last executing test programs: 1m2.542670495s ago: executing program 4 (id=3733): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket(0x28, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'bridge_slave_1\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000ac0)={'ip_vti0\x00', r3, 0x10, 0x80, 0x80000001, 0x3, {{0x2d, 0x4, 0x0, 0x3, 0xb4, 0x66, 0x0, 0x8e, 0x29, 0x0, @multicast2, @local, {[@cipso={0x86, 0x11, 0xffffffffffffffff, [{0x5, 0xb, "495e5c844f699acaf8"}]}, @timestamp_prespec={0x44, 0xc, 0xcd, 0x3, 0xa, [{@multicast1, 0x10000}]}, @lsrr={0x83, 0x1b, 0xde, [@local, @broadcast, @multicast1, @broadcast, @broadcast, @loopback]}, @timestamp_addr={0x44, 0x3c, 0x2d, 0x1, 0xc, [{@rand_addr=0x64010101, 0xfffffff5}, {@empty, 0x7}, {@rand_addr=0x64010102, 0x2}, {@broadcast, 0x2}, {@loopback, 0x7}, {@private=0xa010102, 0x4b0}, {@broadcast, 0x1}]}, @timestamp_addr={0x44, 0x24, 0xc8, 0x1, 0x1, [{@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x4}, {@multicast2, 0x401}, {@empty, 0x8001}]}, @lsrr={0x83, 0x3, 0x7f}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1040, &(0x7f0000000100), 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="210000002400000001000000", @ANYRES32=r5, @ANYRES64=0x0], 0x20) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x20, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) 59.031558846s ago: executing program 4 (id=3736): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a00000000000086ddffff1420000100", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 58.843917529s ago: executing program 4 (id=3742): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) pipe(&(0x7f0000000240)={0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x1c, 0xe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'veth0_virt_wifi\x00', @remote}) 58.726750635s ago: executing program 4 (id=3744): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a0000000000000000000b8008001e0001000000080008"], 0x2c}}, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x80002, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}]}, 0x48}}, 0x0) (async) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000f28c0)={{0x0, 0xa, 0x6, 0x7fffffffffffffff, 0xae8e, 0x9, 0x5, 0x2000001, 0x5, 0x8000, 0x6, 0xfffffffffffffffb, 0x9, 0x6}}) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f00000001c0)=0x6, 0x4) (async, rerun: 32) recvmmsg(r6, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x4032bd}], 0x40001ec, 0x2, 0x0) (async, rerun: 32) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000000080)='hZ', 0x2}], 0x1}}], 0x1, 0x4040081) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={&(0x7f0000000040)="fe0a718e2766d38698c24a76d0fd68c18c150864dc1b", &(0x7f0000000200)=""/14, &(0x7f0000000500)="e6eb271e87d03a01687433ff93dc994d32eeb383957b3c63dfb49578af870203bb3f03039e80ae50475a2da160bbd97799d8c12db6069c4e59e5b28be559afdb42eccc2b1738c75fde412503f8475bb15e5923755c8a8d449497348ad88e09a73af381a761c0f9b608ec8f130f8dcb615efe665b9be36989887651fe9a728d37b6d4f47f8b167f723c78b87a55de554c906ed99eeda0c1b1f2cdbb346eb6de90565b9dff2480ba7f08a64ff1b3e369e7227f1836eae352de5641f64858d948690c84a81686a61802b8a0f2e4b428a052755d9dad61", &(0x7f0000000640)="38cb75039ab44c86fd25ac5ff8cc24082a602064d9b326651bd9e2f967ab785848080da05220682bebb88b43f90cce2d00b422f65ba25687830a704c0d2b95fd619c532e46c69535b4af7dda436d1a6f16a9113ac2fd68c61ad118f9cd95409924169987775cf1f27c1e922f2cfe4331be18bb9f2253e9998e61be63b4b53c88950c885633563439b68852898995c16ca4fb75633a14195c05c830ea260edef1534755d65940e84f619c1f6c8f5f", 0x9c5f, r7}, 0x38) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r9, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f00000007c0)=ANY=[@ANYBLOB="1808000001000000000000000000008018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000020000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r9, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000300012800c0001006d6163766c616e0020000280080003000000000008000100100000000a000400aaaaaaaaaa42000008000500", @ANYRES32=r8, @ANYBLOB="70b5b7e9c3af510f0304391a2f00000040f093000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000002300)={&(0x7f0000001300)=""/4096, 0x1228000, 0x800, 0x1aa0, 0x1}, 0x20) (async, rerun: 32) recvmmsg(r11, 0x0, 0x0, 0x2040, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r12 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r13 = socket$l2tp(0x2, 0x2, 0x73) connect$qrtr(r13, &(0x7f0000004d80)={0x2a, 0xffffffffffffffff, 0x4000}, 0xc) (async) sendmmsg(r12, 0x0, 0x0, 0x6080) 58.619465994s ago: executing program 4 (id=3746): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x2) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@broadcast, @random='\x00\x00B\f\x00', @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x11}], "fafb17c133d11e59"}}}}}}}, 0x0) 58.413054849s ago: executing program 4 (id=3750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0)={0x7, 0xb, 0x9, 0x40, 0x3, 0x9, 0x0, 0x8, 0xfb, 0x5, 0x7, 0x1, 0x5, 0x7}, 0xe) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, 0x0, 0x0, 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="000000000a59631100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r6}, 0x38) r7 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000bc0)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x2, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f42, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x5, 0x8000, 0x400006cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x10000, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x3, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x5, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x7f, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x108, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x7, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x9, 0x2, 0x4, 0x7, 0x4000, 0xd, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xf, 0x3, 0x9, 0x4, 0xb, 0x2fe64996, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0x3, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe0f, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e8019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r10, 0x20, &(0x7f0000000700)={&(0x7f00000004c0)=""/204, 0xcc, 0x0, &(0x7f00000005c0)=""/250, 0xfa}}, 0x10) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r11, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000290000000b0000002f0000000000000018"], 0x30}, 0x40440c0) sendmmsg$alg(r9, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x1125d5b17897d7b7, r9, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 43.164798622s ago: executing program 32 (id=3750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0)={0x7, 0xb, 0x9, 0x40, 0x3, 0x9, 0x0, 0x8, 0xfb, 0x5, 0x7, 0x1, 0x5, 0x7}, 0xe) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, 0x0, 0x0, 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="000000000a59631100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r6}, 0x38) r7 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000bc0)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x2, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f42, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x5, 0x8000, 0x400006cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x10000, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x3, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x5, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x7f, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x108, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x7, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x9, 0x2, 0x4, 0x7, 0x4000, 0xd, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xf, 0x3, 0x9, 0x4, 0xb, 0x2fe64996, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0x3, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe0f, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e8019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r10, 0x20, &(0x7f0000000700)={&(0x7f00000004c0)=""/204, 0xcc, 0x0, &(0x7f00000005c0)=""/250, 0xfa}}, 0x10) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r11, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000290000000b0000002f0000000000000018"], 0x30}, 0x40440c0) sendmmsg$alg(r9, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x1125d5b17897d7b7, r9, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 5.275995262s ago: executing program 5 (id=4114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x5}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="400002803c00010024000100656e61626c656400000000000000000000000000000000000000000000000000050003000600000004008400080003"], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x98}, 0x40810) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x84, 0x10, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x0, 0x20000}, [@IFLA_PHYS_PORT_ID={0x11, 0x22, "26062fc0eec8c61a05da0280cf"}, @IFLA_CARRIER={0x5, 0x21, 0x5}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_PHYS_SWITCH_ID={0x18, 0x24, "e175cd69ff5e8fb1963b1c639e07016214b33662"}, @IFLA_MAP={0x24, 0xe, {0xf, 0xfffffffffffffbff, 0xffffffff, 0x1c, 0xf1, 0xc}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x8860) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x309, 0x70bd28, 0x0, {0xa, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r9}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 4.469217133s ago: executing program 5 (id=4122): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="620ac4ff000000007110b70000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a523ffff850000000400000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='macvtap0\x00'}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000140)={0x5e, @rand_addr=0x64010101, 0x4e23, 0x4, 'lblc\x00', 0x30, 0x1, 0x7f}, 0x2c) syz_emit_ethernet(0x121, &(0x7f0000000900)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x113, 0x2, 0x0, 0x9, 0x11, 0x0, @remote, @local}, {0x0, 0x17c1, 0xff, 0x0, @gue={{0x2, 0x0, 0x1, 0x8, 0x100, @val=0x80}, "5fcc258e27cde0e8c45663ff241c62ed24ae9c593db33f5caa331f84d8a9800ed18e985d97e08287bfeb75fc5f644e1c13d5345df0a778027bf61497f62476e47f59eec6e7473885f0d91a61bc40515026965c9e76488d24dccfa376812e2609f617adab374490c71199554c9ea809c83b120c3d7ee18366ce38be5520cff414defc084643a4d59ba43522dd36cfe85c90658a62aa7f0eeecf626bc5c9f28d99e7c8a72149e525363d4270d1349287a5caf1a49dc977e7c13032ac58a011c6c01441e2699109317d16e835e257ca748cf2438bde296efc59c3e3bf5bdbc3b7dfc7fb8de10df3552ee75d3a06633741"}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x9, 0x7e, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x60b6292134603c3b, 0x0, 0x42ff}}) sendmsg$nl_route(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a80)=@bridge_getvlan={0x18, 0x72, 0x20, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x2004000c) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500"], 0x104}}, 0x0) 4.072133418s ago: executing program 3 (id=4124): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x5}, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x800042, 0x1}, 0x10) close(0x3) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x5}, 0x10) (async) socket$tipc(0x1e, 0x4, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x800042, 0x1}, 0x10) (async) close(0x3) (async) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) (async) 3.844596009s ago: executing program 3 (id=4127): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xffffffffffffffac, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)=ANY=[], 0x48}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r2, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 3.806403497s ago: executing program 1 (id=4128): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0xb, 0x1, 0x65) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3.450057602s ago: executing program 5 (id=4130): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0x7c86, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "1cfc981424bcc400", "a9ba0c85d68723369f51322151d9f41aaa2c32bb07cc1e490100", "49960d8f", "e48a86075d672381"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000480)={0x0, 0x0, 0x7, 0x2b, @vifc_lcl_addr=@local, @broadcast}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e657269"], 0xe0}}, 0x0) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xf0}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882cae"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$bt_hci(r7, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r4, 0x3) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e24, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r8 = socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.872519935s ago: executing program 2 (id=4132): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2.82061926s ago: executing program 1 (id=4133): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x639a, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0xbf}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0x6c, 0x4) recvmmsg(r1, &(0x7f0000000780), 0x0, 0x40013100, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x2, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0xfff, 0x2, 0x8, 0x3, 0x1, 0x6, 0x7ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="380100001a0013070000000000000000fe800000f9ffffffffffffff000000aa7f00000100000000000000000000000000000000000000020000000000000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES8=r1], 0x138}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}}}, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x639a, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040), 0x4) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0xbf}, 0x1c) (async) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0x6c, 0x4) (async) recvmmsg(r1, &(0x7f0000000780), 0x0, 0x40013100, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x2, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0xfff, 0x2, 0x8, 0x3, 0x1, 0x6, 0x7ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) (async) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="380100001a0013070000000000000000fe800000f9ffffffffffffff000000aa7f00000100000000000000000000000000000000000000020000000000000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES8=r1], 0x138}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}}}, 0x84) (async) 2.684244082s ago: executing program 0 (id=4134): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000000)='GPL\x00', 0x1, &(0x7f0000000140)={@_ha_fsid={[0x3, 0x100]}, {0x4453, 0x2, 0x2, 0x87}}, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff364}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff364}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=r3], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r5, 0x5, 0x145, 0x0, &(0x7f0000001000)="259a53f271a76d268eca6588a8f733469b94bf397f03e9c78ea91e80d13535377db13c194182c701cae0d5a969c888e2b7291debdf99a3e6f8c1766b20bbcc63905e00ca87750cdb83a735b9eb5e68259326c92f58c284a48721178c9116df484c8468f82be7f17c616461b92c9223e9b807b93141e9afddcde69f619098a66dee8f314faae960bb85cf593bd96095cf21919fa94e7aaf96be3f9931d95ea0af4480f8f7f17bbba5aa683675b2726f9aa0e1c62e4ca2ca8c583e1810314e1ecdf89b9d802fc2dffabb73c728ee2fa21b23ff9b0dbfe5fb3f4d68e97b7131eb4d773a32604c798d662c6b1c715769175eaeda2fc22aa027b69f9772b7530a3c62d8a6f63ab7249ff9c6be8e0eee4aa355451a7c1c64468938644f284ec2521061883052e0b3fce4f822e70ac84748a2067db27ee8be0283bec3824b40447878b1e500000000", 0x0, 0xcfc, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffff1}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000060a0102000000000000000005000900000000001100010000000000000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x80800) (async) r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x80800) sendto$x25(r6, &(0x7f00000000c0)="a8c4d5bf4d812170d4ea53f046e3abb5e94a4fc9806d4046f34235efab60499f9c73df120f16df535df1edeee04592b88ecce0e40fb83625d7e7274ea32d", 0x3e, 0x400c007, 0x0, 0x0) (async) sendto$x25(r6, &(0x7f00000000c0)="a8c4d5bf4d812170d4ea53f046e3abb5e94a4fc9806d4046f34235efab60499f9c73df120f16df535df1edeee04592b88ecce0e40fb83625d7e7274ea32d", 0x3e, 0x400c007, 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80008010}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x9c, 0xb, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000340)) 2.626786216s ago: executing program 2 (id=4135): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xa, &(0x7f0000000300)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fcb}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xa, &(0x7f0000000300)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fcb}, 0x94) (async) 2.458574305s ago: executing program 1 (id=4136): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a030200000000000000000200fffd0900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100010000000000000007"], 0x68}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.255622118s ago: executing program 5 (id=4137): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x2, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x2, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}]}}]}, 0x45c}}, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100)) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b690007e03dd6446ce8880000000000", 0x11}, {&(0x7f0000000200)="b7", 0x1}, {0x0}, {&(0x7f0000000540)}], 0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010402000200fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="98e400007306000005002100100000001c00168018"], 0x44}, 0x1, 0x0, 0x0, 0x4cc51}, 0x4054) 2.253037647s ago: executing program 2 (id=4138): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000", 0x3}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000044000180060001000200000008000500000000000c00070000000000000000000800090000000000090006006e6f6e6500000000080008000000000008000b0073697000"], 0x58}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="db7926bd7000ffdbdf2509000000080006000600000018000180090006006e6f6e6580000000080005000000000008000400ff7fffff"], 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x100000c0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000140)=0x1, 0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a, 0x0, r7}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x4, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844) ioctl$PPPIOCSMRRU(r5, 0x4010744d, &(0x7f0000000080)=0xc) listen(r1, 0x9) listen(r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18180000000000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) 1.69705288s ago: executing program 0 (id=4139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10003, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfde01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e5}, 0x24004814) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000084000000000000001fc7"], 0x18, 0x48060}], 0x1, 0x200000d0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, &(0x7f0000000100)) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xcff, 0x200, 0x3, 0xf, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000280)=r6, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000480)="05", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000550000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.537689284s ago: executing program 3 (id=4140): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000300)={@local, 0x0}, &(0x7f0000000540)=0x14) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xa, 0x7}, {0xe, 0xfff2}, {0x8, 0xffe0}}}, 0x24}}, 0x804) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000240)={r9, 0x6, 0x1ff, 0x3, 0x0, 0x7fff, 0x8001, 0x80000001, {r8, @in6={{0xa, 0x4e23, 0x5, @private0, 0x2}}, 0x6, 0x0, 0x6, 0x10000, 0x3}}, &(0x7f0000000100)=0xb0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r10 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010000000000fefbdf251d01060008000900", @ANYRES32=r5, @ANYRESOCT=r10, @ANYRES32=r5, @ANYBLOB="2e8b069507301e61dc7b84ec1f253ed6433135fd2413ae7c90f3e3b57f720b47c94b554feafb6bd3d6c32f91f68b2a6221dd7ef3610181d14207d958553ed1e3ab618ee3dc5ef025b38d7c077477b4e667fc7fab8994dc5c02b7597f3044e1c9b9cd6e08000000000000008917a327a291fd9f620700000000000000a1cdc1b29304e15559d9b265cf982e06aa7885e48dad709098b0a7908edd3a59bff92f85319b2e2bde6f20f58f6b85ea741c40270a06cd5adf928b193a359552b29302b0f2ea49fb253d5b5d99c37a220a856f00000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x80c8) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1.368124476s ago: executing program 1 (id=4141): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)="890bc49fdc283ba6da0e26ceb0da0f001edb807fc80ae92480b58b35ef1c97d5ddb19bdba33a000000ab2a607ff3867eedb0f3c972b0062e6c23a32a7c9cb14a93ddb75eb0923606cbe151f00c1b8e20b8d476ff250412044d92617cb0fe5f2742a9c1d919a0989d8c37b4c9aaf6aeaeca328e5c6f4e12ab9e911b311dfee51dd3f28c6883d0f8e20079b948a9c3b702aa7af13b4382eb77655bafe79921515c157e5f8835f2af8fa216a9f9cdcf0000000000000000") 1.277931778s ago: executing program 0 (id=4142): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB], 0xa) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x46, "43720705000000004786b89e6fb2be5c3f000000a69e0825471829a0395ebb7bf7b5555f84e55fee49e0e4ba020ffd702b5cd64fd950858238465f49a4e649c3d26ea2b65962"}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000006c0)="38000000010006", 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "ae30c66524"}]}], {0x14}}, 0xbc}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) 1.242201614s ago: executing program 1 (id=4143): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e23001a000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (async, rerun: 64) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (rerun: 64) 1.224306186s ago: executing program 3 (id=4144): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0x44}}, {{0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x350, 0x14, 0x1, 0xfffffffc, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, {0xfff2}, {0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_red={{0x8}, {0x324, 0x2, [@TCA_RED_PARMS={0x0, 0x1, {0x8, 0x9, 0x5, 0x6, 0x1f, 0x7, 0x1}}, @TCA_RED_MARK_BLOCK={0x0, 0x6, 0x1}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_STAB={0xc1, 0x2, "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"}]}}]}, 0x350}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002e00090027bd70000000006ff9b61dcdef8972000e001100000000000000e000"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge_slave_0\x00', 0x3}, 0x18) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r5 = socket(0x25, 0x5, 0x10) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x4, 0xfffffffd, 0x1}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe00000000020000", 0x1c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000015c0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, r5) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x80, 0x3, 0x4, 0x2}, 0x48}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="20002cbd7000fedbdf25050000002ba05077c9b1330ad7f3c474aabaa4ff29"], 0x14}, 0x1, 0x0, 0x0, 0x20008050}, 0x880) 1.127921118s ago: executing program 5 (id=4145): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)=""/55, 0x37}, {0x0}], 0x2, &(0x7f0000001300)=""/4082, 0xff2}, 0x98f}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x40010000, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x8}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @loopback}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000002bc0)={@val={0x8, 0x600}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x3, 0x0, @void}}}}}, 0x2e) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000400007012bbd7000fedbdf25037c00000400bdf1648f0900ffa84bb7f775823fc6801800ef7f1400", @ANYRES32, @ANYBLOB="04000800"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}]}}}]}, 0x64}}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) 974.208418ms ago: executing program 0 (id=4146): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sendto$unix(r2, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x1c) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) 761.806388ms ago: executing program 1 (id=4147): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000100)=""/182, 0xb6}, {&(0x7f0000000ec0)=""/195, 0xc3}, {&(0x7f0000000600)=""/100, 0x64}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000000fc0)=""/4077, 0xfed}, {&(0x7f0000000c40)=""/191, 0xbf}, {&(0x7f0000000500)=""/150, 0x96}, {&(0x7f0000000480)=""/70, 0x46}, {&(0x7f00000070c0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/131, 0x83}, {&(0x7f0000000a40)=""/154, 0x9a}, {&(0x7f0000000d40)=""/140, 0x8c}], 0xc}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r4}, &(0x7f0000000080)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004380)=ANY=[@ANYRES64=r5, @ANYRESDEC=r3, @ANYRESDEC=r0, @ANYBLOB="4f2a3cc49328177326b7d8516f54b9e0244363d5183c131e36ee3b2fe8de349ce59095d29dc5eb354f6ab24773f8fb746305f8b44d3a974b7efd37670410af706ac85ea02f246a2cf100211a5b0ef1cb14a64a83293c6076caf4f44f0a471179943f3a464d45fe4543a4b7f18c3e69555a9981f78808a69ba6ccb13845394be9ed2961b1298b294d587f28c9e1987d7bd144c86aee3bc0bd252f4ef774d2fac814852382fc0de41ad5c80388a045f646ce51c72bd8dec40102ef2b84b233ee94298472da983ff931b2e8a5bb636fd8657e898f3a89ffdb482eb071b8f71485ba0246cce14d69e98dd6957459eecce74fc20de6d3b26ed6811f5f5a8dd18595493dc26c92eb52abe229a4098cdefc371cbde1ff4e74f39851677038b41256e59ac405f3b68613263d059fc8044424b9613170bad1eed6b8938fa766c90c6691b2f70d2793caffc7f54309d1c3c3f72831f1c217113d015098d0c9aaa88822e54ad2259be53f7110b9bacd2595128e3ed8154295e899baa03d8d71b39dce9cec647852efb8151609c1213f416d7e60f84e1c132745aea00b0068142772b42eb8e7a4d7a49b7c8011e9699e9ca9171e9c6202ca235c3c60a7ff3316d0fd2a65c0ec2936b34ce2953eea6535552b9d92158d3f7d2d955d2d485fa134a832de628f6ba622d5c0eac296c1101f1f4e15a1995cdfb6fcf7cf6931144c470850b20cdb92fa2f4baf6b8cdd156864bc1ed28cd470bf3940c8a1e7651de2c8c37fdb43017dade119279890732107ad015167056d368b6acbe8a6a222bf3e8016840cf721fd90262a0f54169763ef43336a4553add3c3691ffc0fd755902de1ef55cb51b5775c2d87ab3954747750a81b1afc41020a8d35fab422538f47a8f6fc0e73462a2369aa1532ae84efefa740b92695ca114f6a71073cf3ac6188bf58a6457e2dd062167bb4576919ccfc01892f8281a6facd8def5bced7ddf7dcdd5deda6f1289830a13d1070a13ba5eaa4ea085d3c93ba1b85ab2e3c558830e4b6166e9b65e87b02b6a02e5621867ba0dec9fd8acb5bde60af6f8dc3fcab80bcf15f1694210f6aaee20238f804b48307dd4fd0a895a852aae3c25a238d2f8ee00493e96e52c120fef43213d9079a191706888426eeb4a87f073d1ba32773d9a1d27966f865ecc0707d584c18529030f954b2d90451f447e30a77f9dd7e2b98b7c24ad005f0da9cea9630fc0b4ebaba7e34366ecd52026d72595b7cfb9ed2a5dce7895c2d70e1dbc70f81eb80c7489095e671fa41332da85c94237c040966187e970e09c58d277c095d9104d13cbaa2a592901b693ca65ec2252e8cf159bab29cc6ab32b7a567f0ccf229d59a3fe897b1a903f300352f01ad733725a92a4178335c5887d7fa28f8336e756443525e4a5223f884ecfb5e379816dee6ddf62c86e3b5063cb2b883428337540a09440e94e95a8d092db3be716d78055f7459abb4b61dad4dfb0d56947be1970f3db9cb1af31559be8600674e5f7b21c7700750f9bb4cafbb62897d1f4ea1ddfe0666bd35eac1f2c87b9aff489f27794f1b8283a47c415c028b102c864112552665695b40001b7f69a391c54b5c23d7f89ef2b4d89d47f7b5491153801b537283148c11f3ad8ae8dbc433de186732da6a9223ea07cf15fcf60738542a3882be33d01ba0ca08c1ca794e193afb40737c8e13a9924acf8681e6e7bbf11dbbf0add9c645ce310245e1c52ff8a7717e01ecddf7eecf2f3fa8a612674760536a578869d42d1a312073157e1da10c7862a475b257f0b4e70aabc93d021accc14d13ca3650f6c328876de488be58b251d0739322e2e73bea72474834fa564bee13aa897500b0ff9658a1250b898fc8721a270fd364c6e9b0d10a84f5246f7c6a0500aa77e9f783f1d884493986bd67ddcfbe2ea1fab2e6792649d786ea8a05ad2ba25f7253d0068a81cc1205983462d769046d79b394f83c449404eebb64b1c33f8e37b100380cccde26cb1ea4fdb9d287586f15aa8765b3c627f0e141b0f34e95c07ef3bc2353e45b82ef0147fb803735b07c9bb1fcb3578d5292cf6929b52592707088ddce63117f06f44f38ea286476166ca87798ebaa188ca20f3611d46f80ffed6da5407e6415b1a2e74594efbce78ed38d733a4699c92e7ddb0c451e15d6f4a946ef129259799bc7337aa8798ee67b9fbb8f0aa860ef33a09b2d25497e43f9482d62ca7eed94763b48692a57f8614acf32a0422832f3b029fc05b287fce08f8b5326c3113cd4c98e71f082a61481e3e6876e157e67a6dec1fcf10900ea1523c838e60847d0d4b352053aa8fc72263001d4cbff84bca82f190d13efc9deb80014aa327fafeb529e538bef23b2113f6156a8b85132c7188ee12da7211c08746556757b68bd4f74b8f06b7b40f993760f0f9a7640c8d025b8857b127481c24a8ad6e1050d3db4730cbb35612e74124969690e7a91a6015877bc3d608b6a44b8e9998034898c99350167664214293ca15b69809090484e7912a8a92099be283ea6c1a4a814044e5b94a7ccf447405e885383bcf0815c62dffb81aeee6cc6347e945565015d3caba5d0f9cf94d596c78030d7401c31f9be953a88a28fc97dc24feab3a360ba7448a6082f469e112beaa15541e243daab1be79e07908bbd44f3284b19367e323e05d58b677f55a35ad05da846aa1f22f2b9171de74d5c85970f1cafa50284ca95dc5ecd3aa39cdc61e305c7d479711c2f80f5d69377fa6b8eb711e9d93f9f3c420b4c62c767eb0fffecc6a306512761e2e3994b3edaf680ee2436d581636a7ccb4a9c38bd1daf754bebc6b7048a76fd49824877fb779913f2b4a0801a6947875d85272395603a1a5ef29c27fe44089a3c52c025e2a8163563bffc204f26a3e474a3d06913efa5a0d1f4d8ba4273a15b6c91a0ed6410f6aa6cd2cef8db608a5492db68d34bb99817d13c4aea3ccdfded08553748df30e0684517c76e9d7d819b950f6f3821cd367f856551237827dea7543d7623e43b8cbc2601df4a9c30f4d63324b7afd18139044b2b6fc706a94026922d39752795a49e229ecaa6d6a8759e0f873052665077b47df959ece24644adfd888c87ca405624d84173911bfa3c82580349834784faa0800f9bf87148541da3e9ea0d5eb870ebf9140f8fdbec596e32b697eb517883f2f3145438aa4c62ef387379b645d00d795304ebdb62370925e99c219b02ea9a4b243216f629d3ba7a4e751308513d825723d357f39d7aacc5e9b10ab0915ee80fc8d9ce0bbac5666cb49a5c55e4256427621c7fae9b4880de10df9e5c23c53f6bbcb53c380655f13155ea522411ac45035b8926e46b71568a863d569eae21450aa5e67331ee2e0dc9e90f2117e24167f5a7c40b13c8203be3f5afd11ef0d883cc1aaf5462068cb151391320385dc0edff38c9bfc52d08067dd238fe3344bc6b3b65a2cea2e6f2da6f5ca5c1b8f5f61af476cde40d904301b8f5a391bcce6851810f7997b4735fd5e79e40a15014d3413e94a95ab42eef7a93237874528cb35ccbbc57bd553afb0e4c2849d47e38adfe1a0210c4fa3a2e17f8cb9741b45ae2ad6e5c59ccc054d45339a5de72b413fd562803361cf036c90ffd859ad7da703c4c8143e9765d44c5db8fa983fd498b87dfd733feaf4f6f254132b651d21a73949aaf1229d383381245ca61585799d3bcd832205c3657a14edd4eb77d0de8854cc6a4f5f8b12428740b93dc47623947c557a8c9a106c2579213826db979340788e239ea7f7e4d86697ca875959c362ee682ef9fe9a830c291e0442da1e76bf2f6d7be3c83b4fb922bf50ed20980de632525b0522c106c1f678e707eccdee3862c759f59c7f15c356eea55f66cc775f75a247883efc334e56835090c55ef73d14ed78d690470615d6f160dc05ded9ce731527f6987fd94feaf991ed3589c3acfb0617c145bfca7407fdc1580581e0bf4b00785b0d0eae7bb9057ac3dee62ba390d9dd7389e2e8d388be7b3e670a73693e1284696537852499e330d46406f4ec20e7ad2eb8837599cd1147aa5300818eb800deeb4fe0436bb42372e6782f45a846d08fd6436535f2a5cc82bc4ca865f2607a4e9774ceb4e9ed53af545e7f8f49730d5208297adc188befec81cc90f5e5a6baf4455692d1a9507488c8813f1bffb6e523ea5dc21ae86b4c2362e80c6f81737f933486267206ce9b57b4b28a82fffa82fca96c55eff9b2c31777f9fe3c125ee221c6365dab97c7152e004c88ab84d7a273f28d851cac197ba6e1d2c8e4d33bf4d105628c99e6964ece845bf903258526cb7213829e487d81ef5c495119131e9a4d84af8698ceb4137d2b91214ed73463216ff48845e469078f5ecdf3f778d7b4c328092535d7cb31e0b2b5bc234eaf0ace59d54a9b24d58eb5c571abea8fcc0297de2b0827188b3c9e011e7e463fa98ee6a4880be580b0f7cdc0dd9370757da960b34802689293a594dc59ca5f69b7289e8d3eeaa30137a64e3784230837b7607081e32e61ce6c9f0b41aefe382f2f41bc16d29ed662cdbd2a9e5dfadc47cd4a0729adb33c3fd630379b33c694b45dedcef2bf9879094787d92c3ae62eff45751f86b9d88b591aeae9e31f9d4eb4907270c9ce2b36123f819c775a1feb99ed06ac628d008145ba1dbe810049880430b7e8a930b245cc95f72bef1c69df4577d03bee432a4484c15489dc1a27897bea689fe9f3b549efbd5972e3e80870c4798bfb505c27c6ac77c9a854bdb5211c56508b636f1f4b1cc92c0df6819f7a9653c6f166c9be8a762e776bfb4f4558e585d3c3dd9df57c3f065c94a3830f2d913011d9f3a32677ae962bbb9cb6f947015f5b2ceaa630e5f1410ed3fbd6dd339d7c4b9203b4c40f3cf4788aa24e791f292f649f391568c82eefb4496e42307ce0200e3d0c07160a8a9640a392bd93a323285d105a8ee3b5d1fc58ec744399b8f53e9c8533c17482566cf6dc279bba2f91fca77d490195e10749076cb6740572e57f84b7d75c9fd48686b85a1db6761fa28f00e0fa34a7f8ec91ed80969d7fdb0b83d3fc6edfb2b91457fdabee79af69d9c87479a8442323f757d8cc83ca5649e85e0c3ec637af4d10f4db59bf6c938d5876ed7e78d578d3d0182ebb7b1d92886d013755fde008f5e15b97a069ef94b4ffcd1f4914e957f6f8080dd3a54c5868678fc368735426b42042837825c4d1d661f45181ce7bf91ad0b6157a8980ae622ec61283261fdc08a12331c199a7fa1bd2984a95674e5ff8e4cbaa3e0c5e38f8db3bc732ba313c71536b8db567dc9860166f16a2b507ec96bb72540171362e1920dc8910686cf77659778125464e9303702ddd29b41e6485ca0cbb2e605a93f1e7027d29607773545da654591ba4bc3492373bab8a662302a243b156a81892cddcec863a9ebd60d7cf1cc978b46d223428f942c6ac0748bc009c2119d6c4989ebf4ee80b3370df8c4ed241bbec11191ada5adec5fcf16dc17c928152b3df583d7a5f13500b7956ce8dfdd6afbbb4a596c924f9d086a035c59bd87776ccd3beea3cdff90d9c4f2decb84c91e9fddcd5d442c01fbd5c28ae067189c577602e35965ffdefb1edf6329582aa5e6a284eb1bac88f4175e2355ae8d1dd2138532922906fa999a15f15d8c6176c27a58d41a71e8ebf0f94c0afbd6b87aff02148670a29a038490a55eb7f8b3cd73de0c87a8d3f788bf973b69942e8c7585b8d0c1372307fbbbfd0ee882da17a42876d6ce969cd114ba1a64ec93f924401ffc29b4c11ac54907437a2a060be162762c57e76982099af28f77858a590e43a9b56bc310cc951e6c54", @ANYRES8=r3, @ANYRES64=r1, @ANYRES32=r2, @ANYRES32, @ANYRES64=r4], 0x7c}}, 0x20008080) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a580000000620a9c96739b59d38ba64991b19400a0b040000000000000000020000072c0004802800018007000000637400001c0002800800004000000010080002400000000c05000300010000000900010073797a30000000000900020073797a32000000001400000011000100000e00000000000500000aad526c5b3e482d0fe6dc10aefb23f755361d8d011b869874bc451abe023326fee4fd77", @ANYRES8=r2, @ANYRESHEX=r5], 0x80}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000400)=0x8) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000300)={0x3, 0x89}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000840)={r8, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, [0x4, 0x1000, 0x1, 0x8, 0x0, 0x5, 0x1, 0xe, 0x7, 0xffffffffffffff01, 0xff, 0x0, 0xffffffffffff4117, 0x8000000000000001, 0xb]}, &(0x7f0000000940)=0x100) r9 = socket(0x29, 0x2, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f00000020c0)=""/4130, &(0x7f0000000000)=0x1022) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x9, 0xc, 0x4, 0x383, 0x6, 0x401, 0x200000a, 0x23}}) 680.507527ms ago: executing program 0 (id=4148): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="0d000000010001", 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xe9b}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}, 0x1, 0x0, 0x0, 0x8a885}, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000e00000000000088a8230081000100884841"], 0x14f) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000040)="0d000000010001", 0x7) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xe9b}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}, 0x1, 0x0, 0x0, 0x8a885}, 0x0) (async) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000e00000000000088a8230081000100884841"], 0x14f) (async) 680.071433ms ago: executing program 2 (id=4149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xa4}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x24}, 0x94) 539.668825ms ago: executing program 2 (id=4150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, 0x0) shutdown(r3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x480000, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000000180100002020642500000000002020207b000000bfa108000000000047010000f6f3ffffb7020000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, 0x0, 0x0) sendmmsg(r6, 0x0, 0x0, 0x8080) ioctl$XFS_IOC_FSGROWFSRT(r4, 0x40105870, &(0x7f0000000580)={0x100000000, 0xfe3}) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @none, 0x15}, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r8, 0x1, 0x0, 0x0, {0x3}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r8, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000180)=""/118, 0x76, 0x40000020, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r7) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048011}, 0x200400c0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x30, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 519.774749ms ago: executing program 3 (id=4151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000c400000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x38, r2, 0x101, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r5, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'sit0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r6], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="000000f80000010000"], 0xfce) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000007ed000008500000064000000950000000000000049385389bf8df76a5e98aa085e7570ae87f2fe41c2bccaf259cbc9420f626f7de437bc2025a96f07bd"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 251.767924ms ago: executing program 0 (id=4152): socket$kcm(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x6, 0xfffffffa, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x6, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xf5}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xec}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm_base(cts(ecb-aes-neon),sha256-arm64-neon))\x00'}, 0x58) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0100002c00010000000000fcdbdf250a01f28004001800140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f00000003c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @mcast1, 0x4}}, 0x24) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x40008) sendmmsg$inet6(r2, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x10, @loopback, 0x2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)}}], 0x3, 0x240c089d) sendfile(r3, r2, &(0x7f0000000380)=0xfffffffffffffff9, 0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000600000003000000000000080400000004000000000408000000040000000000000c030000000000000000000003000000000100000002000000fdffffff002e615f5f00"], 0x0, 0x5a, 0x0, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3a}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1725c60", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d616328736861323234"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket(0x2, 0x80805, 0x0) 184.619071ms ago: executing program 3 (id=4153): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000140)=[{}, {}, {}], 0x3, 0x7fff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x1a0000010}) r4 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r4, 0x29, 0x2, 0x0, &(0x7f0000000000)=0xfffffffffffffd96) gettid() sendmsg$netlink(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x8054}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x20008880) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}, {{&(0x7f00000012c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001340)=""/148, 0x94}, {&(0x7f0000001400)=""/57, 0x39}, {&(0x7f0000001440)=""/88, 0x58}], 0x3, &(0x7f0000001500)=""/40, 0x28}}], 0x2, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x1, 0x8, &(0x7f0000001680)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYBLOB="00000000bb030000000000008500000800000000000000000000bad60354be440f25feb520ed0db579f6a072aabb7a57f277f0fc7f35a6ac7a28c5a674e2fb0269dd9b54be88fbcebc225964088efa41fd9356ff04955430a4"], 0x0, 0x0, 0x51, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) r9 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000001600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003030101000000f1ffffff00000000030800034000000081"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000020000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) 139.775606ms ago: executing program 2 (id=4154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@security={'security\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x0, 0x0, 0x268, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x1}, {0x1, 0x3, 0x7}, {0x0, 0x2, 0xd731213761a618e8}, 0x1000, 0x1}}}, {{@ipv6={@empty, @remote, [0xffffffff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0xffffffff, 0xff000000, 0xffff00], 'ip6gretap0\x00', 'nr0\x00', {}, {}, 0xc, 0x4, 0x6, 0x42}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x9, 0x5, 'bm\x00', "76a01a72e2613d0ee7ad7787fbb26e355194a7c263855d04659da0c71ffbf48415323371efbbe1a65823dca1915d6bc74879df977f0e6c9a0283533253ed194ef4d374f877fc5cf3d4854a1c47c1f6062635188ac84a374ba0bf4bc3a883228e6ecec1abb50879d13791571ddaef2c29d5cb5db45b69a551b210b57f1d445976", 0xf, 0x1, {0x3}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 0s ago: executing program 5 (id=4155): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) socket$kcm(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0xfffffffffffffcb4, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x120) (async) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0xfffffffffffffcb4, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x120) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000800) sendmsg$nl_generic(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00000c00028005007c8028000000040007000c"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) sendmsg$nl_generic(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00000c00028005007c8028000000040007000c"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) kernel console output (not intermixed with test programs): [ 508.371568][T18102] SET target dimension over the limit! [ 508.440740][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.473515][T18107] unsupported nlmsg_type 40 [ 508.563647][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.683515][ T9132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.789062][T18121] netlink: 'syz.1.3040': attribute type 1 has an invalid length. [ 508.840658][ T5645] Bluetooth: hci0: command tx timeout [ 508.876868][T18125] __nla_validate_parse: 5 callbacks suppressed [ 508.876889][T18125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3040'. [ 508.912733][T18127] netlink: 'syz.3.3042': attribute type 1 has an invalid length. [ 508.955256][T18121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.196175][T17960] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.204628][T17960] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.213800][T17960] bridge_slave_0: entered allmulticast mode [ 509.223911][T17960] bridge_slave_0: entered promiscuous mode [ 509.237119][T17960] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.246045][T17960] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.255150][T17960] bridge_slave_1: entered allmulticast mode [ 509.264782][T17960] bridge_slave_1: entered promiscuous mode [ 509.336987][T17960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.394600][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3045'. [ 509.452238][T17960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.465652][T18145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3045'. [ 509.480747][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.500573][T18145] netlink: 'syz.1.3045': attribute type 13 has an invalid length. [ 509.508984][T18130] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3043'. [ 509.529923][T18145] netlink: 'syz.1.3045': attribute type 11 has an invalid length. [ 509.550023][T18133] netlink: 'syz.4.3043': attribute type 16 has an invalid length. [ 509.567820][T18133] netlink: 'syz.4.3043': attribute type 17 has an invalid length. [ 509.605224][T17960] team0: Port device team_slave_0 added [ 509.648466][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.714468][T18133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.725790][T18153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3048'. [ 509.732155][T18133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.791866][T18133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.834053][T18133] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 509.862920][T18133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 509.884301][T18157] netlink: 'syz.1.3049': attribute type 4 has an invalid length. [ 509.911921][T18133] veth1_macvtap: left promiscuous mode [ 509.952057][T18133] veth0_macvtap: left promiscuous mode [ 509.985159][T18133] veth0_macvtap: entered promiscuous mode [ 510.023566][T18133] veth1_macvtap: entered promiscuous mode [ 510.070224][T18133] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.081771][T18133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.091279][T18133] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.107568][T18133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.115287][T18133] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 510.124503][T18133] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.137783][T18133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 510.147006][T18133] 8021q: adding VLAN 0 to HW filter on device bond4 [ 510.156538][T18133] 8021q: adding VLAN 0 to HW filter on device bond5 [ 510.165374][T18133] 8021q: adding VLAN 0 to HW filter on device bond6 [ 510.175854][T18133] 8021q: adding VLAN 0 to HW filter on device bond7 [ 510.184161][T18133] 8021q: adding VLAN 0 to HW filter on device bond8 [ 510.193637][T18133] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 510.203766][T18133] 8021q: adding VLAN 0 to HW filter on device bond9 [ 510.212256][T18133] 8021q: adding VLAN 0 to HW filter on device bond10 [ 510.226843][T18133] 8021q: adding VLAN 0 to HW filter on device bond11 [ 510.239914][T18133] bond12: left promiscuous mode [ 510.244904][T18133] bond12: left allmulticast mode [ 510.250442][T18133] 8021q: adding VLAN 0 to HW filter on device bond12 [ 510.261958][T18133] veth0_to_team: entered promiscuous mode [ 510.269199][T18133] syzkaller0: left promiscuous mode [ 510.275093][T18133] syzkaller0: left allmulticast mode [ 510.282894][T18133] ip6gre1: left promiscuous mode [ 510.287850][T18133] ip6gre1: left allmulticast mode [ 510.295312][T18133] 8021q: adding VLAN 0 to HW filter on device bond13 [ 510.303730][T18133] 8021q: adding VLAN 0 to HW filter on device bond14 [ 510.312101][T18133] gtp1: left promiscuous mode [ 510.316821][T18133] gtp1: left allmulticast mode [ 510.323286][T18133] ip6gre2: left promiscuous mode [ 510.328263][T18133] ip6gre2: left allmulticast mode [ 510.335595][T18133] bond15: left promiscuous mode [ 510.344570][T18133] 8021q: adding VLAN 0 to HW filter on device bond16 [ 510.354219][T18133] bridge7: left allmulticast mode [ 510.366153][T17960] team0: Port device team_slave_1 added [ 510.544213][ T3308] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.566878][ T3308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.598682][ T3308] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.619973][ T3308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.698002][ T3308] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.713302][ T3308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.732697][ T3308] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.751933][ T3308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.846067][ T157] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 510.862021][ T157] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 510.870375][T17875] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 510.879298][T17960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.887762][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.910252][T18171] IPVS: Scheduler module ip_vs_ not found [ 510.922269][ T5645] Bluetooth: hci0: command tx timeout [ 510.944315][T17960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.995305][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3056'. [ 511.013904][T17960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.038433][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.105788][T17960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.118613][ T157] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 511.147343][ T5769] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 511.156054][ T157] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 511.213226][ T6225] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 511.229379][ T6225] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 511.249329][ T5732] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 511.413415][T18193] netlink: 'syz.3.3060': attribute type 1 has an invalid length. [ 511.491291][ T5732] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 511.506711][T18190] Cannot find del_set index 4 as target [ 511.665575][T18203] netlink: 'syz.3.3060': attribute type 1 has an invalid length. [ 511.812912][T17960] hsr_slave_0: entered promiscuous mode [ 511.819332][T17960] hsr_slave_1: entered promiscuous mode [ 511.832689][T17960] debugfs: 'hsr0' already exists in 'hsr' [ 511.859837][T17960] Cannot create hsr debugfs directory [ 512.023657][T18208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3063'. [ 512.213230][T18208] vlan2: entered promiscuous mode [ 512.251883][T18208] bridge0: entered promiscuous mode [ 512.472751][T18221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3065'. [ 512.526719][ T9132] net_ratelimit: 10 callbacks suppressed [ 512.526740][ T9132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.604501][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.796122][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.906437][T17960] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.976353][T18233] validate_nla: 2 callbacks suppressed [ 512.976372][T18233] netlink: 'syz.0.3070': attribute type 1 has an invalid length. [ 513.000369][ T5645] Bluetooth: hci0: command tx timeout [ 513.161897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.174576][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.194204][T17960] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.244362][T18238] tipc: Enabling of bearer rejected, failed to enable media [ 513.267611][T18238] netlink: 'syz.4.3072': attribute type 30 has an invalid length. [ 513.293017][T18238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3072'. [ 513.358753][T18238] bond17: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 513.375152][T18238] bond17 (unregistering): Released all slaves [ 513.463868][T17960] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.641247][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.658052][T17960] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.822412][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.236039][T18268] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3075'. [ 514.644555][T18288] netlink: 424 bytes leftover after parsing attributes in process `syz.0.3080'. [ 514.664505][T18288] netlink: 'syz.0.3080': attribute type 1 has an invalid length. [ 514.682113][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.736003][T17960] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 514.750923][T17960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.761041][ T9132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.771421][T17960] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 514.815086][T17960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.831922][T17960] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 514.847146][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.869079][T17960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.966618][T17960] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 515.006203][T17960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.381439][T17960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.427999][T18334] netlink: 'syz.3.3091': attribute type 33 has an invalid length. [ 515.456191][T17960] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.470334][T18334] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3091'. [ 515.503893][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.511180][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.552447][T18334] `: renamed from team0 (while UP) [ 515.613906][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.621219][ T6237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.827665][T18350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3095'. [ 515.839544][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3096'. [ 515.912503][T18356] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3097'. [ 516.607816][T18386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3103'. [ 516.623848][T18385] netlink: 'syz.3.3102': attribute type 15 has an invalid length. [ 516.657335][T18385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3102'. [ 516.667213][T18386] bond17: entered promiscuous mode [ 516.674257][T18386] 8021q: adding VLAN 0 to HW filter on device bond17 [ 516.754000][T18392] 8021q: adding VLAN 0 to HW filter on device bond18 [ 516.793519][T18392] bond18: entered promiscuous mode [ 516.811277][T18392] bond17: (slave bond18): Enslaving as an active interface with an up link [ 516.825034][T18402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3106'. [ 517.022479][T18389] tap0: tun_chr_ioctl cmd 1074025677 [ 517.028383][T18389] tap0: linktype set to 778 [ 517.092510][T17960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.428692][T18426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3109'. [ 517.804081][ T29] net_ratelimit: 5 callbacks suppressed [ 517.804105][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.818147][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.876031][T17960] veth0_vlan: entered promiscuous mode [ 517.948866][T17960] veth1_vlan: entered promiscuous mode [ 517.976775][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.164570][T17960] veth0_macvtap: entered promiscuous mode [ 518.189319][T18458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.218124][T17960] veth1_macvtap: entered promiscuous mode [ 518.355490][T17960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.403163][T17960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.480469][ T6225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.506884][ T6225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.537799][ T6225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.548236][ T6225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.601058][T17875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.657832][T18472] netlink: 'syz.1.3121': attribute type 8 has an invalid length. [ 518.675110][T18474] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 518.728617][T18474] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 518.843160][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.008141][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.043060][ T6225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.067019][ T6225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.093145][T18485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.108904][T18485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.156914][T18485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.176221][T12120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.198328][T12120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.211777][T18485] netlink: 'syz.1.3124': attribute type 18 has an invalid length. [ 519.254176][T18485] __nla_validate_parse: 5 callbacks suppressed [ 519.254198][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3124'. [ 520.009215][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 520.023214][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 520.044608][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 520.053030][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 520.064481][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 520.558483][T18534] xt_CT: You must specify a L4 protocol and not use inversions on it [ 521.155266][T18564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3142'. [ 521.254552][T18564] veth3: entered promiscuous mode [ 521.312278][T18520] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.364006][T18568] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 521.476550][T18575] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.3145'. [ 521.776910][T18584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3146'. [ 522.121897][ T5644] Bluetooth: hci2: command tx timeout [ 522.583057][T12120] batman_adv: batadv0: Removing interface: ip6gretap0 [ 522.760362][ C1] ip6_tnl_xmit_ctl: 14 callbacks suppressed [ 522.760384][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.774499][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 523.016555][ T5754] net_ratelimit: 49 callbacks suppressed [ 523.016579][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.169025][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.281498][T12120] bond10 (unregistering): (slave gretap2): Releasing backup interface [ 523.371806][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3151'. [ 523.565703][T12120] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 523.824752][T12120] bond1 (unregistering): Released all slaves [ 523.845512][T12120] bond2 (unregistering): (slave veth3): Releasing backup interface [ 523.854718][T12120] bond2 (unregistering): Released all slaves [ 523.870203][T12120] bond3 (unregistering): Released all slaves [ 523.885860][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.904317][T12120] bond4 (unregistering): (slave batadv1): Releasing active interface [ 523.913511][T12120] bond4 (unregistering): Released all slaves [ 523.929936][T12120] bond5 (unregistering): Released all slaves [ 523.944840][T12120] bond6 (unregistering): Released all slaves [ 523.961715][T12120] bond7 (unregistering): Released all slaves [ 523.978496][T12120] bond8 (unregistering): Released all slaves [ 523.995940][T12120] bond9 (unregistering): Released all slaves [ 524.026515][T12120] bond10 (unregistering): (slave bond11): Releasing backup interface [ 524.036206][T12120] bond10 (unregistering): Released all slaves [ 524.040695][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.043095][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 524.070766][T12120] bond11 (unregistering): Released all slaves [ 524.086369][T12120] bond12 (unregistering): Released all slaves [ 524.101134][T12120] bond0 (unregistering): Released all slaves [ 524.134873][T18597] syzkaller1: entered promiscuous mode [ 524.142755][T18597] syzkaller1: entered allmulticast mode [ 524.151595][T18520] lo speed is unknown, defaulting to 1000 [ 524.158145][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3151'. [ 524.199846][ T5644] Bluetooth: hci2: command tx timeout [ 524.205656][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.209617][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 524.680732][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 524.954903][ T6241] smc: removing ib device syz2 [ 525.083750][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.126211][T18642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3154'. [ 525.166377][ T6241] smbdirect: ib_dev[syz2] removed [ 525.238640][T18647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3154'. [ 525.273853][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.326222][ T5007] block nbd3: Possible stuck request ffff888027c27000: control (read@0,1024B). Runtime 60 seconds [ 525.337364][ T5007] block nbd3: Possible stuck request ffff888027c271c0: control (read@1024,1024B). Runtime 60 seconds [ 525.350449][ T5007] block nbd3: Possible stuck request ffff888027c27380: control (read@2048,1024B). Runtime 60 seconds [ 525.363293][ T5007] block nbd3: Possible stuck request ffff888027c27540: control (read@3072,1024B). Runtime 60 seconds [ 525.540607][T18650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3154'. [ 525.805457][ T9132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.121100][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.289977][ T5644] Bluetooth: hci2: command tx timeout [ 526.290285][T18666] netlink: 'syz.4.3158': attribute type 11 has an invalid length. [ 526.304641][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.644430][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 527.496273][T18699] can: request_module (can-proto-0) failed. [ 527.563564][T18699] IPVS: set_ctl: invalid protocol: 41788 204.234.250.157:27675 [ 527.734850][T18694] syzkaller0: entered promiscuous mode [ 527.760478][T18694] syzkaller0: entered allmulticast mode [ 527.789345][T18696] tipc: Enabled bearer , priority 0 [ 527.957300][T18693] tipc: Resetting bearer [ 528.137241][T18726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3167'. [ 528.204798][ T29] net_ratelimit: 6 callbacks suppressed [ 528.204821][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.221402][T18733] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3167'. [ 528.253056][T18733] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3167'. [ 528.360965][ T5644] Bluetooth: hci2: command tx timeout [ 528.368569][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.854352][ T9150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.244169][ T9144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.413982][ T9144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.979387][ T9150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.280293][ T9144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.457216][ T9144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.100059][ T9150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.327005][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.140842][T18693] tipc: Disabling bearer [ 532.159836][T18726] hsr_slave_0: left promiscuous mode [ 532.171237][T18726] hsr_slave_1: left promiscuous mode [ 532.200999][ T9132] tipc: Node number set to 1288483830 [ 532.216471][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 532.301677][T18520] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.329476][T18520] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.344027][T18520] bridge_slave_0: entered allmulticast mode [ 532.354520][T18520] bridge_slave_0: entered promiscuous mode [ 532.366643][T18520] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.376715][T18520] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.397477][T18520] bridge_slave_1: entered allmulticast mode [ 532.421081][T18520] bridge_slave_1: entered promiscuous mode [ 532.513499][T12120] tipc: Disabling bearer [ 532.515865][T18752] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3173'. [ 532.558494][T12120] tipc: Left network mode [ 532.560142][T18757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3175'. [ 532.626575][T18520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.631559][T18757] netlink: 39 bytes leftover after parsing attributes in process `syz.1.3175'. [ 532.649865][T18768] netlink: 'syz.4.3174': attribute type 1 has an invalid length. [ 532.691798][T18520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.755865][T18762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3174'. [ 532.974945][T18762] 8021q: adding VLAN 0 to HW filter on device bond19 [ 533.367034][T18755] 8021q: adding VLAN 0 to HW filter on device bond19 [ 533.405637][ T29] net_ratelimit: 6 callbacks suppressed [ 533.405658][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.410211][T18800] netlink: 'syz.3.3180': attribute type 1 has an invalid length. [ 533.437750][T18755] bond19: (slave geneve3): making interface the new active one [ 533.450918][T18755] bond19: (slave geneve3): Enslaving as an active interface with an up link [ 533.533921][ T136] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 533.552651][ T136] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 533.568084][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.792042][T18800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 533.804911][T18801] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 533.822092][T18803] macsec1: entered promiscuous mode [ 533.827598][T18803] virt_wifi0: entered promiscuous mode [ 533.837099][T18810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.839497][T18520] team0: Port device team_slave_0 added [ 533.857969][ T136] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 533.895203][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 534.076385][T18520] team0: Port device team_slave_1 added [ 534.091713][ T136] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 534.243809][T18830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3185'. [ 534.282040][T18830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3185'. [ 534.407740][T18827] netlink: 'syz.2.3183': attribute type 1 has an invalid length. [ 534.442182][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.507278][T18520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.529994][T18520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.607132][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.619496][T18520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.728247][T18520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.756535][T18520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.860038][T18520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.922197][ T9132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.928846][T18850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3190'. [ 535.142098][T18869] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3195'. [ 535.228171][T18869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3195'. [ 535.271552][T18869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3195'. [ 535.480465][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.535838][T18520] hsr_slave_0: entered promiscuous mode [ 535.566618][T18520] hsr_slave_1: entered promiscuous mode [ 535.593741][T18520] debugfs: 'hsr0' already exists in 'hsr' [ 535.614740][T18520] Cannot create hsr debugfs directory [ 535.632523][T18877] syzkaller0: entered promiscuous mode [ 535.639991][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.650282][T18877] syzkaller0: entered allmulticast mode [ 535.664083][T18894] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 535.799210][ T9132] IPVS: starting estimator thread 0... [ 535.899793][T18903] IPVS: using max 29 ests per chain, 69600 per kthread [ 536.060338][ T9132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.153608][T18894] 8021q: adding VLAN 0 to HW filter on device bond20 [ 536.236690][T18927] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004 [ 536.352286][T18929] IPv6: addrconf: prefix option has invalid lifetime [ 536.719107][T18939] netlink: 'syz.2.3205': attribute type 1 has an invalid length. [ 536.839995][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 537.633373][T18967] __nla_validate_parse: 5 callbacks suppressed [ 537.633394][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'. [ 537.796181][T18974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3213'. [ 537.883700][T18981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3215'. [ 537.908502][T18981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3215'. [ 538.119954][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 538.131956][T18986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3216'. [ 538.155861][T18986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3216'. [ 538.333937][T18986] vcan1: entered promiscuous mode [ 538.348569][T18986] vcan1: entered allmulticast mode [ 538.600395][ T9142] net_ratelimit: 12 callbacks suppressed [ 538.600419][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.784652][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.016838][T12120] hsr_slave_0: left promiscuous mode [ 539.052300][T12120] hsr_slave_1: left promiscuous mode [ 539.081556][ T9132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.409958][ T9132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.642218][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.815760][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.174650][ T136] smc: removing ib device sqz0 [ 540.194169][T19021] syz_tun: entered allmulticast mode [ 540.215690][T19021] syz_tun: left allmulticast mode [ 540.248612][T19023] syz_tun: entered allmulticast mode [ 540.250824][ T136] smbdirect: ib_dev[sqz0] removed [ 540.265632][T19025] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 540.333484][T19025] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 540.359071][T19025] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 540.683041][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.697425][ T9150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.749465][T19058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3225'. [ 540.858900][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.885600][T18520] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 540.953696][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3227'. [ 541.005222][T18520] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.013181][ T9132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.045688][T18520] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 541.182809][T18520] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.217591][T18520] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 541.269190][T18520] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.320966][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 541.340138][T18520] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 541.379252][T18520] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 541.528057][T19081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3231'. [ 541.565688][T19085] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3230'. [ 541.815748][T18520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.048533][T18520] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.115717][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.123239][ T6241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.205279][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.212761][ T6225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.241844][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 543.802085][ T9142] net_ratelimit: 11 callbacks suppressed [ 543.802108][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.315555][T18520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.397886][T19170] netlink: 'syz.4.3249': attribute type 1 has an invalid length. [ 544.453322][T19170] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3249'. [ 544.467246][T18520] veth0_vlan: entered promiscuous mode [ 544.484434][T18520] veth1_vlan: entered promiscuous mode [ 544.542473][T19170] netlink: 'syz.4.3249': attribute type 1 has an invalid length. [ 544.570029][T19170] netlink: 'syz.4.3249': attribute type 8 has an invalid length. [ 544.596155][T19170] netlink: 606 bytes leftover after parsing attributes in process `syz.4.3249'. [ 544.619145][T18520] veth0_macvtap: entered promiscuous mode [ 544.667788][T18520] veth1_macvtap: entered promiscuous mode [ 544.774162][T18520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.845086][ T9144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.863238][T18520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.942163][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.967455][T19191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3253'. [ 544.996335][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.029305][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.105350][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.163853][ T9132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.566715][ T6230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.618634][ T6230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.636452][T19215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3255'. [ 545.701042][T19218] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3256'. [ 545.880350][ T9144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.038207][T19220] bond4 (unregistering): Released all slaves [ 546.076260][T19234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3259'. [ 546.162015][T19234] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 546.162174][T19234] block (null): Could not allocate knbd recv work queue. [ 546.203289][ T6230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.235764][ T6230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.285344][T19234] nbd: failed to add new device [ 546.304670][T19236] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3259'. [ 546.385392][T19236] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 546.387688][T19236] block (null): Could not allocate knbd recv work queue. [ 546.438448][T19250] netlink: 'syz.1.3261': attribute type 1 has an invalid length. [ 546.464339][T19236] nbd: failed to add new device [ 546.486644][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3261'. [ 546.574406][T19252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.774495][T12120] IPVS: stop unused estimator thread 0... [ 546.923145][ T9144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.219554][T19274] tipc: Started in network mode [ 547.239260][T19274] tipc: Node identity e0000001, cluster identity 4711 [ 547.269467][T19274] tipc: Enabling of bearer rejected, failed to enable media [ 547.370647][T19278] macvtap1: entered allmulticast mode [ 547.438002][T19278] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 547.645867][ T5645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 547.661565][ T5645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 547.676159][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 547.693891][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 547.703648][ T5645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 547.962123][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.212133][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.347691][T19299] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.355800][T19299] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.560499][T19299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.586867][T19299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.997281][ T157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.014232][ T9144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.025561][ T157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.042351][ T157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 549.069873][T19315] @0Ùÿÿ: renamed from bond_slave_1 (while UP) [ 549.091355][ T6241] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.140261][ T6241] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.188877][T19330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3275'. [ 549.256925][ T6241] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.278856][ T6241] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.383309][ T157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.402217][ T157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.421760][ T157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 549.607408][ T157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.656901][ T157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.678250][T19355] netlink: 'syz.2.3279': attribute type 1 has an invalid length. [ 549.690537][ T157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 549.732397][T19355] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 549.800629][ T5645] Bluetooth: hci1: command tx timeout [ 549.908175][ T157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.950426][ T157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.969324][ T157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 550.041429][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.051638][T19375] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3282'. [ 550.167440][T19373] syzkaller0: entered promiscuous mode [ 550.173284][T19373] syzkaller0: entered allmulticast mode [ 550.228804][T19380] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3284'. [ 550.283604][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.372713][T19390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3287'. [ 551.086121][ T9144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.250401][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.882667][ T5645] Bluetooth: hci1: command tx timeout [ 552.120345][ T9144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.165311][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.355212][T19380] netlink: 'syz.3.3284': attribute type 3 has an invalid length. [ 553.367168][T19395] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 553.376883][ T4993] udevd[4993]: worker [11929] /devices/virtual/block/nbd3 is taking a long time [ 553.404926][T19395] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 553.440730][T19395] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 553.658871][T19406] sctp: [Deprecated]: syz.3.3290 (pid 19406) Use of int in max_burst socket option deprecated. [ 553.658871][T19406] Use struct sctp_assoc_value instead [ 553.794455][T19414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3293'. [ 553.959853][ T5645] Bluetooth: hci1: command tx timeout [ 554.160089][T19429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3292'. [ 554.201831][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.283828][T17875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.349432][T19434] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 554.385559][T19434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.670898][ T157] dvmrp0: left allmulticast mode [ 554.687581][ T157] dvmrp8: left allmulticast mode [ 554.714707][ T157] tipc: Resetting bearer [ 554.864689][T19446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3296'. [ 555.240428][ T9144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.412312][ T5007] block nbd3: Possible stuck request ffff888027c27000: control (read@0,1024B). Runtime 90 seconds [ 555.424407][ T5007] block nbd3: Possible stuck request ffff888027c271c0: control (read@1024,1024B). Runtime 90 seconds [ 555.436793][ T5007] block nbd3: Possible stuck request ffff888027c27380: control (read@2048,1024B). Runtime 90 seconds [ 555.447996][ T5007] block nbd3: Possible stuck request ffff888027c27540: control (read@3072,1024B). Runtime 90 seconds [ 555.577749][ T157] bond19 (unregistering): (slave geneve3): Releasing active interface [ 555.630926][ T157] bridge0 (unregistering): left allmulticast mode [ 555.744462][ T157] bond2 (unregistering): (slave bridge3): Releasing active interface [ 555.785111][ T157] bond11 (unregistering): (slave bridge4): Releasing backup interface [ 555.847389][ T157] tipc: Disabling bearer [ 556.001585][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.014148][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.024630][ T157] bond0 (unregistering): Released all slaves [ 556.038468][ T157] bond1 (unregistering): Released all slaves [ 556.044922][ T5645] Bluetooth: hci1: command tx timeout [ 556.061004][ T157] bond2 (unregistering): Released all slaves [ 556.076028][ T157] bond3 (unregistering): Released all slaves [ 556.100004][ T157] bond4 (unregistering): Released all slaves [ 556.115020][ T157] bond5 (unregistering): Released all slaves [ 556.131445][ T157] bond6 (unregistering): Released all slaves [ 556.149894][ T157] bond7 (unregistering): (slave lo): Releasing backup interface [ 556.158266][ T157] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 556.171793][ T157] bond7 (unregistering): Released all slaves [ 556.196518][ T157] bond8 (unregistering): Released all slaves [ 556.214240][ T157] bond9 (unregistering): Released all slaves [ 556.230681][ T157] bond10 (unregistering): Released all slaves [ 556.253061][ T157] bond11 (unregistering): Released all slaves [ 556.275483][ T157] bond12 (unregistering): Released all slaves [ 556.281997][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.295960][ T157] bond13 (unregistering): (slave bond14): Releasing backup interface [ 556.305037][ T157] bond13 (unregistering): Released all slaves [ 556.319831][ T157] bond14 (unregistering): Released all slaves [ 556.344560][ T157] bond15 (unregistering): Released all slaves [ 556.359528][ T157] bond16 (unregistering): Released all slaves [ 556.377280][ T157] bond17 (unregistering): (slave bond18): Releasing backup interface [ 556.386418][ T157] bond18 (unregistering): left promiscuous mode [ 556.398700][ T157] bond17 (unregistering): Released all slaves [ 556.413677][ T157] bond18 (unregistering): Released all slaves [ 556.428063][ T157] bond19 (unregistering): Released all slaves [ 556.448625][ T157] bond20 (unregistering): Released all slaves [ 556.488052][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 556.686633][T19468] netlink: 'syz.3.3298': attribute type 16 has an invalid length. [ 556.837982][T19473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3298'. [ 556.987868][T19481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'. [ 557.112529][ T157] 5nè‹Ò: left promiscuous mode [ 557.336424][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.344831][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.003569][ T157] tipc: Disabling bearer [ 558.020177][ T157] tipc: Left network mode [ 558.091775][T19290] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.099136][T19290] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.107037][T19290] bridge_slave_0: entered allmulticast mode [ 558.116148][T19290] bridge_slave_0: entered promiscuous mode [ 558.125911][T19290] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.134665][T19290] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.142363][T19290] bridge_slave_1: entered allmulticast mode [ 558.161840][T19290] bridge_slave_1: entered promiscuous mode [ 558.168733][T19521] netlink: 181256 bytes leftover after parsing attributes in process `syz.2.3309'. [ 558.209364][T19519] netlink: 181256 bytes leftover after parsing attributes in process `syz.2.3309'. [ 558.290754][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3310'. [ 558.307180][T19290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.318274][ T157] IPVS: stopping master sync thread 7773 ... [ 558.360144][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.396777][T19290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.585316][T19532] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3311'. [ 558.623275][T19532] xt_hashlimit: invalid rate [ 558.651453][T19290] team0: Port device team_slave_0 added [ 558.743868][T19290] team0: Port device team_slave_1 added [ 558.897262][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 558.972760][T19290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.981970][T19290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.032247][T19290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.062390][T19290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.083195][T19290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.112515][T19290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.397114][T19559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3318'. [ 559.408691][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.431554][T19559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3318'. [ 559.485985][T19290] hsr_slave_0: entered promiscuous mode [ 559.495852][T19290] hsr_slave_1: entered promiscuous mode [ 559.503359][T19290] debugfs: 'hsr0' already exists in 'hsr' [ 559.509299][T19290] Cannot create hsr debugfs directory [ 559.686912][T19571] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3320'. [ 559.888752][T17875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.069613][T19585] netlink: 'syz.3.3324': attribute type 39 has an invalid length. [ 560.143459][T19589] netlink: 'syz.1.3323': attribute type 32 has an invalid length. [ 560.368397][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.378718][T17875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.436963][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.447796][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.512839][ T157] veth0_to_team: left promiscuous mode [ 560.534551][ T157] veth1_macvtap: left promiscuous mode [ 560.560709][ T157] veth0_macvtap: left promiscuous mode [ 560.771451][T19618] netlink: 'syz.1.3331': attribute type 5 has an invalid length. [ 560.793955][T19618] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3331'. [ 560.881451][ T157] pim6reg (unregistering): left allmulticast mode [ 561.421451][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 561.483921][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.563254][T19638] netlink: 'syz.0.3334': attribute type 32 has an invalid length. [ 562.310575][T19664] __nla_validate_parse: 1 callbacks suppressed [ 562.310597][T19664] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3338'. [ 562.539378][ T9144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.330827][ T157] IPVS: stop unused estimator thread 0... [ 563.367512][T19713] FAULT_INJECTION: forcing a failure. [ 563.367512][T19713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.401724][T17875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.410167][T19713] CPU: 1 UID: 0 PID: 19713 Comm: syz.2.3344 Not tainted syzkaller #0 PREEMPT(full) [ 563.410197][T19713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.410209][T19713] Call Trace: [ 563.410218][T19713] [ 563.410227][T19713] dump_stack_lvl+0xe8/0x150 [ 563.410258][T19713] should_fail_ex+0x412/0x560 [ 563.410291][T19713] _copy_from_user+0x2d/0xb0 [ 563.410321][T19713] bpf_test_init+0xd8/0x150 [ 563.410353][T19713] bpf_prog_test_run_skb+0x392/0x2260 [ 563.410399][T19713] ? __fget_files+0x3a0/0x420 [ 563.410423][T19713] ? __fget_files+0x2a/0x420 [ 563.410451][T19713] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 563.410479][T19713] bpf_prog_test_run+0x2c7/0x340 [ 563.410514][T19713] __sys_bpf+0x643/0x950 [ 563.410547][T19713] ? __pfx___sys_bpf+0x10/0x10 [ 563.410593][T19713] ? ksys_write+0x242/0x270 [ 563.410625][T19713] ? __pfx_ksys_write+0x10/0x10 [ 563.410659][T19713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.410681][T19713] __x64_sys_bpf+0x7c/0x90 [ 563.410709][T19713] do_syscall_64+0x15f/0xf80 [ 563.410728][T19713] ? trace_irq_disable+0x3b/0x140 [ 563.410756][T19713] ? clear_bhb_loop+0x40/0x90 [ 563.410782][T19713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.410803][T19713] RIP: 0033:0x7f0a6819cdd9 [ 563.410823][T19713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.410842][T19713] RSP: 002b:00007f0a690fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 563.410864][T19713] RAX: ffffffffffffffda RBX: 00007f0a68415fa0 RCX: 00007f0a6819cdd9 [ 563.410879][T19713] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 563.410893][T19713] RBP: 00007f0a690fd090 R08: 0000000000000000 R09: 0000000000000000 [ 563.410906][T19713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.410918][T19713] R13: 00007f0a68416038 R14: 00007f0a68415fa0 R15: 00007ffe800fabc8 [ 563.410950][T19713] [ 563.627133][T19708] syzkaller0: entered promiscuous mode [ 563.632761][T19708] syzkaller0: entered allmulticast mode [ 563.660804][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.113325][T19731] netlink: 'syz.1.3349': attribute type 1 has an invalid length. [ 564.157847][T19731] netlink: 'syz.1.3349': attribute type 6 has an invalid length. [ 564.189768][T19731] netlink: 'syz.1.3349': attribute type 7 has an invalid length. [ 564.220803][T19731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3349'. [ 564.370965][T19731] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.378901][T19731] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.684414][ T9144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.688782][T19750] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3353'. [ 564.738914][T19748] netlink: 'syz.3.3352': attribute type 4 has an invalid length. [ 564.776201][T19748] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3352'. [ 564.963333][T19290] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 565.006467][T19757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3354'. [ 565.009006][T19290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.074998][T19290] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 565.077844][T19757] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3354'. [ 565.152936][T19290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 565.182318][T19290] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 565.203442][T19761] netlink: 'syz.3.3355': attribute type 1 has an invalid length. [ 565.228130][T19290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 565.422670][T19761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.492451][T19290] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 565.514140][T19290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 565.583399][T19768] bond2: (slave veth3): Enslaving as an active interface with a down link [ 565.608785][T19770] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 565.636566][T19770] bond2: (slave batadv1): making interface the new active one [ 565.674133][T19770] batadv1: entered promiscuous mode [ 565.688376][T19770] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 565.724119][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.760065][T19772] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 565.922438][T19789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3360'. [ 566.091605][T19802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3362'. [ 566.171958][T19290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.254222][T19290] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.262265][T19812] netlink: 209616 bytes leftover after parsing attributes in process `syz.1.3364'. [ 566.399452][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.406851][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.440901][T17875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.492361][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.499607][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.712575][T19828] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3369'. [ 566.761162][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.076379][T19836] syzkaller0: entered promiscuous mode [ 567.098329][T19836] syzkaller0: entered allmulticast mode [ 567.604723][T19862] __nla_validate_parse: 2 callbacks suppressed [ 567.604744][T19862] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3377'. [ 567.665648][T19862] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 567.801354][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.821273][T19874] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3379'. [ 568.182939][T19886] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 568.263192][T19886] bond3: (slave lo): Enslaving as an active interface with an up link [ 568.317214][T19886] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 568.424309][T19290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.575251][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3386'. [ 568.660779][ T157] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.672223][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3386'. [ 568.701020][ T157] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.738237][ T157] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.747035][T19915] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 568.778847][ T157] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.848808][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.854107][T19923] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3389'. [ 569.051632][T19933] netlink: 'syz.1.3392': attribute type 1 has an invalid length. [ 569.109277][T19933] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 569.482290][T17875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.586369][T19290] veth0_vlan: entered promiscuous mode [ 569.666050][T19290] veth1_vlan: entered promiscuous mode [ 569.857161][T19290] veth0_macvtap: entered promiscuous mode [ 569.883833][ T5754] net_ratelimit: 4 callbacks suppressed [ 569.883856][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.894002][T19290] veth1_macvtap: entered promiscuous mode [ 569.999117][T19290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.048455][T19290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.105209][ T6222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.135994][ T6222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.177669][ T6222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.197830][ T6222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.238550][T19983] erspan0: entered promiscuous mode [ 570.386795][T19983] netlink: 'syz.0.3401': attribute type 4 has an invalid length. [ 570.433465][T19983] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3401'. [ 570.567937][ T30] audit: type=1800 audit(1778410204.995:12): pid=19983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3401" name="r" dev="tmpfs" ino=199 res=0 errno=0 [ 570.574112][T19994] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3403'. [ 570.603637][T19990] geneve2: entered allmulticast mode [ 570.674518][ T6241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.676086][T19981] erspan0: left promiscuous mode [ 570.704463][ T6241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.864965][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.886934][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.921010][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.169155][T20019] netlink: 'syz.4.3265': attribute type 1 has an invalid length. [ 571.217372][ T30] audit: type=1804 audit(1778410205.645:13): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3407" name="/newroot/135/cgroup.controllers" dev="tmpfs" ino=715 res=1 errno=0 [ 571.294866][ T30] audit: type=1800 audit(1778410205.645:14): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3407" name="cgroup.controllers" dev="tmpfs" ino=715 res=0 errno=0 [ 571.437829][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3408'. [ 571.461324][T20026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3408'. [ 571.604686][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3408'. [ 571.642061][ T6241] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.664080][ T6241] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.714441][ T6241] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.960652][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.972582][ T6241] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.534407][ T9132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.826494][T20097] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 572.932907][T20101] netlink: 'syz.1.3427': attribute type 13 has an invalid length. [ 573.000437][ T9142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.090583][T20108] netlink: 'syz.0.3430': attribute type 2 has an invalid length. [ 573.116448][T20108] netlink: 'syz.0.3430': attribute type 2 has an invalid length. [ 573.362413][ T136] bridge_slave_1: left allmulticast mode [ 573.374448][ T136] bridge_slave_1: left promiscuous mode [ 573.386161][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.412874][ T136] bridge_slave_0: left promiscuous mode [ 573.434836][T20123] __nla_validate_parse: 4 callbacks suppressed [ 573.434858][T20123] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3436'. [ 573.437756][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.547285][ T136] dvmrp6: left allmulticast mode [ 573.708025][T20137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3434'. [ 573.740062][ T136] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 573.759052][ T136] ip6gre1 (unregistering): left promiscuous mode [ 573.905285][ T136] erspan0 (unregistering): left promiscuous mode [ 573.953527][ T136] bond1 (unregistering): (slave gretap1): Releasing active interface [ 573.985207][ T136] bond5 (unregistering): (slave gretap2): Releasing active interface [ 574.055888][ T136] bond6 (unregistering): (slave geneve2): Releasing active interface [ 574.134975][ T136] bond1 (unregistering): (slave bridge1): Releasing active interface [ 574.317322][ T136] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 574.325640][ T136] bridge5 (unregistering): left promiscuous mode [ 574.332062][ T136] bridge5 (unregistering): left allmulticast mode [ 574.465691][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.475453][ T136] bond_slave_0: left allmulticast mode [ 574.484757][ T136] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 574.494166][ T136] dummy0: left allmulticast mode [ 574.508892][ T136] bond0 (unregistering): Released all slaves [ 574.521275][ T136] bond1 (unregistering): Released all slaves [ 574.537561][ T136] bond2 (unregistering): Released all slaves [ 574.554473][ T136] bond3 (unregistering): Released all slaves [ 574.569605][ T136] bond4 (unregistering): Released all slaves [ 574.588856][ T136] bond5 (unregistering): Released all slaves [ 574.612236][ T136] bond6 (unregistering): Released all slaves [ 574.628204][ T136] bond7 (unregistering): Released all slaves [ 574.648672][ T136] bond8 (unregistering): Released all slaves [ 574.671968][ T136] bond9 (unregistering): Released all slaves [ 574.696182][ T136] bond10 (unregistering): Released all slaves [ 574.711774][ T136] bond11 (unregistering): Released all slaves [ 574.727583][ T136] bond12 (unregistering): Released all slaves [ 574.742795][T20121] netem: change failed [ 574.996840][ T136] : left promiscuous mode [ 575.560432][ T136] tipc: Disabling bearer [ 575.586617][ T136] tipc: Left network mode [ 575.794063][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3451'. [ 576.102159][T20204] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3454'. [ 576.186863][T20206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.212498][T20203] netlink: 'syz.2.3454': attribute type 5 has an invalid length. [ 577.111866][T20242] netlink: 'syz.3.3463': attribute type 1 has an invalid length. [ 577.203275][T20246] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3463'. [ 577.253552][T20242] 8021q: adding VLAN 0 to HW filter on device bond4 [ 577.282556][ T136] veth1_macvtap: left promiscuous mode [ 577.296254][ T136] veth0_macvtap: left promiscuous mode [ 577.310518][ T136] veth1_vlan: left promiscuous mode [ 577.317158][ T136] veth0_vlan: left promiscuous mode [ 577.354634][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3467'. [ 577.364530][T20258] netlink: 94 bytes leftover after parsing attributes in process `syz.2.3467'. [ 577.374291][T20258] netlink: 'syz.2.3467': attribute type 1 has an invalid length. [ 577.383010][T20258] netlink: 568 bytes leftover after parsing attributes in process `syz.2.3467'. [ 577.646706][ T136] ` (unregistering): Port device team_slave_1 removed [ 577.669586][ T136] ` (unregistering): Port device team_slave_0 removed [ 577.861909][ T6241] batadv1: left promiscuous mode [ 578.105479][T20267] block nbd0: NBD_DISCONNECT [ 578.112553][T20267] block nbd0: Send disconnect failed -32 [ 578.126229][T20267] block nbd0: Send disconnect failed -32 [ 578.319586][T20275] pimreg0: tun_chr_ioctl cmd 1074025681 [ 578.437159][ T136] IPVS: stop unused estimator thread 0... [ 578.527083][T20279] syzkaller1: entered promiscuous mode [ 578.564188][T20279] syzkaller1: entered allmulticast mode [ 579.093329][T20298] x_tables: duplicate underflow at hook 1 [ 582.903830][T20338] netlink: 'syz.1.3484': attribute type 1 has an invalid length. [ 582.916504][T20338] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3484'. [ 582.933737][T20338] workqueue: Failed to create a rescuer kthread for wq "phy3-mac-cmds": -EINTR [ 583.406642][T20359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.463572][T20359] batadv_slave_0: entered promiscuous mode [ 583.498079][T20361] macsec2: entered promiscuous mode [ 583.647479][T20365] bond1: option packets_per_slave: invalid value (1048582) [ 583.670826][T20365] bond1: option packets_per_slave: allowed values 0 - 65535 [ 583.697545][T20365] bond1 (unregistering): Released all slaves [ 583.708817][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3496'. [ 583.746985][T20382] sctp: [Deprecated]: syz.3.3496 (pid 20382) Use of int in max_burst socket option. [ 583.746985][T20382] Use struct sctp_assoc_value instead [ 583.856660][T20386] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 584.350058][T20414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3505'. [ 584.569486][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3508'. [ 584.587002][T20425] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 584.661205][T20430] mac80211_hwsim hwsim57 wlan0: entered promiscuous mode [ 584.668727][T20430] mac80211_hwsim hwsim57 wlan0: entered allmulticast mode [ 584.792809][T20438] netlink: 'syz.0.3511': attribute type 7 has an invalid length. [ 585.030822][T20445] syzkaller1: entered allmulticast mode [ 585.071314][T20454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3516'. [ 585.077644][T20455] netlink: 'syz.1.3515': attribute type 30 has an invalid length. [ 585.100976][T20454] netlink: 'syz.2.3516': attribute type 1 has an invalid length. [ 585.258234][T20462] netlink: 'syz.0.3517': attribute type 1 has an invalid length. [ 585.480718][T20469] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 585.494381][ T5007] block nbd3: Possible stuck request ffff888027c27000: control (read@0,1024B). Runtime 120 seconds [ 585.501305][T20469] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 585.506571][ T5007] block nbd3: Possible stuck request ffff888027c271c0: control (read@1024,1024B). Runtime 120 seconds [ 585.523713][ T5007] block nbd3: Possible stuck request ffff888027c27380: control (read@2048,1024B). Runtime 120 seconds [ 585.534776][ T5007] block nbd3: Possible stuck request ffff888027c27540: control (read@3072,1024B). Runtime 120 seconds [ 585.580458][T20462] bond1: (slave gretap1): making interface the new active one [ 585.588766][T20462] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 585.646133][T20473] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.3519'. [ 585.740824][T20490] netlink: 'syz.3.3522': attribute type 3 has an invalid length. [ 585.760265][T20490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.969484][T20498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3526'. [ 586.069073][T20495] netlink: 'syz.3.3525': attribute type 12 has an invalid length. [ 586.085926][T20495] netlink: 'syz.3.3525': attribute type 29 has an invalid length. [ 586.094679][T20495] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3525'. [ 586.298695][T20519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3530'. [ 586.686677][T20542] netlink: 'syz.0.3538': attribute type 1 has an invalid length. [ 586.709152][T20542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.828623][T20548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.838859][T20553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3541'. [ 587.402505][T20583] bridge_slave_1: left allmulticast mode [ 587.417153][T20583] bridge_slave_1: left promiscuous mode [ 587.430102][T20583] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.492622][T20583] bridge_slave_0: left allmulticast mode [ 587.513379][T20583] bridge_slave_0: left promiscuous mode [ 587.536842][T20583] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.984989][T20607] netlink: 'syz.0.3556': attribute type 1 has an invalid length. [ 588.044725][T20615] __nla_validate_parse: 2 callbacks suppressed [ 588.044746][T20615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3556'. [ 588.161505][T20625] netlink: 'syz.2.3560': attribute type 13 has an invalid length. [ 588.179415][T20615] netlink: 'syz.0.3556': attribute type 1 has an invalid length. [ 588.185884][T20607] bond2: entered promiscuous mode [ 588.204596][T20625] netlink: 'syz.2.3560': attribute type 17 has an invalid length. [ 588.212338][T20607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 588.233442][T20615] netlink: 'syz.0.3556': attribute type 6 has an invalid length. [ 588.266813][T20615] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3556'. [ 588.323021][T20634] netlink: 'syz.4.3562': attribute type 8 has an invalid length. [ 588.354927][T20620] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.362809][T20620] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.378231][T20620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.472005][T20618] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 589.602134][T20625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.625470][T20625] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.646195][T20625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.688260][T20625] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.695536][T20625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.708397][T20625] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.715817][T20625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.738685][T20625] batadv_slave_0: left promiscuous mode [ 589.746970][T20625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.759124][T20625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.814132][T20625] veth1_vlan: left promiscuous mode [ 589.821597][T20625] veth0_vlan: left promiscuous mode [ 589.828033][T20625] veth0_vlan: entered promiscuous mode [ 589.838218][T20625] veth1_vlan: entered promiscuous mode [ 589.849556][T20625] veth1_macvtap: left promiscuous mode [ 589.856873][T20625] veth0_macvtap: left promiscuous mode [ 589.865467][T20625] veth0_macvtap: entered promiscuous mode [ 589.879565][T20625] veth1_macvtap: entered promiscuous mode [ 589.893555][T20625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 589.904894][T20625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.916745][T20625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 589.931480][T20625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 589.947248][T20625] veth3: left promiscuous mode [ 589.953001][T20625] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 589.974982][T20627] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.374296][T20688] sctp: [Deprecated]: syz.3.3569 (pid 20688) Use of int in maxseg socket option. [ 590.374296][T20688] Use struct sctp_assoc_value instead [ 590.752757][T20709] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3576'. [ 590.880784][T20716] syzkaller0: entered promiscuous mode [ 590.888752][T20716] syzkaller0: entered allmulticast mode [ 591.101914][T20729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3583'. [ 591.164834][T20731] bridge_slave_0: left allmulticast mode [ 591.173707][T20733] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3586'. [ 591.183858][T20731] bridge_slave_0: left promiscuous mode [ 591.192108][T20731] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.230700][T20731] bridge_slave_1: left allmulticast mode [ 591.263791][T20731] bridge_slave_1: left promiscuous mode [ 591.274058][T20731] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.287956][T20739] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3585'. [ 591.334917][T20731] bond0: (slave bond_slave_0): Releasing backup interface [ 591.340379][T20743] netlink: 'syz.2.3590': attribute type 3 has an invalid length. [ 591.350598][T20743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'. [ 591.361187][T20743] netlink: 'syz.2.3590': attribute type 3 has an invalid length. [ 591.369079][T20743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'. [ 591.382125][T20731] bond0: (slave bond_slave_1): Releasing backup interface [ 591.428733][T20731] team0: Port device team_slave_0 removed [ 591.454090][T20731] team0: Port device team_slave_1 removed [ 591.472696][T20731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.496703][T20731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.522279][T20731] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 591.548642][T20751] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 591.573346][T20762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3591'. [ 591.758168][T20749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3591'. [ 591.832599][T20769] netlink: 'syz.2.3595': attribute type 21 has an invalid length. [ 591.871389][T20769] netlink: 'syz.2.3595': attribute type 22 has an invalid length. [ 592.237184][T20792] syzkaller1: entered promiscuous mode [ 592.242986][T20792] syzkaller1: entered allmulticast mode [ 592.558469][T20806] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 592.963527][T20828] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.118780][T20830] __nla_validate_parse: 9 callbacks suppressed [ 593.118801][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3612'. [ 593.245655][T20837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3613'. [ 593.331075][T20843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3615'. [ 593.405521][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3616'. [ 593.440403][T20850] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 593.459088][T20847] macvtap1: entered allmulticast mode [ 593.480901][T20847] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 593.516016][T20847] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 594.100804][T20893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3628'. [ 594.110650][T20894] bridge0: entered allmulticast mode [ 594.151147][T20895] pim6reg: entered allmulticast mode [ 594.348488][T20903] openvswitch: netlink: IP tunnel dst address not specified [ 594.898934][T20925] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 594.964795][T20925] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 595.007119][T20925] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 595.290941][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3640'. [ 595.863422][T20989] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3651'. [ 595.885479][T20989] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3651'. [ 596.056147][T20996] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3654'. [ 596.087722][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3654'. [ 596.467143][T21024] –: renamed from bridge_slave_0 [ 596.528034][T21026] pim6reg99999991: entered allmulticast mode [ 597.636407][T21075] geneve2: entered promiscuous mode [ 597.666957][T21077] bridge0: port 3(erspan0) entered blocking state [ 597.674478][T21077] bridge0: port 3(erspan0) entered disabled state [ 597.682475][T21077] erspan0: entered allmulticast mode [ 597.702435][T21077] erspan0: entered promiscuous mode [ 597.715594][T21077] bridge0: port 3(erspan0) entered blocking state [ 597.722431][T21077] bridge0: port 3(erspan0) entered forwarding state [ 597.761206][T21080] erspan0: left allmulticast mode [ 597.789674][T21080] erspan0: left promiscuous mode [ 597.794959][T21080] bridge0: port 3(erspan0) entered disabled state [ 598.323379][T21101] mac80211_hwsim hwsim57 syzkaller0: entered promiscuous mode [ 598.359730][T21101] mac80211_hwsim hwsim57 syzkaller0: entered allmulticast mode [ 598.416776][T21106] __nla_validate_parse: 12 callbacks suppressed [ 598.416800][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3685'. [ 598.490815][T21107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3685'. [ 598.553191][T21110] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20002 [ 598.562992][T21106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3685'. [ 598.585235][T21106] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3685'. [ 598.596388][T21106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3685'. [ 599.052111][T21139] ipt_rpfilter: unknown options [ 599.624051][T21138] syzkaller0: entered promiscuous mode [ 599.630100][T21138] syzkaller0: entered allmulticast mode [ 599.814447][T21154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.544936][T21178] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 600.553815][T21178] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 603.354910][T21177] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 603.656816][T21154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.849078][T21154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.103300][T21154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.300531][T21222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3708'. [ 604.741775][T21233] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 604.772748][T12120] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.973716][T12120] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.034725][T21253] netlink: 39 bytes leftover after parsing attributes in process `syz.3.3714'. [ 605.065334][ T157] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.133260][ T6230] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.319517][T21258] openvswitch: netlink: IP tunnel dst address not specified [ 605.616628][T21267] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 605.957735][T21282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3720'. [ 605.968169][T21287] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20002 [ 606.165395][T21291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 606.178438][T21291] netlink: 261 bytes leftover after parsing attributes in process `syz.3.3724'. [ 606.632571][T21287] syzkaller0: entered promiscuous mode [ 606.671585][T21287] syzkaller0: entered allmulticast mode [ 610.074648][T21321] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 610.348086][T21342] validate_nla: 4 callbacks suppressed [ 610.348128][T21342] netlink: 'syz.1.3739': attribute type 10 has an invalid length. [ 610.406585][T21344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3736'. [ 610.450426][T21342] team0 (unregistering): Port device team_slave_0 removed [ 610.495738][T21342] team0 (unregistering): Port device team_slave_1 removed [ 610.840513][T21372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3747'. [ 610.874487][T21374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3748'. [ 611.123185][T21383] syzkaller0: entered promiscuous mode [ 611.137905][T21383] syzkaller0: entered allmulticast mode [ 611.240451][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 611.267950][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3753'. [ 611.283683][T21382] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 611.305222][T21385] netlink: 'syz.0.3754': attribute type 8 has an invalid length. [ 611.535652][T21389] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3755'. [ 612.172914][T21411] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.363054][T21411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.407200][T21411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.527261][T21411] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 612.535027][T21411] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 612.578419][T21411] virt_wifi0: left promiscuous mode [ 612.584993][T21411] macsec1: left promiscuous mode [ 612.619392][T21411] macsec2: left promiscuous mode [ 612.634754][T21411] geneve2: left promiscuous mode [ 612.655090][ T157] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.688415][ T157] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.705136][T21421] mac80211_hwsim hwsim55 syzkaller0: entered promiscuous mode [ 612.715316][T21421] mac80211_hwsim hwsim55 syzkaller0: entered allmulticast mode [ 612.723908][ T157] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.740803][ T157] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.761183][ T157] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.779904][ T157] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.800078][ T157] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.840151][ T157] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.072256][T21439] block nbd2: not configured, cannot reconfigure [ 613.095396][T21439] netlink: 'syz.2.3768': attribute type 62 has an invalid length. [ 613.611722][T21459] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 613.853793][T21459] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3776'. [ 613.916303][T21465] bond5: (slave bridge2): making interface the new active one [ 613.957265][T21465] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 614.011196][T21474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3778'. [ 614.124028][T21459] bond5: entered promiscuous mode [ 614.146372][T21459] bridge2: entered promiscuous mode [ 614.170312][T21459] bond5: entered allmulticast mode [ 614.187811][T21459] bridge2: entered allmulticast mode [ 614.207144][T21459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 614.576669][T21480] xt_hashlimit: size too large, truncated to 1048576 [ 614.754203][T21488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.239280][T21507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3788'. [ 615.568809][T21509] : entered promiscuous mode [ 615.570502][ T5007] block nbd3: Possible stuck request ffff888027c27000: control (read@0,1024B). Runtime 150 seconds [ 615.584788][ T5007] block nbd3: Possible stuck request ffff888027c271c0: control (read@1024,1024B). Runtime 150 seconds [ 615.596004][ T5007] block nbd3: Possible stuck request ffff888027c27380: control (read@2048,1024B). Runtime 150 seconds [ 615.607168][ T5007] block nbd3: Possible stuck request ffff888027c27540: control (read@3072,1024B). Runtime 150 seconds [ 616.435886][T21546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3798'. [ 616.712566][T21559] dvmrp1: entered allmulticast mode [ 617.202960][T21579] bond4: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 617.703437][T21579] bond4 (unregistering): Released all slaves [ 618.005010][ T5289] veth0_vlan: left promiscuous mode [ 618.026900][ T5289] veth0_vlan: entered promiscuous mode [ 620.027003][T21578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 620.555628][T21634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3813'. [ 620.586618][T21637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3813'. [ 620.641452][T21634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3813'. [ 620.913947][T21648] "syz.0.3815" (21648) uses obsolete ecb(arc4) skcipher [ 620.998150][T21658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3816'. [ 621.106316][T21644] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 622.014004][T21658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3816'. [ 622.028094][T21685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3820'. [ 622.064848][T21658] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3816'. [ 622.100021][T21685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3820'. [ 622.742595][T21721] sch_fq: defrate 8 ignored. [ 622.780022][T21719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3825'. [ 623.107649][T21739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3831'. [ 623.520494][T21738] sctp: [Deprecated]: syz.3.3830 (pid 21738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 623.520494][T21738] Use struct sctp_sack_info instead [ 623.551697][T21738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3830'. [ 623.827793][T21756] netlink: 'syz.3.3834': attribute type 39 has an invalid length. [ 624.170214][T21769] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3838'. [ 624.288116][T21774] xt_recent: Unsupported userspace flags (000000b1) [ 624.611178][T21787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3844'. [ 624.630672][T21787] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3844'. [ 624.645027][T21785] syzkaller0: entered promiscuous mode [ 624.675131][T21785] syzkaller0: entered allmulticast mode [ 624.768283][T21785] tipc: Enabled bearer , priority 0 [ 624.853347][T21784] tipc: Resetting bearer [ 624.956557][T21784] tipc: Disabling bearer [ 625.145182][T21809] netlink: 'syz.0.3848': attribute type 3 has an invalid length. [ 625.476511][T21813] syzkaller0: entered promiscuous mode [ 625.493513][T21813] syzkaller0: entered allmulticast mode [ 625.548244][T21818] netlink: 'syz.3.3851': attribute type 32 has an invalid length. [ 625.846565][T21818] bond6: option coupled_control: invalid value (24) [ 625.855743][T21818] bond6 (unregistering): Released all slaves [ 626.001571][ T5644] block nbd0: Receive control failed (result -32) [ 626.711783][ T5645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 626.732685][ T5645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 626.744947][ T5645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 626.760683][ T5645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 626.773328][ T5645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 627.558930][T21862] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.104703][T21862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.124375][T21862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.429283][T21862] veth0_vlan: left promiscuous mode [ 628.801406][T21908] tipc: Started in network mode [ 628.813356][T21908] tipc: Node identity 080211, cluster identity 4711 [ 628.832145][T21908] tipc: Enabled bearer , priority 0 [ 628.839894][ T5644] Bluetooth: hci4: command tx timeout [ 628.861775][ T6230] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.918500][ T6230] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.973642][ T6230] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.019579][ T6230] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.842117][ T9127] tipc: Node number set to 134353152 [ 629.905551][T21966] __nla_validate_parse: 5 callbacks suppressed [ 629.905575][T21966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3874'. [ 630.020085][T21966] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3874'. [ 630.081564][T21969] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3876'. [ 630.825929][T21993] netlink: 4120 bytes leftover after parsing attributes in process `syz.3.3881'. [ 630.920743][ T5644] Bluetooth: hci4: command tx timeout [ 631.142621][T22001] netlink: 'syz.3.3883': attribute type 9 has an invalid length. [ 631.156298][T22001] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3883'. [ 631.222641][T22003] tipc: Enabling of bearer rejected, failed to enable media [ 631.764589][ T6241] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.784651][T22024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3886'. [ 631.865357][T22019] bridge0: entered allmulticast mode [ 631.893044][T22022] bridge0: left allmulticast mode [ 631.947446][T22032] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3886'. [ 632.068553][T22028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'. [ 632.116320][T22024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'. [ 632.325660][ T6241] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.476432][T22058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3891'. [ 632.491731][T21853] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.507611][T21853] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.537127][T21853] bridge_slave_0: entered allmulticast mode [ 632.553711][T21853] bridge_slave_0: entered promiscuous mode [ 632.695631][ T6241] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.745003][T22068] netlink: 'syz.1.3892': attribute type 13 has an invalid length. [ 632.781632][T21853] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.790738][T21853] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.802131][T21853] bridge_slave_1: entered allmulticast mode [ 632.818650][T21853] bridge_slave_1: entered promiscuous mode [ 633.002544][ T5644] Bluetooth: hci4: command tx timeout [ 633.207867][T22066] dvmrp1: left allmulticast mode [ 633.265182][ T6241] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.304034][T21853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.326664][T21853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.444723][T21853] team0: Port device team_slave_0 added [ 633.471225][T21853] team0: Port device team_slave_1 added [ 633.512172][T22104] openvswitch: netlink: Flow actions attr not present in new flow. [ 633.543694][T22107] netlink: 'syz.2.3898': attribute type 1 has an invalid length. [ 633.636414][T22107] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 633.667149][T21853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.687255][T21853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.716053][T21853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.763715][T21853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.780971][T21853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.829353][T21853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.218708][T21853] hsr_slave_0: entered promiscuous mode [ 634.225595][T21853] hsr_slave_1: entered promiscuous mode [ 634.232369][T21853] debugfs: 'hsr0' already exists in 'hsr' [ 634.238143][T21853] Cannot create hsr debugfs directory [ 634.244544][T22124] veth1_to_team: entered promiscuous mode [ 634.262155][T22124] veth1_to_team: entered allmulticast mode [ 634.367162][ T6241] bridge_slave_1: left allmulticast mode [ 634.382619][ T6241] bridge_slave_1: left promiscuous mode [ 634.388619][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.421798][ T6241] bridge_slave_0: left allmulticast mode [ 634.435644][ T6241] bridge_slave_0: left promiscuous mode [ 634.444216][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.759000][ T6241] bridge0 (unregistering): left allmulticast mode [ 634.804404][ T6241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.816193][ T6241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.826677][ T6241] bond0 (unregistering): Released all slaves [ 635.079823][ T5644] Bluetooth: hci4: command tx timeout [ 635.148133][T22153] FAULT_INJECTION: forcing a failure. [ 635.148133][T22153] name failslab, interval 1, probability 0, space 0, times 0 [ 635.197389][T22153] CPU: 0 UID: 0 PID: 22153 Comm: syz.1.3911 Not tainted syzkaller #0 PREEMPT(full) [ 635.197420][T22153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 635.197432][T22153] Call Trace: [ 635.197440][T22153] [ 635.197448][T22153] dump_stack_lvl+0xe8/0x150 [ 635.197479][T22153] should_fail_ex+0x412/0x560 [ 635.197513][T22153] should_failslab+0xa8/0x100 [ 635.197550][T22153] ? skb_clone+0x212/0x3a0 [ 635.197570][T22153] kmem_cache_alloc_noprof+0x87/0x650 [ 635.197599][T22153] ? __netlink_lookup+0xc6/0x8b0 [ 635.197635][T22153] skb_clone+0x212/0x3a0 [ 635.197659][T22153] __netlink_deliver_tap+0x404/0x850 [ 635.197700][T22153] ? netlink_deliver_tap+0x2e/0x1b0 [ 635.197741][T22153] netlink_deliver_tap+0x19c/0x1b0 [ 635.197772][T22153] netlink_unicast+0x730/0x8e0 [ 635.197812][T22153] netlink_sendmsg+0x813/0xb40 [ 635.197851][T22153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.197884][T22153] ? aa_sock_msg_perm+0xf1/0x1b0 [ 635.197914][T22153] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.197945][T22153] ____sys_sendmsg+0x972/0x9f0 [ 635.197977][T22153] ? __might_fault+0xaf/0x130 [ 635.198008][T22153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.198048][T22153] ? import_iovec+0x73/0xa0 [ 635.198079][T22153] ___sys_sendmsg+0x2a5/0x360 [ 635.198107][T22153] ? __lock_acquire+0x6b5/0x2cf0 [ 635.198134][T22153] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.198204][T22153] ? __fget_files+0x2a/0x420 [ 635.198228][T22153] ? __fget_files+0x3a0/0x420 [ 635.198264][T22153] __x64_sys_sendmsg+0x1bd/0x2a0 [ 635.198297][T22153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.198338][T22153] ? __pfx_ksys_write+0x10/0x10 [ 635.198377][T22153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.198400][T22153] do_syscall_64+0x15f/0xf80 [ 635.198419][T22153] ? trace_irq_disable+0x3b/0x140 [ 635.198446][T22153] ? clear_bhb_loop+0x40/0x90 [ 635.198471][T22153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.198490][T22153] RIP: 0033:0x7fab8179cdd9 [ 635.198511][T22153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.198528][T22153] RSP: 002b:00007fab82738028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.198551][T22153] RAX: ffffffffffffffda RBX: 00007fab81a15fa0 RCX: 00007fab8179cdd9 [ 635.198566][T22153] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 635.198578][T22153] RBP: 00007fab82738090 R08: 0000000000000000 R09: 0000000000000000 [ 635.198589][T22153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.198601][T22153] R13: 00007fab81a16038 R14: 00007fab81a15fa0 R15: 00007ffcdb229d78 [ 635.198634][T22153] [ 635.675909][T21853] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 635.687393][T21853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 635.705264][T21853] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 635.739018][T21853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 635.782853][T22165] __nla_validate_parse: 2 callbacks suppressed [ 635.782894][T22165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3914'. [ 635.842623][T21853] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 635.883828][T21853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 635.910864][T21853] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 635.967049][T21853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 636.304657][ T6241] hsr_slave_0: left promiscuous mode [ 636.331154][ T6241] hsr_slave_1: left promiscuous mode [ 636.343881][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.354113][T22204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3920'. [ 636.366589][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.386412][T22204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3920'. [ 636.388879][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.415950][T22204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3920'. [ 636.446048][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.551722][ T6241] veth1_macvtap: left promiscuous mode [ 636.566264][ T6241] veth0_macvtap: left promiscuous mode [ 636.578529][ T6241] veth1_vlan: left promiscuous mode [ 636.586364][ T6241] veth0_vlan: left promiscuous mode [ 636.778823][ T6241] pim6reg (unregistering): left allmulticast mode [ 636.780558][T22224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3922'. [ 637.050034][T22227] netlink: 'syz.0.3923': attribute type 13 has an invalid length. [ 637.058287][T22227] netlink: 'syz.0.3923': attribute type 17 has an invalid length. [ 637.094948][ T6241] team0 (unregistering): Port device team_slave_1 removed [ 637.106066][T22228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3923'. [ 637.126460][ T6241] team0 (unregistering): Port device team_slave_0 removed [ 637.277289][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 637.457741][T22227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.467028][T22227] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.486090][T22227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.560697][T22227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 637.571969][T22227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.604314][T22227] veth1_vlan: left promiscuous mode [ 637.611783][T22227] veth0_vlan: left promiscuous mode [ 637.618710][T22227] veth0_vlan: entered promiscuous mode [ 637.630837][T22227] veth1_vlan: entered promiscuous mode [ 637.645986][T22227] veth1_macvtap: left promiscuous mode [ 637.654354][T22227] veth0_macvtap: left promiscuous mode [ 637.662074][T22227] veth0_macvtap: entered promiscuous mode [ 637.681094][T22227] veth1_macvtap: entered promiscuous mode [ 637.697479][T22227] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 637.711959][T22227] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 637.729433][T22227] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 637.745350][T22227] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 637.760107][T22227] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 637.774149][T22227] mac80211_hwsim hwsim57 wlan0: left promiscuous mode [ 637.781386][T22227] mac80211_hwsim hwsim57 wlan0: left allmulticast mode [ 637.808395][T22227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 637.823509][T22239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3925'. [ 637.828056][T22227] bond2: left promiscuous mode [ 637.839404][T22227] macvtap1: left allmulticast mode [ 637.844857][T22227] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 637.859039][T22227] mac80211_hwsim hwsim57 syzkaller0: left promiscuous mode [ 637.866834][T22227] mac80211_hwsim hwsim57 syzkaller0: left allmulticast mode [ 637.874483][T22227] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 637.880357][T22238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3925'. [ 638.030888][ T3308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.050389][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.059345][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.068488][T22245] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3927'. [ 638.174163][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.196426][ T136] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 638.349080][T22252] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3929'. [ 638.734001][T21853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.849197][T21853] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.895086][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.902398][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.988453][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.995710][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.606152][T22300] netlink: 'syz.1.3937': attribute type 3 has an invalid length. [ 639.703561][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 639.843238][T22310] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 639.868007][T22310] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 639.896286][T22310] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 640.361663][T21853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.562060][T22305] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 640.664478][T22350] batadv_slave_1: entered promiscuous mode [ 640.914322][T22349] batadv_slave_1: left promiscuous mode [ 641.025867][T22369] netlink: 'syz.3.3948': attribute type 1 has an invalid length. [ 641.087037][T22369] 8021q: adding VLAN 0 to HW filter on device bond6 [ 641.144281][T22373] bond6: (slave geneve3): making interface the new active one [ 641.158568][T22373] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 641.187165][ T157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.197609][ T157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.233503][ T157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.244274][ T157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.276877][T21853] veth0_vlan: entered promiscuous mode [ 641.305795][T22343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 641.307287][T21853] veth1_vlan: entered promiscuous mode [ 641.540542][T22382] veth1_to_bond: entered allmulticast mode [ 641.566320][T22389] __nla_validate_parse: 5 callbacks suppressed [ 641.566358][T22389] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3951'. [ 641.689322][T22382] syzkaller1: entered promiscuous mode [ 641.710861][T22382] syzkaller1: entered allmulticast mode [ 641.831893][T22401] bond2: option xmit_hash_policy: invalid value (10) [ 641.960408][ T5644] Bluetooth: hci5: command 0x0406 tx timeout [ 642.348212][T22401] bond2 (unregistering): Released all slaves [ 642.519833][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 642.712662][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 642.959033][T22430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3961'. [ 644.557218][T21853] veth0_macvtap: entered promiscuous mode [ 644.605321][T22424] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 644.617310][T22424] bond4 (unregistering): Released all slaves [ 644.670485][T22381] veth1_to_bond: left allmulticast mode [ 644.701832][T21853] veth1_macvtap: entered promiscuous mode [ 644.810317][T21853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.864299][T21853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.928123][T22437] mac80211_hwsim hwsim55 syzkaller0: left promiscuous mode [ 644.958255][T22437] mac80211_hwsim hwsim55 syzkaller0: left allmulticast mode [ 644.976690][ T3308] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.990114][ T3308] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.051379][ T3308] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.190807][T22437] tipc: Started in network mode [ 645.204328][T22437] tipc: Node identity 080211000001, cluster identity 4711 [ 645.222952][T22437] tipc: Enabled bearer , priority 0 [ 645.238669][ T3308] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.298001][T22461] netlink: 'syz.3.3967': attribute type 1 has an invalid length. [ 645.563308][T22463] bond7: (slave bridge3): making interface the new active one [ 645.590854][T22463] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 645.641693][ T5007] block nbd3: Possible stuck request ffff888027c27000: control (read@0,1024B). Runtime 180 seconds [ 645.652915][ T5007] block nbd3: Possible stuck request ffff888027c271c0: control (read@1024,1024B). Runtime 180 seconds [ 645.664640][ T5007] block nbd3: Possible stuck request ffff888027c27380: control (read@2048,1024B). Runtime 180 seconds [ 645.676507][ T5007] block nbd3: Possible stuck request ffff888027c27540: control (read@3072,1024B). Runtime 180 seconds [ 645.738883][T22469] mac80211_hwsim hwsim55 syzkaller0: entered promiscuous mode [ 645.782119][T22469] mac80211_hwsim hwsim55 syzkaller0: entered allmulticast mode [ 645.873464][ T6241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.893329][ T6241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.114437][T22483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3971'. [ 646.135058][T22483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3971'. [ 646.147452][T22483] netlink: 'syz.0.3971': attribute type 4 has an invalid length. [ 646.189063][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 646.204321][T12120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.219736][T21909] tipc: Node number set to 134418688 [ 646.245946][T12120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.362436][T22499] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3975'. [ 646.397189][T22496] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3974'. [ 646.420418][T22496] lo: Caught tx_queue_len zero misconfig [ 646.523182][T22508] netlink: 'syz.0.3977': attribute type 13 has an invalid length. [ 646.573430][T22508] netlink: 'syz.0.3977': attribute type 17 has an invalid length. [ 646.780855][T22521] netlink: 876 bytes leftover after parsing attributes in process `syz.5.3854'. [ 646.797693][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3854'. [ 646.876531][T22508] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 647.100136][ T5645] Bluetooth: hci2: command 0x0405 tx timeout [ 647.110937][T22533] syzkaller0: entered promiscuous mode [ 647.158916][T22533] syzkaller0: entered allmulticast mode [ 647.240880][ T30] audit: type=1804 audit(1778410281.675:15): pid=22544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3983" name="/newroot/192/memory.events" dev="tmpfs" ino=1006 res=1 errno=0 [ 647.339297][ T30] audit: type=1800 audit(1778410281.675:16): pid=22544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3983" name="memory.events" dev="tmpfs" ino=1006 res=0 errno=0 [ 647.431141][ T30] audit: type=1800 audit(1778410281.675:17): pid=22544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3983" name="memory.events" dev="tmpfs" ino=1006 res=0 errno=0 [ 647.724315][T22566] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 648.001128][T22562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3991'. [ 648.023882][T21892] IPVS: starting estimator thread 0... [ 648.067697][T22558] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.121060][T22580] IPVS: using max 27 ests per chain, 64800 per kthread [ 648.290449][T22586] ip6gre1: entered promiscuous mode [ 648.295963][T22586] ip6gre1: entered allmulticast mode [ 648.306319][T12120] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.328373][T12120] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.336994][T21900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.510356][T21900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.566634][T22558] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.601878][T21900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.675465][T22602] mac80211_hwsim hwsim57 syzkaller0: entered promiscuous mode [ 648.710645][T22602] mac80211_hwsim hwsim57 syzkaller0: entered allmulticast mode [ 648.905749][T22558] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.350705][T22622] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4003'. [ 649.524932][T22558] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.547115][T22631] netlink: 'syz.2.4005': attribute type 3 has an invalid length. [ 649.664685][T22635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4006'. [ 649.969473][T22641] 8021q: adding VLAN 0 to HW filter on device ` [ 650.003638][T22641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.102009][T22641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.113704][T22641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.135844][T22641] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 650.146511][T22641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.164455][T22641] veth1_vlan: left promiscuous mode [ 650.172008][T22641] veth0_vlan: left promiscuous mode [ 650.178417][T22641] veth0_vlan: entered promiscuous mode [ 650.189527][T22641] veth1_vlan: entered promiscuous mode [ 650.208083][T22641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.217275][T22641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.228273][T22641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 650.238247][T22641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 650.254877][T22641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 650.266983][T22641] virt_wifi0: entered promiscuous mode [ 650.304270][T22641] 8021q: adding VLAN 0 to HW filter on device bond2 [ 650.317906][T22641] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 650.327231][T22641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 650.349822][T22641] 8021q: adding VLAN 0 to HW filter on device bond4 [ 650.375499][T22641] bond5: left promiscuous mode [ 650.380571][T22641] bridge2: left promiscuous mode [ 650.402522][T22641] 8021q: adding VLAN 0 to HW filter on device bond7 [ 650.426070][ T3308] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 650.486974][T12120] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.494873][T12120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.526268][T12120] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.533550][T12120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.578072][ T136] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.609469][ T136] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.647049][ T136] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.664322][ T136] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.943648][ T136] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.037265][ T136] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.067750][ T6222] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 651.104571][T21890] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 651.113531][ T6222] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 651.217968][ T157] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.323701][T12120] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.392382][T21890] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 651.400779][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 652.231991][T22736] netlink: 'syz.5.4025': attribute type 1 has an invalid length. [ 652.240971][T22736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4025'. [ 652.257782][T22736] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4025'. [ 652.291738][T22736] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4025'. [ 652.304644][T22733] netlink: 'syz.1.4024': attribute type 5 has an invalid length. [ 652.329317][T22733] netlink: 'syz.1.4024': attribute type 4 has an invalid length. [ 652.494012][T22749] Bluetooth: MGMT ver 1.23 [ 653.074675][T22756] syzkaller0: entered promiscuous mode [ 653.084303][T22756] syzkaller0: entered allmulticast mode [ 653.736144][T22791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4033'. [ 653.759517][T22791] netlink: 'syz.3.4033': attribute type 1 has an invalid length. [ 653.921933][T22799] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4036'. [ 653.979176][T22803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4034'. [ 654.051898][T22806] netlink: 'syz.3.4037': attribute type 1 has an invalid length. [ 654.533554][T22806] bond8: entered promiscuous mode [ 654.548202][T22806] 8021q: adding VLAN 0 to HW filter on device bond8 [ 654.919869][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 654.919890][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 655.137159][T22809] macvtap0: entered allmulticast mode [ 655.594317][T22853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4042'. [ 655.631547][T22846] syzkaller0: entered promiscuous mode [ 655.647160][T22846] syzkaller0: entered allmulticast mode [ 655.659499][T22845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4042'. [ 656.042416][T22863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4045'. [ 656.707909][T22863] sit0: left promiscuous mode [ 657.372950][T22863] veth1_to_team: left promiscuous mode [ 657.384834][T22863] veth1_to_team: left allmulticast mode [ 657.443293][T22863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.514095][T22863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.212859][T22863] bond2: left promiscuous mode [ 658.315969][ T136] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.326924][ T136] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.365316][ T136] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.402661][ T136] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.624182][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4059'. [ 658.652170][T22961] netlink: 'syz.3.4057': attribute type 1 has an invalid length. [ 658.677149][T22960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4058'. [ 658.729491][T22966] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4056'. [ 658.766000][T22961] 8021q: adding VLAN 0 to HW filter on device bond9 [ 658.819192][T22967] vlan3: entered allmulticast mode [ 658.842517][T22967] bond9: entered allmulticast mode [ 659.099728][T22979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4061'. [ 659.156355][T22979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4061'. [ 659.280387][T22994] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 659.489069][T22996] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 659.559389][T23001] IPVS: Unknown mcast interface: bridge0 [ 659.627435][T23012] netlink: 'syz.2.4068': attribute type 9 has an invalid length. [ 659.645527][T23012] netlink: 186364 bytes leftover after parsing attributes in process `syz.2.4068'. [ 660.194384][T23045] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 661.639835][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 661.853323][T23128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4094'. [ 661.863724][T23116] bond10: entered allmulticast mode [ 662.012421][T23139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4094'. [ 662.106654][T23120] vxcan3: entered promiscuous mode [ 662.919780][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 663.113201][T23193] netlink: 'syz.3.4107': attribute type 1 has an invalid length. [ 663.365483][T23196] bond11: (slave bridge4): Enslaving as a backup interface with an up link [ 663.436195][T23193] macvlan2: entered promiscuous mode [ 663.468963][T23193] macvlan2: entered allmulticast mode [ 663.503885][T23193] bond11: entered promiscuous mode [ 663.523089][T23193] bridge4: entered promiscuous mode [ 663.536249][T23193] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 663.568907][T23193] bond11: left promiscuous mode [ 663.574985][T23214] netlink: 'syz.2.4110': attribute type 1 has an invalid length. [ 663.599689][T23193] bridge4: left promiscuous mode [ 663.621331][T23214] netlink: 'syz.2.4110': attribute type 1 has an invalid length. [ 663.813546][ T9127] IPVS: starting estimator thread 0... [ 663.847716][T23226] netlink: 'syz.1.4112': attribute type 11 has an invalid length. [ 663.867352][T23214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 663.919857][T23227] IPVS: using max 26 ests per chain, 62400 per kthread [ 664.026482][T23231] mac80211_hwsim hwsim55 syzkaller0: left promiscuous mode [ 664.059919][T23231] mac80211_hwsim hwsim55 syzkaller0: left allmulticast mode [ 664.186238][T23245] netlink: 'syz.1.4115': attribute type 1 has an invalid length. [ 664.190475][T23242] netlink: 'syz.5.4114': attribute type 3 has an invalid length. [ 664.384416][T23245] 8021q: adding VLAN 0 to HW filter on device bond4 [ 664.460757][T23242] netlink: 'syz.5.4114': attribute type 3 has an invalid length. [ 664.517157][T23245] openvswitch: netlink: Actions may not be safe on all matching packets [ 664.668718][T23239] bond4: (slave veth9): Enslaving as an active interface with a down link [ 664.817216][T23256] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 664.881296][T23256] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 665.124731][T23282] netlink: 'syz.5.4122': attribute type 1 has an invalid length. [ 665.155651][T23282] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4122'. [ 665.165752][T23282] netlink: 658 bytes leftover after parsing attributes in process `syz.5.4122'. [ 665.192723][T23282] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4122'. [ 665.209929][T23290] netlink: 192 bytes leftover after parsing attributes in process `syz.5.4122'. [ 665.232355][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4122'. [ 665.257567][T23287] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 665.519216][T23302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4126'. [ 665.639247][T23302] veth9: entered promiscuous mode [ 666.023037][T23320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4130'. [ 666.087430][ T5644] block nbd1: Receive control failed (result -1) [ 666.414872][T23332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.651588][T23340] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4133'. [ 666.697931][T23344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4134'. [ 667.009741][T23357] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4136'. [ 667.774912][T23365] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 667.824137][T23370] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 668.225128][T23391] Bluetooth: MGMT ver 1.23 [ 668.245312][T23395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.307267][T23395] IPVS: Unknown mcast interface: . [ 668.380198][T23399] syzkaller1: entered promiscuous mode [ 668.408647][T23399] syzkaller1: entered allmulticast mode [ 668.451046][T23399] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 668.681525][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 668.743804][T23416] syzkaller1: entered promiscuous mode [ 668.761037][T23416] syzkaller1: entered allmulticast mode [ 669.159510][T23434] netlink: 'syz.0.4152': attribute type 1 has an invalid length. [ 669.304740][T23439] [ 669.307138][T23439] ====================================================== [ 669.314192][T23439] WARNING: possible circular locking dependency detected [ 669.321243][T23439] syzkaller #0 Not tainted [ 669.325688][T23439] ------------------------------------------------------ [ 669.332759][T23439] syz.2.4154/23439 is trying to acquire lock: [ 669.339046][T23439] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 669.348442][T23439] [ 669.348442][T23439] but task is already holding lock: [ 669.355835][T23439] ffff888098aeb860 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 669.366690][T23439] [ 669.366690][T23439] which lock already depends on the new lock. [ 669.366690][T23439] [ 669.377121][T23439] [ 669.377121][T23439] the existing dependency chain (in reverse order) is: [ 669.386168][T23439] [ 669.386168][T23439] -> #7 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}: [ 669.394533][T23439] lock_sock_nested+0x41/0x100 [ 669.399875][T23439] mptcp_subflow_create_socket+0x142/0x800 [ 669.406521][T23439] __mptcp_nmpc_sk+0x155/0x790 [ 669.411876][T23439] mptcp_bind+0xab/0x1d0 [ 669.416744][T23439] __sys_bind+0x2e3/0x410 [ 669.422158][T23439] __x64_sys_bind+0x7a/0x90 [ 669.427300][T23439] do_syscall_64+0x15f/0xf80 [ 669.432451][T23439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.438871][T23439] [ 669.438871][T23439] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 669.446621][T23439] lock_sock_nested+0x41/0x100 [ 669.451917][T23439] inet_shutdown+0x6a/0x390 [ 669.456960][T23439] nbd_mark_nsock_dead+0x2e9/0x560 [ 669.462627][T23439] recv_work+0x1c2e/0x1d40 [ 669.467594][T23439] process_scheduled_works+0xb5d/0x1860 [ 669.473668][T23439] worker_thread+0xa53/0xfc0 [ 669.478783][T23439] kthread+0x388/0x470 [ 669.483382][T23439] ret_from_fork+0x514/0xb70 [ 669.488498][T23439] ret_from_fork_asm+0x1a/0x30 [ 669.493787][T23439] [ 669.493787][T23439] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 669.501527][T23439] __mutex_lock+0x1a3/0x1550 [ 669.506818][T23439] nbd_queue_rq+0x37b/0x1100 [ 669.511949][T23439] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 669.518131][T23439] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 669.525002][T23439] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 669.531543][T23439] blk_mq_run_hw_queue+0x348/0x4f0 [ 669.537185][T23439] blk_mq_dispatch_list+0xd16/0xe10 [ 669.543005][T23439] blk_mq_flush_plug_list+0x48d/0x570 [ 669.548909][T23439] __blk_flush_plug+0x3ed/0x4d0 [ 669.554289][T23439] __submit_bio+0x28d/0x580 [ 669.559315][T23439] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 669.565480][T23439] block_read_full_folio+0x599/0x830 [ 669.571301][T23439] filemap_read_folio+0x137/0x3b0 [ 669.576853][T23439] do_read_cache_folio+0x358/0x590 [ 669.582677][T23439] read_part_sector+0xb6/0x2b0 [ 669.587987][T23439] adfspart_check_ICS+0xb1/0x960 [ 669.593546][T23439] bdev_disk_changed+0x817/0x1770 [ 669.599140][T23439] blkdev_get_whole+0x380/0x510 [ 669.604661][T23439] bdev_open+0x31e/0xd30 [ 669.609439][T23439] blkdev_open+0x470/0x610 [ 669.614386][T23439] do_dentry_open+0x785/0x14e0 [ 669.619677][T23439] vfs_open+0x3b/0x340 [ 669.624268][T23439] path_openat+0x2e08/0x3860 [ 669.629479][T23439] do_file_open+0x23e/0x4a0 [ 669.634510][T23439] do_sys_openat2+0x113/0x200 [ 669.639715][T23439] __x64_sys_openat+0x138/0x170 [ 669.645190][T23439] do_syscall_64+0x15f/0xf80 [ 669.650340][T23439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.656971][T23439] [ 669.656971][T23439] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 669.664221][T23439] __mutex_lock+0x1a3/0x1550 [ 669.669377][T23439] nbd_queue_rq+0xc6/0x1100 [ 669.674524][T23439] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 669.680624][T23439] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 669.687497][T23439] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 669.694016][T23439] blk_mq_run_hw_queue+0x348/0x4f0 [ 669.699667][T23439] blk_mq_dispatch_list+0xd16/0xe10 [ 669.705397][T23439] blk_mq_flush_plug_list+0x48d/0x570 [ 669.711475][T23439] __blk_flush_plug+0x3ed/0x4d0 [ 669.717304][T23439] __submit_bio+0x28d/0x580 [ 669.722445][T23439] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 669.728622][T23439] block_read_full_folio+0x599/0x830 [ 669.734644][T23439] filemap_read_folio+0x137/0x3b0 [ 669.740874][T23439] do_read_cache_folio+0x358/0x590 [ 669.746660][T23439] read_part_sector+0xb6/0x2b0 [ 669.752059][T23439] adfspart_check_ICS+0xb1/0x960 [ 669.757530][T23439] bdev_disk_changed+0x817/0x1770 [ 669.763093][T23439] blkdev_get_whole+0x380/0x510 [ 669.768480][T23439] bdev_open+0x31e/0xd30 [ 669.773263][T23439] blkdev_open+0x470/0x610 [ 669.778229][T23439] do_dentry_open+0x785/0x14e0 [ 669.783522][T23439] vfs_open+0x3b/0x340 [ 669.788138][T23439] path_openat+0x2e08/0x3860 [ 669.793260][T23439] do_file_open+0x23e/0x4a0 [ 669.798398][T23439] do_sys_openat2+0x113/0x200 [ 669.803697][T23439] __x64_sys_openat+0x138/0x170 [ 669.809245][T23439] do_syscall_64+0x15f/0xf80 [ 669.814462][T23439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.820881][T23439] [ 669.820881][T23439] -> #3 (set->srcu){.+.+}-{0:0}: [ 669.828012][T23439] __synchronize_srcu+0xca/0x300 [ 669.833483][T23439] elevator_switch+0x1e8/0x7a0 [ 669.838785][T23439] elevator_change+0x2cc/0x450 [ 669.844184][T23439] elevator_set_default+0x36c/0x430 [ 669.849941][T23439] blk_register_queue+0x3e9/0x4e0 [ 669.855513][T23439] __add_disk+0x677/0xd50 [ 669.860520][T23439] add_disk_fwnode+0xfb/0x480 [ 669.865823][T23439] nbd_dev_add+0x72c/0xb50 [ 669.870764][T23439] nbd_init+0x168/0x1f0 [ 669.875457][T23439] do_one_initcall+0x250/0x870 [ 669.880776][T23439] do_initcall_level+0x104/0x190 [ 669.886267][T23439] do_initcalls+0x59/0xa0 [ 669.891135][T23439] kernel_init_freeable+0x2a6/0x3e0 [ 669.897041][T23439] kernel_init+0x1d/0x1d0 [ 669.901910][T23439] ret_from_fork+0x514/0xb70 [ 669.907028][T23439] ret_from_fork_asm+0x1a/0x30 [ 669.912620][T23439] [ 669.912620][T23439] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 669.920571][T23439] __mutex_lock+0x1a3/0x1550 [ 669.925712][T23439] elevator_change+0x1b3/0x450 [ 669.931035][T23439] elevator_set_none+0xb5/0x140 [ 669.936521][T23439] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 669.942889][T23439] nbd_start_device+0x17f/0xb10 [ 669.948545][T23439] nbd_genl_connect+0x165b/0x1cf0 [ 669.954106][T23439] genl_family_rcv_msg_doit+0x22a/0x330 [ 669.960208][T23439] genl_rcv_msg+0x61c/0x7a0 [ 669.965298][T23439] netlink_rcv_skb+0x232/0x4b0 [ 669.970627][T23439] genl_rcv+0x28/0x40 [ 669.975144][T23439] netlink_unicast+0x75c/0x8e0 [ 669.980538][T23439] netlink_sendmsg+0x813/0xb40 [ 669.986041][T23439] ____sys_sendmsg+0x972/0x9f0 [ 669.991346][T23439] ___sys_sendmsg+0x2a5/0x360 [ 669.996644][T23439] __x64_sys_sendmsg+0x1bd/0x2a0 [ 670.002114][T23439] do_syscall_64+0x15f/0xf80 [ 670.007271][T23439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.013721][T23439] [ 670.013721][T23439] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 670.022350][T23439] blk_alloc_queue+0x546/0x680 [ 670.027737][T23439] __blk_mq_alloc_disk+0x197/0x390 [ 670.033391][T23439] nbd_dev_add+0x499/0xb50 [ 670.038338][T23439] nbd_init+0x168/0x1f0 [ 670.043022][T23439] do_one_initcall+0x250/0x870 [ 670.048752][T23439] do_initcall_level+0x104/0x190 [ 670.054336][T23439] do_initcalls+0x59/0xa0 [ 670.059203][T23439] kernel_init_freeable+0x2a6/0x3e0 [ 670.064935][T23439] kernel_init+0x1d/0x1d0 [ 670.069798][T23439] ret_from_fork+0x514/0xb70 [ 670.074942][T23439] ret_from_fork_asm+0x1a/0x30 [ 670.080237][T23439] [ 670.080237][T23439] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 670.087543][T23439] __lock_acquire+0x15a5/0x2cf0 [ 670.092929][T23439] lock_acquire+0x106/0x350 [ 670.097956][T23439] fs_reclaim_acquire+0x71/0x100 [ 670.103534][T23439] __kmalloc_cache_noprof+0x40/0x660 [ 670.109359][T23439] ref_tracker_alloc+0x15a/0x4c0 [ 670.114830][T23439] get_net_track+0x16e/0x230 [ 670.120008][T23439] sk_net_refcnt_upgrade+0xb2/0x130 [ 670.125737][T23439] mptcp_subflow_create_socket+0x32b/0x800 [ 670.132157][T23439] __mptcp_nmpc_sk+0x155/0x790 [ 670.137472][T23439] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 670.143813][T23439] genl_family_rcv_msg_doit+0x22a/0x330 [ 670.149886][T23439] genl_rcv_msg+0x61c/0x7a0 [ 670.154929][T23439] netlink_rcv_skb+0x232/0x4b0 [ 670.160325][T23439] genl_rcv+0x28/0x40 [ 670.164846][T23439] netlink_unicast+0x75c/0x8e0 [ 670.170140][T23439] netlink_sendmsg+0x813/0xb40 [ 670.175522][T23439] ____sys_sendmsg+0x972/0x9f0 [ 670.180825][T23439] ___sys_sendmsg+0x2a5/0x360 [ 670.186038][T23439] __x64_sys_sendmsg+0x1bd/0x2a0 [ 670.191789][T23439] do_syscall_64+0x15f/0xf80 [ 670.196943][T23439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.203465][T23439] [ 670.203465][T23439] other info that might help us debug this: [ 670.203465][T23439] [ 670.213979][T23439] Chain exists of: [ 670.213979][T23439] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6/1 [ 670.213979][T23439] [ 670.227502][T23439] Possible unsafe locking scenario: [ 670.227502][T23439] [ 670.235417][T23439] CPU0 CPU1 [ 670.241066][T23439] ---- ---- [ 670.246625][T23439] lock(k-sk_lock-AF_INET6/1); [ 670.251627][T23439] lock(sk_lock-AF_INET6); [ 670.259355][T23439] lock(k-sk_lock-AF_INET6/1); [ 670.266827][T23439] lock(fs_reclaim); [ 670.270821][T23439] [ 670.270821][T23439] *** DEADLOCK *** [ 670.270821][T23439] [ 670.278977][T23439] 4 locks held by syz.2.4154/23439: [ 670.284187][T23439] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 670.292482][T23439] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 670.301561][T23439] #2: ffff88806a95c220 (msk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 670.312370][T23439] #3: ffff888098aeb860 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 670.323720][T23439] [ 670.323720][T23439] stack backtrace: [ 670.329652][T23439] CPU: 1 UID: 0 PID: 23439 Comm: syz.2.4154 Not tainted syzkaller #0 PREEMPT(full) [ 670.329674][T23439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 670.329685][T23439] Call Trace: [ 670.329694][T23439] [ 670.329703][T23439] dump_stack_lvl+0xe8/0x150 [ 670.329726][T23439] print_circular_bug+0x2e1/0x300 [ 670.329750][T23439] check_noncircular+0x12e/0x150 [ 670.329773][T23439] __lock_acquire+0x15a5/0x2cf0 [ 670.329794][T23439] ? lockdep_unlock+0x5d/0xd0 [ 670.329808][T23439] ? __lock_acquire+0x146e/0x2cf0 [ 670.329827][T23439] ? __kmalloc_cache_noprof+0x40/0x660 [ 670.329849][T23439] lock_acquire+0x106/0x350 [ 670.329865][T23439] ? __kmalloc_cache_noprof+0x40/0x660 [ 670.329888][T23439] ? lockdep_hardirqs_on+0x7a/0x110 [ 670.329913][T23439] ? irqentry_exit+0x218/0x730 [ 670.329929][T23439] fs_reclaim_acquire+0x71/0x100 [ 670.329952][T23439] ? __kmalloc_cache_noprof+0x40/0x660 [ 670.329973][T23439] __kmalloc_cache_noprof+0x40/0x660 [ 670.329996][T23439] ? ref_tracker_alloc+0x15a/0x4c0 [ 670.330017][T23439] ? rcu_is_watching+0x15/0xb0 [ 670.330037][T23439] ref_tracker_alloc+0x15a/0x4c0 [ 670.330060][T23439] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 670.330080][T23439] ? ref_tracker_free+0x522/0x840 [ 670.330102][T23439] ? __pfx_ref_tracker_free+0x10/0x10 [ 670.330123][T23439] ? sk_net_refcnt_upgrade+0x8c/0x130 [ 670.330147][T23439] ? mptcp_subflow_create_socket+0x32b/0x800 [ 670.330165][T23439] ? __mptcp_nmpc_sk+0x155/0x790 [ 670.330181][T23439] ? mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 670.330204][T23439] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 670.330224][T23439] ? net_passive_dec+0x177/0x250 [ 670.330243][T23439] ? __pfx_net_passive_dec+0x10/0x10 [ 670.330265][T23439] get_net_track+0x16e/0x230 [ 670.330288][T23439] sk_net_refcnt_upgrade+0xb2/0x130 [ 670.330313][T23439] mptcp_subflow_create_socket+0x32b/0x800 [ 670.330333][T23439] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 670.330352][T23439] ? do_raw_spin_lock+0x12b/0x2f0 [ 670.330374][T23439] ? lock_sock_nested+0x6a/0x100 [ 670.330393][T23439] __mptcp_nmpc_sk+0x155/0x790 [ 670.330411][T23439] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 670.330428][T23439] ? mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 670.330453][T23439] ? __local_bh_enable_ip+0xd0/0x130 [ 670.330471][T23439] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 670.330499][T23439] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 670.330533][T23439] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 670.330552][T23439] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 670.330573][T23439] genl_family_rcv_msg_doit+0x22a/0x330 [ 670.330592][T23439] ? __asan_memcpy+0x40/0x70 [ 670.330612][T23439] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 670.330641][T23439] ? bpf_lsm_capable+0x9/0x20 [ 670.330656][T23439] ? security_capable+0x7e/0x2c0 [ 670.330677][T23439] genl_rcv_msg+0x61c/0x7a0 [ 670.330696][T23439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.330713][T23439] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 670.330740][T23439] netlink_rcv_skb+0x232/0x4b0 [ 670.330763][T23439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.330780][T23439] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 670.330807][T23439] ? down_read+0x270/0x2e0 [ 670.330823][T23439] ? genl_rcv+0xd/0x40 [ 670.330839][T23439] genl_rcv+0x28/0x40 [ 670.330854][T23439] netlink_unicast+0x75c/0x8e0 [ 670.330877][T23439] netlink_sendmsg+0x813/0xb40 [ 670.330904][T23439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.330928][T23439] ? aa_sock_msg_perm+0xf1/0x1b0 [ 670.330949][T23439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 670.330972][T23439] ____sys_sendmsg+0x972/0x9f0 [ 670.330997][T23439] ? __might_fault+0xaf/0x130 [ 670.331018][T23439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.331044][T23439] ? import_iovec+0x73/0xa0 [ 670.331069][T23439] ___sys_sendmsg+0x2a5/0x360 [ 670.331097][T23439] ? __lock_acquire+0x6b5/0x2cf0 [ 670.331115][T23439] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.331141][T23439] ? futex_wait+0x2a2/0x390 [ 670.331172][T23439] ? __fget_files+0x2a/0x420 [ 670.331191][T23439] ? __fget_files+0x3a0/0x420 [ 670.331212][T23439] __x64_sys_sendmsg+0x1bd/0x2a0 [ 670.331237][T23439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.331268][T23439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.331285][T23439] do_syscall_64+0x15f/0xf80 [ 670.331300][T23439] ? trace_irq_disable+0x3b/0x140 [ 670.331323][T23439] ? clear_bhb_loop+0x40/0x90 [ 670.331341][T23439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.331358][T23439] RIP: 0033:0x7f0a6819cdd9 [ 670.331375][T23439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.331390][T23439] RSP: 002b:00007f0a690fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.331409][T23439] RAX: ffffffffffffffda RBX: 00007f0a68415fa0 RCX: 00007f0a6819cdd9 [ 670.331421][T23439] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 670.331432][T23439] RBP: 00007f0a68232d69 R08: 0000000000000000 R09: 0000000000000000 [ 670.331442][T23439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.331452][T23439] R13: 00007f0a68416038 R14: 00007f0a68415fa0 R15: 00007ffe800fabc8 [ 670.331470][T23439] [ 670.901883][T23448] __nla_validate_parse: 7 callbacks suppressed [ 670.901905][T23448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4152'. [ 670.920479][T23440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4153'. [ 670.948298][T23454] netlink: 'syz.5.4155': attribute type 3 has an invalid length. [ 670.968016][T23454] netlink: 3940 bytes leftover after parsing attributes in process `syz.5.4155'. [ 670.999773][ T5645] Bluetooth: hci4: command 0x0405 tx timeout [ 671.039785][T23455] netlink: 'syz.5.4155': attribute type 3 has an invalid length. [ 671.049160][T23455] netlink: 3940 bytes leftover after parsing attributes in process `syz.5.4155'. [ 674.776569][ T4993] udevd[4993]: worker [11929] /devices/virtual/block/nbd3 timeout; kill it [ 674.785451][ T4993] udevd[4993]: seq 23475 '/devices/virtual/block/nbd3' killed [ 675.720941][ T5007] block nbd3: Possible stuck request ffff888027c27000: control (read@0,1024B). Runtime 210 seconds [ 675.732142][ T5007] block nbd3: Possible stuck request ffff888027c271c0: control (read@1024,1024B). Runtime 210 seconds [ 675.743464][ T5007] block nbd3: Possible stuck request ffff888027c27380: control (read@2048,1024B). Runtime 210 seconds [ 675.754857][ T5007] block nbd3: Possible stuck request ffff888027c27540: control (read@3072,1024B). Runtime 210 seconds [ 678.279968][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!