834290][ T9863] IPVS: length: 24 != 74559605208 [ 223.141734][ T9875] netlink: 'syz.3.975': attribute type 4 has an invalid length. [ 223.174119][ T9871] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 223.254855][ T9877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.276945][ T9879] netlink: 'syz.2.978': attribute type 2 has an invalid length. [ 223.403353][ T1633] block nbd1: Possible stuck request ffff888027de0000: control (read@0,1024B). Runtime 30 seconds [ 223.419461][ T1633] block nbd1: Possible stuck request ffff888027de01c0: control (read@1024,3072B). Runtime 30 seconds [ 223.607072][ T9894] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 223.689666][ T9895] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 223.850825][ T9911] __nla_validate_parse: 13 callbacks suppressed [ 223.850845][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.985'. [ 224.123807][ T9921] netlink: 40 bytes leftover after parsing attributes in process `syz.2.989'. [ 224.181368][ T9927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.989'. [ 224.203846][ T9920] syzkaller0: entered promiscuous mode [ 224.213130][ T9920] syzkaller0: entered allmulticast mode [ 224.434912][ T9939] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 224.528778][ T9942] netlink: 56 bytes leftover after parsing attributes in process `syz.2.996'. [ 224.803497][ T9962] ip6erspan1: entered allmulticast mode [ 224.863742][ T9965] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 225.010813][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 225.020903][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 225.034388][ T9972] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1003'. [ 225.046642][ T9972] netlink: 110 bytes leftover after parsing attributes in process `syz.3.1003'. [ 225.058180][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 225.073919][ T9972] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1003'. [ 228.502863][T10010] netlink: 'syz.4.1013': attribute type 15 has an invalid length. [ 228.560373][T10019] netlink: 'syz.4.1013': attribute type 11 has an invalid length. [ 228.576212][T10015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.661088][ T148] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.777320][T10019] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 228.807582][T10019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.855568][T10019] 8021q: adding VLAN 0 to HW filter on device eth0 [ 228.892873][T10019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 228.937622][T10019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 228.998993][T10019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 229.081933][T10052] Bluetooth: ISO socket layer initialized [ 229.118394][T10045] __nla_validate_parse: 5 callbacks suppressed [ 229.118416][T10045] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1021'. [ 229.156124][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1023'. [ 229.174206][T10045] bridge0: port 4(gretap0) entered disabled state [ 229.210823][ T967] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.421283][T10055] ipvlan1: entered allmulticast mode [ 229.426758][T10055] syz_tun: entered allmulticast mode [ 229.475473][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 229.508037][T10069] dvmrp1 (unregistering): left allmulticast mode [ 229.571660][ T1169] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.572451][ T30] audit: type=1107 audit(1787346631.393:7): pid=10064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='›õrw9z~  ~ÝgúK*Fç ‚XŸ×)Ñá`ô(g®h­#áþIa, priority 0 [ 236.599658][T10344] 8021q: VLANs not supported on syzkaller0 [ 236.636731][T10338] tipc: Resetting bearer [ 236.664978][T10337] tipc: Resetting bearer [ 236.715053][T10337] tipc: Disabling bearer [ 236.731863][T10347] batadv_slave_0: Caught tx_queue_len zero misconfig [ 236.732663][T10351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1110'. [ 236.754750][T10351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1110'. [ 236.802723][T10349] blkio.reset_stats is deprecated [ 236.840541][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.931754][T10349] syzkaller0: entered promiscuous mode [ 236.949277][T10349] syzkaller0: entered allmulticast mode [ 237.098692][T10375] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1112'. [ 237.293164][ T30] audit: type=1804 audit(1787346639.103:8): pid=10369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1112" name="/newroot/214/memory.events" dev="tmpfs" ino=1125 res=1 errno=0 [ 237.502471][T10389] xt_limit: Overflow, try lower: 0/0 [ 237.533654][T10349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 237.852578][T10398] netlink: Unknown nat attribute (0) [ 237.860762][T10398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.962201][T10403] netpci0: tun_chr_ioctl cmd 1074025678 [ 237.968028][T10403] netpci0: group set to 0 [ 237.973733][T10403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1121'. [ 238.462633][T10421] ip6gre0: Caught tx_queue_len zero misconfig [ 238.825092][T10441] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 238.878902][T10443] bond0: Caught tx_queue_len zero misconfig [ 238.902956][T10442] syzkaller0: entered promiscuous mode [ 238.919425][T10442] syzkaller0: entered allmulticast mode [ 238.978646][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 239.117708][ T967] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 239.164638][T10451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.193357][T10463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1137'. [ 239.307404][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 239.547981][T10471] netlink: 'syz.1.1142': attribute type 2 has an invalid length. [ 239.660590][ T148] batman_adv: batadv1: IGMP Querier appeared [ 239.663782][T10471] ¿: entered promiscuous mode [ 239.666660][ T148] batman_adv: batadv1: MLD Querier appeared [ 239.955311][T10487] __nla_validate_parse: 4 callbacks suppressed [ 239.955331][T10487] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1144'. [ 240.055002][T10490] netlink: 'syz.0.1146': attribute type 1 has an invalid length. [ 240.094285][T10490] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1146'. [ 240.134137][T10490] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1146'. [ 240.724864][T10508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1150'. [ 240.746603][T10523] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1152'. [ 240.990566][T10534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1157'. [ 241.016159][T10539] syzkaller0: entered promiscuous mode [ 241.023571][T10539] syzkaller0: entered allmulticast mode [ 241.242150][T10546] netlink: 'syz.3.1160': attribute type 3 has an invalid length. [ 241.261750][T10546] xt_l2tp: v2 sid > 0xffff: 33554432 [ 241.263457][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1162'. [ 241.278548][T10548] ip6tnl0: Caught tx_queue_len zero misconfig [ 241.315975][T10542] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1159'. [ 241.541915][T10554] netlink: 'syz.1.1164': attribute type 1 has an invalid length. [ 241.733889][T10554] bond5: entered promiscuous mode [ 241.739715][T10554] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.446916][T10596] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1173'. [ 242.809570][T10608] IPVS: Scheduler module ip_vs_sip not found [ 242.886531][T10619] openvswitch: netlink: Message has 1 unknown bytes. [ 242.929695][T10619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.101530][T10629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1181'. [ 243.109123][T10633] bridge_slave_1: Caught tx_queue_len zero misconfig [ 243.153521][T10635] netlink: 'syz.3.1183': attribute type 9 has an invalid length. [ 243.154634][T10632] block nbd0: NBD_DISCONNECT [ 243.195982][T10632] block nbd0: Send disconnect failed -32 [ 243.217939][T10635] bridge5: entered promiscuous mode [ 243.254535][T10632] block nbd0: Send disconnect failed -32 [ 243.276518][T10632] block nbd0: shutting down sockets [ 244.026823][T10655] set match dimension is over the limit! [ 244.416871][T10691] netlink: 'syz.1.1197': attribute type 142 has an invalid length. [ 244.769194][ T148] nci: nci_ntf_packet: unsupported ntf opcode 0xf0b [ 244.851533][T10714] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 245.047706][T10727] netlink: 'syz.0.1206': attribute type 1 has an invalid length. [ 245.146743][T10727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.187547][T10732] netlink: 'syz.1.1207': attribute type 4 has an invalid length. [ 245.202031][T10729] bond4: (slave erspan0): making interface the new active one [ 245.218232][T10729] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 245.373081][T10735] __nla_validate_parse: 5 callbacks suppressed [ 245.373098][T10735] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1208'. [ 245.466686][T10705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.817667][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'. [ 245.855423][T10754] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 245.855423][T10754] Please contact the netfilter-devel mailing list or update your nftables rules. [ 245.926857][T10765] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 246.000975][T10755] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1214'. [ 246.101755][T10765] vxcan2: entered promiscuous mode [ 246.283414][T10780] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1222'. [ 246.338561][T10786] No such timeout policy "syz1" [ 246.402286][T10791] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1226'. [ 246.411512][T10791] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1226'. [ 246.485028][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 246.557044][T10798] netlink: 436 bytes leftover after parsing attributes in process `syz.3.1229'. [ 246.724576][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 247.137202][T10826] tipc: Enabled bearer , priority 30 [ 247.643438][T10841] team0: Port device veth5 added [ 248.250153][ T5738] tipc: Node number set to 99195487 [ 248.349575][T10840] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1243'. [ 248.939291][T10866] xfrm0: entered allmulticast mode [ 248.968361][T10866] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 249.308798][T10877] netlink: 'syz.4.1252': attribute type 4 has an invalid length. [ 249.513017][T10886] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.912085][T10913] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 250.470507][T10944] xt_hl: Unknown TTL match mode: 237 [ 250.974025][T10965] __nla_validate_parse: 6 callbacks suppressed [ 250.974049][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1274'. [ 251.373800][T10983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1281'. [ 251.572931][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 251.619773][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 251.654198][T10993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1283'. [ 251.726598][T10995] netlink: 'syz.2.1284': attribute type 10 has an invalid length. [ 251.878221][ T5731] syz1: Port: 1 Link ACTIVE [ 251.909469][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1286'. [ 251.963173][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'. [ 252.079203][T11006] bond5: entered promiscuous mode [ 252.114804][T11006] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.323460][T11012] tipc: Resetting bearer [ 252.477232][T11002] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.504236][T11002] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 252.547303][T11002] bond5: (slave sit1): Error -95 calling set_mac_address [ 252.678440][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 252.697817][T11033] IPVS: Unknown mcast interface: pimreg [ 252.881210][T11045] tipc: Resetting bearer [ 252.898634][T11045] vlan0: entered promiscuous mode [ 253.005251][T11044] bridge0: entered allmulticast mode [ 253.334682][T11060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1301'. [ 253.359036][T11061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1301'. [ 253.482089][ T1633] block nbd1: Possible stuck request ffff888027de0000: control (read@0,1024B). Runtime 60 seconds [ 253.493504][ T1633] block nbd1: Possible stuck request ffff888027de01c0: control (read@1024,3072B). Runtime 60 seconds [ 254.087810][T11093] xfrm0: Caught tx_queue_len zero misconfig [ 254.103757][T11093] netlink: 'syz.0.1312': attribute type 3 has an invalid length. [ 254.282609][T11094] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 254.303849][T11100] netlink: 'syz.2.1314': attribute type 1 has an invalid length. [ 254.381924][T11094] bond6 (unregistering): Released all slaves [ 254.695666][T11109] netlink: 'syz.3.1316': attribute type 10 has an invalid length. [ 254.852632][T11115] syz_tun: entered allmulticast mode [ 254.870569][T11115] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 254.878027][T11115] dvmrp1: linktype set to 776 [ 254.908304][T11116] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 254.979525][T11116] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 255.003033][T11114] syz_tun: left allmulticast mode [ 255.455705][ T1156] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.541948][T11135] batman_adv: batadv0: Adding interface: gretap2 [ 255.556315][T11135] batman_adv: batadv0: Interface activated: gretap2 [ 255.602154][ T1156] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.617127][ T1156] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.977758][T11162] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 256.045799][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.052861][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.310114][T11170] __nla_validate_parse: 12 callbacks suppressed [ 256.310135][T11170] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1332'. [ 256.336465][T11169] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1331'. [ 256.349684][T11169] nbd: illegal input index 65508 [ 256.448357][T11179] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 256.484269][T11179] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1335'. [ 256.547267][T11178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1333'. [ 256.912326][T11199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1339'. [ 256.948774][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'. [ 256.961904][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'. [ 256.985942][T11199] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1339'. [ 257.023010][T11199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1339'. [ 257.153202][T11207] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1341'. [ 257.196071][T11227] netlink: 'syz.1.1342': attribute type 3 has an invalid length. [ 257.226376][T11225] netlink: 'syz.1.1342': attribute type 3 has an invalid length. [ 257.927460][T11287] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 258.039143][T11291] syzkaller0: entered promiscuous mode [ 258.090776][T11291] syzkaller0: entered allmulticast mode [ 258.125098][T11282] tipc: Enabled bearer , priority 0 [ 258.234325][T11282] tipc: Resetting bearer [ 258.263362][T11275] tipc: Resetting bearer [ 258.301783][T11275] tipc: Disabling bearer [ 258.414619][T11307] IPVS: set_ctl: invalid protocol: 10 0.0.0.0:64513 [ 258.610875][T11318] FAULT_INJECTION: forcing a failure. [ 258.610875][T11318] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 258.626118][T11318] CPU: 1 UID: 0 PID: 11318 Comm: syz.4.1360 Not tainted syzkaller #0 PREEMPT(full) [ 258.626146][T11318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.626157][T11318] Call Trace: [ 258.626165][T11318] [ 258.626174][T11318] dump_stack_lvl+0xe8/0x150 [ 258.626208][T11318] should_fail_ex+0x410/0x560 [ 258.626241][T11318] _copy_to_user+0x31/0xb0 [ 258.626264][T11318] simple_read_from_buffer+0xe1/0x170 [ 258.626306][T11318] proc_fail_nth_read+0x1bb/0x230 [ 258.626339][T11318] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.626370][T11318] ? rw_verify_area+0x24a/0x4c0 [ 258.626400][T11318] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.626427][T11318] vfs_read+0x213/0xa80 [ 258.626461][T11318] ? __pfx___mutex_lock+0x10/0x10 [ 258.626485][T11318] ? __pfx_vfs_read+0x10/0x10 [ 258.626513][T11318] ? __fget_files+0x2a/0x420 [ 258.626542][T11318] ? __fget_files+0x3a2/0x420 [ 258.626567][T11318] ? __fget_files+0x2a/0x420 [ 258.626603][T11318] ksys_read+0x150/0x270 [ 258.626634][T11318] ? __pfx_ksys_read+0x10/0x10 [ 258.626676][T11318] do_syscall_64+0x166/0x520 [ 258.626698][T11318] ? trace_irq_disable+0x3b/0x140 [ 258.626727][T11318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.626748][T11318] ? clear_bhb_loop+0x70/0xc0 [ 258.626772][T11318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.626790][T11318] RIP: 0033:0x7f7d6eb5e90e [ 258.626810][T11318] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 258.626827][T11318] RSP: 002b:00007f7d6fb31fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.626851][T11318] RAX: ffffffffffffffda RBX: 00007f7d6fb326c0 RCX: 00007f7d6eb5e90e [ 258.626865][T11318] RDX: 000000000000000f RSI: 00007f7d6fb320a0 RDI: 0000000000000004 [ 258.626877][T11318] RBP: 00007f7d6fb32090 R08: 0000000000000000 R09: 0000000000000000 [ 258.626889][T11318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.626901][T11318] R13: 00007f7d6ee26038 R14: 00007f7d6ee25fa0 R15: 00007ffecd600a98 [ 258.626934][T11318] [ 259.059092][T11314] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 259.184707][T11326] netlink: 'syz.3.1359': attribute type 1 has an invalid length. [ 259.405097][T11353] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.091500][T11386] netlink: 'syz.1.1371': attribute type 1 has an invalid length. [ 260.112871][T11386] netlink: 'syz.1.1371': attribute type 2 has an invalid length. [ 260.695825][T11422] xt_l2tp: missing protocol rule (udp|l2tpip) [ 260.755218][T11424] ip6t_rpfilter: unknown options [ 260.901114][T11428] v: renamed from veth0_vlan (while UP) [ 260.960218][T11420] syzkaller0: entered promiscuous mode [ 260.978252][T11420] syzkaller0: entered allmulticast mode [ 261.022876][T11423] tipc: Enabled bearer , priority 0 [ 261.162405][T11432] tipc: Resetting bearer [ 261.188696][T11420] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 261.221681][T11419] tipc: Resetting bearer [ 261.291107][T11419] tipc: Disabling bearer [ 261.522563][T11445] __nla_validate_parse: 7 callbacks suppressed [ 261.522586][T11445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1388'. [ 262.213420][T11465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1390'. [ 262.259681][T11465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1390'. [ 262.294490][T11461] netlink: 'syz.2.1390': attribute type 1 has an invalid length. [ 262.341992][T11461] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1390'. [ 262.741112][T11479] IPVS: set_ctl: invalid protocol: 51 172.20.20.18:20000 [ 262.787485][T11479] IPVS: set_ctl: invalid protocol: 31754 255.255.255.255:20002 [ 262.853815][T11481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1396'. [ 263.457476][T11497] netlink: 4416 bytes leftover after parsing attributes in process `syz.2.1401'. [ 263.494518][T11497] netlink: 'syz.2.1401': attribute type 10 has an invalid length. [ 263.848251][T11516] syzkaller1: entered promiscuous mode [ 263.859096][T11516] syzkaller1: entered allmulticast mode [ 263.891235][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 263.964339][T11521] netlink: 'syz.0.1410': attribute type 1 has an invalid length. [ 263.976004][T11523] bridge_slave_1: mtu less than device minimum [ 263.979732][T11516] netlink: 'syz.4.1409': attribute type 30 has an invalid length. [ 264.112030][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 264.157671][T11516] netlink: 'syz.4.1409': attribute type 30 has an invalid length. [ 264.193688][T11521] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.293124][T11527] bond6: (slave geneve3): making interface the new active one [ 264.321759][T11527] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 264.491418][T11209] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.507721][T11209] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.517036][T11209] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.696630][T11209] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.191005][T11562] netlink: 'syz.3.1422': attribute type 39 has an invalid length. [ 265.269801][T11570] netlink: 'syz.1.1424': attribute type 6 has an invalid length. [ 265.575082][T11582] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1428'. [ 265.593784][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1428'. [ 265.603477][T11579] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 265.642595][ T5625] Bluetooth: hci4: command 0x0405 tx timeout [ 266.587971][T11245] bond2: (slave batadv0): link status definitely down, disabling slave [ 266.617608][T11245] bond2: now running without any active interface! [ 266.687190][T11642] IPv6: Can't replace route, no match found [ 266.727884][T11642] IPv6: Can't replace route, no match found [ 266.738650][T11636] vxcan4: entered allmulticast mode [ 266.790829][T11644] block nbd0: not configured, cannot reconfigure [ 266.808205][T11638] vxcan4: entered allmulticast mode [ 266.953323][T11649] __nla_validate_parse: 7 callbacks suppressed [ 266.953347][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1446'. [ 267.014506][T11647] bond3 (unregistering): Released all slaves [ 267.076557][T11657] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1448'. [ 267.237234][T11663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1449'. [ 267.363092][T11670] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1451'. [ 267.374172][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 267.402935][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 267.417567][T11667] netlink: 'syz.0.1450': attribute type 18 has an invalid length. [ 267.441872][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 267.455513][T11209] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 4352 - 0 [ 267.479478][T11209] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 4352 - 0 [ 267.504467][T11244] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 4352 - 0 [ 267.504781][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 267.520421][T11244] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 4352 - 0 [ 267.534621][T11672] netlink: 'syz.0.1450': attribute type 18 has an invalid length. [ 269.066800][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1467'. [ 270.720763][T11732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1467'. [ 270.760609][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.943088][T11742] netlink: 'syz.1.1469': attribute type 1 has an invalid length. [ 271.254091][T11756] sctp: [Deprecated]: syz.4.1474 (pid 11756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.254091][T11756] Use struct sctp_sack_info instead [ 271.272990][T11757] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 272.042327][T11794] __nla_validate_parse: 3 callbacks suppressed [ 272.042348][T11794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'. [ 272.132019][T11794] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 272.553532][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'. [ 272.574553][T11817] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1486'. [ 273.889896][T11742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.114959][T11832] netlink: 'syz.2.1490': attribute type 1 has an invalid length. [ 274.124121][T11830] netlink: 'syz.2.1490': attribute type 1 has an invalid length. [ 274.305879][T11832] 8021q: adding VLAN 0 to HW filter on device bond5 [ 274.372872][T11836] bond5: (slave gretap3): making interface the new active one [ 274.384376][T11836] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 274.426509][T11845] syzkaller0: entered promiscuous mode [ 274.457396][T11845] syzkaller0: entered allmulticast mode [ 274.508953][T11845] 0: reclassify loop, rule prio 0, protocol 800 [ 274.616473][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 275.007046][T11877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1504'. [ 275.064259][T11880] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1505'. [ 275.415655][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.434940][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.785349][T11901] bond4: (slave erspan0): Releasing active interface [ 275.950339][T11919] IPVS: Error connecting to the multicast addr [ 276.458468][T11936] macsec2: entered promiscuous mode [ 276.467312][T11936] bridge0: entered promiscuous mode [ 276.507978][T11944] bridge5: entered promiscuous mode [ 276.514730][T11944] bridge5: entered allmulticast mode [ 276.816532][T11959] netlink: 'syz.1.1518': attribute type 2 has an invalid length. [ 276.832244][T11960] IPv6: Can't replace route, no match found [ 277.795896][T11978] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.116406][T11988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1533'. [ 280.602974][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1537'. [ 280.631858][T12010] tipc: Can't bind to reserved service type 3 [ 280.746641][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.815879][T11988] batman_adv: batadv0: Interface deactivated: gretap2 [ 280.890251][T11248] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.918292][T11248] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.948477][T11248] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.972898][T11248] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.002291][T11248] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.014505][T11248] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.288565][T12027] netlink: 'syz.0.1544': attribute type 2 has an invalid length. [ 281.300507][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1544'. [ 281.332365][T12027] ¿: entered promiscuous mode [ 281.340799][T12032] sit0: entered promiscuous mode [ 281.346247][T12032] netlink: 'syz.3.1545': attribute type 1 has an invalid length. [ 281.361006][T12032] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1545'. [ 281.375157][T12031] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1545'. [ 281.483945][T12038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1547'. [ 281.599206][T12042] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 281.617521][T12042] syzkaller0: entered promiscuous mode [ 281.630239][T12042] syzkaller0: entered allmulticast mode [ 281.685351][T12045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1549'. [ 281.809046][T12051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 281.849417][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1551'. [ 281.864216][T12051] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1551'. [ 282.620482][T12084] tipc: Enabled bearer , priority 0 [ 283.421096][T12130] __nla_validate_parse: 4 callbacks suppressed [ 283.421118][T12130] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1570'. [ 283.451833][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1571'. [ 283.564985][ T1633] block nbd1: Possible stuck request ffff888027de0000: control (read@0,1024B). Runtime 90 seconds [ 283.580475][ T1633] block nbd1: Possible stuck request ffff888027de01c0: control (read@1024,3072B). Runtime 90 seconds [ 283.680881][T11249] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 283.693312][T11249] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 283.774853][T11249] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 283.823728][T11249] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 284.084586][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1579'. [ 284.095844][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'. [ 284.107247][T12162] netlink: 'syz.2.1579': attribute type 13 has an invalid length. [ 284.349378][T12135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.363617][T12150] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1575'. [ 284.479623][T12169] Bluetooth: hci0: unsupported parameter 5135 [ 284.489844][T12169] Bluetooth: hci0: unsupported parameter 8192 [ 284.500657][T12169] Bluetooth: hci0: unsupported parameter 5135 [ 284.508676][T12169] Bluetooth: hci0: unsupported parameter 8192 [ 284.655695][T12175] netlink: 'syz.1.1582': attribute type 1 has an invalid length. [ 284.713967][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1581'. [ 284.730686][T12169] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1581'. [ 284.739462][T12175] bond7: option mode: invalid value (7) [ 284.786376][T12175] bond7 (unregistering): Released all slaves [ 284.918226][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1582'. [ 285.040867][T12192] sctp: [Deprecated]: syz.3.1586 (pid 12192) Use of int in max_burst socket option deprecated. [ 285.040867][T12192] Use struct sctp_assoc_value instead [ 285.112853][T12195] netlink: 'syz.3.1586': attribute type 1 has an invalid length. [ 285.137127][T12196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1587'. [ 285.266349][T12195] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1586'. [ 285.313048][T12200] netlink: 'syz.2.1588': attribute type 49 has an invalid length. [ 285.368468][T12208] veth0_macvtap: left promiscuous mode [ 285.554196][T12217] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 285.568841][T12217] bond3 (unregistering): Released all slaves [ 285.676896][T12221] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 285.689500][T12222] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 285.909378][T12227] tunl0: Caught tx_queue_len zero misconfig [ 285.937676][T12243] netlink: 'syz.4.1597': attribute type 9 has an invalid length. [ 286.086061][T11248] IPVS: starting estimator thread 0... [ 286.095964][T12240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.114923][T12240] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.130778][T12240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.174875][T12240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.188663][T12240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.197068][T12249] IPVS: using max 29 ests per chain, 69600 per kthread [ 286.215549][T12240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.226419][T12240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.244940][T12240] veth1_vlan: left promiscuous mode [ 286.261751][T12240] veth0_vlan: left promiscuous mode [ 286.269660][T12240] veth0_vlan: entered promiscuous mode [ 286.281262][T12240] veth1_vlan: entered promiscuous mode [ 286.292770][T12240] veth1_macvtap: left promiscuous mode [ 286.301730][T12240] veth0_macvtap: left promiscuous mode [ 286.308866][T12240] veth0_macvtap: entered promiscuous mode [ 286.317498][T12240] veth1_macvtap: entered promiscuous mode [ 286.333718][T12240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.342071][T12240] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 286.365588][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.373324][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.392494][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.400645][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.455198][T12252] 8021q: VLANs not supported on sit0 [ 286.707952][T12256] netlink: 'syz.2.1600': attribute type 1 has an invalid length. [ 286.732210][T11250] bond2: (slave batadv0): failed to get link speed/duplex [ 287.050137][T11249] bond2: (slave batadv0): failed to get link speed/duplex [ 287.186505][T11248] bond2: (slave batadv0): failed to get link speed/duplex [ 287.343436][T11245] bond2: (slave batadv0): failed to get link speed/duplex [ 287.624581][ T5612] block nbd0: Receive control failed (result -1) [ 287.635926][ T5612] [ 287.638503][ T5612] ====================================================== [ 287.646073][ T5612] WARNING: possible circular locking dependency detected [ 287.654195][ T5612] syzkaller #0 Not tainted [ 287.659374][ T5612] ------------------------------------------------------ [ 287.666691][ T5612] kworker/u9:3/5612 is trying to acquire lock: [ 287.673702][ T5612] ffff888079e045e0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 287.686749][ T5612] [ 287.686749][ T5612] but task is already holding lock: [ 287.694302][ T5612] ffff888077d0c468 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 287.703797][ T5612] [ 287.703797][ T5612] which lock already depends on the new lock. [ 287.703797][ T5612] [ 287.715724][ T5612] [ 287.715724][ T5612] the existing dependency chain (in reverse order) is: [ 287.725412][ T5612] [ 287.725412][ T5612] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 287.733557][ T5612] __mutex_lock+0x19d/0x1550 [ 287.739238][ T5612] nbd_queue_rq+0x373/0x1150 [ 287.746135][ T5612] blk_mq_dispatch_rq_list+0x499/0x1990 [ 287.752956][ T5612] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 287.761655][ T5612] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 287.769693][ T5612] blk_mq_run_work_fn+0x16c/0x300 [ 287.770410][T11249] bond2: (slave batadv0): failed to get link speed/duplex [ 287.777141][ T5612] process_scheduled_works+0xa88/0x14c0 [ 287.777179][ T5612] worker_thread+0xa47/0xfb0 [ 287.777199][ T5612] kthread+0x38b/0x480 [ 287.777221][ T5612] ret_from_fork+0x514/0xb70 [ 287.777244][ T5612] ret_from_fork_asm+0x1a/0x30 [ 287.817750][ T5612] [ 287.817750][ T5612] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 287.829820][ T5612] __mutex_lock+0x19d/0x1550 [ 287.838828][ T5612] nbd_queue_rq+0xc1/0x1150 [ 287.846791][ T5612] blk_mq_dispatch_rq_list+0x499/0x1990 [ 287.855413][ T5612] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 287.864692][ T5612] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 287.871668][ T5612] blk_mq_run_work_fn+0x16c/0x300 [ 287.878205][ T5612] process_scheduled_works+0xa88/0x14c0 [ 287.886325][ T5612] worker_thread+0xa47/0xfb0 [ 287.892441][ T5612] kthread+0x38b/0x480 [ 287.898050][ T5612] ret_from_fork+0x514/0xb70 [ 287.906413][ T5612] ret_from_fork_asm+0x1a/0x30 [ 287.914981][ T5612] [ 287.914981][ T5612] -> #4 (set->srcu){.+.+}-{0:0}: [ 287.926435][ T5612] __synchronize_srcu+0xc9/0x2f0 [ 287.934928][ T5612] elevator_switch+0x1e8/0x7b0 [ 287.941516][ T5612] elevator_change+0x2fa/0x480 [ 287.948988][ T5612] elevator_set_default+0x375/0x440 [ 287.956062][ T5612] blk_register_queue+0x3f3/0x4e0 [ 287.963150][ T5612] __add_disk+0x6cb/0xe30 [ 287.968322][ T5612] add_disk_fwnode+0x100/0x3a0 [ 287.976918][ T5612] nbd_dev_add+0x733/0xb60 [ 287.983903][ T5612] nbd_init+0x15f/0x1e0 [ 287.990614][ T5612] do_one_initcall+0x250/0x870 [ 287.998302][ T5612] do_initcall_level+0x10a/0x1a0 [ 288.005100][ T5612] do_initcalls+0x59/0xa0 [ 288.010085][ T5612] kernel_init_freeable+0x29d/0x3e0 [ 288.016974][ T5612] kernel_init+0x22/0x1d0 [ 288.022540][ T5612] ret_from_fork+0x514/0xb70 [ 288.028038][ T5612] ret_from_fork_asm+0x1a/0x30 [ 288.033540][ T5612] [ 288.033540][ T5612] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 288.046064][ T5612] __mutex_lock+0x19d/0x1550 [ 288.056879][ T5612] elevator_change+0x1af/0x480 [ 288.065156][ T5612] elevator_set_none+0xb5/0x140 [ 288.071805][ T5612] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 288.079684][ T5612] nbd_start_device+0x189/0xb30 [ 288.085970][ T5612] nbd_genl_connect+0x1597/0x1c10 [ 288.092784][ T5612] genl_family_rcv_msg_doit+0x233/0x340 [ 288.099150][ T5612] genl_rcv_msg+0x614/0x7a0 [ 288.106149][ T5612] netlink_rcv_skb+0x226/0x4a0 [ 288.112263][ T5612] genl_rcv+0x28/0x40 [ 288.119240][ T5612] netlink_unicast+0x7bd/0x940 [ 288.126223][ T5612] netlink_sendmsg+0x813/0xb40 [ 288.132062][ T5612] sock_sendmsg_nosec+0x13a/0x180 [ 288.137838][ T5612] ____sys_sendmsg+0x54e/0x850 [ 288.144126][ T5612] ___sys_sendmsg+0x2a5/0x360 [ 288.150235][ T5612] __x64_sys_sendmsg+0x1b1/0x290 [ 288.157633][ T5612] do_syscall_64+0x166/0x520 [ 288.163135][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.171174][ T5612] [ 288.171174][ T5612] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 288.184513][ T5612] blk_alloc_queue+0x544/0x690 [ 288.190505][ T5612] __blk_mq_alloc_disk+0x194/0x390 [ 288.198515][ T5612] nbd_dev_add+0x494/0xb60 [ 288.203765][ T5612] nbd_init+0x15f/0x1e0 [ 288.209736][ T5612] do_one_initcall+0x250/0x870 [ 288.217058][ T5612] do_initcall_level+0x10a/0x1a0 [ 288.223797][ T5612] do_initcalls+0x59/0xa0 [ 288.230225][ T5612] kernel_init_freeable+0x29d/0x3e0 [ 288.238064][ T5612] kernel_init+0x22/0x1d0 [ 288.245771][ T5612] ret_from_fork+0x514/0xb70 [ 288.252145][ T5612] ret_from_fork_asm+0x1a/0x30 [ 288.258793][ T5612] [ 288.258793][ T5612] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 288.268308][ T5612] fs_reclaim_acquire+0x71/0x100 [ 288.276178][ T5612] __kmalloc_noprof+0xbc/0x720 [ 288.281687][ T5612] tls_sw_sendmsg+0x59b/0x2b50 [ 288.289552][ T5612] sock_sendmsg_nosec+0x90/0x180 [ 288.296691][ T5612] sock_sendmsg+0x1ca/0x2d0 [ 288.303498][ T5612] splice_to_socket+0xb5e/0x12a0 [ 288.309678][ T5612] direct_splice_actor+0x101/0x160 [ 288.315383][ T5612] splice_direct_to_actor+0x57b/0xcb0 [ 288.321914][ T5612] do_splice_direct+0x195/0x290 [ 288.328560][ T5612] do_sendfile+0x52e/0x7c0 [ 288.334329][ T5612] __se_sys_sendfile64+0x144/0x1a0 [ 288.340165][ T5612] do_syscall_64+0x166/0x520 [ 288.347976][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.354770][ T5612] [ 288.354770][ T5612] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 288.364556][ T5612] __lock_acquire+0x1520/0x2cf0 [ 288.371187][ T5612] lock_acquire+0x106/0x350 [ 288.379398][ T5612] lock_sock_nested+0x41/0x100 [ 288.386893][ T5612] inet_shutdown+0x6a/0x390 [ 288.395103][ T5612] nbd_mark_nsock_dead+0x2cb/0x550 [ 288.404287][ T5612] recv_work+0x1cee/0x1e10 [ 288.412235][ T5612] process_scheduled_works+0xa88/0x14c0 [ 288.419410][ T5612] worker_thread+0xa47/0xfb0 [ 288.427982][ T5612] kthread+0x38b/0x480 [ 288.433450][ T5612] ret_from_fork+0x514/0xb70 [ 288.438881][ T5612] ret_from_fork_asm+0x1a/0x30 [ 288.445150][ T5612] [ 288.445150][ T5612] other info that might help us debug this: [ 288.445150][ T5612] [ 288.456186][ T5612] Chain exists of: [ 288.456186][ T5612] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 288.456186][ T5612] [ 288.470818][ T5612] Possible unsafe locking scenario: [ 288.470818][ T5612] [ 288.478381][ T5612] CPU0 CPU1 [ 288.486144][ T5612] ---- ---- [ 288.493818][ T5612] lock(&nsock->tx_lock); [ 288.498798][ T5612] lock(&cmd->lock); [ 288.508587][ T5612] lock(&nsock->tx_lock); [ 288.517487][ T5612] lock(sk_lock-AF_INET6-NBD); [ 288.525442][ T5612] [ 288.525442][ T5612] *** DEADLOCK *** [ 288.525442][ T5612] [ 288.534549][ T5612] locks held by kworker/u9:3/5612: 3, last CPU#1: [ 288.544555][ T5612] #0: ffff888027ca9940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 288.559407][ T5612] #1: ffffc900046cfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 288.572910][ T5612] #2: ffff888077d0c468 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 288.583225][ T5612] [ 288.583225][ T5612] stack backtrace: [ 288.590124][ T5612] CPU: 1 UID: 0 PID: 5612 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 288.590143][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.590155][ T5612] Workqueue: nbd0-recv recv_work [ 288.590184][ T5612] Call Trace: [ 288.590193][ T5612] [ 288.590200][ T5612] dump_stack_lvl+0xe8/0x150 [ 288.590223][ T5612] print_circular_bug+0x2e1/0x300 [ 288.590241][ T5612] check_noncircular+0x12e/0x150 [ 288.590258][ T5612] __lock_acquire+0x1520/0x2cf0 [ 288.590282][ T5612] ? try_to_wake_up+0x8b6/0x14d0 [ 288.590299][ T5612] ? inet_shutdown+0x6a/0x390 [ 288.590314][ T5612] lock_acquire+0x106/0x350 [ 288.590333][ T5612] ? inet_shutdown+0x6a/0x390 [ 288.590348][ T5612] ? __queue_work+0x1ec/0x10a0 [ 288.590367][ T5612] lock_sock_nested+0x41/0x100 [ 288.590385][ T5612] ? inet_shutdown+0x6a/0x390 [ 288.590399][ T5612] inet_shutdown+0x6a/0x390 [ 288.590414][ T5612] nbd_mark_nsock_dead+0x2cb/0x550 [ 288.590436][ T5612] recv_work+0x1cee/0x1e10 [ 288.590457][ T5612] ? __lock_acquire+0x683/0x2cf0 [ 288.590478][ T5612] ? register_lock_class+0x31/0x2e0 [ 288.590580][ T5612] ? __lock_acquire+0x683/0x2cf0 [ 288.590610][ T5612] ? __pfx_recv_work+0x10/0x10 [ 288.590632][ T5612] ? do_raw_spin_lock+0x12b/0x2f0 [ 288.590650][ T5612] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 288.590667][ T5612] ? process_scheduled_works+0xa1a/0x14c0 [ 288.590686][ T5612] ? rcu_is_watching+0x16/0xb0 [ 288.590701][ T5612] ? process_scheduled_works+0xa1a/0x14c0 [ 288.590717][ T5612] process_scheduled_works+0xa88/0x14c0 [ 288.590744][ T5612] ? __pfx_process_scheduled_works+0x10/0x10 [ 288.590762][ T5612] ? assign_work+0x3cf/0x5d0 [ 288.590780][ T5612] worker_thread+0xa47/0xfb0 [ 288.590924][ T5612] ? __kthread_parkme+0x71/0x1f0 [ 288.590952][ T5612] kthread+0x38b/0x480 [ 288.590989][ T5612] ? __pfx_worker_thread+0x10/0x10 [ 288.591005][ T5612] ? __pfx_kthread+0x10/0x10 [ 288.591025][ T5612] ret_from_fork+0x514/0xb70 [ 288.591048][ T5612] ? __pfx_ret_from_fork+0x10/0x10 [ 288.591073][ T5612] ? __switch_to+0xc89/0x1420 [ 288.591092][ T5612] ? __pfx_kthread+0x10/0x10 [ 288.591138][ T5612] ret_from_fork_asm+0x1a/0x30 [ 288.591167][ T5612] [ 288.622412][T12311] __nla_validate_parse: 16 callbacks suppressed [ 288.622433][T12311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1610'. [ 288.877948][T12310] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 288.972935][T11249] bond2: (slave batadv0): failed to get link speed/duplex [ 289.152792][T11209] bond2: (slave batadv0): failed to get link speed/duplex [ 289.271222][T11209] bond2: (slave batadv0): failed to get link speed/duplex [ 290.740338][T11249] net_ratelimit: 12 callbacks suppressed [ 290.740361][T11249] bond2: (slave batadv0): failed to get link speed/duplex [ 290.870167][T11249] bond2: (slave batadv0): failed to get link speed/duplex [ 290.980486][T11250] bond2: (slave batadv0): failed to get link speed/duplex [ 291.091238][T11209] bond2: (slave batadv0): failed to get link speed/duplex [ 291.200376][T11249] bond2: (slave batadv0): failed to get link speed/duplex [ 291.310454][T11209] bond2: (slave batadv0): failed to get link speed/duplex [ 291.420380][T11249] bond2: (slave batadv0): failed to get link speed/duplex [ 291.540186][T11249] bond2: (slave batadv0): failed to get link speed/duplex [ 291.650332][ T63] bond2: (slave batadv0): failed to get link speed/duplex [ 291.760525][T11249] bond2: (slave batadv0): failed to get link speed/duplex [ 292.263892][ T4978] udevd[4978]: worker [5624] /devices/virtual/block/nbd1 is taking a long time [ 295.850395][T11248] net_ratelimit: 36 callbacks suppressed [ 295.850419][T11248] bond2: (slave batadv0): failed to get link speed/duplex [ 295.970138][T11248] bond2: (slave batadv0): failed to get link speed/duplex [ 296.080226][ T63] bond2: (slave batadv0): failed to get link speed/duplex [ 296.200368][T11248] bond2: (slave batadv0): failed to get link speed/duplex [ 296.320542][ T63] bond2: (slave batadv0): failed to get link speed/duplex [ 296.430395][T11248] bond2: (slave batadv0): failed to get link speed/duplex [ 296.540291][ T63] bond2: (slave batadv0): failed to get link speed/duplex [ 296.650187][T11250] bond2: (slave batadv0): failed to get link speed/duplex [ 296.760327][T11250] bond2: (slave batadv0): failed to get link speed/duplex [ 296.870557][T11248] bond2: (slave batadv0): failed to get link speed/duplex