last executing test programs: 4.08776433s ago: executing program 4 (id=2595): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x1020703971be172d}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x1f, r1}]}, 0x44}}, 0x4) 3.969043761s ago: executing program 2 (id=2598): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xa, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) r3 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)=""/145, 0x91}, {&(0x7f00000002c0)=""/195, 0xc3}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/220, 0xdc}], 0x4, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}, 0x40000040) 3.893498825s ago: executing program 2 (id=2599): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000000", @ANYRES32=0x0, @ANYBLOB='4Z\x00\x00'], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x40008000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}]}}]}, 0xfffffffffffffe2e}}, 0x800) accept4$x25(r5, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.853583627s ago: executing program 1 (id=2600): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000200)=r1}, 0x20) 3.773440937s ago: executing program 4 (id=2601): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000200000000080000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000200003"], 0x33fe0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x4e20}, {@in=@dev, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendmmsg$inet(r5, &(0x7f0000004200)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="ae83d7", 0x3}], 0x1}}], 0x1, 0x0) sendto$inet(r6, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) pipe(&(0x7f0000000380)) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100090000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200"], 0x0) 3.717574345s ago: executing program 1 (id=2603): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b40500000000000061107a0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0x5, 0x7, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x65, 0x0, 0x6, 0x4, 0x0, @broadcast, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r1, 0x25, 0x17, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=[0x7, 0x4, 0x6, 0x7f, 0x2e], &(0x7f0000000140)=[0x5, 0x0, 0x2, 0x0, 0x3, 0x5, 0x5, 0x3, 0x4], 0x3, 0x5, 0x1, r3}}, 0x40) 3.576241531s ago: executing program 2 (id=2605): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0xd, "d8d02d05964b341efc5b525e77"}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000002c0)={r1, &(0x7f0000000040)='/dev/net/tun\x00', 0x10002, &(0x7f0000000080)={@_ha_fsid={[0x8, 0xfffffffe]}, {0x2, 0x9859, 0x1bda, 0xbab}}, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x40}) ioctl$PPPIOCUNBRIDGECHAN(r8, 0x7434) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r7, 0x1, 0x74bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000844) 3.565592799s ago: executing program 1 (id=2606): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'none\x00', 0x30, 0x0, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r3) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x30, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000070a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003803100010076657468305f746f5f687372000000005c000000200a0101000b000000000000010000000900020073797a30000084000900010073797a30"], 0xe8}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 3.519082002s ago: executing program 3 (id=2607): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140)=0x9, 0x4) close(r5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x10, 0x1000000}}}}]}, 0x78}}, 0xc090) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, r1, 0x401}}, 0x1c}}, 0x41d6b02d55468d44) 3.382382297s ago: executing program 1 (id=2609): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000048c0), r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000980)="d3ddd116965d33c2656ebe8e17471f821a6198a81e135e14d889fca7d52a28452abdce6912c7c4e47df5d6c6f8816cf7f07fa0cf49688fb0acdcf8fe08f33032d8b62bc170ddee8a9aa31fe8a362267bcc98eb3f30b0727b7c117b18de521a", 0x5f}], 0x1}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$nci(r4, &(0x7f00000009c0)=ANY=[@ANYBLOB="71050940020500"], 0x14f) sendmsg$FOU_CMD_GET(r2, &(0x7f0000005a80)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f00000059c0)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x810) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) 3.363770574s ago: executing program 2 (id=2610): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB="05ed598a8000", @ANYRES8, @ANYRES32=0x0, @ANYBLOB="0000000002000000030000000c000000000000000000000000000000b9621d1a2c17f4e2f1aa8d985571d07f74ac3e6d18c2dba31076d7173ab508b144b67067e1edfd3195e821fe5d53a7e290a6971278b0e0051313ebcdcfe2268c273f63784b7053a85403be505ef308fb5e38fd743d749798dfee2c77a4004b0b63c2a7f8b2d35c120b20a5fe337566fbfd4c2e64cece6522302259c18358d8e3f675d35855724c08954c2a1c9bb0e811a65561533e163646278a53b66b744541738a602683afaa188494301d4d29992aceabee2e5299e1f0f2fd2387080f34bf6a8fea97979f073c5036b3978cd1278eb8f889a0bb14cd20f6dc893a24b1204ba9163e57d61b9510001edd8de5b800e1e3009613f4293db8eae27f1f9ed23008f3ff8c58949e8f31363c0c9406192125d6ba39ce55891e6db956b8be3a9eafba90507b94964c1b437a69a108c70be97f3d995a45b57e87d2835e3e8923ca1c87619f13bf6af648e2aef641921d3607c54bb49dec5f2c4331f1181474033af4e768bb019509f7b9e1dd0535eaee85d154717b4b2e9e135e7fb6583611408d8b6cb04cf0584dd21b19d8718c27b3647ca4e65eb7399bc21b148c7b86f3c28a99a6b13ea95b4a"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0x2f, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000300)={'veth1_macvtap\x00', @broadcast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa2fe23bafb847af23ff8a8a0180c2000000080100000024000000000011907800000000000000d2ac5fec0cd5e4b578829c000080000000"], 0x0) (async) syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa2fe23bafb847af23ff8a8a0180c2000000080100000024000000000011907800000000000000d2ac5fec0cd5e4b578829c000080000000"], 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r4, 0x6a, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r5], 0x64}, 0x1, 0x0, 0x0, 0x4891}, 0x20000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010106000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x7c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010106000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x7c}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$inet(0xa, 0x801, 0x84) (async) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) accept4(r9, 0x0, 0x0, 0x0) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0x82, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x20) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f000000010000100000000000000000000000000000000000000ffffac1414aa00000000000000000000ffffe00000014e2200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000001c0000000032000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002d360000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053827a9d87d4d710e99a6f85571ea0f8000002000000af00000000000000"], 0xf0}}, 0x44021) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f000000010000100000000000000000000000000000000000000ffffac1414aa00000000000000000000ffffe00000014e2200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000001c0000000032000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002d360000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053827a9d87d4d710e99a6f85571ea0f8000002000000af00000000000000"], 0xf0}}, 0x44021) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$can_j1939(r10, &(0x7f0000000240)={0x1d, 0x0, 0x0, {0x2, 0xff}, 0xff}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) 3.237483211s ago: executing program 3 (id=2611): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x41cc, 0x4) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x25, 0x0, @val=@tcx}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f0000000000)=""/53, &(0x7f00000003c0)=0x35) recvfrom(r0, 0x0, 0xffffffffffffffd1, 0x40012052, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000340)='\x00&]\xe6\xa7\x81>\x87\xc5\x04\x8e\x01y\\\x1eT;_\xcbv\x8eLj\x8b(\xed\x93\x00\xfa\xa77\x85\x1a\\\xe9\b\few2\xa70\x91\b\xe5g\xf0q_z\x9c\xdc\xe1\x1b\xd7\xca;q\xf1\x14;\xab\x8c\xbb\x96x\xbb\x1f\xbf\xa7\x87\x84f8\xd9\xe4\x10I\x1e\x8dY\x88\x9f\x983\xedl\x1c\x83\xa4\xf8E\xd7\xe7t\xf2\xb3rl\xf0NwF*8\x1a\xc6I\fd', 0x10081, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x5]}, {0x6, 0x6, 0x9, 0x7}}, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x5}) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) 2.980667836s ago: executing program 3 (id=2612): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000000000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9ba5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a9384f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef82948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7e8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2f58a30e0844f1ad00bbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e01000000fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c6ab5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d33599a40283c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607649bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362cdff99c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c6737ba8b1672ae9677bb5970cf3e84be433446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000100000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9745b3cabc908e623403c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e2112f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d06c790000087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec6d8a68356cef8646f3815eb4daf46c5c76b29839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce518b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d8e5c599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2fa90c68166396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7258e9fc818ab3d76ab660a254d998592c31017f816e01a21c08a17acdb8ada5bc901934e40608563f14698feafac57b2b48cb89e10c85463a386be0f7fb1d1cfd621f8e2b51d50622b7c15be3999ffa42bd57408fe168d840c45a15317b21cf4c2278a04000000000000000033e2ad66fd156dcbf12d9e0e85dc9705d0ce24a4694c8ecd2493e1ed561a425d6045eb68c80d1dc57defb4abe86c9f2c37652d98b0c415bf246642062bd3b58a1ec57acdc2b6be53eaffaafd100002000057fe38ef705b4b9c0342a9b267db42fdda35e41afd619fb6bb14b910346544d83f462635f0738fe4a8db56364fd28540ac55be7fff8aa77009f12e2c1e7098a27b0bc549f3a6f68c11d786e498bffc37c297185efdb868a16ae1323c7d19da92531b33023e82cdeb8be27f82ca830f409a21d1aec436b0230e4b1b376005bcf6e55fceffce6d184de1b89dc5ed8bdfa37e8f86ada4158a7713db2c6789e6ba90df2bc48944775e45134f2187359f74c9dff3c78fb36fe5f672a8ce6e5c404ed8d734b905c5a12a996d8836b4522dbc73e595c14db95232"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) syz_emit_ethernet(0x551, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "14006e", 0x513, 0x3a, 0xff, @mcast2, @empty, {[@hopopts={0x0, 0x5, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @loopback}]}, @hopopts={0x2e, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xfff}, @ra={0x5, 0x2, 0xfff8}, @enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7}]}, @hopopts={0x89, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x30, {0x3, 0xa, 0xea, 0x4, [0x19, 0x5, 0x2, 0xce0b, 0x5]}}, @enc_lim, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0xba}]}, @fragment={0x8, 0x0, 0x4, 0x1, 0x0, 0x3, 0x68}, @hopopts={0xc, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x4}]}, @hopopts={0x2f, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x2f, 0x0, 0x3, 0x1, 0x0, 0x19, 0x67}, @hopopts={0x84, 0x10, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xc0, 0x48, "1127d1843cc22b5a7778fdb460f91c360c03cc9d8b723472dfcab8770053a0a1a670dea593ebec75f42c96c5104b1c8969b0ef58831e6bd9c29504bd3f1f1c2edd2da516b812af78"}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x80000001}, @calipso={0x7, 0x18, {0x3, 0x4, 0x7, 0xa14, [0x9, 0x9]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @fragment={0x1d, 0x0, 0xd, 0x0, 0x0, 0x9, 0x67}, @srh={0x1, 0x6, 0x4, 0x3, 0x7, 0x78, 0x3, [@mcast1, @remote, @loopback]}], @param_prob={0x4, 0x0, 0x0, 0x80, {0x8, 0x6, "e52790", 0x3, 0x29, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @local, [@srh={0x3b, 0x6, 0x4, 0x3, 0xfb, 0x0, 0x3, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @empty]}, @routing={0x67, 0x2, 0x1, 0x2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x5c, 0xc, 0x4, 0x6, 0x0, 0x40, 0x401, [@remote, @mcast1, @rand_addr=' \x01\x00', @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x29, 0x0, 0x40, 0x1, 0x0, 0xf, 0x66}, @routing={0x0, 0xc, 0x1, 0x1, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast1, @empty, @dev={0xfe, 0x80, '\x00', 0x3f}, @remote]}, @hopopts={0x87, 0x1b, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x5, 0x4, [0x7, 0x1, 0x4, 0x8000000, 0xffffffff7fffffff]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x1, 0x9, [0xfffffffffffffffc, 0xe8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @generic={0x8, 0x70, "220e595464fc0d910b1f03df2fe5c5a4c410abddae7af8f1c0a7e010bca713407bb972819e7bee53e8298e4aa59e8945b4f00c748914bb63c73f06d4a5b742acb355e3744f38b968e74b993afcdf98affa1945d60b115f9888d5063c9de9129ef6633c1d48366e5f115717847ccf0961"}]}, @routing={0x3b, 0x8, 0x2, 0xcb, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0xa}]}, @srh={0xc, 0x6, 0x4, 0x3, 0x3, 0x10, 0x4, [@local, @rand_addr=' \x01\x00', @loopback]}], "109cd575f1971249bd32d0ae4289adab12e0f20c97876353de60e1aa884e2374d8a7beea3df669dd37e79e045dec0f93bc359ce1055d5d96959a88ba9cb16ab3d4af990289bc3a4679277cf55f6bbd44bd84e2afba9d6ddec106fd995ba472d547d3ba084f2e7cc2f4cac51380666446b90c0a1aadf509e04823bf"}}}}}}}, 0x0) 2.929625863s ago: executing program 4 (id=2614): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x68, 0x4a, 0x4, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x38, 0x0, 0x0, 0xff}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000005}, 0x840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150008000000100016800c0001"], 0x3c}}, 0x0) 2.794589762s ago: executing program 4 (id=2615): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = socket(0x2d, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}]}}, 0x0, 0x4e}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'veth1\x00', &(0x7f0000000180)=@ethtool_coalesce={0xf, 0x1, 0xffff0001, 0x5, 0x3, 0x10000, 0x8, 0x18, 0x993, 0x9, 0x2, 0x9, 0xa9ad, 0x100, 0x1, 0xb1, 0x4, 0x80000000, 0x2, 0x8001, 0x5, 0x1, 0x8}}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.677249518s ago: executing program 0 (id=2616): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x26, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000100), 0x10) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c"], 0x28}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) 2.67645667s ago: executing program 4 (id=2617): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) 2.656018343s ago: executing program 0 (id=2618): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x4}}}}]}, 0x40}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) 2.625688825s ago: executing program 0 (id=2619): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000006300000085000000760000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) (rerun: 32) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x3, r1, 0x1}, 0xc) 2.545136788s ago: executing program 0 (id=2620): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xeb64d656001b2f26) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="0002290800030006000000080002000100000008000300000000000800040099740000080004000e0000000800020006000000050005008000000004000680080003000600000034000680060001000200000008", @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="051a00000e80006558", 0x9}, {&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="0cc1043d95b60772ce215bd86f633712e0224afdd7967e0ca3808eb1dc93624a97ea40df9a7b74b2035d12f3c0b97a50e27ca8e3d64a88f733f1643295ab967687184080d90f9ef814e9b8a1388ce04e", 0x50}, {&(0x7f0000000280)="205ac39fd249537267fe288365f90af656f1756ad222a5975c30438c9047f6e78b0ec12ad4ad8d7f111e06653754846f66a879995e46938b098c831f338f", 0x3e}, {&(0x7f00000002c0)="af940c5d73189b7d22a01d818125f7200a69f94a50a937210e2fa1e2a2ad7a7829fcf0cf6179c7dbfb8887c3864851cd6982b1b103f428c42f91b2f77e75a86606a45282582728e92451a83d56f8a571b3225e85ae4019c2b77bdeb2ee6aeff39e2aa46b705a17212a690423265325e815b9", 0x72}], 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x48}}, 0x0) 2.489820566s ago: executing program 0 (id=2621): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='7\x00'/12, @ANYRES32, @ANYBLOB="9670604ea687e99fdff5d64adf8a5257f423e94c0cd45cea1650a7a7cb92f34fcfc1c150f2602d3178a631c28e50a9a8a8dee28516488be62bcbdde69bc2482338b83e131fd5c941bc7459bf7bbf24862e7bd53da766075e3d7b43f5cd086bd1da7b51d881ce71f980842ca25d44d7c984c95aed4cd377caf1", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ca000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006200)=ANY=[@ANYBLOB="336d62efa4745e1587307ed76d6a5c921717e85e57b3a83e2b4bf9e113eb6bf3ecffeb27b5898a0bf3235d70b4e0b6b75945a3659e698e93244e000000000000e46646a6d20017bab01050ce6e54f86c924828b29c7f21980d5243f6f131e5121e7d05cd0883d07f7777a6838473bd89f7e1352682921d8d6aa66bac6bd9ca2c9471539e4b861338e5d208000000f4d265ecd86a52b661b108158ea863564e8b14a2cedaf82261afa80c4ba89f", @ANYRES16=r4, @ANYBLOB="cd3e000000000000000001000000"], 0x14}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0xffffffffffffff79, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x17}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={r8, @loopback, @multicast2}, 0xc) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000000c0)={r6, 0x9, 0xffff1e0d, 0xa01, 0x200, 0xb5, 0xc91b, 0x3ff, {r6, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x7a9, 0x8, 0x400, 0x4}}, &(0x7f0000000180)=0xb0) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000700)=0x8f, 0x4) r9 = socket(0x10, 0x803, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r10, 0x0) recvmmsg(r10, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) recvmmsg(r10, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/170, 0xaa}], 0x4, &(0x7f00000002c0)=""/73, 0x49}, 0x18000}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/160, 0xa0}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/167, 0xa7}, {&(0x7f00000034c0)=""/9, 0x9}, {&(0x7f0000003500)=""/138, 0xfffffffffffffe9b}], 0x7}, 0x7b8}, {{&(0x7f0000003640)=@alg, 0x80, &(0x7f00000039c0)=[{&(0x7f00000036c0)=""/213, 0xd5}, {&(0x7f00000037c0)=""/10, 0xa}, {&(0x7f0000003800)=""/199, 0xc7}, {&(0x7f0000003900)=""/183, 0xb7}], 0x4}, 0x4}, {{&(0x7f0000003a00)=@hci, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/150, 0x96}, {&(0x7f0000003b40)=""/99, 0x63}, {&(0x7f0000003bc0)=""/142, 0x8e}], 0x3, &(0x7f0000003cc0)=""/251, 0xfb}, 0x5710925a}, {{&(0x7f0000003dc0)=@nl=@proc, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003e40)=""/154, 0x9a}, {&(0x7f0000003f00)=""/4096, 0x1000}], 0x2, &(0x7f0000004f40)=""/98, 0x62}, 0x3}, {{&(0x7f0000004fc0)=@ax25={{}, [@netrom, @null, @null, @null, @rose, @null, @netrom]}, 0x80, &(0x7f0000006040)=[{&(0x7f0000005040)=""/4096, 0x1000}], 0x1}, 0x400}], 0x6, 0x10142, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r11, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000140), &(0x7f0000000300)=0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r12, @ANYBLOB="8304000000000000180012800b000100697036677265000008000280040012"], 0x38}, 0x1, 0x0, 0x0, 0x20009054}, 0x0) 275.556831ms ago: executing program 0 (id=2622): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2b}, 0x94) r0 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001e000000000000000c0000000c"], 0x0, 0x2a}, 0x20) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x240, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x75) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0xc040480) unshare(0xc040480) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r5}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x80, {0x1, 0x0, 0x6}, 0x1}, 0x18) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000140)={0x1d, r7, 0x3, {0x1, 0xff, 0x4}}, 0x18) close(0x4) syz_open_procfs$namespace(0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 274.531167ms ago: executing program 2 (id=2623): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000f8ffffffff2f63860d060101000000000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) 274.024982ms ago: executing program 3 (id=2624): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x1, 0xdd}]}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0x0, 0x12f, 0x0, 0x1, [@typed={0x0, 0x74}, @typed={0x0, 0xfe, 0x0, 0x0, @u32=0x4}, @typed={0x0, 0x4c}, @typed={0x0, 0x148, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x0, 0x8a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @generic="92557b1db244ab351d2a49c5d3353e8ea7c863b7a4e97cf78a6d05ab3f777541105a53fedb265cb159b9b4fff991db173d"]}]}, @generic="c3beb899adffc9c05eb8c1126ae35569f307076b0926b332d3469eb51c22e2ad08d45d9a15c8e07521442eb906e345d5f7f6c5826f5fcaef4b5dd7f7938088ef6434cca8de28558248719d15c75c1e7a98", @generic="6fbf19734b1cdba2c8622e21c82835e31a63b9eda6cd5afcf7d09d6c35db1f3455cea6e21829a8ff488d88ef4d77892be7211d9bbaa724fafb6253858450c6b156518155ecfa7e5d2f00a7394cab8c3dd121484859bc94b7a936aa", @typed={0x0, 0x65, 0x0, 0x0, @uid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 272.797734ms ago: executing program 4 (id=2625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x45}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = epoll_create(0x726) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$unix(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r10 = accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000400)=0x1c, 0x800) setsockopt$inet6_udp_int(r10, 0x11, 0xb, &(0x7f0000000440)=0x9, 0x4) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0xc2) 92.74744ms ago: executing program 2 (id=2626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xfccf4adb913cf4b9}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) 92.393866ms ago: executing program 1 (id=2627): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 91.274584ms ago: executing program 3 (id=2628): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="55116878cec666ce40016ac603fad0edf22b05cc9ab62e6a8c2e482e4f6e5e2d2b00"/49, 0x31}], 0x1, &(0x7f0000000580)=[@ip_tos_int={{0x2b, 0x0, 0x1, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x30}, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.832664ms ago: executing program 3 (id=2629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8010743f, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x1, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@ip4=@empty, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 1 (id=2630): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r1, 0x80089000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) connect$inet6(r3, &(0x7f0000001080)={0xa, 0x4e22, 0x68, @loopback, 0x4}, 0x1c) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x22, 0x4) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r2, 0x80000000) kernel console output (not intermixed with test programs): 64540][ T7454] netlink: 'syz.0.439': attribute type 11 has an invalid length. [ 110.376289][ T7449] netlink: 'syz.1.438': attribute type 3 has an invalid length. [ 110.499649][ T7459] sctp: [Deprecated]: syz.4.440 (pid 7459) Use of int in maxseg socket option. [ 110.499649][ T7459] Use struct sctp_assoc_value instead [ 110.877294][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.885429][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.033468][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.060467][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.089753][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.100892][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.109140][ T7504] netlink: 'syz.2.456': attribute type 1 has an invalid length. [ 111.273764][ T7521] netlink: 'syz.4.455': attribute type 1 has an invalid length. [ 111.337347][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.407951][ T7525] bridge_slave_1: left allmulticast mode [ 111.426792][ T7525] bridge_slave_1: left promiscuous mode [ 111.437139][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.463538][ T7525] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 111.503530][ T7506] bond2: Removing last arp target with arp_interval on [ 111.917411][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.044974][ T7568] netlink: get zone limit has 4 unknown bytes [ 112.045178][ T7562] veth0_vlan: left promiscuous mode [ 112.091931][ T7562] veth0_vlan: entered promiscuous mode [ 112.103768][ T7562] team0: Device veth0_vlan failed to register rx_handler [ 112.161875][ T7577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.222086][ T7577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.967193][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.062461][ T7623] syzkaller0: entered promiscuous mode [ 113.068081][ T7623] syzkaller0: entered allmulticast mode [ 113.920700][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.999130][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.319454][ T7641] gre0: entered promiscuous mode [ 114.344098][ T7641] gre0: entered allmulticast mode [ 114.471090][ T7653] __nla_validate_parse: 5 callbacks suppressed [ 114.471109][ T7653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.493'. [ 114.614292][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.497'. [ 114.679318][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.497'. [ 114.693243][ T7668] validate_nla: 5 callbacks suppressed [ 114.693258][ T7668] netlink: 'syz.3.498': attribute type 10 has an invalid length. [ 114.748072][ T7673] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 114.762732][ T7668] veth0_vlan: left promiscuous mode [ 114.802630][ T7668] veth0_vlan: entered promiscuous mode [ 114.850241][ T7668] team0: Device veth0_vlan failed to register rx_handler [ 115.014287][ T7690] syzkaller0: entered promiscuous mode [ 115.043329][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.046957][ T7690] syzkaller0: entered allmulticast mode [ 115.227565][ T7653] netlink: 'syz.0.493': attribute type 64 has an invalid length. [ 115.239322][ T7653] netlink: 5 bytes leftover after parsing attributes in process `syz.0.493'. [ 115.253474][ T7710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.505'. [ 115.264025][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 115.410868][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.507'. [ 115.474375][ T7722] netlink: 83 bytes leftover after parsing attributes in process `syz.4.507'. [ 115.577753][ T7726] sctp: [Deprecated]: syz.1.508 (pid 7726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.577753][ T7726] Use struct sctp_sack_info instead [ 115.605138][ T7726] sctp: [Deprecated]: syz.1.508 (pid 7726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.605138][ T7726] Use struct sctp_sack_info instead [ 115.805074][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.511'. [ 115.827159][ T7743] netlink: 81 bytes leftover after parsing attributes in process `syz.4.514'. [ 115.846079][ T7747] netlink: 'syz.1.512': attribute type 28 has an invalid length. [ 115.864595][ T7747] netlink: 'syz.1.512': attribute type 3 has an invalid length. [ 115.886426][ T7749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.895518][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.077356][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.159844][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.392188][ T7761] team1: entered promiscuous mode [ 116.397679][ T7761] team1: entered allmulticast mode [ 116.591521][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.802545][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.813351][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.847658][ T7794] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 116.864089][ T7794] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 116.957941][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.966370][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.969481][ T7802] gtp0: entered promiscuous mode [ 116.984122][ T7802] gtp0: entered allmulticast mode [ 119.598627][ T7775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.823764][ T7835] netlink: 'syz.2.536': attribute type 12 has an invalid length. [ 119.998661][ T7855] __nla_validate_parse: 13 callbacks suppressed [ 119.998679][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.542'. [ 120.048755][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.542'. [ 120.085139][ T7861] netlink: 'syz.4.545': attribute type 4 has an invalid length. [ 120.086012][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'. [ 120.159150][ T7861] netlink: 'syz.4.545': attribute type 4 has an invalid length. [ 120.168567][ T7859] tipc: Started in network mode [ 120.180583][ T7859] tipc: Node identity , cluster identity 4711 [ 120.190356][ T7859] tipc: Failed to obtain node identity [ 120.195993][ T7859] tipc: Enabling of bearer rejected, failed to enable media [ 120.237298][ T796] net_ratelimit: 24 callbacks suppressed [ 120.237314][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.717074][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.926917][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 121.117254][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.129596][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.276629][ T7895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.556'. [ 121.279561][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.317268][ T7895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.556'. [ 121.381937][ T7905] netlink: 'syz.0.559': attribute type 4 has an invalid length. [ 121.431626][ T7905] netlink: 'syz.0.559': attribute type 3 has an invalid length. [ 121.441370][ T7905] netlink: 224 bytes leftover after parsing attributes in process `syz.0.559'. [ 121.482555][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 121.558779][ T7914] wg1 speed is unknown, defaulting to 1000 [ 121.575580][ T7914] wg1 speed is unknown, defaulting to 1000 [ 121.585775][ T7917] netlink: 48 bytes leftover after parsing attributes in process `syz.3.563'. [ 121.605481][ T7914] wg1 speed is unknown, defaulting to 1000 [ 121.632531][ T7914] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.671180][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.563'. [ 121.692101][ T7914] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 121.757515][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.792572][ T7914] wg1 speed is unknown, defaulting to 1000 [ 121.814252][ T7914] wg1 speed is unknown, defaulting to 1000 [ 121.841104][ T7914] wg1 speed is unknown, defaulting to 1000 [ 121.871577][ T7914] wg1 speed is unknown, defaulting to 1000 [ 121.883768][ T7914] wg1 speed is unknown, defaulting to 1000 [ 121.893487][ T7934] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 121.924719][ T7934] netlink: 'syz.2.568': attribute type 11 has an invalid length. [ 122.231602][ T7953] netlink: 'syz.1.571': attribute type 2 has an invalid length. [ 122.254312][ T7955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.320343][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.800636][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.358499][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.795747][ T8067] syzkaller0: entered promiscuous mode [ 123.801426][ T8067] syzkaller0: entered allmulticast mode [ 123.920005][ T8069] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 124.123928][ T8079] vlan3: entered allmulticast mode [ 124.223724][ T8091] netlink: 'syz.0.604': attribute type 4 has an invalid length. [ 124.262977][ T8096] netlink: 'syz.4.605': attribute type 33 has an invalid length. [ 124.437069][ T8100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.513965][ T8099] veth5: entered allmulticast mode [ 124.542168][ T8110] bond2: (slave geneve2): making interface the new active one [ 124.552367][ T8110] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 124.834369][ T8128] bond2: invalid ARP target 0.0.0.0 specified for addition [ 124.845256][ T8128] bond2: option arp_ip_target: invalid value (0) [ 124.854514][ T8128] bond2 (unregistering): Released all slaves [ 124.878299][ T8131] : renamed from hsr0 (while UP) [ 125.044951][ T8150] __nla_validate_parse: 12 callbacks suppressed [ 125.044951][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.618'. [ 125.044969][ T8150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.618'. [ 125.210825][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 125.258528][ T8160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.293394][ T8160] bond2: entered promiscuous mode [ 125.310732][ T8160] bond2: entered allmulticast mode [ 125.315735][ T8165] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.623'. [ 125.327147][ T8165] net_ratelimit: 6 callbacks suppressed [ 125.327162][ T8165] netlink: Unknown conntrack attr (type=2304, max=9) [ 125.351717][ T8160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.382790][ T8166] openvswitch: netlink: Actions may not be safe on all matching packets [ 125.420772][ T8160] team0: Port device bond2 added [ 125.437315][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.477635][ T8178] vxcan3: entered promiscuous mode [ 125.485304][ T8178] bond2: (slave vxcan3): refused to change device type [ 125.799015][ T8193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.807912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.827580][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 125.927102][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.952687][ T8207] netlink: 60 bytes leftover after parsing attributes in process `syz.3.630'. [ 126.046046][ T8211] block nbd0: not configured, cannot reconfigure [ 126.059979][ T8213] macvlan0: entered promiscuous mode [ 126.132986][ T8215] bond1: option resend_igmp: invalid value (32767) [ 126.149971][ T8215] bond1: option resend_igmp: allowed values 0 - 255 [ 126.159617][ T8215] bond1 (unregistering): Released all slaves [ 126.398823][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.408419][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.477291][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.621852][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 126.622130][ T8251] validate_nla: 1 callbacks suppressed [ 126.622143][ T8251] netlink: 'syz.2.646': attribute type 2 has an invalid length. [ 126.802361][ T8264] netlink: 52 bytes leftover after parsing attributes in process `syz.3.649'. [ 126.824012][ T8264] netlink: 52 bytes leftover after parsing attributes in process `syz.3.649'. [ 126.842700][ T8264] netlink: 52 bytes leftover after parsing attributes in process `syz.3.649'. [ 126.957244][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.063871][ T796] IPVS: starting estimator thread 0... [ 127.157060][ T8280] IPVS: using max 33 ests per chain, 79200 per kthread [ 127.192661][ T8284] xt_TCPMSS: Only works on TCP SYN packets [ 127.486804][ T8309] delete_channel: no stack [ 127.899835][ T8334] gtp1: entered promiscuous mode [ 127.906992][ T8334] gtp1: entered allmulticast mode [ 128.700339][ T8390] syzkaller0: entered promiscuous mode [ 128.725652][ T8390] syzkaller0: entered allmulticast mode [ 129.350467][ T8420] netlink: 'syz.2.694': attribute type 1 has an invalid length. [ 129.658090][ T8441] xt_time: unknown flags 0xf4 [ 129.859797][ T8456] xt_hashlimit: size too large, truncated to 1048576 [ 130.449892][ T8490] netlink: 'syz.0.710': attribute type 11 has an invalid length. [ 130.645950][ T6002] net_ratelimit: 13 callbacks suppressed [ 130.645968][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.900643][ T8518] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 130.921565][ T8518] bond3 (unregistering): Released all slaves [ 130.977536][ T8528] __nla_validate_parse: 10 callbacks suppressed [ 130.977556][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.720'. [ 131.118338][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.181491][ T8522] delete_channel: no stack [ 131.332577][ T8519] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 131.425385][ T8551] Bluetooth: MGMT ver 1.23 [ 131.519069][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 131.529983][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 131.678957][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.710709][ T8557] netlink: 'syz.4.728': attribute type 1 has an invalid length. [ 131.734004][ T8557] netlink: 228 bytes leftover after parsing attributes in process `syz.4.728'. [ 131.956760][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.733'. [ 131.992554][ T8574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.001782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.088298][ T8572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.100192][ T7996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.127860][ T8572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.158348][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.288579][ T8585] netlink: 320 bytes leftover after parsing attributes in process `syz.3.737'. [ 132.353818][ T8595] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.740'. [ 132.501819][ T8609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.509665][ T8609] IPv6: NLM_F_CREATE should be set when creating new route [ 132.570214][ T8609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.742'. [ 132.716320][ T8613] bond3: entered allmulticast mode [ 132.807985][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.814643][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.901634][ T8629] netlink: 224 bytes leftover after parsing attributes in process `syz.3.748'. [ 132.938352][ T8629] ip6t_REJECT: ECHOREPLY is not supported [ 132.963484][ T8632] ip6t_REJECT: ECHOREPLY is not supported [ 132.970173][ T8629] netlink: 224 bytes leftover after parsing attributes in process `syz.3.748'. [ 133.407527][ T8655] netlink: 'syz.2.753': attribute type 5 has an invalid length. [ 133.461357][ T8655] geneve3: entered promiscuous mode [ 133.485169][ T8655] geneve3: entered allmulticast mode [ 133.521259][ T7994] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 133.550559][ T7994] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 133.570047][ T7994] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 133.616973][ T7994] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 133.701220][ T8673] netlink: 'syz.2.758': attribute type 1 has an invalid length. [ 133.710025][ T8675] netlink: 'syz.0.756': attribute type 2 has an invalid length. [ 134.023393][ T8673] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.145391][ T8698] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 134.585028][ T8722] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 134.993925][ T8739] syzkaller0: entered promiscuous mode [ 135.015470][ T8739] syzkaller0: entered allmulticast mode [ 135.810327][ T8784] netlink: 'syz.4.781': attribute type 4 has an invalid length. [ 135.838462][ T796] net_ratelimit: 11 callbacks suppressed [ 135.838482][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.908988][ T8757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.003094][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.317983][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.318701][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.334606][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.812490][ T8804] __nla_validate_parse: 5 callbacks suppressed [ 136.812509][ T8804] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.785'. [ 136.877800][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.028643][ T8814] syzkaller0: entered promiscuous mode [ 137.034170][ T8814] syzkaller0: entered allmulticast mode [ 137.084416][ T8819] netlink: 32 bytes leftover after parsing attributes in process `syz.3.791'. [ 137.108994][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 137.172018][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 137.212664][ T8830] netlink: 'syz.1.793': attribute type 1 has an invalid length. [ 137.357794][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.385705][ T8843] netlink: 'syz.1.793': attribute type 10 has an invalid length. [ 137.429671][ T8843] netlink: 396 bytes leftover after parsing attributes in process `syz.1.793'. [ 137.457377][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.797'. [ 137.498683][ T8837] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 137.515556][ T8837] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 137.563640][ T8837] bond3: (slave ip6gre2): making interface the new active one [ 137.589446][ T8837] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 137.616538][ T8841] batadv_slave_0: entered promiscuous mode [ 137.668736][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 137.682741][ T8839] batadv_slave_0: left promiscuous mode [ 137.694899][ T8853] vlan1: entered allmulticast mode [ 137.701751][ T8853] veth0_vlan: entered allmulticast mode [ 137.891762][ T8870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.803'. [ 137.919008][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.961189][ T8873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.803'. [ 137.999762][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.806'. [ 138.275043][ T8893] netlink: 'syz.0.808': attribute type 3 has an invalid length. [ 138.397526][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.909273][ T8907] vlan0: entered promiscuous mode [ 138.921426][ T8907] geneve1: entered promiscuous mode [ 138.936089][ T8907] vlan0: entered allmulticast mode [ 138.959228][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.964192][ T8907] geneve1: entered allmulticast mode [ 139.002700][ T8914] lo: entered allmulticast mode [ 139.008492][ T8914] lo: left allmulticast mode [ 139.288731][ T8951] netlink: 'syz.1.818': attribute type 4 has an invalid length. [ 139.664799][ T8968] netlink: 'syz.2.819': attribute type 11 has an invalid length. [ 139.732533][ T8973] nbd: must specify at least one socket [ 139.978370][ T8985] nftables ruleset with unbound chain [ 140.093108][ T8995] Cannot find map_set index 65533 as target [ 140.137827][ T8999] netlink: 'syz.4.823': attribute type 10 has an invalid length. [ 140.252085][ T8999] bridge0: port 3(dummy0) entered disabled state [ 140.289737][ T8999] dummy0: left allmulticast mode [ 140.299411][ T8999] dummy0: left promiscuous mode [ 140.337392][ T8999] bridge0: port 3(dummy0) entered disabled state [ 140.373147][ T8999] dummy0: entered promiscuous mode [ 140.380450][ T8999] team0: Port device dummy0 added [ 140.640657][ T9022] netlink: 'syz.2.832': attribute type 12 has an invalid length. [ 140.676948][ T9022] netlink: 'syz.2.832': attribute type 29 has an invalid length. [ 140.889050][ T9037] tipc: Can't bind to reserved service type 1 [ 140.902853][ T9039] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 141.038071][ T6002] net_ratelimit: 11 callbacks suppressed [ 141.038092][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.518304][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.760887][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.077330][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.254775][ T9099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.262085][ T9099] IPv6: NLM_F_CREATE should be set when creating new route [ 142.399050][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.415498][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.423868][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.559405][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.825250][ T9106] netlink: 'syz.4.849': attribute type 3 has an invalid length. [ 142.844928][ T9106] __nla_validate_parse: 13 callbacks suppressed [ 142.844945][ T9106] netlink: 766 bytes leftover after parsing attributes in process `syz.4.849'. [ 142.910113][ T9125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.854'. [ 142.951360][ T9125] openvswitch: netlink: Flow key attr not present in new flow. [ 142.993814][ T1005] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.036377][ T1005] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.063863][ T1005] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.089681][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.855'. [ 143.099557][ T1005] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.174753][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.209758][ T9144] netlink: 104 bytes leftover after parsing attributes in process `syz.1.857'. [ 143.415890][ T9151] GUP no longer grows the stack in syz.4.859 (9151): 200000003000-20000000a000 (200000001000) [ 143.430936][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 143.449682][ T9151] CPU: 1 UID: 0 PID: 9151 Comm: syz.4.859 Not tainted syzkaller #0 PREEMPT(full) [ 143.449710][ T9151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 143.449728][ T9151] Call Trace: [ 143.449736][ T9151] [ 143.449745][ T9151] dump_stack_lvl+0xe8/0x150 [ 143.449785][ T9151] __get_user_pages+0x2453/0x29d0 [ 143.449818][ T9151] ? __lock_acquire+0x6b5/0x2cf0 [ 143.449863][ T9151] ? __gup_longterm_locked+0xc4e/0x1630 [ 143.449893][ T9151] ? down_read_killable+0x1bb/0x340 [ 143.449929][ T9151] __gup_longterm_locked+0xdcf/0x1630 [ 143.449984][ T9151] gup_fast_fallback+0x1d82/0x22e0 [ 143.450052][ T9151] ? __pfx_gup_fast_fallback+0x10/0x10 [ 143.450084][ T9151] ? is_valid_gup_args+0x11f/0x200 [ 143.450116][ T9151] ? get_user_pages_fast+0x4d/0xb0 [ 143.450149][ T9151] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 143.450179][ T9151] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 143.450204][ T9151] iov_iter_get_pages2+0x5e/0xa0 [ 143.450238][ T9151] __se_sys_vmsplice+0x7b3/0x1490 [ 143.450276][ T9151] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 143.450298][ T9151] ? __pfx_futex_wake+0x10/0x10 [ 143.450334][ T9151] ? lockdep_hardirqs_on+0x7a/0x110 [ 143.450415][ T9151] do_syscall_64+0x14d/0xf80 [ 143.450436][ T9151] ? trace_irq_disable+0x3b/0x150 [ 143.450452][ T9151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.450471][ T9151] ? clear_bhb_loop+0x40/0x90 [ 143.450496][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.450515][ T9151] RIP: 0033:0x7f364f79c819 [ 143.450541][ T9151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.450557][ T9151] RSP: 002b:00007f3650691028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 143.450585][ T9151] RAX: ffffffffffffffda RBX: 00007f364fa15fa0 RCX: 00007f364f79c819 [ 143.450598][ T9151] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 143.450610][ T9151] RBP: 00007f364f832c91 R08: 0000000000000000 R09: 0000000000000000 [ 143.450622][ T9151] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 143.450634][ T9151] R13: 00007f364fa16038 R14: 00007f364fa15fa0 R15: 00007ffc719bb428 [ 143.450664][ T9151] [ 144.131108][ T9180] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.867'. [ 144.447650][ T9196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.871'. [ 144.865078][ T9226] netlink: 164 bytes leftover after parsing attributes in process `syz.4.878'. [ 144.993697][ T9234] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 145.047776][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 145.937294][ T9282] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.894'. [ 146.318874][ T24] net_ratelimit: 8 callbacks suppressed [ 146.318887][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.880603][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.357513][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.920071][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.007350][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.397166][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.432600][ T9262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.477122][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.955171][ T9321] sctp: [Deprecated]: syz.1.907 (pid 9321) Use of int in max_burst socket option. [ 148.955171][ T9321] Use struct sctp_assoc_value instead [ 148.972059][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.122732][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 149.223302][ T9336] TCP: TCP_TX_DELAY enabled [ 149.281510][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 149.304296][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.912'. [ 149.440694][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.533181][ T9357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.549672][ T9357] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 149.560540][ T9356] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 149.671051][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.918'. [ 149.709814][ T9362] erspan0: entered promiscuous mode [ 149.726608][ T9362] macvtap1: entered promiscuous mode [ 149.734255][ T9362] macvtap1: entered allmulticast mode [ 149.740232][ T9362] erspan0: entered allmulticast mode [ 149.818719][ T9376] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 150.084533][ T9379] netlink: 228 bytes leftover after parsing attributes in process `syz.2.922'. [ 150.319861][ T9394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.327203][ T9394] IPv6: NLM_F_CREATE should be set when creating new route [ 150.366143][ T9396] wg1 speed is unknown, defaulting to 1000 [ 150.375991][ T9394] lo: entered allmulticast mode [ 150.400023][ T9394] tunl0: entered allmulticast mode [ 150.416946][ T9394] gre0: entered allmulticast mode [ 150.440385][ T9394] gretap0: entered allmulticast mode [ 150.458425][ T9394] ip_vti0: entered allmulticast mode [ 150.465656][ T9394] ip6_vti0: entered allmulticast mode [ 150.473859][ T9394] sit0: entered allmulticast mode [ 150.483942][ T9394] ip6tnl0: entered allmulticast mode [ 150.491704][ T9394] ip6gre0: entered allmulticast mode [ 150.502424][ T9394] syz_tun: entered allmulticast mode [ 150.513925][ T9394] ip6gretap0: entered allmulticast mode [ 150.526230][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.932'. [ 150.533681][ T9412] netlink: 'syz.0.934': attribute type 9 has an invalid length. [ 150.535961][ T9394] bridge0: entered allmulticast mode [ 150.543504][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 150.553593][ T9394] vcan0: entered allmulticast mode [ 150.565872][ T9394] team0: entered allmulticast mode [ 150.571351][ T9394] team_slave_0: entered allmulticast mode [ 150.577514][ T9394] team_slave_1: entered allmulticast mode [ 150.583363][ T9394] dummy0: entered allmulticast mode [ 150.592012][ T9394] nlmon0: entered allmulticast mode [ 150.599275][ T9394] caif0: entered allmulticast mode [ 150.604858][ T9394] vxcan0: entered allmulticast mode [ 150.611537][ T9394] vxcan1: entered allmulticast mode [ 150.618245][ T9394] veth0: entered allmulticast mode [ 150.625075][ T9394] veth1: entered allmulticast mode [ 150.634160][ T9394] wg0: entered allmulticast mode [ 150.641350][ T9394] wg1: entered allmulticast mode [ 150.648772][ T9394] wg2: entered allmulticast mode [ 150.654919][ T9394] veth0_to_bridge: entered allmulticast mode [ 150.666306][ T9394] veth1_to_bridge: entered allmulticast mode [ 150.678123][ T9394] veth0_to_bond: entered allmulticast mode [ 150.685528][ T9394] bond_slave_0: entered allmulticast mode [ 150.692424][ T9394] veth1_to_bond: entered allmulticast mode [ 150.701093][ T9394] bond_slave_1: entered allmulticast mode [ 150.708547][ T9394] veth0_to_team: entered allmulticast mode [ 150.717913][ T9394] veth1_to_team: entered allmulticast mode [ 150.728215][ T9394] veth0_to_batadv: entered allmulticast mode [ 150.735979][ T9394] batadv_slave_0: entered allmulticast mode [ 150.744061][ T9394] veth1_to_batadv: entered allmulticast mode [ 150.753316][ T9394] batadv_slave_1: entered allmulticast mode [ 150.761269][ T9394] xfrm0: entered allmulticast mode [ 150.771025][ T9394] veth0_to_hsr: entered allmulticast mode [ 150.779833][ T9394] hsr_slave_0: entered allmulticast mode [ 150.786704][ T9394] veth1_to_hsr: entered allmulticast mode [ 150.795093][ T9394] hsr_slave_1: entered allmulticast mode [ 150.802822][ T9394] hsr0: entered allmulticast mode [ 150.810029][ T9394] veth1_virt_wifi: entered allmulticast mode [ 150.818500][ T9394] veth0_virt_wifi: entered allmulticast mode [ 150.826030][ T9394] virt_wifi0: entered allmulticast mode [ 150.832402][ T9394] veth1_vlan: entered allmulticast mode [ 150.840191][ T9394] vlan0: entered allmulticast mode [ 150.845719][ T9394] macvlan0: entered allmulticast mode [ 150.853771][ T9394] macvlan1: entered allmulticast mode [ 150.862081][ T9394] ipvlan0: entered allmulticast mode [ 150.868013][ T9394] ipvlan1: entered allmulticast mode [ 150.873532][ T9394] veth1_macvtap: entered allmulticast mode [ 150.882572][ T9394] veth0_macvtap: entered allmulticast mode [ 150.892426][ T9394] macvtap0: entered allmulticast mode [ 150.900534][ T9394] macsec0: entered allmulticast mode [ 150.910069][ T9394] geneve0: entered allmulticast mode [ 150.917690][ T9394] geneve1: entered allmulticast mode [ 150.924997][ T9394] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 150.936160][ T9394] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 150.945890][ T9394] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 150.957946][ T9394] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 150.968060][ T9394] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 150.975223][ T9394] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 150.984051][ T9394] erspan1: entered allmulticast mode [ 150.991865][ T9394] bridge1: entered allmulticast mode [ 150.998404][ T9394] @: entered allmulticast mode [ 151.004346][ T9394] bond0: left promiscuous mode [ 151.009554][ T9394] mac80211_hwsim hwsim15 wlan2: entered allmulticast mode [ 151.016923][ T9394] team1: left promiscuous mode [ 151.022055][ T9394] mac80211_hwsim hwsim16 wlan3: entered allmulticast mode [ 151.030047][ T9394] gtp0: left promiscuous mode [ 151.036538][ T9394] bridge2: entered allmulticast mode [ 151.046722][ T9394] bridge3: entered allmulticast mode [ 151.054017][ T9394] bridge4: entered allmulticast mode [ 151.060059][ T9394] ipip0: entered allmulticast mode [ 151.065425][ T9394] gtp1: left promiscuous mode [ 151.071546][ T9394] gretap1: entered allmulticast mode [ 151.077823][ T9394] bridge5: entered allmulticast mode [ 151.085077][ T9394] macvtap1: left promiscuous mode [ 151.095754][ T9398] wg1 speed is unknown, defaulting to 1000 [ 151.140789][ T9412] netlink: 'syz.0.934': attribute type 9 has an invalid length. [ 151.146433][ T1005] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.149074][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 151.194816][ T1005] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.206907][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 151.216665][ T1005] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.240887][ T1005] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.353928][ T1005] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.370376][ T5905] net_ratelimit: 5 callbacks suppressed [ 151.370401][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.385157][ T1005] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.401160][ T1005] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.411294][ T1005] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.520214][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.528400][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.571732][ T9432] x_tables: unsorted entry at hook 1 [ 151.605368][ T9434] sctp: [Deprecated]: syz.4.941 (pid 9434) Use of int in max_burst socket option. [ 151.605368][ T9434] Use struct sctp_assoc_value instead [ 151.618479][ T9432] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 151.998692][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.084543][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.200020][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 152.557732][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.570885][ T5891] IPVS: starting estimator thread 0... [ 152.577802][ T9493] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 152.615980][ T9498] netlink: 32 bytes leftover after parsing attributes in process `syz.0.957'. [ 152.637695][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.638520][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.667601][ T9497] IPVS: using max 33 ests per chain, 79200 per kthread [ 152.715929][ T9503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.725170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.107456][ T9465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.348135][ T9508] netlink: 348 bytes leftover after parsing attributes in process `syz.0.961'. [ 155.367282][ T9511] netlink: 204 bytes leftover after parsing attributes in process `syz.1.960'. [ 155.533590][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 155.536490][ T9525] netlink: 'syz.1.966': attribute type 7 has an invalid length. [ 155.609395][ T9529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'. [ 155.759809][ T9525] netlink: 'syz.1.966': attribute type 7 has an invalid length. [ 155.773819][ T9538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.970'. [ 156.229874][ T9571] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 156.420930][ T9584] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 156.453278][ T9584] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 156.481635][ T9584] bond4: (slave ip6gre1): making interface the new active one [ 156.492400][ T9584] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 156.731205][ T796] net_ratelimit: 13 callbacks suppressed [ 156.731279][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.901406][ T9598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.982'. [ 156.934526][ T9599] netlink: 96 bytes leftover after parsing attributes in process `syz.4.983'. [ 156.949505][ T9601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.032940][ T9608] PKCS7: Unknown OID: [4] (bad) [ 157.037967][ T9608] PKCS7: Only support pkcs7_signedData type [ 157.250796][ T9619] netlink: 'syz.3.987': attribute type 10 has an invalid length. [ 157.258876][ T9619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.987'. [ 157.311467][ T9619] dummy0: entered promiscuous mode [ 157.322059][ T9619] dummy0: left allmulticast mode [ 157.333010][ T9619] team0: Port device dummy0 removed [ 157.340799][ T9619] bridge0: port 3(dummy0) entered blocking state [ 157.354408][ T9619] bridge0: port 3(dummy0) entered disabled state [ 157.361572][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.381004][ T9619] dummy0: entered allmulticast mode [ 157.390701][ T9624] tc_dump_action: action bad kind [ 157.500121][ T9632] netlink: 'syz.4.990': attribute type 1 has an invalid length. [ 157.551942][ T9632] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.609457][ T9637] bond5: (slave geneve2): making interface the new active one [ 157.669021][ T9637] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 157.758934][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.191369][ T9663] netlink: 276 bytes leftover after parsing attributes in process `syz.4.998'. [ 158.205408][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'. [ 158.289395][ T9665] syzkaller0: entered promiscuous mode [ 158.313046][ T9665] syzkaller0: entered allmulticast mode [ 158.327689][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.402877][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.419546][ T9669] netlink: 'syz.4.1000': attribute type 1 has an invalid length. [ 158.718009][ T9672] 8021q: adding VLAN 0 to HW filter on device bond8 [ 158.726978][ T9672] bond7: (slave bond8): making interface the new active one [ 158.734892][ T9672] bond7: (slave bond8): Enslaving as an active interface with an up link [ 158.744019][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.759981][ T9675] 8021q: adding VLAN 0 to HW filter on device bond7 [ 158.797753][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.954172][ T9699] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 159.143981][ T9713] lo speed is unknown, defaulting to 1000 [ 159.165276][ T9713] lo speed is unknown, defaulting to 1000 [ 159.177744][ T9713] lo speed is unknown, defaulting to 1000 [ 159.248561][ T9713] infiniband Syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 159.363877][ T9713] lo speed is unknown, defaulting to 1000 [ 159.380212][ T9713] lo speed is unknown, defaulting to 1000 [ 159.442555][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.463226][ T9713] lo speed is unknown, defaulting to 1000 [ 159.522417][ T9733] tc_dump_action: action bad kind [ 159.539696][ T9713] lo speed is unknown, defaulting to 1000 [ 159.540186][ T9733] tc_dump_action: action bad kind [ 159.567518][ T9713] lo speed is unknown, defaulting to 1000 [ 159.584977][ T9735] bpq0: entered promiscuous mode [ 159.609516][ T1005] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.641580][ T1005] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.680126][ T1005] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 159.839063][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.172785][ T9763] syzkaller1: entered promiscuous mode [ 160.195944][ T9763] syzkaller1: entered allmulticast mode [ 160.246090][ T9773] netlink: 'syz.2.1032': attribute type 11 has an invalid length. [ 160.749202][ T9798] netlink: 'syz.2.1039': attribute type 29 has an invalid length. [ 160.800800][ T9804] __nla_validate_parse: 10 callbacks suppressed [ 160.800820][ T9804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1040'. [ 160.930216][ T9804] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1040'. [ 160.974224][ T9804] hsr_slave_0 (unregistering): left promiscuous mode [ 161.036113][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 161.113218][ T9821] xfrm1: entered allmulticast mode [ 161.153465][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'. [ 161.358717][ T9781] syz.0.1034 (9781) used greatest stack depth: 17472 bytes left [ 161.767423][ T5905] net_ratelimit: 20 callbacks suppressed [ 161.767441][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.792743][ T9852] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 161.827097][ T9853] netlink: 'syz.1.1057': attribute type 1 has an invalid length. [ 161.918106][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.942853][ T9858] syzkaller0: entered promiscuous mode [ 161.972606][ T9858] syzkaller0: entered allmulticast mode [ 162.001167][ T9863] netlink: 'syz.2.1060': attribute type 1 has an invalid length. [ 162.018325][ T9858] xt_ecn: cannot match TCP bits for non-tcp packets [ 162.223219][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 162.239075][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.270322][ T9881] netlink: 'syz.2.1063': attribute type 2 has an invalid length. [ 162.289717][ T9887] block nbd1: NBD_DISCONNECT [ 162.380861][ T9890] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1067'. [ 162.400243][ T9888] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 162.416146][ T9888] bond2 (unregistering): Released all slaves [ 162.431380][ T9892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.440076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.468170][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 162.551398][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 162.560568][ T9901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1072'. [ 162.562014][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.612798][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 162.678070][ T9901] macvlan2: entered allmulticast mode [ 162.791201][ T9913] openvswitch: netlink: Missing valid actions attribute. [ 162.864196][ T9913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.957965][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.378898][ T9959] netlink: 'syz.2.1085': attribute type 1 has an invalid length. [ 163.509802][ T9957] IPv6: sit1: Disabled Multicast RS [ 163.557976][ T9957] sit1: entered allmulticast mode [ 163.602151][ T9972] netlink: 'syz.4.1089': attribute type 1 has an invalid length. [ 163.844061][ T9989] netlink: 'syz.4.1091': attribute type 5 has an invalid length. [ 164.252693][ T9986] vcan1: entered promiscuous mode [ 164.281108][T10016] netlink: 'syz.2.1101': attribute type 1 has an invalid length. [ 164.293785][ T9986] vcan1: entered allmulticast mode [ 164.305039][T10019] netlink: 'syz.2.1101': attribute type 1 has an invalid length. [ 164.730457][T10044] wg1 speed is unknown, defaulting to 1000 [ 164.738540][T10044] lo speed is unknown, defaulting to 1000 [ 165.896402][T10114] netlink: 'syz.4.1124': attribute type 9 has an invalid length. [ 166.140682][T10118] __nla_validate_parse: 16 callbacks suppressed [ 166.140701][T10118] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1127'. [ 166.353479][T10134] netlink: 'syz.2.1129': attribute type 30 has an invalid length. [ 166.413937][T10143] netlink: 'syz.4.1132': attribute type 1 has an invalid length. [ 166.454151][T10143] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1132'. [ 166.591292][T10161] wg1 speed is unknown, defaulting to 1000 [ 166.746064][T10169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1137'. [ 166.827146][T10169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1137'. [ 166.970414][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 166.981077][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 167.084107][T10191] xt_l2tp: v2 doesn't support IP mode [ 167.117862][ T5891] net_ratelimit: 13 callbacks suppressed [ 167.117881][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.529149][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.559653][T10217] netlink: 'syz.0.1148': attribute type 1 has an invalid length. [ 167.765724][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.837512][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.895670][T10241] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1153'. [ 168.044807][T10247] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1155'. [ 168.106222][T10249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.137846][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 168.147419][T10248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.167629][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.175948][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 168.380952][T10273] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 168.590708][T10288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.599648][T10288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.755407][T10296] tipc: Invalid UDP bearer configuration [ 168.755461][T10296] tipc: Enabling of bearer rejected, failed to enable media [ 169.823660][T10376] netlink: 'syz.2.1190': attribute type 1 has an invalid length. [ 170.048846][T10393] macvtap2: entered promiscuous mode [ 170.054190][T10393] erspan0: entered promiscuous mode [ 170.075955][T10393] macvtap2: entered allmulticast mode [ 170.099924][T10393] erspan0: entered allmulticast mode [ 171.088655][T10478] xt_hashlimit: overflow, rate too high: 0 [ 171.192738][T10478] 8021q: adding VLAN 0 to HW filter on device bond9 [ 171.284253][T10488] __nla_validate_parse: 13 callbacks suppressed [ 171.284271][T10488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1221'. [ 171.304038][T10488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1221'. [ 171.670837][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1229'. [ 171.775355][T10523] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 171.787839][T10523] xt_SECMARK: invalid mode: 9 [ 171.973552][T10535] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1234'. [ 171.996126][T10540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1235'. [ 172.289058][T10555] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1241'. [ 172.317926][ T24] net_ratelimit: 20 callbacks suppressed [ 172.317943][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.579561][T10584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1248'. [ 172.620989][T10581] syzkaller0: entered promiscuous mode [ 172.626525][T10581] syzkaller0: entered allmulticast mode [ 172.633196][T10586] xt_TCPMSS: Only works on TCP SYN packets [ 172.653180][T10584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1248'. [ 172.732860][T10591] netlink: 'syz.2.1250': attribute type 1 has an invalid length. [ 172.786052][T10593] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 172.823733][T10593] bond4 (unregistering): Released all slaves [ 172.850787][T10594] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 172.938409][T10591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1250'. [ 172.942592][T10598] 8021q: adding VLAN 0 to HW filter on device bond9 [ 172.970011][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.977685][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1254'. [ 172.981058][T10598] bond8: (slave bond9): making interface the new active one [ 172.999389][T10598] bond8: (slave bond9): Enslaving as an active interface with an up link [ 173.020599][T10609] bond8: (slave gretap1): Enslaving as a backup interface with an up link [ 173.031116][T10591] 8021q: adding VLAN 0 to HW filter on device bond8 [ 173.302710][T10634] xt_cgroup: invalid path, errno=-2 [ 173.338933][T10630] syzkaller0: entered promiscuous mode [ 173.344657][T10630] syzkaller0: entered allmulticast mode [ 173.357843][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.413697][T10637] x_tables: duplicate entry at hook 3 [ 173.600620][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.691504][T10651] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 173.928771][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.000815][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.397950][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.917812][T10641] netlink: 'syz.1.1264': attribute type 2 has an invalid length. [ 174.956504][T10668] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 175.043696][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.223850][T10697] bond0: entered promiscuous mode [ 175.236722][T10697] bond_slave_0: entered promiscuous mode [ 175.244146][T10697] bond_slave_1: entered promiscuous mode [ 175.255122][T10697] bond0: left promiscuous mode [ 175.271324][T10697] bond_slave_0: left promiscuous mode [ 175.281136][T10697] bond_slave_1: left promiscuous mode [ 175.322040][T10696] tap0: tun_chr_ioctl cmd 2148553947 [ 175.438088][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.681528][T10731] netlink: 'syz.3.1285': attribute type 75 has an invalid length. [ 175.945975][T10751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.165644][T10766] netlink: 'syz.2.1295': attribute type 4 has an invalid length. [ 176.405840][T10782] macvlan0: entered promiscuous mode [ 176.407819][T10785] delete_channel: no stack [ 176.411426][T10782] macvlan0: left allmulticast mode [ 176.423699][T10782] __nla_validate_parse: 12 callbacks suppressed [ 176.423715][T10782] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1300'. [ 176.681411][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'. [ 176.889211][T10821] netlink: 'syz.0.1306': attribute type 33 has an invalid length. [ 176.919640][T10821] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 176.956009][ T5837] Bluetooth: hci4: link tx timeout [ 176.963639][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.973159][ T51] Bluetooth: hci4: link tx timeout [ 176.982298][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.992219][T10821] bond2 (unregistering): Released all slaves [ 177.213925][T10846] netlink: 'syz.1.1313': attribute type 1 has an invalid length. [ 177.264361][T10846] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.319344][T10846] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.326666][T10846] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 177.338538][T10846] bond4: (slave vcan0): Error -95 calling set_mac_address [ 177.453409][T10858] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1317'. [ 177.517767][ T24] net_ratelimit: 5 callbacks suppressed [ 177.517783][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.524519][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1317'. [ 177.644927][T10871] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.657358][T10870] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.728150][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1322'. [ 177.795931][T10875] 8021q: adding VLAN 0 to HW filter on device bond10 [ 177.834406][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1324'. [ 177.945397][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1329'. [ 177.989834][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.999961][ T24] wg1 speed is unknown, defaulting to 1000 [ 178.011095][T10882] netlink: 'syz.1.1324': attribute type 1 has an invalid length. [ 178.165638][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.225705][T10914] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1332'. [ 178.401385][T10920] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 178.415720][T10920] bond0: (slave wlan1): Opening slave failed [ 178.446411][T10928] bridge_slave_0: invalid flags given to default FDB implementation [ 178.560866][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.606013][T10938] netlink: 'syz.4.1341': attribute type 1 has an invalid length. [ 178.648352][T10943] netlink: 'syz.0.1343': attribute type 12 has an invalid length. [ 178.880079][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.920459][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 178.942075][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 179.037733][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 179.159104][T10970] syzkaller0: entered promiscuous mode [ 179.164712][T10970] syzkaller0: entered allmulticast mode [ 179.164737][T10977] netlink: 'syz.2.1354': attribute type 39 has an invalid length. [ 179.187920][T10977] hsr_slave_1 (unregistering): left promiscuous mode [ 179.197633][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.398963][T10983] netlink: 'syz.2.1356': attribute type 21 has an invalid length. [ 179.601703][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.763266][T10991] Cannot find del_set index 4 as target [ 181.748838][T10948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.924711][T10996] netlink: 'syz.4.1358': attribute type 4 has an invalid length. [ 181.988290][T10998] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 182.212589][T11016] __nla_validate_parse: 2 callbacks suppressed [ 182.212609][T11016] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1364'. [ 182.358115][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 182.510431][T11036] bond0: (slave gre0): refused to change device type [ 182.659405][T11053] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1375'. [ 182.682268][T11055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1373'. [ 182.705349][T11055] F: renamed from gre0 [ 182.729055][T11055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1373'. [ 182.910438][T11063] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 182.959453][T11068] netlink: zone id is out of range [ 182.964871][T11068] netlink: del zone limit has 4 unknown bytes [ 182.984474][T11063] bond1: entered promiscuous mode [ 183.001255][T11063] bond1: entered allmulticast mode [ 183.011544][T11063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.067721][T11069] macvlan3: entered promiscuous mode [ 183.082232][T11069] macvlan3: entered allmulticast mode [ 183.103337][T11069] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 183.527456][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1388'. [ 183.622938][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1391'. [ 183.821785][T11114] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1389'. [ 183.872872][T11113] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 183.906824][T11120] netlink: 'syz.3.1397': attribute type 1 has an invalid length. [ 183.958878][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1394'. [ 183.968653][T11120] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1397'. [ 184.021757][T11122] bridge7: entered allmulticast mode [ 184.187737][T11129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.938455][T11160] netlink: 'syz.0.1408': attribute type 1 has an invalid length. [ 184.986813][T11165] bridge5: entered promiscuous mode [ 184.994066][T11165] bridge5: entered allmulticast mode [ 185.010835][T11165] team0: Port device bridge5 added [ 185.049209][T11160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.059816][T11162] bond2: entered allmulticast mode [ 185.068136][T11165] bridge0: port 2(team0) entered blocking state [ 185.075959][T11165] bridge0: port 2(team0) entered disabled state [ 185.083454][T11165] team0: entered allmulticast mode [ 185.089161][T11165] team_slave_0: entered allmulticast mode [ 185.094928][T11165] team_slave_1: entered allmulticast mode [ 185.103498][T11165] team0: entered promiscuous mode [ 185.108637][T11165] team_slave_0: entered promiscuous mode [ 185.114481][T11165] team_slave_1: entered promiscuous mode [ 185.232452][T11179] netlink: 'syz.4.1413': attribute type 2 has an invalid length. [ 185.372141][T11183] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 185.392999][T11183] bond5 (unregistering): Released all slaves [ 185.573914][T11204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.825711][T11217] bond2: option min_links: invalid value (18446744073709551614) [ 185.907963][T11217] bond2: option min_links: allowed values 0 - 2147483647 [ 185.945861][T11217] bond2 (unregistering): Released all slaves [ 186.039234][T11224] netlink: 'syz.2.1425': attribute type 1 has an invalid length. [ 186.524473][T11256] netlink: 'syz.2.1437': attribute type 1 has an invalid length. [ 186.765958][T11272] sit1: entered promiscuous mode [ 186.780406][T11272] sit1: entered allmulticast mode [ 186.913563][T11278] syzkaller0: entered promiscuous mode [ 186.920490][T11278] syzkaller0: entered allmulticast mode [ 186.939135][T11278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.132802][T11287] netlink: 'syz.2.1447': attribute type 10 has an invalid length. [ 187.144274][T11287] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.153869][T11287] bridge_slave_1: left allmulticast mode [ 187.160890][T11287] bridge_slave_1: left promiscuous mode [ 187.167633][T11287] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.279112][T11287] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 187.337709][T11286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.389207][T11300] __nla_validate_parse: 9 callbacks suppressed [ 187.389225][T11300] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1453'. [ 188.017012][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 188.034463][T11327] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1458'. [ 188.044191][T11327] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 188.056303][T11327] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1458'. [ 188.090593][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'. [ 188.121299][T11308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1455'. [ 188.222322][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1458'. [ 188.451072][T11325] macsec1: entered promiscuous mode [ 188.467347][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079b72800: rx timeout, send abort [ 188.490077][T11308] wg1 speed is unknown, defaulting to 1000 [ 188.684911][T11347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.888606][T11354] netlink: 'syz.4.1465': attribute type 1 has an invalid length. [ 188.905218][T11356] tipc: Started in network mode [ 188.917454][T11356] tipc: Node identity e205e34cc49b, cluster identity 4711 [ 188.926290][T11356] tipc: Enabled bearer , priority 0 [ 188.933011][T11354] netlink: 'syz.4.1465': attribute type 2 has an invalid length. [ 189.090769][T11356] syzkaller0: entered promiscuous mode [ 189.110957][T11356] syzkaller0: entered allmulticast mode [ 189.129748][T11356] tipc: Resetting bearer [ 189.139789][T11368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1469'. [ 189.185452][T11355] tipc: Resetting bearer [ 189.204551][T11371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1470'. [ 190.970964][T11355] tipc: Disabling bearer [ 191.001765][ T10] tipc: Node number set to 647947084 [ 191.198274][T11434] netlink: 'syz.2.1477': attribute type 1 has an invalid length. [ 191.306318][T11434] 8021q: adding VLAN 0 to HW filter on device bond10 [ 191.325365][T11446] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 191.337809][T11439] ip6gre1: entered promiscuous mode [ 191.343630][T11439] ip6gre1: entered allmulticast mode [ 191.442968][T11452] netlink: 'syz.2.1481': attribute type 2 has an invalid length. [ 191.452195][T11452] netlink: 'syz.2.1481': attribute type 2 has an invalid length. [ 191.664044][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 191.674727][T11467] openvswitch: netlink: Unknown nsh attribute 0 [ 194.247446][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.317646][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 196.320434][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 196.326612][ T5832] Bluetooth: hci1: command 0x0c20 tx timeout [ 215.162797][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1487'. [ 215.171936][T11475] openvswitch: netlink: Flow actions attr not present in new flow. [ 215.192105][T11476] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.192983][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'. [ 215.210610][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'. [ 215.215593][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1486'. [ 215.222454][T11484] netlink: 'syz.4.1490': attribute type 1 has an invalid length. [ 215.260956][T11482] team0: Port device team_slave_0 removed [ 215.291400][T11488] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1491'. [ 215.344594][T11484] 8021q: adding VLAN 0 to HW filter on device bond12 [ 215.354281][T11494] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1491'. [ 215.374282][T11480] bond12: (slave veth0_to_bond): making interface the new active one [ 215.384794][T11480] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 215.448600][ T12] bond12: (slave veth0_to_bond): link status definitely down, disabling slave [ 215.489021][ T12] bond12: now running without any active interface! [ 215.512404][T11500] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1493'. [ 215.533718][T11503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.543006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.570547][T11500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1493'. [ 215.625521][T11505] netlink: 'syz.0.1493': attribute type 1 has an invalid length. [ 215.665742][T11505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.745653][T11513] netlink: 'syz.0.1498': attribute type 10 has an invalid length. [ 215.818216][T11514] netlink: 'syz.0.1498': attribute type 10 has an invalid length. [ 215.907617][T11529] netlink: 'syz.2.1503': attribute type 3 has an invalid length. [ 215.930449][T11530] netlink: 'syz.0.1502': attribute type 11 has an invalid length. [ 215.938707][T11530] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1502'. [ 216.051043][T11531] netlink: 'syz.1.1501': attribute type 16 has an invalid length. [ 216.078032][T11531] netlink: 'syz.1.1501': attribute type 17 has an invalid length. [ 216.086485][T11535] veth5: entered allmulticast mode [ 216.114768][T11541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1506'. [ 216.141678][T11531] bridge0: port 2(team0) entered blocking state [ 216.148171][T11531] bridge0: port 2(team0) entered forwarding state [ 216.161851][T11531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.292317][T11545] netlink: 'syz.3.1507': attribute type 16 has an invalid length. [ 216.317042][T11545] netlink: 'syz.3.1507': attribute type 17 has an invalid length. [ 216.329713][T11545] lo: left allmulticast mode [ 216.349173][T11545] tunl0: left allmulticast mode [ 216.372881][T11545] F: left allmulticast mode [ 216.386126][T11545] gretap0: left allmulticast mode [ 216.394390][T11545] erspan0: left promiscuous mode [ 216.400574][T11545] erspan0: left allmulticast mode [ 216.408260][T11545] ip_vti0: left allmulticast mode [ 216.414774][T11545] ip6_vti0: left allmulticast mode [ 216.422382][T11545] sit0: left allmulticast mode [ 216.432185][T11545] ip6tnl0: left allmulticast mode [ 216.441971][T11545] ip6gre0: left allmulticast mode [ 216.470852][T11545] syz_tun: left allmulticast mode [ 216.490084][T11545] ip6gretap0: left allmulticast mode [ 216.498438][T11545] bridge0: left allmulticast mode [ 216.504725][T11545] vcan0: left allmulticast mode [ 216.511887][T11545] team0: left allmulticast mode [ 216.520309][T11545] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.530521][T11545] bridge0: port 3(dummy0) entered blocking state [ 216.537026][T11545] bridge0: port 3(dummy0) entered listening state [ 216.544780][T11545] bridge0: port 3(dummy0) entered disabled state [ 216.551847][T11545] nlmon0: left allmulticast mode [ 216.558162][T11545] caif0: left allmulticast mode [ 216.563010][T11545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.588291][T11531] gretap0: entered promiscuous mode [ 216.594117][T11531] vlan3: entered promiscuous mode [ 216.983998][T11580] netlink: 'syz.1.1517': attribute type 5 has an invalid length. [ 216.994980][T11587] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 217.041751][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.051635][T11584] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 217.230926][T11591] bond11: entered promiscuous mode [ 217.239642][T11591] 8021q: adding VLAN 0 to HW filter on device bond11 [ 217.758891][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.821411][T11646] IPv6: sit1: Disabled Multicast RS [ 218.077230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.086028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.095301][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.158914][T11731] wireguard1: entered promiscuous mode [ 219.164447][T11731] wireguard1: entered allmulticast mode [ 219.253622][T11735] syzkaller0: entered promiscuous mode [ 219.260115][T11735] syzkaller0: entered allmulticast mode [ 219.403419][T11750] netlink: 'syz.1.1562': attribute type 11 has an invalid length. [ 219.430362][T11750] netlink: 'syz.1.1562': attribute type 11 has an invalid length. [ 220.479296][ T1150] net_ratelimit: 48 callbacks suppressed [ 220.479315][ T1150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.503946][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.519875][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.640386][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.694089][T11751] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 220.701840][T11751] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 220.798050][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.688593][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.917530][T11838] __nla_validate_parse: 23 callbacks suppressed [ 221.917550][T11838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1584'. [ 222.094505][T11843] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.127097][T11846] SET target dimension over the limit! [ 222.250490][T11850] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1588'. [ 222.296641][T11857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1590'. [ 222.482595][T11861] syzkaller0: entered promiscuous mode [ 222.489407][T11861] syzkaller0: entered allmulticast mode [ 222.499157][T11857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1590'. [ 222.528236][T11861] 0: reclassify loop, rule prio 0, protocol 800 [ 222.577748][T11869] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1589'. [ 222.601040][T11857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1590'. [ 222.718219][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.742301][T11857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1590'. [ 222.809654][T11857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1590'. [ 222.811102][T11878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.888785][T11857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1590'. [ 222.891298][T11881] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 222.948410][T11883] validate_nla: 8 callbacks suppressed [ 222.948425][T11883] netlink: 'syz.0.1597': attribute type 1 has an invalid length. [ 222.962721][T11883] netlink: 'syz.0.1597': attribute type 4 has an invalid length. [ 222.963248][T11857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1590'. [ 223.172875][T11890] netlink: 'syz.1.1600': attribute type 2 has an invalid length. [ 223.469796][T11901] syzkaller0: entered promiscuous mode [ 223.475488][T11901] syzkaller0: entered allmulticast mode [ 223.516693][T11906] netlink: 'syz.3.1604': attribute type 8 has an invalid length. [ 223.536214][T11909] bond13: entered promiscuous mode [ 223.722877][T11921] netlink: 'syz.0.1607': attribute type 1 has an invalid length. [ 223.757869][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.938122][T11921] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 225.104327][T11934] netlink: 'syz.0.1612': attribute type 21 has an invalid length. [ 225.168735][T11945] netlink: 'syz.0.1612': attribute type 21 has an invalid length. [ 225.184355][T11945] netlink: 'syz.0.1612': attribute type 4 has an invalid length. [ 225.243235][T11945] netlink: 'syz.0.1612': attribute type 5 has an invalid length. [ 225.262671][T11934] netlink: 'syz.0.1612': attribute type 4 has an invalid length. [ 225.499889][T11967] vlan2: entered allmulticast mode [ 225.506449][T11967] gretap0: entered allmulticast mode [ 225.616428][T11970] syzkaller1: entered promiscuous mode [ 225.622995][T11970] syzkaller1: entered allmulticast mode [ 225.838441][ T24] net_ratelimit: 2 callbacks suppressed [ 225.838460][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.918323][T12001] wg1 speed is unknown, defaulting to 1000 [ 226.172655][T12021] veth0: entered promiscuous mode [ 226.181773][T12021] x_tables: duplicate underflow at hook 2 [ 226.474007][T12042] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.509813][T12042] bond4: (slave veth9): Enslaving as an active interface with a down link [ 226.587891][T12042] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 226.595463][T12042] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 226.895140][T12011] veth0: left promiscuous mode [ 227.271509][T12102] __nla_validate_parse: 18 callbacks suppressed [ 227.271527][T12102] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1653'. [ 227.354297][T12096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.370406][T12097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.612292][T12131] ksmbd: Unknown IPC event: 3, ignore. [ 227.789494][T12142] sctp: [Deprecated]: syz.4.1664 (pid 12142) Use of int in max_burst socket option deprecated. [ 227.789494][T12142] Use struct sctp_assoc_value instead [ 227.917687][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.008272][T12153] validate_nla: 7 callbacks suppressed [ 228.008291][T12153] netlink: 'syz.4.1667': attribute type 4 has an invalid length. [ 228.050165][T12153] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1667'. [ 228.067459][T12157] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 228.100214][T12157] netlink: 'syz.3.1668': attribute type 3 has an invalid length. [ 228.147061][T12157] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1668'. [ 228.208153][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'. [ 228.271197][T12170] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 228.379762][T12186] xt_ecn: cannot match TCP bits for non-tcp packets [ 228.819325][T12202] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1682'. [ 228.846677][T12211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1685'. [ 228.912598][T12219] netlink: 'syz.0.1690': attribute type 21 has an invalid length. [ 228.930662][T12219] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1690'. [ 228.957414][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.962641][T12219] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1690'. [ 229.080953][T12232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.149413][T12236] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1696'. [ 229.177894][T12236] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1696'. [ 229.233191][T12236] pimreg: entered allmulticast mode [ 229.355992][T12254] geneve5: entered promiscuous mode [ 229.372873][ T7996] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 33119 - 0 [ 229.402143][ T7996] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 33119 - 0 [ 229.426073][ T7996] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 33119 - 0 [ 229.633596][T12273] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.658091][T12273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.665448][T12273] IPv6: NLM_F_CREATE should be set when creating new route [ 229.672998][T12273] IPv6: NLM_F_CREATE should be set when creating new route [ 229.920091][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.999021][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.085163][ T7996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.093554][ T7996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.103367][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.113727][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.041495][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.458889][T12294] bridge8: port 1(veth3) entered blocking state [ 231.475945][T12294] bridge8: port 1(veth3) entered disabled state [ 231.497351][T12294] veth3: entered allmulticast mode [ 231.504793][T12294] veth3: entered promiscuous mode [ 231.549021][T12297] bridge8: port 2(veth5) entered blocking state [ 231.565743][T12297] bridge8: port 2(veth5) entered disabled state [ 231.573669][T12297] veth5: entered allmulticast mode [ 231.591805][T12297] veth5: entered promiscuous mode [ 231.623896][T12296] IPv6: sit2: Disabled Multicast RS [ 231.639077][T12296] sit2: entered allmulticast mode [ 231.691554][T12316] syz_tun: entered allmulticast mode [ 231.706347][T12317] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.081540][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.106112][T12349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.399739][T12362] __nla_validate_parse: 8 callbacks suppressed [ 232.399758][T12362] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1724'. [ 232.444498][T12367] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1724'. [ 232.655093][T12389] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.693568][T12391] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 232.698142][T12378] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 232.763227][T12384] wg1 speed is unknown, defaulting to 1000 [ 232.811317][T12384] lo speed is unknown, defaulting to 1000 [ 232.854823][T12401] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1733'. [ 232.995714][T12401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1733'. [ 233.118790][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.127143][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.259202][T12421] netlink: 'syz.4.1737': attribute type 1 has an invalid length. [ 233.562716][T12422] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 233.592059][T12422] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 233.645059][T12426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1739'. [ 233.744014][ T5489] veth0_macvtap: left promiscuous mode [ 233.769362][T12444] netlink: 'syz.4.1744': attribute type 10 has an invalid length. [ 233.855912][T12444] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.897259][T12444] bridge_slave_1: left allmulticast mode [ 233.922110][T12444] bridge_slave_1: left promiscuous mode [ 233.943253][T12444] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.988982][T12444] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 234.052564][T12457] syzkaller0: entered promiscuous mode [ 234.060555][T12457] syzkaller0: entered allmulticast mode [ 234.088670][T12459] block nbd0: not configured, cannot reconfigure [ 234.167627][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.355671][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'. [ 235.201104][ T7998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.211410][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.228822][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.245435][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.080163][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'. [ 236.122909][T12507] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1757'. [ 236.237868][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.279728][T12521] wg1: entered allmulticast mode [ 236.296444][T12520] netlink: 'syz.1.1760': attribute type 10 has an invalid length. [ 236.322461][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1761'. [ 236.365867][ T9] wg1 speed is unknown, defaulting to 1000 [ 236.388418][ T9] syz2: Port: 1 Link DOWN [ 236.413049][T12531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1763'. [ 236.460483][T12524] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 236.500623][T12524] netlink: 'syz.4.1761': attribute type 10 has an invalid length. [ 236.520234][T12524] veth0_vlan: left promiscuous mode [ 236.527769][T12524] veth0_vlan: entered promiscuous mode [ 236.538260][T12524] team0: Device veth0_vlan failed to register rx_handler [ 236.825763][T12549] netlink: 'syz.1.1766': attribute type 25 has an invalid length. [ 236.841055][T12538] wg1 speed is unknown, defaulting to 1000 [ 236.893264][T12538] lo speed is unknown, defaulting to 1000 [ 236.928270][T12549] netlink: 'syz.1.1766': attribute type 25 has an invalid length. [ 236.954518][T12556] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.962231][T12556] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.076204][T12556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.089904][T12556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.163403][T12556] vlan0: left promiscuous mode [ 237.169219][T12556] geneve1: left promiscuous mode [ 237.174740][T12556] vlan0: left allmulticast mode [ 237.181097][T12556] geneve1: left allmulticast mode [ 237.213206][T12556] bridge7: left allmulticast mode [ 237.219996][T12556] bond2: left allmulticast mode [ 237.225251][T12556] ip6gre1: left promiscuous mode [ 237.231059][T12556] ip6gre1: left allmulticast mode [ 237.275062][ T1150] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.278036][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.290631][ T1150] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.292856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.310044][ T1150] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.320212][ T1150] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.352276][ T1150] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.372840][ T1150] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.441990][ T1150] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.465113][ T1150] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.555503][T12584] netlink: 'syz.3.1774': attribute type 25 has an invalid length. [ 237.689194][T12591] netlink: 'syz.1.1778': attribute type 3 has an invalid length. [ 237.756317][T12598] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 237.861043][T12605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.973950][T12612] __nla_validate_parse: 70 callbacks suppressed [ 237.973968][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1782'. [ 238.115755][T12624] F: renamed from wg1 [ 238.276302][T12637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1790'. [ 238.296785][T12637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.319000][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.329109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.340220][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.494453][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 238.608507][T12654] netlink: 'syz.4.1795': attribute type 14 has an invalid length. [ 238.616522][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 238.681033][T12654] netlink: 'syz.4.1795': attribute type 14 has an invalid length. [ 238.717947][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 238.769655][T12664] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.786609][T12664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.794119][T12664] IPv6: NLM_F_CREATE should be set when creating new route [ 239.358288][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.959452][T12611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.973815][T12667] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1800'. [ 241.227514][T12691] syzkaller0: entered promiscuous mode [ 241.233187][T12691] syzkaller0: entered allmulticast mode [ 241.349572][T12704] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1808'. [ 241.378348][ T9] net_ratelimit: 4 callbacks suppressed [ 241.378368][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.437885][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.446196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.631690][T12719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.633407][T12721] netlink: 'syz.3.1813': attribute type 1 has an invalid length. [ 241.692289][T12725] IPVS: Error connecting to the multicast addr [ 241.816805][T12735] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1817'. [ 242.137463][T12753] netlink: 'syz.2.1821': attribute type 10 has an invalid length. [ 242.145333][T12753] netlink: 396 bytes leftover after parsing attributes in process `syz.2.1821'. [ 242.200757][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'. [ 242.478410][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.487237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.679076][T12788] delete_channel: no stack [ 242.743559][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.847394][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.957172][T12812] IPVS: Unknown mcast interface: vcan0 [ 243.519700][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.528608][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.164232][T12842] syzkaller0: entered promiscuous mode [ 245.178638][T12842] syzkaller0: entered allmulticast mode [ 245.285072][T12868] syzkaller0: entered promiscuous mode [ 245.292085][T12868] syzkaller0: entered allmulticast mode [ 246.638110][ T796] net_ratelimit: 5 callbacks suppressed [ 246.638129][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.652817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.692749][T12904] __nla_validate_parse: 2 callbacks suppressed [ 246.692766][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1854'. [ 247.448308][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.681161][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.689999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.107791][T12910] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 248.108488][T12914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.133441][T12915] kthread_run failed with err -4 [ 248.244889][T12926] netlink: 'syz.2.1858': attribute type 1 has an invalid length. [ 248.288078][T12928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1858'. [ 248.360059][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1864'. [ 248.393354][T12935] siw: device registration error -23 [ 248.454999][T12947] tipc: Enabling of bearer rejected, already enabled [ 248.482652][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1867'. [ 248.497373][T12947] tipc: Disabling bearer [ 248.519755][T12949] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1867'. [ 248.546611][T12958] sctp: [Deprecated]: syz.3.1870 (pid 12958) Use of int in max_burst socket option. [ 248.546611][T12958] Use struct sctp_assoc_value instead [ 248.721888][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.730826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.813471][T12980] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1874'. [ 248.825608][T12970] syzkaller0: entered promiscuous mode [ 248.830105][T12982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1875'. [ 248.832817][T12970] syzkaller0: entered allmulticast mode [ 249.282037][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.290594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.528284][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1877'. [ 249.537930][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1877'. [ 249.669855][T13007] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 250.977543][T13021] F speed is unknown, defaulting to 1000 [ 250.992744][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1884'. [ 251.007073][T13021] lo speed is unknown, defaulting to 1000 [ 251.126157][T13047] sctp: [Deprecated]: syz.0.1887 (pid 13047) Use of int in maxseg socket option. [ 251.126157][T13047] Use struct sctp_assoc_value instead [ 251.354083][T13053] F speed is unknown, defaulting to 1000 [ 251.372253][T13053] lo speed is unknown, defaulting to 1000 [ 251.770058][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'. [ 251.838395][ T796] net_ratelimit: 5 callbacks suppressed [ 251.838414][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.852920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.005310][T13087] hsr_slave_0 (unregistering): left promiscuous mode [ 252.036334][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1901'. [ 252.087191][T13116] chnl_net:caif_netlink_parms(): no params data found [ 252.239033][T13120] bond12: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 252.270621][T13120] bond12 (unregistering): Released all slaves [ 252.559798][T13139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1912'. [ 252.877944][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.886362][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.944461][T13170] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20004 [ 253.144307][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1925'. [ 253.232925][T13188] netlink: 'syz.4.1928': attribute type 10 has an invalid length. [ 253.256038][T13188] netlink: 'syz.4.1928': attribute type 10 has an invalid length. [ 253.296436][T13187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.362485][T13196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1927'. [ 253.373384][T13196] tc_dump_action: action bad kind [ 253.520688][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.521006][T13205] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.604689][T13208] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.1934'. [ 253.606324][T13205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1932'. [ 253.668912][T13211] netlink: 'syz.2.1935': attribute type 1 has an invalid length. [ 253.700896][T13211] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 253.734303][T13217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1936'. [ 253.918572][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.927005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.138260][T13241] batadv0: entered allmulticast mode [ 254.165261][T13244] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 [ 254.343494][T13254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1947'. [ 254.639161][T13274] netlink: 'syz.4.1953': attribute type 21 has an invalid length. [ 254.652892][T13274] netlink: 'syz.4.1953': attribute type 6 has an invalid length. [ 254.663090][T13274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1953'. [ 255.393224][T13322] IPv6: Can't replace route, no match found [ 255.412253][T13322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.419634][T13322] IPv6: NLM_F_CREATE should be set when creating new route [ 255.637853][T13337] bond12 (unregistering): Released all slaves [ 255.682286][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.730428][T13343] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 255.744797][T13343] bond12 (unregistering): Released all slaves [ 255.799527][T13353] sctp: [Deprecated]: syz.0.1976 (pid 13353) Use of int in max_burst socket option. [ 255.799527][T13353] Use struct sctp_assoc_value instead [ 255.944368][T13365] netlink: 'syz.3.1979': attribute type 10 has an invalid length. [ 256.091958][T13380] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 256.208709][T13380] bond2: entered promiscuous mode [ 256.214230][T13380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.517998][T13404] syzkaller0: entered promiscuous mode [ 256.524294][T13404] syzkaller0: entered allmulticast mode [ 256.738461][T13414] TC_ACT_REPEAT abuse ? [ 257.015042][T13426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.032391][T13424] syzkaller0: entered promiscuous mode [ 257.038616][T13424] syzkaller0: entered allmulticast mode [ 257.049093][T13424] netlink: 'syz.2.1995': attribute type 2 has an invalid length. [ 257.074332][T13424] __nla_validate_parse: 16 callbacks suppressed [ 257.074350][T13424] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1995'. [ 259.274858][T13391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.401411][T13437] netlink: 'syz.2.1998': attribute type 1 has an invalid length. [ 259.427677][T13437] netlink: 'syz.2.1998': attribute type 2 has an invalid length. [ 259.484139][T13437] netlink: 408 bytes leftover after parsing attributes in process `syz.2.1998'. [ 259.610980][T13450] lo: Caught tx_queue_len zero misconfig [ 259.809643][ T24] IPVS: starting estimator thread 0... [ 259.832285][T13463] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 259.843915][T13460] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 259.845229][T13458] syzkaller1: entered promiscuous mode [ 259.869213][T13461] block nbd0: not configured, cannot reconfigure [ 259.876259][T13463] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 259.893980][T13458] syzkaller1: entered allmulticast mode [ 259.902201][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'. [ 259.918097][T13462] IPVS: using max 37 ests per chain, 88800 per kthread [ 259.922647][T13469] netlink: 'syz.1.2005': attribute type 4 has an invalid length. [ 259.981659][T13468] 8021q: adding VLAN 0 to HW filter on device bond7 [ 260.045813][T13458] C: renamed from lo (while UP) [ 260.100687][T13458] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 260.213892][T13486] syzkaller0: entered promiscuous mode [ 260.224342][T13486] syzkaller0: entered allmulticast mode [ 260.232789][T13486] sch_fq: defrate 0 ignored. [ 260.451654][T13503] netlink: 'syz.1.2019': attribute type 8 has an invalid length. [ 260.712538][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2024'. [ 263.364158][T13501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.588249][T13538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2028'. [ 263.673034][T13547] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.874179][ T30] audit: type=1804 audit(1775725563.222:2): pid=13560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2039" name="/newroot/420/cgroup.controllers" dev="tmpfs" ino=2157 res=1 errno=0 [ 263.936109][ T30] audit: type=1800 audit(1775725563.222:3): pid=13560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2039" name="cgroup.controllers" dev="tmpfs" ino=2157 res=0 errno=0 [ 264.023722][T13576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2042'. [ 264.050633][T13577] vlan3: entered promiscuous mode [ 264.475747][T13607] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2047'. [ 264.511341][T13602] ip6tnl0: Caught tx_queue_len zero misconfig [ 264.713615][T13616] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2053'. [ 264.779461][T13622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2054'. [ 264.916416][T13628] netlink: 'syz.3.2057': attribute type 83 has an invalid length. [ 264.924562][T13622] bond5: entered promiscuous mode [ 264.925030][T13622] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.936727][T13631] bridge6: entered promiscuous mode [ 264.945835][T13631] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 264.956716][T13633] netlink: 'syz.4.2060': attribute type 1 has an invalid length. [ 265.005235][T13633] 8021q: adding VLAN 0 to HW filter on device bond15 [ 265.038978][T13622] macvlan2: entered promiscuous mode [ 265.044335][T13622] macvlan2: entered allmulticast mode [ 265.057811][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'. [ 265.069155][T13622] bond5: (slave macvlan2): Error -98 calling set_mac_address [ 265.095445][T13633] bond12: (slave veth0_to_bond): Releasing active interface [ 265.109336][T13633] bond15: (slave veth0_to_bond): making interface the new active one [ 265.120542][T13633] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 265.172492][T13640] team1: entered promiscuous mode [ 265.198601][T13640] team1: entered allmulticast mode [ 265.244274][T13656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2065'. [ 265.253653][T13638] bond15: entered promiscuous mode [ 265.259313][T13638] veth0_to_bond: entered promiscuous mode [ 265.265377][T13638] bond15: entered allmulticast mode [ 265.271597][T13638] veth0_to_bond: entered allmulticast mode [ 265.305164][T13658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2065'. [ 265.330692][T13658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2065'. [ 265.413410][T13663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2067'. [ 265.643439][T13671] sctp: [Deprecated]: syz.4.2070 (pid 13671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.643439][T13671] Use struct sctp_sack_info instead [ 265.843512][T13688] ip6gre3: entered promiscuous mode [ 265.855878][T13688] ip6gre3: entered allmulticast mode [ 266.448395][T13714] netlink: 'syz.0.2082': attribute type 6 has an invalid length. [ 266.529479][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.588140][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.622085][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.698379][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.854538][T13733] sctp: [Deprecated]: syz.0.2085 (pid 13733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.854538][T13733] Use struct sctp_sack_info instead [ 266.909204][T13736] netlink: 'syz.1.2087': attribute type 22 has an invalid length. [ 267.313611][T13774] x_tables: duplicate underflow at hook 2 [ 267.390252][T13783] syzkaller0: entered promiscuous mode [ 267.396073][T13783] syzkaller0: entered allmulticast mode [ 267.516235][T13793] netlink: 'syz.1.2101': attribute type 2 has an invalid length. [ 268.090237][T13833] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 268.631832][T13879] netlink: 'syz.2.2128': attribute type 1 has an invalid length. [ 268.744563][T13890] __nla_validate_parse: 16 callbacks suppressed [ 268.744581][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2128'. [ 268.774032][T13886] bond13: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 268.782240][T13884] netlink: 'syz.1.2130': attribute type 1 has an invalid length. [ 268.785307][T13886] bond13: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 268.805339][T13879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2128'. [ 268.810444][T13886] bond13: (slave ip6gre1): making interface the new active one [ 268.823223][T13886] bond13: (slave ip6gre1): Enslaving as an active interface with an up link [ 269.245229][T13887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.688428][T13884] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 269.694318][T13904] xt_hashlimit: size too large, truncated to 1048576 [ 269.725680][ T1005] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.757883][ T1005] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.767415][T13906] –: renamed from vxcan1 [ 269.819809][ T1005] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.860729][ T1005] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.883246][ T1005] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.909511][ T1005] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.930449][T13918] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 269.948512][ T1005] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.973944][T13920] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2137'. [ 269.981525][ T1005] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.031079][T13920] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2137'. [ 270.355478][T13942] syzkaller0: entered promiscuous mode [ 270.363159][T13942] syzkaller0: entered allmulticast mode [ 270.377954][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'. [ 270.403061][T13952] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2147'. [ 270.699443][T13966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2151'. [ 271.883373][T13975] x_tables: duplicate underflow at hook 3 [ 271.908396][T13978] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 271.921579][T13978] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 271.982803][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2157'. [ 272.192829][T13994] syzkaller0: entered promiscuous mode [ 272.213067][T13994] syzkaller0: entered allmulticast mode [ 272.226199][T14000] netlink: 'syz.2.2163': attribute type 1 has an invalid length. [ 272.239776][T14004] netlink: 'syz.3.2165': attribute type 1 has an invalid length. [ 272.253612][T14002] netlink: 'syz.3.2165': attribute type 1 has an invalid length. [ 272.265207][T14002] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2165'. [ 272.292650][T14004] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2165'. [ 272.329742][T14005] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 272.340956][T14005] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 273.002101][T14055] xt_hashlimit: invalid rate [ 273.115173][T14047] bond8: (slave erspan0): Device is not bonding slave [ 273.158593][T14047] bond8: option active_slave: invalid value (erspan0) [ 273.201959][T14047] bond8 (unregistering): Released all slaves [ 273.499512][T14049] syzkaller0: entered promiscuous mode [ 273.505039][T14049] syzkaller0: entered allmulticast mode [ 273.512051][T14096] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 273.661969][T14104] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 273.687590][T14104] bond8: (slave lo): Enslaving as an active interface with an up link [ 273.696428][T14104] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 273.960711][T14114] __nla_validate_parse: 5 callbacks suppressed [ 273.960729][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2199'. [ 273.979526][T14114] netlink: 'syz.4.2199': attribute type 1 has an invalid length. [ 275.231651][T14114] 8021q: adding VLAN 0 to HW filter on device bond16 [ 275.314971][T14118] F speed is unknown, defaulting to 1000 [ 275.326074][T14118] lo speed is unknown, defaulting to 1000 [ 275.419412][T14129] gretap3: entered promiscuous mode [ 275.424683][T14129] gretap3: entered allmulticast mode [ 275.555790][T14132] syzkaller0: entered promiscuous mode [ 275.561499][T14132] syzkaller0: entered allmulticast mode [ 275.719379][T14152] bridge2: entered promiscuous mode [ 275.724644][T14152] bridge2: entered allmulticast mode [ 275.740282][T14152] netlink: 'syz.4.2208': attribute type 3 has an invalid length. [ 277.208475][T14166] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2212'. [ 277.251442][T14169] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2214'. [ 277.339822][T14173] netlink: 'syz.3.2216': attribute type 2 has an invalid length. [ 277.347703][T14173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2216'. [ 277.388039][T14173] ip6t_srh: unknown srh invflags 4000 [ 277.608734][T14196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2224'. [ 277.666821][ T5146] block nbd0: Receive control failed (result -1) [ 277.676539][T14203] syzkaller0: entered promiscuous mode [ 277.697736][T14203] syzkaller0: entered allmulticast mode [ 277.737868][T14205] netlink: 588 bytes leftover after parsing attributes in process `syz.3.2227'. [ 277.795940][T14205] netlink: 'syz.3.2227': attribute type 13 has an invalid length. [ 277.804408][T14205] netlink: 'syz.3.2227': attribute type 58 has an invalid length. [ 277.812860][T14205] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2227'. [ 277.834670][T14212] netlink: 'syz.0.2224': attribute type 10 has an invalid length. [ 277.947921][T14218] netlink: 'syz.1.2229': attribute type 6 has an invalid length. [ 278.086028][T14222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2231'. [ 278.114726][T14222] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2231'. [ 278.231137][T14230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2230'. [ 278.565176][T14241] ip6erspan1: entered allmulticast mode [ 278.574095][T14246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.736378][T14259] syzkaller0: entered promiscuous mode [ 278.767776][T14259] syzkaller0: entered allmulticast mode [ 278.809765][T14263] netlink: 'syz.4.2245': attribute type 11 has an invalid length. [ 278.816441][T14265] bpq0: left promiscuous mode [ 278.974596][T14279] __nla_validate_parse: 3 callbacks suppressed [ 278.974615][T14279] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2249'. [ 279.047731][T14285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2247'. [ 279.076291][T14279] syzkaller1: entered promiscuous mode [ 279.088980][T14279] syzkaller1: entered allmulticast mode [ 279.119338][T14285] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 279.157104][T14285] syzkaller1: linktype set to 823 [ 279.547326][T14323] openvswitch: netlink: Message has 8 unknown bytes. [ 279.556197][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2259'. [ 279.586639][T14323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.868545][T14346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.889351][T14346] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 280.073897][T14363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2269'. [ 280.353758][T14382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2275'. [ 280.388722][T14382] 8021q: adding VLAN 0 to HW filter on device bond3 [ 280.403467][T14382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2275'. [ 280.428371][T14390] netlink: 'syz.2.2276': attribute type 1 has an invalid length. [ 280.450858][T14390] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2276'. [ 280.475003][T14392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2277'. [ 280.559415][T14395] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 280.608220][T14395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2279'. [ 280.620475][T14400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2280'. [ 281.356141][T14437] bond4: entered allmulticast mode [ 281.481777][T14440] : entered promiscuous mode [ 281.623283][T14447] netlink: 'syz.1.2295': attribute type 1 has an invalid length. [ 281.700619][T14462] netlink: 'syz.0.2300': attribute type 23 has an invalid length. [ 282.249170][T14496] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 282.270268][T14497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.321289][T14501] set match dimension is over the limit! [ 282.922846][T14554] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002 [ 283.352876][T14581] netlink: 'syz.4.2335': attribute type 1 has an invalid length. [ 283.547970][T14600] openvswitch: netlink: IP tunnel dst address not specified [ 283.666568][T14616] netlink: 'syz.1.2347': attribute type 8 has an invalid length. [ 283.768895][ T5146] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 283.871805][T14625] netlink: 'syz.4.2351': attribute type 1 has an invalid length. [ 283.912059][T14625] netlink: 'syz.4.2351': attribute type 2 has an invalid length. [ 283.929634][T14625] netlink: 'syz.4.2351': attribute type 2 has an invalid length. [ 283.962155][T14625] netlink: 'syz.4.2351': attribute type 2 has an invalid length. [ 283.976145][T14629] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 283.995004][T14629] bond5: (slave lo): Enslaving as an active interface with an up link [ 284.009568][T14629] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 284.030564][T14629] __nla_validate_parse: 90 callbacks suppressed [ 284.030582][T14629] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2352'. [ 284.046476][T14629] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2352'. [ 284.453433][T14670] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2361'. [ 284.550486][T14672] syzkaller0: entered promiscuous mode [ 284.578827][T14672] syzkaller0: entered allmulticast mode [ 284.666235][T14682] netlink: 'syz.3.2363': attribute type 1 has an invalid length. [ 284.668301][T14671] nbd1: detected capacity change from 0 to 63 [ 284.696283][ T5146] block nbd1: Receive control failed (result -32) [ 284.696282][ T5837] block nbd1: Receive control failed (result -104) [ 284.864565][T14689] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2366'. [ 284.926787][T14682] bond6: entered promiscuous mode [ 284.948852][T14682] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.142013][T14710] syzkaller0: entered promiscuous mode [ 285.147677][T14710] syzkaller0: entered allmulticast mode [ 285.154417][T14719] netlink: 'syz.0.2375': attribute type 12 has an invalid length. [ 285.173910][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2372'. [ 285.184238][T14716] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2373'. [ 285.196647][T14725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2374'. [ 285.206725][T14725] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2374'. [ 285.400917][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 285.676344][T14753] x_tables: duplicate underflow at hook 1 [ 285.700073][T14759] netlink: 'syz.2.2386': attribute type 21 has an invalid length. [ 285.709480][T14758] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2385'. [ 285.727847][T14758] xt_policy: neither incoming nor outgoing policy selected [ 285.735350][T14759] netlink: 'syz.2.2386': attribute type 4 has an invalid length. [ 286.075271][T14788] syz_tun: entered promiscuous mode [ 286.082870][T14788] macvtap0: entered promiscuous mode [ 286.090051][T14788] macvtap0: entered allmulticast mode [ 286.095559][T14788] syz_tun: entered allmulticast mode [ 286.427858][T14819] syzkaller0: entered promiscuous mode [ 286.433360][T14819] syzkaller0: entered allmulticast mode [ 286.444747][T14811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.062128][T14833] : entered promiscuous mode [ 288.494407][T14884] IPv6: NLM_F_CREATE should be specified when creating new route [ 288.505041][T14888] xfrm1: entered promiscuous mode [ 288.531252][T14888] xfrm1: entered allmulticast mode [ 288.670348][T14900] validate_nla: 8 callbacks suppressed [ 288.670366][T14900] netlink: 'syz.3.2422': attribute type 7 has an invalid length. [ 288.684264][T14900] netlink: 'syz.3.2422': attribute type 8 has an invalid length. [ 288.878242][T14921] syzkaller1: entered promiscuous mode [ 288.916070][T14921] syzkaller1: entered allmulticast mode [ 289.005585][T14919] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 289.112282][T14937] netlink: 'syz.1.2434': attribute type 9 has an invalid length. [ 289.148694][T14937] netlink: 'syz.1.2434': attribute type 11 has an invalid length. [ 289.196650][T14937] netlink: 'syz.1.2434': attribute type 12 has an invalid length. [ 289.218787][T14937] __nla_validate_parse: 17 callbacks suppressed [ 289.218803][T14937] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2434'. [ 289.259208][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 289.341260][T14955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2443'. [ 289.637815][T14975] syzkaller1: entered promiscuous mode [ 289.646584][T14975] syzkaller1: entered allmulticast mode [ 289.666109][T14975] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2450'. [ 289.811764][T14987] bridge_slave_0 (unregistering): left promiscuous mode [ 289.832251][T14987] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.198836][T15014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.607350][T15049] 8021q: adding VLAN 0 to HW filter on device bond6 [ 290.615840][T15051] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.2470'. [ 290.629648][T15049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2468'. [ 290.631122][T15057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2473'. [ 290.638688][T15049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2468'. [ 290.663685][T15051] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.2470'. [ 290.851466][T15068] netlink: 'syz.3.2476': attribute type 1 has an invalid length. [ 290.993192][T15090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2480'. [ 291.319654][T15108] bridge9: entered promiscuous mode [ 291.364364][T15108] bridge9: entered allmulticast mode [ 291.382428][T15108] team0: Port device bridge9 added [ 291.516302][T15108] bridge0: port 1(team0) entered blocking state [ 291.523906][T15108] bridge0: port 1(team0) entered disabled state [ 291.544518][T15108] team0: entered allmulticast mode [ 291.569181][T15108] team0: entered promiscuous mode [ 291.590183][T15108] team_slave_0: entered promiscuous mode [ 291.608083][T15108] team_slave_1: entered promiscuous mode [ 291.980390][T15153] bridge0: entered allmulticast mode [ 292.211634][T15167] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 292.624152][T15180] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 292.771149][T15189] x_tables: duplicate underflow at hook 2 [ 292.821261][T15189] sctp: [Deprecated]: syz.4.2511 (pid 15189) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.821261][T15189] Use struct sctp_sack_info instead [ 292.942794][T15199] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 293.031511][T15202] netlink: 'syz.0.2514': attribute type 8 has an invalid length. [ 293.080231][T15208] xt_SECMARK: invalid mode: 9 [ 293.138540][T15212] netlink: 'syz.4.2516': attribute type 6 has an invalid length. [ 293.341753][T15220] bond9: entered allmulticast mode [ 293.348947][T15223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.373607][T15223] sctp: [Deprecated]: syz.2.2519 (pid 15223) Use of int in max_burst socket option deprecated. [ 293.373607][T15223] Use struct sctp_assoc_value instead [ 293.571066][T15226] netlink: 'syz.0.2522': attribute type 1 has an invalid length. [ 294.139952][T15270] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 294.219712][T15276] block nbd0: reconnected socket [ 294.220445][ T5146] block nbd0: Receive control failed (result -107) [ 294.470852][T15293] __nla_validate_parse: 25 callbacks suppressed [ 294.470870][T15293] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2540'. [ 294.499116][T15294] netlink: 'syz.1.2541': attribute type 8 has an invalid length. [ 294.507742][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'. [ 294.518541][T15294] bridge0: port 2(team0) entered disabled state [ 294.525725][T15294] bridge0: port 3(batadv0) entered disabled state [ 294.532737][T15294] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.560969][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'. [ 294.570236][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'. [ 294.781516][T15312] Cannot find add_set index 2 as target [ 294.830185][T15310] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2545'. [ 295.003377][T15334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2553'. [ 295.013793][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'. [ 295.023737][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 295.070646][T15335] netlink: 'syz.0.2551': attribute type 1 has an invalid length. [ 295.078569][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2551'. [ 295.100484][T15342] x_tables: duplicate underflow at hook 2 [ 296.073718][T15382] syzkaller0: entered promiscuous mode [ 296.081777][T15382] syzkaller0: entered allmulticast mode [ 297.942632][T15326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.259766][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2571'. [ 298.494481][T15442] netlink: 'syz.4.2578': attribute type 10 has an invalid length. [ 298.553221][T15445] sctp: [Deprecated]: syz.1.2579 (pid 15445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.553221][T15445] Use struct sctp_sack_info instead [ 298.591649][T15450] xt_hashlimit: size too large, truncated to 1048576 [ 298.606729][T15442] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 298.615686][T15442] batman_adv: batadv0: Adding interface: netdevsim0 [ 298.645558][T15442] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 299.304473][T15500] netlink: 'syz.2.2589': attribute type 25 has an invalid length. [ 299.492687][T15518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2595'. [ 299.593091][T15518] macvtap1: entered promiscuous mode [ 299.599584][T15518] vlan0: entered promiscuous mode [ 299.610911][T15518] macvtap1: entered allmulticast mode [ 299.616440][T15518] vlan0: entered allmulticast mode [ 299.622574][T15518] veth0_vlan: entered allmulticast mode [ 299.737570][T15535] netlink: 'syz.4.2601': attribute type 4 has an invalid length. [ 299.745475][T15535] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2601'. [ 299.772572][T15535] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2601'. [ 299.794782][T15535] netlink: 'syz.4.2601': attribute type 32 has an invalid length. [ 299.800504][T15537] syzkaller0: entered promiscuous mode [ 299.830997][T15535] xt_ipcomp: unknown flags 1D [ 299.846269][T15537] syzkaller0: entered allmulticast mode [ 300.003829][ T24] IPVS: starting estimator thread 0... [ 300.015109][T15551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2606'. [ 300.100142][T15552] IPVS: using max 29 ests per chain, 69600 per kthread [ 300.110120][T15557] ip6tnl0: Caught tx_queue_len zero misconfig [ 300.212803][T15569] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2610'. [ 300.240821][T15568] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2610'. [ 300.641351][T15591] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.734946][T15595] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.745787][T15595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2615'. [ 300.798942][T15597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 303.140989][T15560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.311118][T15620] netlink: 'syz.3.2624': attribute type 1 has an invalid length. [ 303.453206][T15619] syzkaller0: entered promiscuous mode [ 303.459267][T15619] syzkaller0: entered allmulticast mode [ 303.557566][T15636] [ 303.559957][T15636] ====================================================== [ 303.566967][T15636] WARNING: possible circular locking dependency detected [ 303.574004][T15636] syzkaller #0 Not tainted [ 303.578406][T15636] ------------------------------------------------------ [ 303.585410][T15636] syz.1.2630/15636 is trying to acquire lock: [ 303.591462][T15636] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 303.601389][T15636] [ 303.601389][T15636] but task is already holding lock: [ 303.608749][T15636] ffff888041a62a20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 303.618427][T15636] [ 303.618427][T15636] which lock already depends on the new lock. [ 303.618427][T15636] [ 303.628824][T15636] [ 303.628824][T15636] the existing dependency chain (in reverse order) is: [ 303.637824][T15636] [ 303.637824][T15636] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 303.645725][T15636] lock_sock_nested+0x48/0x100 [ 303.651017][T15636] mptcp_listen+0x230/0x610 [ 303.656059][T15636] __x64_sys_listen+0x1c7/0x240 [ 303.661427][T15636] do_syscall_64+0x14d/0xf80 [ 303.666542][T15636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.673054][T15636] [ 303.673054][T15636] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 303.680786][T15636] lock_sock_nested+0x48/0x100 [ 303.686089][T15636] inet_shutdown+0x6a/0x390 [ 303.691107][T15636] nbd_mark_nsock_dead+0x2e9/0x560 [ 303.696754][T15636] recv_work+0x1c7f/0x1d90 [ 303.701771][T15636] process_scheduled_works+0xb6e/0x18c0 [ 303.707869][T15636] worker_thread+0xa53/0xfc0 [ 303.712976][T15636] kthread+0x388/0x470 [ 303.717560][T15636] ret_from_fork+0x51e/0xb90 [ 303.722705][T15636] ret_from_fork_asm+0x1a/0x30 [ 303.727985][T15636] [ 303.727985][T15636] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 303.735613][T15636] __mutex_lock+0x19f/0x1300 [ 303.740715][T15636] nbd_queue_rq+0x37b/0x1100 [ 303.745818][T15636] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 303.751873][T15636] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 303.758724][T15636] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 303.765233][T15636] blk_mq_run_hw_queue+0x348/0x4f0 [ 303.770885][T15636] blk_mq_dispatch_list+0xd16/0xe10 [ 303.776598][T15636] blk_mq_flush_plug_list+0x48d/0x570 [ 303.782487][T15636] __blk_flush_plug+0x3ed/0x4d0 [ 303.787880][T15636] __submit_bio+0x28d/0x580 [ 303.792903][T15636] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 303.799065][T15636] block_read_full_folio+0x599/0x830 [ 303.804867][T15636] filemap_read_folio+0x137/0x3b0 [ 303.810417][T15636] do_read_cache_folio+0x358/0x590 [ 303.816049][T15636] read_part_sector+0xb6/0x2b0 [ 303.821340][T15636] adfspart_check_ICS+0xa5/0xa40 [ 303.826798][T15636] bdev_disk_changed+0x7ba/0x1550 [ 303.832345][T15636] blkdev_get_whole+0x380/0x510 [ 303.837720][T15636] bdev_open+0x31e/0xd30 [ 303.842504][T15636] blkdev_open+0x470/0x610 [ 303.847542][T15636] do_dentry_open+0x785/0x14e0 [ 303.852833][T15636] vfs_open+0x3b/0x340 [ 303.857535][T15636] path_openat+0x2e08/0x3860 [ 303.862660][T15636] do_file_open+0x23e/0x4a0 [ 303.867689][T15636] do_sys_openat2+0x113/0x200 [ 303.872895][T15636] __x64_sys_openat+0x138/0x170 [ 303.878263][T15636] do_syscall_64+0x14d/0xf80 [ 303.883371][T15636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.889775][T15636] [ 303.889775][T15636] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 303.896973][T15636] __mutex_lock+0x19f/0x1300 [ 303.902099][T15636] nbd_queue_rq+0xc6/0x1100 [ 303.907119][T15636] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 303.913208][T15636] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 303.920055][T15636] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 303.926560][T15636] blk_mq_run_hw_queue+0x348/0x4f0 [ 303.932206][T15636] blk_mq_dispatch_list+0xd16/0xe10 [ 303.937990][T15636] blk_mq_flush_plug_list+0x48d/0x570 [ 303.943878][T15636] __blk_flush_plug+0x3ed/0x4d0 [ 303.949247][T15636] __submit_bio+0x28d/0x580 [ 303.954276][T15636] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 303.960441][T15636] block_read_full_folio+0x599/0x830 [ 303.966248][T15636] filemap_read_folio+0x137/0x3b0 [ 303.971785][T15636] do_read_cache_folio+0x358/0x590 [ 303.977414][T15636] read_part_sector+0xb6/0x2b0 [ 303.982732][T15636] adfspart_check_ICS+0xa5/0xa40 [ 303.988181][T15636] bdev_disk_changed+0x7ba/0x1550 [ 303.993716][T15636] blkdev_get_whole+0x380/0x510 [ 303.999087][T15636] bdev_open+0x31e/0xd30 [ 304.004014][T15636] blkdev_open+0x470/0x610 [ 304.008939][T15636] do_dentry_open+0x785/0x14e0 [ 304.014215][T15636] vfs_open+0x3b/0x340 [ 304.018801][T15636] path_openat+0x2e08/0x3860 [ 304.024009][T15636] do_file_open+0x23e/0x4a0 [ 304.029047][T15636] do_sys_openat2+0x113/0x200 [ 304.034251][T15636] __x64_sys_openat+0x138/0x170 [ 304.039647][T15636] do_syscall_64+0x14d/0xf80 [ 304.044768][T15636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.051207][T15636] [ 304.051207][T15636] -> #3 (set->srcu){.+.+}-{0:0}: [ 304.058368][T15636] __synchronize_srcu+0xca/0x300 [ 304.063824][T15636] elevator_switch+0x1e8/0x7a0 [ 304.069135][T15636] elevator_change+0x2cc/0x450 [ 304.074433][T15636] elevator_set_default+0x36c/0x430 [ 304.080158][T15636] blk_register_queue+0x366/0x430 [ 304.085717][T15636] __add_disk+0x677/0xd50 [ 304.090566][T15636] add_disk_fwnode+0xfb/0x480 [ 304.095759][T15636] nbd_dev_add+0x72c/0xb50 [ 304.100689][T15636] nbd_init+0x168/0x1f0 [ 304.105356][T15636] do_one_initcall+0x250/0x8d0 [ 304.110632][T15636] do_initcall_level+0x104/0x190 [ 304.116081][T15636] do_initcalls+0x59/0xa0 [ 304.120923][T15636] kernel_init_freeable+0x2a6/0x3e0 [ 304.126651][T15636] kernel_init+0x1d/0x1d0 [ 304.131491][T15636] ret_from_fork+0x51e/0xb90 [ 304.136606][T15636] ret_from_fork_asm+0x1a/0x30 [ 304.141900][T15636] [ 304.141900][T15636] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 304.149711][T15636] __mutex_lock+0x19f/0x1300 [ 304.154815][T15636] elevator_change+0x1b3/0x450 [ 304.160114][T15636] elevator_set_none+0xb5/0x140 [ 304.165565][T15636] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 304.171890][T15636] nbd_start_device+0x17f/0xb10 [ 304.177266][T15636] nbd_genl_connect+0x165b/0x1cf0 [ 304.182816][T15636] genl_family_rcv_msg_doit+0x22a/0x330 [ 304.188981][T15636] genl_rcv_msg+0x61c/0x7a0 [ 304.194011][T15636] netlink_rcv_skb+0x232/0x4b0 [ 304.199284][T15636] genl_rcv+0x28/0x40 [ 304.203779][T15636] netlink_unicast+0x80f/0x9b0 [ 304.209060][T15636] netlink_sendmsg+0x813/0xb40 [ 304.214337][T15636] ____sys_sendmsg+0x972/0x9f0 [ 304.219612][T15636] ___sys_sendmsg+0x2a5/0x360 [ 304.224799][T15636] __x64_sys_sendmsg+0x1bd/0x2a0 [ 304.230245][T15636] do_syscall_64+0x14d/0xf80 [ 304.235350][T15636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.241754][T15636] [ 304.241754][T15636] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 304.250356][T15636] blk_alloc_queue+0x546/0x680 [ 304.255635][T15636] __blk_mq_alloc_disk+0x197/0x390 [ 304.261269][T15636] nbd_dev_add+0x499/0xb50 [ 304.266200][T15636] nbd_init+0x168/0x1f0 [ 304.270866][T15636] do_one_initcall+0x250/0x8d0 [ 304.276147][T15636] do_initcall_level+0x104/0x190 [ 304.281592][T15636] do_initcalls+0x59/0xa0 [ 304.286426][T15636] kernel_init_freeable+0x2a6/0x3e0 [ 304.292145][T15636] kernel_init+0x1d/0x1d0 [ 304.296987][T15636] ret_from_fork+0x51e/0xb90 [ 304.302106][T15636] ret_from_fork_asm+0x1a/0x30 [ 304.307393][T15636] [ 304.307393][T15636] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 304.314597][T15636] __lock_acquire+0x15a5/0x2cf0 [ 304.319967][T15636] lock_acquire+0xf0/0x2e0 [ 304.324924][T15636] fs_reclaim_acquire+0x71/0x100 [ 304.330371][T15636] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 304.336696][T15636] __alloc_skb+0x1d0/0x7d0 [ 304.341625][T15636] tcp_stream_alloc_skb+0x3f/0x580 [ 304.347257][T15636] tcp_connect+0x1527/0x5370 [ 304.352374][T15636] tcp_v4_connect+0x10f6/0x19b0 [ 304.357746][T15636] tcp_v6_connect+0xbbb/0x1b10 [ 304.363026][T15636] __inet_stream_connect+0x25a/0xdd0 [ 304.368821][T15636] inet_stream_connect+0x66/0xa0 [ 304.374358][T15636] kernel_connect+0x141/0x1c0 [ 304.379579][T15636] smc_connect+0x7a5/0xd90 [ 304.384549][T15636] __sys_connect+0x312/0x450 [ 304.389650][T15636] __x64_sys_connect+0x7a/0x90 [ 304.394943][T15636] do_syscall_64+0x14d/0xf80 [ 304.400056][T15636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.406475][T15636] [ 304.406475][T15636] other info that might help us debug this: [ 304.406475][T15636] [ 304.416690][T15636] Chain exists of: [ 304.416690][T15636] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 304.416690][T15636] [ 304.429642][T15636] Possible unsafe locking scenario: [ 304.429642][T15636] [ 304.437083][T15636] CPU0 CPU1 [ 304.442447][T15636] ---- ---- [ 304.447806][T15636] lock(k-sk_lock-AF_INET6); [ 304.452480][T15636] lock(sk_lock-AF_INET6); [ 304.459494][T15636] lock(k-sk_lock-AF_INET6); [ 304.466677][T15636] lock(fs_reclaim); [ 304.470651][T15636] [ 304.470651][T15636] *** DEADLOCK *** [ 304.470651][T15636] [ 304.478777][T15636] 2 locks held by syz.1.2630/15636: [ 304.483956][T15636] #0: ffff888052cacd60 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xbd/0xd90 [ 304.493087][T15636] #1: ffff888041a62a20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 304.503186][T15636] [ 304.503186][T15636] stack backtrace: [ 304.509069][T15636] CPU: 0 UID: 0 PID: 15636 Comm: syz.1.2630 Not tainted syzkaller #0 PREEMPT(full) [ 304.509088][T15636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 304.509111][T15636] Call Trace: [ 304.509120][T15636] [ 304.509127][T15636] dump_stack_lvl+0xe8/0x150 [ 304.509151][T15636] print_circular_bug+0x2e1/0x300 [ 304.509177][T15636] check_noncircular+0x12e/0x150 [ 304.509201][T15636] __lock_acquire+0x15a5/0x2cf0 [ 304.509224][T15636] ? inet_sk_rebuild_header+0x93/0x1da0 [ 304.509246][T15636] ? __lock_acquire+0x6b5/0x2cf0 [ 304.509266][T15636] lock_acquire+0xf0/0x2e0 [ 304.509283][T15636] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 304.509301][T15636] ? fib4_rule_action+0x8f/0x330 [ 304.509324][T15636] fs_reclaim_acquire+0x71/0x100 [ 304.509341][T15636] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 304.509356][T15636] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 304.509377][T15636] ? __alloc_skb+0x1d0/0x7d0 [ 304.509392][T15636] ? ipv4_default_advmss+0x20/0x340 [ 304.509412][T15636] __alloc_skb+0x1d0/0x7d0 [ 304.509429][T15636] tcp_stream_alloc_skb+0x3f/0x580 [ 304.509449][T15636] ? __asan_memset+0x22/0x50 [ 304.509468][T15636] tcp_connect+0x1527/0x5370 [ 304.509487][T15636] ? __lock_acquire+0x146e/0x2cf0 [ 304.509513][T15636] ? __pfx_tcp_connect+0x10/0x10 [ 304.509534][T15636] ? __asan_memset+0x22/0x50 [ 304.509549][T15636] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 304.509571][T15636] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 304.509591][T15636] ? sk_setup_caps+0x9ef/0xc40 [ 304.509609][T15636] ? sk_setup_caps+0x29/0xc40 [ 304.509627][T15636] tcp_v4_connect+0x10f6/0x19b0 [ 304.509647][T15636] ? sched_clock+0x3f/0x60 [ 304.509669][T15636] ? __pfx_tcp_v4_connect+0x10/0x10 [ 304.509688][T15636] ? lockdep_hardirqs_on+0x7a/0x110 [ 304.509708][T15636] ? tcp_v6_connect+0x62d/0x1b10 [ 304.509732][T15636] tcp_v6_connect+0xbbb/0x1b10 [ 304.509758][T15636] ? __pfx_tcp_v6_connect+0x10/0x10 [ 304.509782][T15636] ? __pfx___resched_curr+0x10/0x10 [ 304.509804][T15636] __inet_stream_connect+0x25a/0xdd0 [ 304.509825][T15636] ? do_raw_spin_lock+0x12b/0x2f0 [ 304.509840][T15636] ? __pfx___inet_stream_connect+0x10/0x10 [ 304.509860][T15636] ? inet_stream_connect+0x51/0xa0 [ 304.509879][T15636] ? __local_bh_enable_ip+0xd0/0x130 [ 304.509900][T15636] inet_stream_connect+0x66/0xa0 [ 304.509919][T15636] kernel_connect+0x141/0x1c0 [ 304.509940][T15636] ? __pfx_kernel_connect+0x10/0x10 [ 304.509959][T15636] ? do_raw_spin_lock+0x12b/0x2f0 [ 304.509976][T15636] ? smc_connect+0xbd/0xd90 [ 304.509992][T15636] ? __local_bh_enable_ip+0xd0/0x130 [ 304.510012][T15636] smc_connect+0x7a5/0xd90 [ 304.510029][T15636] __sys_connect+0x312/0x450 [ 304.510045][T15636] ? __pfx___sys_connect+0x10/0x10 [ 304.510064][T15636] ? rcu_is_watching+0x15/0xb0 [ 304.510086][T15636] __x64_sys_connect+0x7a/0x90 [ 304.510102][T15636] do_syscall_64+0x14d/0xf80 [ 304.510121][T15636] ? trace_irq_disable+0x3b/0x150 [ 304.510134][T15636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.510149][T15636] ? clear_bhb_loop+0x40/0x90 [ 304.510165][T15636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.510180][T15636] RIP: 0033:0x7fea7ef9c819 [ 304.510195][T15636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.510210][T15636] RSP: 002b:00007fea7fdc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 304.510227][T15636] RAX: ffffffffffffffda RBX: 00007fea7f215fa0 RCX: 00007fea7ef9c819 [ 304.510238][T15636] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000006 [ 304.510247][T15636] RBP: 00007fea7f032c91 R08: 0000000000000000 R09: 0000000000000000 [ 304.510256][T15636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.510266][T15636] R13: 00007fea7f216038 R14: 00007fea7f215fa0 R15: 00007ffd3fd1afe8 [ 304.510282][T15636]