last executing test programs: 4.950671798s ago: executing program 4 (id=1435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) ppoll(&(0x7f0000000280), 0x1, &(0x7f0000002d00)={0x0, 0x989680}, 0x0, 0x4f) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 4.662620247s ago: executing program 4 (id=1437): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x3, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x500, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close(r1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x400}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x688b}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, 0x1402, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004810) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x104, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r8) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r11, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x401, 0x29}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r10, 0x891a, &(0x7f0000000ac0)={'veth1\x00', {0x2, 0x4e21, @loopback}}) r12 = accept$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b40)=0x14) getsockname$packet(r12, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) socket(0x1, 0x6, 0x8) 4.296387819s ago: executing program 1 (id=1439): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r0}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x400}, @generic={0x0, 0xffffffffffffff53, "d588380003c1"}]}}}}}}, 0xfd6c) 2.255922581s ago: executing program 4 (id=1440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x18, 0x0, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000440), &(0x7f0000000040)=@udp=r3}, 0x20) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0) getsockopt$nfc_llcp(r2, 0x111, 0x0, 0x0, 0x90aa62107f0000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r8, &(0x7f00000002c0)="b9ba48", 0x3) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x8, 0x6, "6ed00268"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x58) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfd0e}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x18}}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="1802000008000000000000000d000000850000002f000000180100002020782500000000002020212effffffffffff00bfa100000000000007010000f8ffffffb702000008000000b70300000012000085000000710000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001c00)={{r0, &(0x7f0000000580)='geneve1\x00', 0x280, &(0x7f00000005c0)={@_ha_fsid={[0x0, 0x800]}, {0x7, 0x7, 0x0, 0x3}}, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x9}, 0x7, &(0x7f0000001b00)=[{0x2, 0x10, &(0x7f0000000680)='(\'@:%\x00', &(0x7f00000006c0)="3c258cd171301c000fafd3cca585100c66e7fd4862e6199a7d03843688b7a9293da9a2374f609ca48259bcec7f40027318fb55cb745e65736afbba80", 0x3c, 0x18}, {0x1, 0x0, &(0x7f0000000700)='\x00', &(0x7f0000000740)="0055f575d5582f78b1491285e0c0de3383da7525855cf5a113eb21fb4f31f8e5fffa05bfe168f3595904ba25282210962b3f1e963e36ba43b301f5ed9eba80b665d0484e3085828926db90f28f9b3d98fc271377d1851f88f39a2f1bdcf86e75f177bbf1f417875b1980712331bec08d0c18d1b2958645d63abc22", 0x7b, 0xa}, {0x3, 0x0, &(0x7f00000007c0)='TIPCv2\x00', &(0x7f0000000800)="c3b6474d1bde815b464e0df1cdb71b35ec1f583d54feaf81239822cdb78eb2e8d2a6948809db7f59819dabdf2c4d89d995f612022423a5f2ec91caf167acae8ee34cfa38dd7ecbc06c0921d6211ec5a289aba68769d1fbc8878d17fc676f20541465c734865e12ae6aba71057f", 0x6d}, {0x2, 0x7, &(0x7f0000000880)='+\x00', &(0x7f00000008c0)="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", 0x1000, 0xa}, {0x2, 0x2, &(0x7f00000018c0)='\x00', &(0x7f0000001900)="6c44f7277339ccdf11c83724c59a9f40e78f9aced4924572df3e4d13da1fcefef84e692def35af6509f553dc43f17174c9f8f4dacfc8a89dd002a5da77", 0x3d, 0x12}, {0x0, 0x1, &(0x7f0000001940)='\x00', &(0x7f0000001980)="0381d0133d63e5deb2bc3c7ac231d0510021c673d5840fe40212469055e599cd6a8bfa5b2d6f1be185188a5d43229a21a17bccd83698c8a44e1d4ce4f13ecead5012c0c8fb50f1e6d9475004c5022683a31e761539a93dc86402f6971ffa7556c392dc49e0673089c8dacdbb358c6b90fd773c09a75ec67afe83c2cab266409ba0e7fa9b3c194fe2d743177e3091a0ca131c800d5245651035c98d50aaaf8f7fdcb6d9db11998e12e30549c53ecf404619c6aa693512d3d2053b", 0xba}, {0x3, 0x5, &(0x7f0000001a40)='\x00', &(0x7f0000001a80)="7bdfca82c20e0e73145ecd83c04a2c40d1759b3a75dd7acaf4c881b18c2af486f045c6004c4396426c4b79e4265ad41e9b7a4a764ab6ef1875ab0a2f04e033318b7ffc1bbb724725259e494a707995b6c0a1065d1d729db0ed3e7d8613e137e4a3ceec07055ad3bf4cebd9ba2c9f0636dd5087cc56287b582a1cd8ca", 0x7c, 0x2}]}) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000001d80)={&(0x7f0000001c80)=""/211, 0x8000, 0x0, 0x8, 0x1}, 0x20) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x108, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @remote, 0x58bf}}}}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x73c4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff0ef}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000024a07c920000000000000000000000000000b7703f4b4e09000000000000003c386b1784d1d439fe8da81f0e1f5d6a07eee274d563e32c08e49fce7bfc221baa58a28cb4ac3b679b5a15aa14e006c469f104bf5bfc6948f3046157ec15ef6b5bbe6ec89f70d714aad427d07b341154a74dd0c1aa13304fb8e3de2141", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000020c0)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES8=r11, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e9500000000000056080000000000008500000081000000b7000000000000009500a07f000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 2.196256837s ago: executing program 0 (id=1441): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x3}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xa}, 0x48) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2004c854}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000003640)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe01}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x4, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x3}}}, 0x3a) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.891092181s ago: executing program 0 (id=1443): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="680200000105010100000000000000000a00000454020100"], 0x268}, 0x1, 0x0, 0x0, 0x4001}, 0x40) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1410, 0x1, 0x70bd2d, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0xc0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)={@val={0x800e}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x4500, 0x0, 0x14, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100, @val=0x80}, "80f7c1d0"}}}}}}}, 0x3a) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000100000001000000080001000200002c00048005010000000000000500030001000000050003f60400000005000300010000000500030002000000080002000200000000"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000340)={'syzkaller1\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfb, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 1.889920951s ago: executing program 2 (id=1444): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) (async) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xa, 0xfff2}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x0, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {0xe}, {0xe, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xd, 0xf7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4080) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {0xe}, {0xe, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xd, 0xf7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4080) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) (async) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) close(0xffffffffffffffff) socket(0x14, 0x2, 0x4) (async) r10 = socket(0x14, 0x2, 0x4) accept4$nfc_llcp(r10, 0x0, 0x0, 0x80000) 1.791388889s ago: executing program 3 (id=1445): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x1, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5, 0x1}, {0x0, 0x8000000}, {0x0, 0x0, 0x800000, 0x0, 0x6, 0x80000001}, {0xffff4c74, 0xc3}, {0x0, 0x5, 0x0, 0x9}, {0x5}, {}, {0x0, 0x10, 0x0, 0xfffffffd}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0xd9f7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x8, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x5, 0x0, 0x0, 0x4}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {0x0, 0x5}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x2a}, {0x0, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0xc}, {0x0, 0x9}, {0x0, 0xffffffff, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x2000, 0x0, 0x0, 0x8000000}, {0x0, 0x7, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0xe3b6, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4, 0x0, 0xfa48}, {0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x800}, {0xdb3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x3, 0xffffffff}, {0x1}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {}, {}, {0x0, 0x5, 0xe, 0x0, 0x0, 0x80000000}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x9797, 0x0, 0xec33, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7f}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0xfffffffd, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x81, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x8, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80, 0x2}, {0x10000008, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x200000}, {0x0, 0x10000, 0xffffffff, 0x0, 0xfffffffd}, {0x3, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2d, 0x0, 0x10000}, {0x0, 0x3, 0x8000}, {0x0, 0x8000, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x1010000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x87}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x4}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {0x3}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x1}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x200c0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b40)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0xe8, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@local, @remote, @empty, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r5, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac"], 0x3c}}, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0x4) (async) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="1100000000001d0000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) splice(r10, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(r1, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000340)="11c095a19067f0cca3dafb164688ec2cd933", 0x12}], 0x1, 0x0, 0x0, 0x4004}, {0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001280)="d6", 0x1}, {&(0x7f00000012c0)="157e403724b25d457d3dac91803a63ae3f425ea32868accc62d8ecd28963fece34a082b189fb8a0c1faa85fffd06baaa0c9e37b28386b7e55a9361fc3f18", 0x3e}, {&(0x7f0000001300)="bd740015b232a64b754780467ebb52ea3ce0330c4a4aa225c03198caaef543f450252ca32e570362be45e0656933226edb4b1165f7a5e450d98ef12c6d7da9eff0313110b75c70f1faf3bcddd916830f1c1e0f9bfcb56ae7884cc3aa24d9b0b05a876d0f8a2eab4d763f2756b535dabc2be63bf89f980c63312253686dd23e6367959c29672fd3bbd5b9ca5eef80c4b6e8cece89bd2ca7c02743b0f033f82f0fa64c3a25397f2ab378f1", 0xaa}], 0x3, &(0x7f0000001400)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xb0, 0x117, 0x2, 0x9c, "c223affb4d83a02b9fdeb364054947931b943b788992aad2f5678a335f5d3e99a7544f2d804b2e99a0f4a3c9340167fd247f44f77cda0e6763f2931ba06e305fa40ef7224e726e0045900540749e12c09730b3ea3bfa7b63dc34ace33fba86a7e24d735daeedd970341ebb978581f6e1124f2d74da140d45ea04018aa878dc84230d72bae2a43222f1fea8081e2584ab57b5e346bdfd3124459c47c7"}], 0xe0, 0x90}], 0x2, 0x8014) (async) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYRES32=r9, @ANYRES64=0x0, @ANYRESDEC=r0, @ANYRESHEX=r7], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) 1.789985436s ago: executing program 1 (id=1446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}, @TCA_NETEM_RATE={0x14, 0x6, {0x8, 0xe87d, 0x3, 0xb6a}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.645227166s ago: executing program 3 (id=1447): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x3c}}, 0x4008000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r3], 0x2c}}, 0x40080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) close(0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[], 0x0) 1.546795286s ago: executing program 1 (id=1448): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="8000000014000300020000000000060000000000000000001400010085b32386"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000400000042dbd700000000000077c003804ca2a3f49a15a8ad5fba73a4342e060f57edfaa94cb841a6e8b1777b330a668251cdb7eefc71b30700b4a390bbf3223f6b324617a4b4af8ba0513fdab26f9000000000000bdc0642ebe2f999400000000000000000000c717530e51616808c18766373aed1b30d09aa9a76d0353595b0ff4e74efe90de175e1ba6115ae1f62052331b60f25374c2d969da6d23616ff9644b3eabe537f77edcf0e91a8bef91797948"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) 1.420308845s ago: executing program 1 (id=1449): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) preadv(r1, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000440)=""/39, 0x27}], 0x2, 0x9, 0xbf1) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x100) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x3ec0) r5 = socket(0x10, 0x2, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$SOCK_DESTROY(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 1.419767153s ago: executing program 3 (id=1450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x6, 0x2}]}, @const={0x8}]}, {0x0, [0x61, 0x61, 0x0, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000400)=""/7, 0x40, 0x7, 0x1, 0x82f}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4000000040000100fcff0700040000000100000004004880200001801c00108018000b8008000100ac14140000000000000003002000000008000200e9"], 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1e}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 1.41889041s ago: executing program 0 (id=1451): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (rerun: 64) sendto$inet6(r2, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async, rerun: 32) shutdown(r2, 0x1) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffecb70600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800ffb0850000007a00000095", @ANYRESOCT=r2, @ANYRESHEX=r0, @ANYRES64=r1], &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94) r3 = socket(0x1, 0x803, 0x0) getpeername$packet(r3, 0x0, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r6, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYRES8=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002900)=r7, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0xeef6e756585ba104, 0x8, 0x6, 0x2, 0x40, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x780f, 0x1, 0x2, 0x9}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r7, r8, 0x25, 0x8, @void}, 0x10) 1.41253207s ago: executing program 2 (id=1452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000f0000000008"], 0x48}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) close(0x3) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x1ff}, {{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/176}], 0x0, &(0x7f0000000200)=""/185}, 0x75800000}, {{&(0x7f0000000380)=@isdn, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000400)=""/201}, {&(0x7f0000000500)=""/189}, {&(0x7f00000005c0)=""/170}, {&(0x7f0000000d00)=""/189}, {&(0x7f0000000740)=""/247}, {&(0x7f0000000840)=""/207}, {&(0x7f0000000940)=""/247}, {&(0x7f0000000a40)=""/141}], 0x0, &(0x7f0000000680)=""/95}, 0x5}], 0x37, 0x40010020, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x40}, 0x400ee00) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0xfffffe94, &(0x7f0000000180)=[{&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f00000000c0)=""/44}], 0x1}, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x10000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x20, 0x0, 0xfc, 0x0, 0xfd, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000f0000000008"], 0x48}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) setsockopt$sock_int(r2, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) (async) close(0x3) (async) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x1ff}, {{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/176}], 0x0, &(0x7f0000000200)=""/185}, 0x75800000}, {{&(0x7f0000000380)=@isdn, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000400)=""/201}, {&(0x7f0000000500)=""/189}, {&(0x7f00000005c0)=""/170}, {&(0x7f0000000d00)=""/189}, {&(0x7f0000000740)=""/247}, {&(0x7f0000000840)=""/207}, {&(0x7f0000000940)=""/247}, {&(0x7f0000000a40)=""/141}], 0x0, &(0x7f0000000680)=""/95}, 0x5}], 0x37, 0x40010020, 0x0) (async) socket$inet(0x2, 0x2, 0x1) (async) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x40}, 0x400ee00) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0xfffffe94, &(0x7f0000000180)=[{&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f00000000c0)=""/44}], 0x1}, 0x0) (async) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x9200000000000000) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x10000, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x20, 0x0, 0xfc, 0x0, 0xfd, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async) 1.253767658s ago: executing program 4 (id=1453): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) (async) r1 = accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0xa, 0x6, 0x5c13}, {0x6, 0xff, 0xc, 0x401}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='bbr', 0x3) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$kcm(0x10, 0xa, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) (async) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0xe803) (async) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0xe803) accept4(r1, 0x0, 0x0, 0x80000) 1.155713756s ago: executing program 0 (id=1454): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="7407bbc7ebaf5556be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b3723f9d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xfffffffd, 0xfffffffd}, 0x20) (async) connect$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x7fe8, @dev={0xfe, 0x80, '\x00', 0xad}, 0x7, 0xfffffffd}, 0x20) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/88, 0x58}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB='U\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000128bd7000fcdbdf250300000005003500090000000500300000000000050029000000000006002800030000000800390007000000080039009ac40000050038000000000008000b0000000001"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000240)=@req3={0xfffffbff, 0xe, 0x1100009, 0xfb, 0x0, 0x1, 0x10001}, 0x1c) unshare(0x400) (async) recvmmsg$unix(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000000780)=""/74, 0x4a}, {&(0x7f00000009c0)=""/184, 0xb8}, {&(0x7f0000000b40)=""/175, 0xaf}], 0x4}}], 0x1, 0x400122a0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r4], 0x10b8}, 0x20000c00) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) (async) getsockopt$inet6_buf(r2, 0x29, 0x23, &(0x7f0000000600)=""/113, &(0x7f0000000680)=0x71) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x9}, 0x48) (async) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x21) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x5) (async) recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) 1.128270479s ago: executing program 2 (id=1455): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x800) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r1, 0x1) (async, rerun: 64) writev(r0, &(0x7f0000002dc0)=[{&(0x7f0000000200)="ea296555bcb6db7a819180cce4d999f0d3163e550ddcea67ce59c1bf46d5036d0219a3733fc39a32716d26db89a2f0e7939ed7358f280b3baa78c29f9239cb76136f6b1be019c4a100addd6e3dd3e0d49c0b5bcafb4ddfb4d0c29f90aff19a89327eb231bd1b9cc009b8a17c70bda4f99593880b2849b0fb727cdd2ffec42824bdf7d67533bbbc8f9d744e710fe31754ee116182fcfdc2ecd4f8a5809fbdfcecc8932eb35cfc2757b0eee761297ca1c89aa2aaacaae434bd48", 0xb9}, {&(0x7f0000001a40)="37d7f58921b01a4e243dc405d1bd04b91d36a5388d449e93b24fef607af02e7b45a449d8f839d349e754d65eb91520a4a18a3f36e453e5b152fead8606f791015d144304e40f31adee1c01f9e5d01e9dbc517f96c55e61540b9dc8daee32791b49e6725f163e4ae0c27645d8c6eade56c64d48a6581004f62e3d9c061d95bad38cf2a1fb643a9cc4e1bcb9547403145b5547b83f23c4907226d39bff9a9f1f70cf1f6a731c056808fd2376dc0f6f064cf554b16259413473351fa19cce41599484aa7a0d164f2cb398531bde3a6757a6adb390169dcc3aeff77fbf1e56d65916d20d01dc4f7dc8c566a41c4b57ebc3d87d7de1e76173fc4245df26b8fb3418b31027c92fa445e2830e6c8fdebf28a9c049186f108e3b869fd9e9622589ed0b21f20d40a2c280cecddf9caba200842d0e85fb0f0fcdb61b0f5c093d37d66cca458e6e626e2119fa33011dac059a5909326f8332d71eb1b994c672de803db456dc988a3e6a16fd27101555ed7f6ca693f951e9efca9afd70a1e9a25c2f46d5cf378456ba1289a12157bcaf75410a965f028a4e8746d41c1065c9acc23b41eff97b873101a269881a4c29014e1d911a6c044a69103d895b5a75e5e78b4435d02e4c22f9c1b47cfdb57437cf52130af41ce33774910dacee84bcdba38fc556fd07eadf792aa48509e71b09bc21bfcb334596e9b3e19ee7ab47c4134559ec0ef67b72c91807136614a5ba5ee29f2f719db18971b4205fc32c510bccbe68025b9d58a884713d2d0865b0b95a95780099d85e1a050a612fb32302cbcaa2897f9aa605cccb81e8d8a2fb69770c8461ee25becef4c12f37fc11ccc6a41736dbf5e0af454009640c53883900ded28a77af3d416e73133dc3ccafb490d96004b6686f9b21d99e9ac2e7036d4757f6bf011544677a71c1c48c9e656e52735569357b399b97bd16ce536c5505c9fe82caa6a80b608cb5cc06c8c600cadd25eaf1dc3d4f0a35b5ebbdc8277cd43b1dec2bbf522f1326f49a6a9f1ac481f3e3b1d4d66fa9c4c7a8d5d870f54748b3667995f804c96b595c3197b94d69167c0eeea4bbbb5feba414b65326fea34fb444e88921685c144370c77b7b60549a88dad9ff7e6e70cb313633ebc237aef0dfe95fe79da36ab343055b1488dbfa4254a8391ab4ced7f2ee312707e6b1ac7ce86870e7ede16a5e7e8249ac694a4b9e3eaf57333d5d233e72de1b8b5fdb42f34fd410a7149a1e8a6f8f5979759b8f0ed9d9c735b0019d4962608154e0854c7d8270760ba7b6ec9da9a7d5adaa8f9e1f7da46134f6d7820fac09df2332adb85fa15391026ed0d543ce074049a5721d0f9a8f70604be35d613c25400b71dec427dbf27bd77148e4e303879edb876325ed7525bf485a0627ff4aab4b557d29bbe5d8af932715e00508c652f75d1e451257ad7c123bd03af3c2e7e08e333a22d68362a50f3dc14cd5cbefee7dc691af5afec59a2c74ce57398b61656a892ff75e0a0fbfa92b1389638dae68abc4f96f2532acba8ceeadf4a1719d237f86b90ee5e15d5d645bda7f011c89d7e409a5cd5df441fcaecad3fbd7e6d1489a50c0d05ef0589c91f662aefad4c8e3933cea220793ff1c9379aa70387632f30197a77d003fc8346f3f364ad9fb63686ae38393a84e494c12ff8b425df1697529bd854c8b07968a28c3231c9650036d391620437a7e04b9896cf74f7f1b83d86c4d9d2dab1eed6c1ae8108925cbd4506303d7209355013bf7313fe1e406bca12261c38bd16c456be4c05e9f6da2700c6fd7f3e2970e582e19c9a34f7c9dc6dd204bc9744adc562f47b9e4db9a8078b4e757f93aedb3a94c97ec7b10560b80dbab46ee0e84961bb1c5ebc6fd6b6080fbd00aa4f37851edc194809abc4d2b3684411bba41b7d998255085f27660facecfba38d3222461ef4c021f17396ba5313f2a0a08491d12392a86d03230101b5798c316b1146be6ca329c1065d3792c0bfbcf56739813e67c5e04311c14237c7c8e088a72a1c055e8024e230e0d3dc72c8b6f5194301091b7b933ffe1f6a0db74b3229207d1ebc9b7edbd6620465b082f1ff898f16237ca5314609e0715daefabdd52e1e82c3c84f7b5a1cbe9add2872b55a44389249e15c577479fe82c7e8ead924fccf161ab4e10a69fdb98e0ae19ab4f30a185ac423862e930879978924aa40627c6bee784e56cc690939c413cd7a6b9bf5835bd62c9a6242408355ff45a921fb633a913fbf9bbdbfa20f1eefdb60bcb504d3360d9510180e8aa60a0c5147e2ee16061cd986556ab6120bfe63847db5c02f45ba9a58706ff8ac36bed045b94ae06bcba6247e3ac659e54286cbb7181c122f20d101e7aa5745eaf99c8612895b6bfc8c599cbbfa1094db125bd85c19ffb14c19857831db24c5d28a3102ac69f1094141ff224528d668307fbb9dc72230e04e26265c1436648e41f141a1b23ecc25be3bbf8f536e6e78e0a0e3f8c0de3ac74f95fe86c04b867f5d815c2a836f0963827d73172e762d777d2e1451de703d64fd5197d6942d83969c2f82e30b287e46650e4ff2b47f2ec5528d7189416231054c4f36a05715287afa01cc10c112709bc9779c91263049e5663e91965b1fcb48179bf7a7f4065a09b58bf5f906dc27aa24430ca6e327f1a4a8bf9dd3d8cf29e7aabd4aca9ef959d6446fb5966b1fbc2b3fc2f485c4ed49dec05d4c2f8853640f5f5ca3ef963947251645293cc3b6c51cbc6e686610c3b3af4f86ce6f398add6d279097d7263e5f18e3f2885b853905a34e8e3bdb8736ab56c75610eb65c06ca1b9d5d3c045e7c1437b6370bd4340be725b6f7cd4b8c7602584af38e47261fbb19ce7bcedf7295eb18aa1f32bc089beb36e79a1f3d5407078a03e5538ad5c15fe8cd57e8c22aa196d758c88221929a266956a604462030959f8a0954365fd1807d58b31cc97e5b538a5c3db1073ff375f23cf130effd27f352984dee493867cc4d46bb18dfd8db4b3d3f9067a713434b8072da6bc990e7057c34386e783cbdf21b27f07303d01bb0a2e3048b28e29319653892589116b62531018738310c6abb1be9ba92110373f8a52164c91c8aa5ec749e08c538b43e8e9243524f49d706bd9ffe26bfd7638d23e4559932fb71c68e363347a2e2c80f47124d2660cc94b0934f8f918944be73f479d76266694a0b0d86d500a41fb1c41a686022f27c55f62dda32c61648f100d4b2f21255b6dcddde84df68468e817be29d3d68a4f35b03b0adcf3f1e3df0a165302e13101929e6567307c07c3a5091249ed311a5f445a19f09cbbc6848ac6914b5b4a4257822222d633851a952b066ea5e999ccabfeaec686e51245d35a8641ccc685bf62439cf9ff325772eff42b0521e1e84ae4eabe992219aef43ada2ca51c875626820ff21234300271bbaf5bd71d87afc99a24bf3e7dd59a298cae39d65c54dc394495916275295b3cdf516a1c95c8e3bca7a183f2665341988069d55dae651a2e3bc0c51a902cfc995f1577ed7afdd32d7beed10403a0bdff0927866748d0da78c12c857648f7ed8eed8195c5ffa4d9a5aec9f8b00025114f907b423167fbbf3ee2ee9a7c1f3c1b92823832bf5cd1ed906ed63b2af588e5cdaaa74720a22c5c321f884b63798918cf791a7a50dda913cc96c20f301f3d043c5dbb764c8dad5dee6d9002cc655009908f4beafc25ea942ec4b97de3bfcde07301be89b7e957dcb58d25ad62350097161b23cafef1fb1bbe5cbe698b76d4b0d3a59a0d987abe6a0a540e9d252e9c79e3664dd386adbd1c999c8f2809e7bf61cf09a164847ce162c04d895c1e523ce899195f1d7f0fd133b0dcdb025646d0ead93a5d162de08edf5e3ddbd63c098409fe319eda3d10e1fbf1a1f7aff6dd0f343cc650d0720bbb4695bb951067579cd647007489d97761546d8997c84724e4a10eaf14b1201815f16b6e5918cff9f0b174dae4643b559d10a3dc634a746c01a80918bb0a7104b6651d477b3f2e9e39f313fa3babb8558482690b5a81705c72a1ad1b6049c1ee53cf8a614772d7ad7f3756376a0d1cd29fdc85b3bcf2d07f81b17e1faf59361b471fef9c82976631b642595b197cb38bcfe21beb4d60b83f28f27ae5254a1df1e33c2d50fb13c0cbf2ec8488aeac5775abd8c95eae188db1ea630e7e3cdf2ee1e80f642bcea1fe3d7cc9f6fa00000a6e06be0ebefc5fe3037472cbe39fa0da359580a60479d501989e43cacd5552480fd8d9b448fc750855a88844c86e43e6b467188e01a419d436ef70efec1227fe09ab74d0ba6ad39e4ce1c652e54a5ad63e439aa9032b0a3d6080117060093156e90bc2991ce25b7f233b8941dea04202a06fbb5c74a18dda91689af72e8098857ed7d3e0fc188f42cf5c290c3b70a2e4992ffd538580c0ca7849f18f2ea1363966c7f97e4459f7730cbeced7d1899b650881cecf644e39121c8b2433a6526eb60808d77eb5d7bd8cff2773fcf0924a2edfe7f1f19426b0ea4157f87b956f7617c715afd2ef503b330dd03f3a3ffefb3a04d39a3659517a7dddcb8ae24a5928f5097616c42da9b261cc2dffdbb573c7f9624acc4b246c5e84e39a8a9dffbe9ea2d55153ed646e055be64971e954daedccf679e33db2e611a394cf9bfe829be4e193d100a50d29be019398ae8a9140a6a4ef6c7bb25a167925cb358adfb202c95aa7720477841571411e5b594bcd762711e5b869f074e32e55032d29cad0b8ed52e49c616d5414986ae9c59561580f02a430b56d9f861c8fe6dfa5933970b55a2a45fd9d86eb4dc7f5af195890a3efc14e4f583357d75d29f163ce2399cc35c4e0f22935ab22bec29523b4943ceeb0c3636c7d162ef9f5065bb6f23b7e38ac5a9fa36240fd5c25a71d5ce2f503dbdf21647b96a0111a6237d8a2452666944d1bcdc9d1694df35c31ea0f9f39aa81a39f344c2965b346b50fe4280e875af5322753b94456a79895149dbdd6157fc339dc8086017ea4d8783ec14ec2de0a9801226378df3331ebdb73c38df7de0a2b61bad6d9a3353c73bf27fb8e6d9fa89aa15b14bbad7b2aaeb9f97caa4e016e7f62ecfef0381818e1592709df521626a11fce36eacf7cb2fce9eb73fd9b61f22914af91c9fd1a63116df8cf4a6ab57173800d1c5fb58627fa59aaccd895f88883db8b887de09690a1e58b3875c089b8a9d536ba5a11f1404a22dc4d3cfd00024a0e386550bd85ba4cb09953fdbeabc2cd8746424b405e12378937d5a7effe76fedb80e3cf90b5c68e2ce01f574e6223a51218982c6514e46b11e54487711d07f03fa2245f98a0dd9c2c7e4e7523c2effcf059973d13a81b8af441ff0b9c0b77fd3f51073bbb35fade497f65e5a641badf395193a635d46e0503bb3c917dfd1e09833b273713159c935649519f18ea28535456c44ce06762d62620e4197e49551c629abd5f77e8af870d4edd1734ebf12d1e05b25044257c86e6a51d53514b7b018eecb4a0ddfd2f990e8d80438989f48e0e064362daa2278ccf6f9c67f8f556c22a24ec88cb77e03e738f76025375aa9b4d3632fa72581ab623369983df0c473ed0f72c72b41266237877df6a66b7d0bb27612d01b21ad9dee51b8329931ff3c1d02b86f7b8dfe42ec760177b3b197f2c48f5d6d16d27a10456229f28afef1603766067f06fccec4195134902bb0ae93db510945d8533d38c5ec191f30960b190c053b61453429200814008e1471a342447def4697ca892207556cc48eaaa2d8a00adcd3a4646fec04cec6d81c7e4915b15510508a06108e8d54058e", 0x1000}, {&(0x7f0000002a40)="bcbe298a2edb2a3ae27d61a48f290c93e8743b643f1b62f81349baafcb33ca4af3af99e9bc3cef90df4b5a7f3d0215be38c23f26593e41", 0x37}, {&(0x7f0000002a80)="cd21b881193b55638d4dfe6a80715e6b4caee09f7918ff81d3ee099f3e6169a27f029b403c1f50d783c267b029b3973dd3d15fbaa05bd66fd07d1ebef670f501eec756adc58e0f55ab93b1a2c253c37c7a455fdef049373deec7b3c7dd0da3dd99438bd63c3ad4ab7d163c7780dd9969f9ea85fb26888eb4a20ba79e1a0170f1dd2404602bd44e7762a7151d33f708425b2bf40aecc2e38d702af0672657a2b4866e7e8efbe091fa53bae952f4326cf0", 0xb0}, {&(0x7f0000002b40)="abb0e5f3fa298da324f3ab210a58173deaecfd4c0fd49a09da97dfd356713b58cb3a8a06c2589d5c695ce2ea269d525e50e18b67dd84af1ff37b10ddaa3f190a304e783e88c9d44d1a83d0e11aff24961dd4f5566c75b3978a970a33f445e61346239e709bd0d21c04e0aed4c07a8d45c434cbdf282da9e5882a36d23e905175e9ff4ef03133a8c7aa08f122018ea80674725074c43b1b8bfe90f000ded9f300ef4d0d6fefb9e1c05bc43b20b97641c4ee335c6cda8bb6536a46e0f4dbd5f968c331e5eea70fadbe61f82b3fccd2912776bf9a759d266936e8c57d38f86fd4ca70", 0xe1}, {&(0x7f0000002c40)="c48932c336cad0e559fb8ec5260a29dfe545dfa57d65694418b6fd223026eea52158c0d0bbcc0578ce1afbd6df9c101c5900a893a0f2b7c4723fe842ed9880d99e1919735d17d0a5c06f916ceed654960cfeb9e290937debfe262c67d0f423d0e4cccb47ea7d9d17331704a7b5d2271848659c78b28a70d4afe1d8401566e9a7ac7cc53d9e9b", 0x86}, {&(0x7f0000002d00)="fad4f39e7ee05d9925ffad463ec22c35650ab752571d3f1a8c6cc448803d808ded5c844034f2fe8a1bf0e5b73ae73d7d80ccab1b32aa13b3ea9559ccfc20a0ce009275192aa271fd3db84c41cd23a66c6756e13d0732de40c8955691ccb08374de703aa5e282bc726a775ee8159069139d324cc8d1950a461b45272d58ba7e27bfc5828ffeee8d31", 0x88}], 0x7) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdc9, 0x12, r2, 0x0) (async) pwritev(r2, &(0x7f0000000580)=[{&(0x7f0000000040)='W4', 0x2}], 0x1, 0x0, 0x7) (async, rerun: 32) ioctl$FICLONE(r2, 0x40049409, r2) (rerun: 32) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYRESOCT=r3], 0x10b8}, 0xff4c) (async) socket$kcm(0x29, 0x5, 0x0) 1.102806365s ago: executing program 0 (id=1456): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0x10}, 0x1b}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmmsg$alg(r5, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f0000000240)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c4", 0x27}, {&(0x7f0000000280)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a2320c7ffc6b506e6e3c7f8bd478c56beb9520ea32612337688c4905af416fe75be77c3f12e55f3f657129e6daf6844369cf70c947ab82e778a4263f9b75692d4e5c905bb9119b28241e191e54e38a5357ad888c9cd225dae2276839bfcc7dc87c05ba539e435888d6677bd00"/169, 0xa9}, {&(0x7f0000000440)="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", 0x170}, {&(0x7f0000000680)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf577cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d5655a5d05c4024b8cb0fb4", 0xa5}], 0x5, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r4, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000001540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xa, 0x7fff}}}}}}, 0x0) 975.421348ms ago: executing program 3 (id=1457): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000ff31ffffffffffdf00000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) syz_emit_ethernet(0x36, &(0x7f0000000200)={@multicast, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000ff31ffffffffffdf00000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) (async) syz_emit_ethernet(0x36, &(0x7f0000000200)={@multicast, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) (async) 974.824524ms ago: executing program 2 (id=1458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x1, 0x2, 0x3, 0x8, 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r1 = socket(0x2b, 0x1, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000040)=0x4, 0x4) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r10, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r12, 0xfffffdc8, &(0x7f0000000340)}, 0xc) 963.749937ms ago: executing program 4 (id=1459): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x7fffffff}], 0x1, 0x8020, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendmsg$802154_dgram(r0, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0) 876.680496ms ago: executing program 3 (id=1460): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) recvmmsg$unix(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) readv(r11, &(0x7f0000000780)=[{&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/47, 0x2f}, {&(0x7f0000000280)=""/90, 0x5a}, {&(0x7f0000000740)=""/49, 0x31}], 0x5) recvmmsg(r2, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) preadv(r6, &(0x7f0000003c00)=[{&(0x7f0000001480)=""/255, 0xff}, {&(0x7f00000000c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x5, 0x23a1, 0x1) close(r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 802.612019ms ago: executing program 2 (id=1461): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117000000000008510000002000000850000008c00000095000000000000009500ad0500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4, 0x2}}, 0x1a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) close(0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000000100000fe8000000000000000000000000000aafe8000000000000000000000000000003100c204"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x5031, 0xffffffffffffffff, 0xc2dd0000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x60000000}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4044}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'gretap0\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x20, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x41}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x8000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x3, 0x3, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x40}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xec}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x10001}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x1) 339.099477ms ago: executing program 1 (id=1462): bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x46fa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48d4}, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000000000)="27030200dc0f14000e000300fffec1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x27, 0xe, 0x0, &(0x7f0000000340)="f9ad48cc429d29fc68a30c0cf893", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r9 = socket$kcm(0x2d, 0x0, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0) getpeername(r9, &(0x7f0000000000), &(0x7f0000000080)=0x80) 276.88609ms ago: executing program 2 (id=1463): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r1, 0x25, 0x0, @void}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01005ffc00"], 0x0, 0xfc5f}, 0x28) splice(r3, &(0x7f0000000040)=0x8, r4, &(0x7f0000000100)=0x5, 0x79, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r5, 0x1) setsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000), 0xc, &(0x7f0000000880)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_DELFLOWTABLE={0x60, 0x18, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELFLOWTABLE={0xa0, 0x18, 0xa, 0x902, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe53}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x183}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xa0, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x264}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000044) 221.671045ms ago: executing program 3 (id=1464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e25, 0x0, @empty}, 0x17) listen(r0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0xa72e}], 0x1, 0x0, 0x0, 0x0) r1 = accept$inet6(r0, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @empty, 0x2}}, 0xe, 0x7fff}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000280)={r2, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x9a, 0x5a5, 0x7, 0x1, 0xeee2}, &(0x7f0000000340)=0x98) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000480)={r1, &(0x7f00000001c0)='\x00', 0xa00, &(0x7f0000000380)={@_ha_fsid={[0x8, 0xffffffc0]}, {0x4, 0x0, 0x7f6, 0x101}}, 0xffff, &(0x7f0000000400), &(0x7f0000000440)=0x7}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000004c0)=0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0x3) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000004) 107.646353ms ago: executing program 1 (id=1465): recvmmsg(0xffffffffffffffff, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/208, 0xd0}, {0x0}], 0x2}, 0x4}], 0x1, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}}}, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) r2 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000010000000000000000fbffffff9500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x18, 0x0, @val=@netfilter={0x2, 0x1, 0x4}}, 0x20) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="c99b5738182001238c09f38ed400000000000000064a5343", 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b012bbd70dfa5600000000c0099000000000036000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) r7 = accept4(r5, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x5452, 0x0) recvmsg$can_raw(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r9, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x10000) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r11, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00001400"], 0x48}}, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x4f4, 0x22, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r8, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000680)=@o_path={&(0x7f00000004c0)='./file0\x00', r12, 0x4000, r4}, 0x18) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r1], 0x48}}, 0x2404c054) 106.999689ms ago: executing program 0 (id=1466): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = gettid() socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r2) syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$unix(r4, &(0x7f00000053c0)=[{{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20040085}}], 0x1, 0x2) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) splice(r6, 0x0, r5, 0x0, 0x406f413, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x7, 0x10000, {{0x1b, 0x4, 0x2, 0x3, 0x6c, 0x68, 0x0, 0x5, 0x4, 0x0, @remote, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x31, 0x3, [{0x5, 0x3, "ba"}, {0x0, 0x5, "913a3f"}, {0x7, 0x12, "bd7d2834eebe2f6231fee491527e8fd6"}, {0x2, 0x11, "8fdff42a7efc5137c693c0c9af6d7c"}]}, @noop, @end, @ssrr={0x89, 0x17, 0xbf, [@multicast1, @empty, @remote, @rand_addr=0x64010102, @remote]}, @timestamp={0x44, 0x8, 0x3d, 0x0, 0xb, [0x1]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000004c0)=0x2, 0x4) 0s ago: executing program 4 (id=1467): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2c}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r6, &(0x7f0000000000), 0xfdef) recvmsg$unix(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, r7, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048801}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): tlink: 'syz.0.140': attribute type 1 has an invalid length. [ 118.787963][ T6457] netlink: 64 bytes leftover after parsing attributes in process `syz.0.140'. [ 118.811937][ T6457] openvswitch: netlink: ct_state flags ffffffff unsupported [ 119.094894][ T6473] netlink: 'syz.0.142': attribute type 11 has an invalid length. [ 119.255035][ T6474] bridge_slave_0: left allmulticast mode [ 119.273876][ T6474] bridge_slave_0: left promiscuous mode [ 119.297620][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.324093][ T6474] bridge_slave_1: left allmulticast mode [ 119.337597][ T6474] bridge_slave_1: left promiscuous mode [ 119.354848][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.384018][ T6485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.142'. [ 119.407127][ T6474] bond0: (slave bond_slave_0): Releasing backup interface [ 119.428189][ T6488] x_tables: duplicate entry at hook 1 [ 119.443963][ T6474] bond0: (slave bond_slave_1): Releasing backup interface [ 119.461503][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.470094][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.481846][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.492301][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.524455][ T6474] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.590775][ T6467] netlink: 220 bytes leftover after parsing attributes in process `syz.0.142'. [ 119.684481][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 119.709763][ T6495] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 119.731159][ T6488] netlink: 60 bytes leftover after parsing attributes in process `syz.3.146'. [ 120.395907][ T6528] netlink: 'syz.1.155': attribute type 31 has an invalid length. [ 120.477214][ T6532] netlink: 256 bytes leftover after parsing attributes in process `syz.2.157'. [ 120.603539][ T6540] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.156'. [ 120.687211][ T6539] bond1: option lacp_active: invalid value (8) [ 120.830240][ T6539] bond1 (unregistering): Released all slaves [ 120.930037][ T6562] netlink: 292 bytes leftover after parsing attributes in process `syz.1.163'. [ 121.061240][ T6533] syzkaller1: entered promiscuous mode [ 121.066917][ T6533] syzkaller1: entered allmulticast mode [ 121.173646][ T6568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.227754][ T6569] netlink: 'syz.0.165': attribute type 9 has an invalid length. [ 121.241735][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 121.491557][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.168'. [ 121.571156][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 121.771829][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 121.789217][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 121.888138][ T6613] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 122.071388][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 122.136649][ T6619] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 122.187065][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 122.569091][ T6636] syzkaller1: entered promiscuous mode [ 122.581579][ T6636] syzkaller1: entered allmulticast mode [ 122.608252][ T6643] Illegal XDP return value 4294967262 on prog (id 85) dev N/A, expect packet loss! [ 122.634488][ T6643] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 122.647692][ T6643] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 122.787337][ T6646] netlink: 'syz.4.184': attribute type 1 has an invalid length. [ 122.866684][ T6646] bond2: entered promiscuous mode [ 122.872403][ T6646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.907433][ T6650] xt_hashlimit: size too large, truncated to 1048576 [ 122.924068][ T6646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.973697][ T6646] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 123.015022][ T6646] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 123.043018][ T6646] bond2: (slave ipip0): making interface the new active one [ 123.051327][ T6646] ipip0: entered promiscuous mode [ 123.059328][ T6646] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 123.202812][ T6659] netlink: 'syz.2.187': attribute type 11 has an invalid length. [ 123.238200][ T6659] batadv_slave_1: entered promiscuous mode [ 123.254108][ T6662] sock: sock_timestamping_bind_phc: sock not bind to device [ 123.272705][ T6663] sock: sock_timestamping_bind_phc: sock not bind to device [ 123.363930][ T6658] batadv_slave_1: left promiscuous mode [ 123.545592][ T6673] netlink: 'syz.0.190': attribute type 2 has an invalid length. [ 123.678234][ T6683] erspan1: entered allmulticast mode [ 124.270099][ T6705] syzkaller1: entered promiscuous mode [ 124.287276][ T6705] syzkaller1: entered allmulticast mode [ 125.031434][ T6739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.041651][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.069323][ T6739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.114054][ T6743] netlink: 'syz.0.210': attribute type 1 has an invalid length. [ 125.124636][ T6739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.199795][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.245465][ T6743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.346362][ T6745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.404015][ T6758] xt_TCPMSS: Only works on TCP SYN packets [ 125.506038][ T6746] bond2: (slave veth3): Enslaving as an active interface with a down link [ 125.560672][ T6766] netlink: 'syz.3.214': attribute type 21 has an invalid length. [ 125.584681][ T6758] bridge_slave_1: left allmulticast mode [ 125.593192][ T6746] __nla_validate_parse: 7 callbacks suppressed [ 125.593211][ T6746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.210'. [ 125.594997][ T6766] netlink: 128 bytes leftover after parsing attributes in process `syz.3.214'. [ 125.608723][ T6758] bridge_slave_1: left promiscuous mode [ 125.609379][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.648647][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 125.701039][ T6766] netlink: 'syz.3.214': attribute type 4 has an invalid length. [ 125.709706][ T6766] netlink: 3 bytes leftover after parsing attributes in process `syz.3.214'. [ 125.738161][ T6766] netlink: 'syz.3.214': attribute type 10 has an invalid length. [ 125.748619][ T6766] netlink: 40 bytes leftover after parsing attributes in process `syz.3.214'. [ 125.763117][ T6766] dummy0: entered promiscuous mode [ 125.880549][ T6736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.939925][ T6779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.217'. [ 126.062095][ T6781] syzkaller0: entered promiscuous mode [ 126.084642][ T6781] syzkaller0: entered allmulticast mode [ 126.121416][ T6781] tipc: Started in network mode [ 126.135144][ T6781] tipc: Node identity 0a4dd44909bb, cluster identity 4711 [ 126.151906][ T6781] tipc: Enabled bearer , priority 0 [ 126.159099][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.169507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.191653][ T6780] tipc: Resetting bearer [ 126.248762][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.267293][ T6780] tipc: Disabling bearer [ 126.448609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.969113][ T6817] netlink: 48 bytes leftover after parsing attributes in process `syz.3.229'. [ 126.978451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.047030][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.231'. [ 127.064779][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 127.279332][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.382306][ T6834] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 127.459794][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.234'. [ 127.494851][ T6835] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 127.549919][ T6834] bond1: entered promiscuous mode [ 127.555711][ T6834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.599004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.705890][ T6846] netlink: 'syz.2.236': attribute type 1 has an invalid length. [ 127.927486][ T6844] bond1: (slave bridge2): making interface the new active one [ 127.935420][ T6844] bridge2: entered promiscuous mode [ 127.942930][ T6844] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 127.996191][ T6846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.025112][ T6848] bond1: (slave geneve2): making interface the new active one [ 128.034907][ T6848] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 128.054642][ T6853] netlink: 'syz.4.237': attribute type 1 has an invalid length. [ 128.078543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.267489][ T6858] Cannot find add_set index 4 as target [ 128.318570][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.198704][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.358654][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.238486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.806672][ T6883] __nla_validate_parse: 1 callbacks suppressed [ 130.806691][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 130.835316][ T6886] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.245'. [ 130.851351][ T6883] netlink: 15 bytes leftover after parsing attributes in process `syz.4.244'. [ 131.374762][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 131.395636][ T6913] ip6tnl1: entered allmulticast mode [ 131.448783][ T24] net_ratelimit: 1 callbacks suppressed [ 131.448800][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.607935][ T5635] block nbd0: Receive control failed (result -32) [ 131.609457][ T5637] block nbd0: Receive control failed (result -32) [ 131.881902][ T6936] netlink: 56 bytes leftover after parsing attributes in process `syz.0.259'. [ 131.913252][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 131.977590][ T1227] IPVS: starting estimator thread 0... [ 132.089337][ T6940] IPVS: using max 29 ests per chain, 69600 per kthread [ 132.130468][ T6944] ip6tnl0: Caught tx_queue_len zero misconfig [ 132.206485][ T6951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.264'. [ 132.238670][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.254996][ T6951] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 132.330590][ T6951] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.385986][ T6958] netlink: 60 bytes leftover after parsing attributes in process `syz.3.266'. [ 132.395952][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 132.406121][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 132.478648][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.580992][ T6960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.591516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.646513][ T6960] netlink: 'syz.4.267': attribute type 11 has an invalid length. [ 132.670487][ T6967] syzkaller0: entered promiscuous mode [ 132.676814][ T6967] syzkaller0: entered allmulticast mode [ 132.721313][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.727746][ T5637] Bluetooth: hci4: command 0x0405 tx timeout [ 132.874756][ T6971] Cannot find add_set index 0 as target [ 133.037514][ T6975] sctp: [Deprecated]: syz.3.272 (pid 6975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.037514][ T6975] Use struct sctp_sack_info instead [ 133.235588][ T6986] sock: sock_set_timeout: `syz.0.275' (pid 6986) tries to set negative timeout [ 133.303198][ T6992] netlink: 'syz.3.278': attribute type 11 has an invalid length. [ 133.338649][ T6992] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 133.370563][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.508126][ T6992] bond2: entered promiscuous mode [ 133.516795][ T6992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.530200][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.637191][ T7006] bond2: (slave bridge3): making interface the new active one [ 133.674217][ T7006] bridge3: entered promiscuous mode [ 133.694436][ T7006] bridge3: left promiscuous mode [ 133.794900][ T7009] syzkaller0: entered promiscuous mode [ 133.807103][ T7009] syzkaller0: entered allmulticast mode [ 133.828014][ T7002] syzkaller0: entered promiscuous mode [ 133.834661][ T7002] syzkaller0: entered allmulticast mode [ 133.844865][ T7030] tipc: Started in network mode [ 133.852744][ T7030] tipc: Node identity b62c9a985471, cluster identity 4711 [ 133.860463][ T7030] tipc: Enabled bearer , priority 0 [ 133.890165][ T6998] tipc: Resetting bearer [ 133.965461][ T6996] tipc: Resetting bearer [ 133.976530][ T7034] netlink: zone id is out of range [ 134.006508][ T6996] tipc: Disabling bearer [ 134.329006][ T7048] syzkaller1: entered promiscuous mode [ 134.352743][ T7048] syzkaller1: entered allmulticast mode [ 134.378085][ T7055] netlink: 'syz.3.291': attribute type 1 has an invalid length. [ 134.479462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.852969][ T7065] team0 (unregistering): Port device team_slave_0 removed [ 134.893334][ T7065] team0 (unregistering): Port device team_slave_1 removed [ 135.164194][ T7084] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20003 [ 135.177369][ T7081] netlink: 'syz.2.300': attribute type 9 has an invalid length. [ 135.289705][ T7077] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 135.344439][ T7077] bond3 (unregistering): Released all slaves [ 135.666814][ T7108] : renamed from veth0_to_bond [ 135.905465][ T7118] __nla_validate_parse: 13 callbacks suppressed [ 135.905483][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 135.941442][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 136.047213][ T7121] syzkaller1: entered promiscuous mode [ 136.059952][ T7121] syzkaller1: entered allmulticast mode [ 136.477522][ T7137] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 136.624192][ T7137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.640062][ T5821] net_ratelimit: 5 callbacks suppressed [ 136.640078][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.893897][ T7169] netlink: 76 bytes leftover after parsing attributes in process `syz.2.319'. [ 137.067637][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 137.111152][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 137.268922][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 137.296410][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 137.328148][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 137.503486][ T7192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.328'. [ 137.528100][ T7196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.536707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.546118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.547525][ T7192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.328'. [ 137.556332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.571689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.580083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.588481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.596716][ T7192] netlink: 'syz.0.328': attribute type 4 has an invalid length. [ 137.596933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.612772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.537167][ T7217] netlink: 'syz.0.333': attribute type 7 has an invalid length. [ 139.602881][ T7217] netlink: 'syz.0.333': attribute type 8 has an invalid length. [ 140.006095][ T7221] geneve2: entered promiscuous mode [ 140.023157][ T7221] geneve2: entered allmulticast mode [ 140.046298][ T48] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 140.077662][ T48] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 140.099006][ T48] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 140.129830][ T48] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 140.295860][ T7223] netlink: 'syz.4.339': attribute type 2 has an invalid length. [ 140.504144][ T7225] syzkaller0: entered promiscuous mode [ 140.555431][ T7225] syzkaller0: entered allmulticast mode [ 141.648451][ C0] net_ratelimit: 17375 callbacks suppressed [ 141.648471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.662858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.671229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.679607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.687933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.696320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.704683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.713106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.721444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.730205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.789526][ T7243] syzkaller0: entered promiscuous mode [ 141.795239][ T7243] syzkaller0: entered allmulticast mode [ 142.395836][ T7246] IPVS: length: 74 != 24 [ 142.450322][ T7246] xfrm0 speed is unknown, defaulting to 1000 [ 142.465379][ T7246] xfrm0 speed is unknown, defaulting to 1000 [ 142.475841][ T7246] xfrm0 speed is unknown, defaulting to 1000 [ 143.003822][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 143.019899][ T7246] infiniband syz0: set down [ 143.037340][ T7246] infiniband syz0: added xfrm0 [ 143.191417][ T7246] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 143.244252][ T7246] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 143.312647][ T7246] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 143.475716][ T7246] RDS/IB: syz0: added [ 143.496185][ T7246] smc: adding ib device syz0 with port count 1 [ 143.512489][ T7246] smc: ib device syz0 port 1 has no pnetid [ 143.531060][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 143.561982][ T7246] xfrm0 speed is unknown, defaulting to 1000 [ 143.971979][ T7249] syz.3.348 (7249) used greatest stack depth: 18088 bytes left [ 144.493962][ T7262] __nla_validate_parse: 5 callbacks suppressed [ 144.493979][ T7262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'. [ 144.665659][ T7246] xfrm0 speed is unknown, defaulting to 1000 [ 144.901685][ T7272] syzkaller1: entered promiscuous mode [ 144.933092][ T7272] syzkaller1: entered allmulticast mode [ 146.259140][ T7246] xfrm0 speed is unknown, defaulting to 1000 [ 146.658471][ C1] net_ratelimit: 21307 callbacks suppressed [ 146.658492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.672848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.681211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.689595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.697940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.706331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.714667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.723062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.731431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.739852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.261663][ T7246] xfrm0 speed is unknown, defaulting to 1000 [ 147.372630][ T7310] tipc: Enabling of bearer rejected, failed to enable media [ 148.355761][ T7322] bond3 (unregistering): Released all slaves [ 148.506330][ T7246] xfrm0 speed is unknown, defaulting to 1000 [ 151.668646][ C0] net_ratelimit: 21182 callbacks suppressed [ 151.668665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.682985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.691376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.699760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.708081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.716430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.724786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.733144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.741471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.749816][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.040807][ T7356] xt_cgroup: xt_cgroup: no path or classid specified [ 152.392193][ T7367] netlink: 'syz.0.377': attribute type 31 has an invalid length. [ 153.267982][ T7390] netlink: 48 bytes leftover after parsing attributes in process `syz.4.383'. [ 153.502524][ T7394] syzkaller0: entered promiscuous mode [ 153.568423][ T7394] syzkaller0: entered allmulticast mode [ 153.617298][ T7401] sock: sock_timestamping_bind_phc: sock not bind to device [ 153.822478][ T7409] netlink: 256 bytes leftover after parsing attributes in process `syz.4.388'. [ 153.887640][ T7409] netlink: 72 bytes leftover after parsing attributes in process `syz.4.388'. [ 153.946111][ T7413] netlink: 86 bytes leftover after parsing attributes in process `syz.4.388'. [ 154.000196][ T7409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.388'. [ 154.133923][ T7416] netlink: 'syz.4.390': attribute type 31 has an invalid length. [ 154.188088][ T7402] bond3 (unregistering): Released all slaves [ 154.628880][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 154.648033][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 154.665960][ T7423] netlink: 'syz.1.394': attribute type 12 has an invalid length. [ 154.681355][ T7424] netlink: 44 bytes leftover after parsing attributes in process `syz.4.393'. [ 154.691193][ T7423] netlink: 'syz.1.394': attribute type 13 has an invalid length. [ 154.714586][ T7425] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 156.226475][ T7462] bond3: option updelay: invalid value (18446744073709518847) [ 156.286981][ T7462] bond3: option updelay: allowed values 0 - 2147483647 [ 156.333725][ T7462] bond3 (unregistering): Released all slaves [ 156.678415][ C1] net_ratelimit: 29775 callbacks suppressed [ 156.678433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.692702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.700975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.709242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.717489][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.725766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.734031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.742308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.750571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.758874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.507998][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 157.946456][ T7501] tipc: Enabled bearer , priority 0 [ 157.978722][ T7498] syzkaller0: entered promiscuous mode [ 157.986176][ T7498] syzkaller0: entered allmulticast mode [ 158.017724][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 158.078148][ T7498] tipc: Resetting bearer [ 158.147627][ T7497] tipc: Resetting bearer [ 158.296079][ T7497] tipc: Disabling bearer [ 158.349918][ T7512] __nla_validate_parse: 1 callbacks suppressed [ 158.349938][ T7512] netlink: 32 bytes leftover after parsing attributes in process `syz.4.407'. [ 158.452786][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 158.505296][ T7515] gtp0: entered promiscuous mode [ 158.518534][ T7515] gtp0: entered allmulticast mode [ 158.675774][ T7515] team0: Device gtp0 is of different type [ 158.822218][ T7530] netlink: 'syz.1.411': attribute type 13 has an invalid length. [ 158.847185][ T7530] netlink: 'syz.1.411': attribute type 12 has an invalid length. [ 159.087378][ T7537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.413'. [ 159.415707][ T7546] netlink: 'syz.1.417': attribute type 8 has an invalid length. [ 159.705254][ T7550] netlink: 48 bytes leftover after parsing attributes in process `syz.4.419'. [ 159.912790][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 159.942854][ T7557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.420'. [ 160.075762][ T7557] tc_dump_action: action bad kind [ 160.518730][ T7572] netlink: 72 bytes leftover after parsing attributes in process `syz.1.424'. [ 160.686384][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 160.818122][ T7573] netlink: 'syz.1.424': attribute type 1 has an invalid length. [ 161.222477][ T7578] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.278119][ T7582] netlink: 'syz.3.426': attribute type 9 has an invalid length. [ 161.323721][ T7582] netlink: 'syz.3.426': attribute type 6 has an invalid length. [ 161.417353][ T7582] netlink: 'syz.3.426': attribute type 7 has an invalid length. [ 161.512715][ T7582] netlink: 'syz.3.426': attribute type 8 has an invalid length. [ 161.624348][ T7567] syzkaller0: entered promiscuous mode [ 161.634579][ T7567] syzkaller0: entered allmulticast mode [ 161.677911][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 161.688466][ C1] net_ratelimit: 37141 callbacks suppressed [ 161.688484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.702738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.711465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.719770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.721433][ T7567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.422'. [ 161.728209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.745099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.753419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.761748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.770105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.778415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.374735][ T7609] veth1_to_bond: entered allmulticast mode [ 163.801893][ T7611] veth1_to_bond: left allmulticast mode [ 164.210862][ T7632] __nla_validate_parse: 3 callbacks suppressed [ 164.210881][ T7632] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.439'. [ 164.312184][ T7630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.441'. [ 165.152805][ T7653] netlink: 'syz.2.447': attribute type 268 has an invalid length. [ 165.182833][ T7655] netlink: 'syz.2.447': attribute type 268 has an invalid length. [ 165.394875][ T7663] netlink: 'syz.3.448': attribute type 1 has an invalid length. [ 165.898630][ T7663] bond3: entered promiscuous mode [ 165.930506][ T7663] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.099383][ T7666] vlan2: entered allmulticast mode [ 166.144700][ T7666] bond3: entered allmulticast mode [ 166.341423][ T7669] bond3: (slave bridge3): making interface the new active one [ 166.368918][ T7669] bridge3: entered promiscuous mode [ 166.422998][ T7669] bridge3: entered allmulticast mode [ 166.435161][ T7669] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 166.497328][ T7673] bond3 (unregistering): Released all slaves [ 166.698363][ C1] net_ratelimit: 36935 callbacks suppressed [ 166.698380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.712607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.720886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.729166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.737432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.745728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.753996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.762323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.770607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.778887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.255833][ T7709] FAULT_INJECTION: forcing a failure. [ 167.255833][ T7709] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.345370][ T7707] warning: `syz.2.456' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 167.368546][ T7709] CPU: 0 UID: 0 PID: 7709 Comm: syz.0.457 Not tainted syzkaller #0 PREEMPT(full) [ 167.368574][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.368593][ T7709] Call Trace: [ 167.368602][ T7709] [ 167.368614][ T7709] dump_stack_lvl+0xe8/0x150 [ 167.368651][ T7709] should_fail_ex+0x40c/0x560 [ 167.368698][ T7709] _copy_from_user+0x2d/0xb0 [ 167.368723][ T7709] ___sys_sendmsg+0x1c6/0x360 [ 167.368745][ T7709] ? __lock_acquire+0x683/0x2cd0 [ 167.368772][ T7709] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.368832][ T7709] ? __fget_files+0x2a/0x420 [ 167.368857][ T7709] ? __fget_files+0x3a2/0x420 [ 167.368893][ T7709] __x64_sys_sendmsg+0x1bd/0x2a0 [ 167.368919][ T7709] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.368952][ T7709] ? __pfx_ksys_write+0x10/0x10 [ 167.368991][ T7709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.369013][ T7709] do_syscall_64+0x174/0x580 [ 167.369036][ T7709] ? trace_irq_disable+0x3b/0x140 [ 167.369067][ T7709] ? clear_bhb_loop+0x40/0x90 [ 167.369092][ T7709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.369113][ T7709] RIP: 0033:0x7f10a879ce59 [ 167.369137][ T7709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.369155][ T7709] RSP: 002b:00007f10a9593028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.369182][ T7709] RAX: ffffffffffffffda RBX: 00007f10a8a15fa0 RCX: 00007f10a879ce59 [ 167.369197][ T7709] RDX: 0000000020000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 167.369213][ T7709] RBP: 00007f10a9593090 R08: 0000000000000000 R09: 0000000000000000 [ 167.369225][ T7709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.369237][ T7709] R13: 00007f10a8a16038 R14: 00007f10a8a15fa0 R15: 00007ffd67377218 [ 167.369270][ T7709] [ 167.565867][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 168.222247][ T7742] netlink: 'syz.1.466': attribute type 13 has an invalid length. [ 168.240358][ T7743] netlink: 'syz.1.466': attribute type 13 has an invalid length. [ 168.964342][ T7760] FAULT_INJECTION: forcing a failure. [ 168.964342][ T7760] name failslab, interval 1, probability 0, space 0, times 1 [ 169.086754][ T7760] CPU: 0 UID: 0 PID: 7760 Comm: syz.0.470 Not tainted syzkaller #0 PREEMPT(full) [ 169.086782][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 169.086794][ T7760] Call Trace: [ 169.086803][ T7760] [ 169.086812][ T7760] dump_stack_lvl+0xe8/0x150 [ 169.086840][ T7760] should_fail_ex+0x40c/0x560 [ 169.086880][ T7760] should_failslab+0xa8/0x100 [ 169.086915][ T7760] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 169.086944][ T7760] ? __alloc_skb+0x189/0x7a0 [ 169.086975][ T7760] ? __alloc_skb+0x1d7/0x7a0 [ 169.087004][ T7760] ? __local_bh_enable_ip+0xd0/0x130 [ 169.087031][ T7760] __alloc_skb+0x1d7/0x7a0 [ 169.087067][ T7760] netlink_sendmsg+0x5d4/0xb40 [ 169.087101][ T7760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.087129][ T7760] ? aa_sock_msg_perm+0xf1/0x1b0 [ 169.087161][ T7760] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.087188][ T7760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.087213][ T7760] ____sys_sendmsg+0x9b9/0xa20 [ 169.087235][ T7760] ? __might_fault+0xaf/0x130 [ 169.087269][ T7760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.087301][ T7760] ? import_iovec+0x73/0xa0 [ 169.087329][ T7760] ___sys_sendmsg+0x2a5/0x360 [ 169.087350][ T7760] ? __lock_acquire+0x683/0x2cd0 [ 169.087377][ T7760] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.087437][ T7760] ? __fget_files+0x2a/0x420 [ 169.087462][ T7760] ? __fget_files+0x3a2/0x420 [ 169.087499][ T7760] __x64_sys_sendmsg+0x1bd/0x2a0 [ 169.087525][ T7760] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.087558][ T7760] ? __pfx_ksys_write+0x10/0x10 [ 169.087605][ T7760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.087628][ T7760] do_syscall_64+0x174/0x580 [ 169.087652][ T7760] ? trace_irq_disable+0x3b/0x140 [ 169.087682][ T7760] ? clear_bhb_loop+0x40/0x90 [ 169.087709][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.087729][ T7760] RIP: 0033:0x7f10a879ce59 [ 169.087748][ T7760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.087765][ T7760] RSP: 002b:00007f10a9593028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.087787][ T7760] RAX: ffffffffffffffda RBX: 00007f10a8a15fa0 RCX: 00007f10a879ce59 [ 169.087802][ T7760] RDX: 0000000020000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 169.087815][ T7760] RBP: 00007f10a9593090 R08: 0000000000000000 R09: 0000000000000000 [ 169.087828][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.087839][ T7760] R13: 00007f10a8a16038 R14: 00007f10a8a15fa0 R15: 00007ffd67377218 [ 169.087871][ T7760] [ 169.635314][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 170.348388][ C1] sched: DL replenish lagged too much [ 170.465239][ T7788] netlink: 'syz.3.475': attribute type 32 has an invalid length. [ 170.812676][ T7775] netlink: 'syz.4.472': attribute type 2 has an invalid length. [ 171.009549][ T7800] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.478'. [ 171.117139][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 171.496535][ T7812] FAULT_INJECTION: forcing a failure. [ 171.496535][ T7812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.606704][ T7819] trusted_key: syz.0.483 sent an empty control message without MSG_MORE. [ 171.634268][ T7812] CPU: 0 UID: 0 PID: 7812 Comm: syz.3.482 Not tainted syzkaller #0 PREEMPT(full) [ 171.634296][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.634308][ T7812] Call Trace: [ 171.634316][ T7812] [ 171.634325][ T7812] dump_stack_lvl+0xe8/0x150 [ 171.634354][ T7812] should_fail_ex+0x40c/0x560 [ 171.634394][ T7812] _copy_from_iter+0x1d3/0x1660 [ 171.634421][ T7812] ? rcu_is_watching+0x15/0xb0 [ 171.634451][ T7812] ? __pfx__copy_from_iter+0x10/0x10 [ 171.634470][ T7812] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 171.634508][ T7812] ? netlink_sendmsg+0x650/0xb40 [ 171.634530][ T7812] ? skb_put+0x112/0x210 [ 171.634553][ T7812] netlink_sendmsg+0x6c0/0xb40 [ 171.634586][ T7812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.634618][ T7812] ? aa_sock_msg_perm+0xf1/0x1b0 [ 171.634650][ T7812] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 171.634677][ T7812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.634710][ T7812] ____sys_sendmsg+0x9b9/0xa20 [ 171.634732][ T7812] ? __might_fault+0xaf/0x130 [ 171.634766][ T7812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.634798][ T7812] ? import_iovec+0x73/0xa0 [ 171.634825][ T7812] ___sys_sendmsg+0x2a5/0x360 [ 171.634846][ T7812] ? __lock_acquire+0x683/0x2cd0 [ 171.634874][ T7812] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.634934][ T7812] ? __fget_files+0x2a/0x420 [ 171.634959][ T7812] ? __fget_files+0x3a2/0x420 [ 171.634996][ T7812] __x64_sys_sendmsg+0x1bd/0x2a0 [ 171.635022][ T7812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.635054][ T7812] ? __pfx_ksys_write+0x10/0x10 [ 171.635093][ T7812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.635117][ T7812] do_syscall_64+0x174/0x580 [ 171.635140][ T7812] ? trace_irq_disable+0x3b/0x140 [ 171.635171][ T7812] ? clear_bhb_loop+0x40/0x90 [ 171.635198][ T7812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.635219][ T7812] RIP: 0033:0x7f8ad459ce59 [ 171.635239][ T7812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.635255][ T7812] RSP: 002b:00007f8ad547a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.635278][ T7812] RAX: ffffffffffffffda RBX: 00007f8ad4815fa0 RCX: 00007f8ad459ce59 [ 171.635293][ T7812] RDX: 0000000020000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 171.635305][ T7812] RBP: 00007f8ad547a090 R08: 0000000000000000 R09: 0000000000000000 [ 171.635318][ T7812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.635330][ T7812] R13: 00007f8ad4816038 R14: 00007f8ad4815fa0 R15: 00007ffdb7e2ee88 [ 171.635373][ T7812] [ 171.748594][ C1] net_ratelimit: 37591 callbacks suppressed [ 171.748632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.903853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.912147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.920461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.928730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.936988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.945259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.953504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.961804][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.970082][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.569490][ T7836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.486'. [ 172.708038][ T7844] netlink: 'syz.4.489': attribute type 1 has an invalid length. [ 172.917711][ T7844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.012704][ T7858] netlink: 'syz.2.491': attribute type 1 has an invalid length. [ 173.082776][ T7858] netlink: 'syz.2.491': attribute type 2 has an invalid length. [ 173.150443][ T7858] netlink: 'syz.2.491': attribute type 3 has an invalid length. [ 174.099993][ T7848] bond3: (slave veth3): Enslaving as an active interface with a down link [ 174.203852][ T7854] bond3: (slave dummy0): making interface the new active one [ 174.232160][ T7854] dummy0: entered promiscuous mode [ 174.249175][ T7854] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 174.459466][ T7852] xfrm0 speed is unknown, defaulting to 1000 [ 174.710025][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 174.806862][ T7873] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 175.698584][ T7896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.499'. [ 175.761115][ T7895] IPv6: NLM_F_REPLACE set, but no existing node found! [ 175.806645][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'. [ 175.881729][ T7896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.499'. [ 176.194519][ T7896] geneve2: entered promiscuous mode [ 176.758365][ C1] net_ratelimit: 33146 callbacks suppressed [ 176.758384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.772620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.780905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.789196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.797446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.805707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.813976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.822260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.830543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.838840][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.921371][ T7922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.507'. [ 177.113796][ T7927] netlink: 14 bytes leftover after parsing attributes in process `syz.1.508'. [ 177.356521][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 177.555016][ T7940] netlink: 72 bytes leftover after parsing attributes in process `syz.4.509'. [ 177.622142][ T7930] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 177.746469][ T7936] ip6gretap1: entered promiscuous mode [ 178.301456][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 178.380796][ T7950] unsupported nla_type 216 [ 178.887392][ T7971] lo: Caught tx_queue_len zero misconfig [ 179.120207][ T7974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.521'. [ 179.785389][ T7993] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.268799][ T7949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.522348][ T8028] bridge0: entered allmulticast mode [ 181.644468][ T8032] __nla_validate_parse: 2 callbacks suppressed [ 181.644486][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 181.768347][ C1] net_ratelimit: 40055 callbacks suppressed [ 181.768366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.782622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.790971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.799229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.807514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.815826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.824152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.832519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.840805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.849093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.876570][ T8037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.536'. [ 181.953025][ T8037] netlink: 'syz.0.536': attribute type 7 has an invalid length. [ 182.007284][ T8037] netlink: 'syz.0.536': attribute type 8 has an invalid length. [ 182.055559][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.536'. [ 182.207387][ T8056] xt_l2tp: missing protocol rule (udp|l2tpip) [ 182.795853][ T8037] batadv0: entered promiscuous mode [ 182.816859][ T8037] batadv0: left promiscuous mode [ 183.322213][ T8066] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 183.377642][ T8066] macsec1: entered promiscuous mode [ 183.434669][ T8066] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 183.544502][ T8068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.541'. [ 183.773337][ T8084] netlink: 'syz.0.546': attribute type 1 has an invalid length. [ 183.800193][ T8084] netlink: 244 bytes leftover after parsing attributes in process `syz.0.546'. [ 183.820488][ T8077] dummy0: entered promiscuous mode [ 183.835419][ T8084] NCSI netlink: No device for ifindex 0 [ 183.873689][ T8077] gretap0: entered promiscuous mode [ 183.976246][ T8077] hsr1: entered allmulticast mode [ 184.008022][ T8077] dummy0: entered allmulticast mode [ 184.104241][ T8077] gretap0: entered allmulticast mode [ 184.156549][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.547'. [ 184.231253][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 184.312356][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 184.325114][ T8100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.550'. [ 184.344097][ T8096] netlink: 'syz.3.547': attribute type 30 has an invalid length. [ 184.354675][ T8079] xfrm0 speed is unknown, defaulting to 1000 [ 184.377740][ T8101] netlink: 'syz.3.547': attribute type 30 has an invalid length. [ 184.667374][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'. [ 184.756068][ T7161] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.790586][ T7161] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.899276][ T7161] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.980517][ T7161] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.421664][ T8119] netlink: 'syz.3.555': attribute type 3 has an invalid length. [ 185.444029][ T1011] dummy0: left promiscuous mode [ 185.532127][ T8119] netlink: 'syz.3.555': attribute type 29 has an invalid length. [ 186.643576][ T8141] netlink: 'syz.3.561': attribute type 31 has an invalid length. [ 186.778347][ C1] net_ratelimit: 36869 callbacks suppressed [ 186.778363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.792604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.800909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.809186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.817411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.825689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.833980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.842242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.850555][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.858816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.380490][ T8145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.414948][ T8162] xt_hashlimit: size too large, truncated to 1048576 [ 187.527560][ T8163] xt_hashlimit: size too large, truncated to 1048576 [ 187.583444][ T8163] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 187.601384][ T8145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.621040][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.567'. [ 187.737422][ T8145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.756848][ T8145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.855050][ T8145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.874370][ T8145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.902512][ T8145] veth1_vlan: left promiscuous mode [ 187.909630][ T8145] veth0_vlan: left promiscuous mode [ 187.915885][ T8145] veth0_vlan: entered promiscuous mode [ 187.925597][ T8145] veth1_vlan: entered promiscuous mode [ 187.936904][ T8145] veth1_macvtap: left promiscuous mode [ 187.957669][ T8145] veth0_macvtap: left promiscuous mode [ 187.974278][ T8145] veth0_macvtap: entered promiscuous mode [ 187.997231][ T8145] veth1_macvtap: entered promiscuous mode [ 188.034162][ T8145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 188.062949][ T8145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 188.268405][ T8145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 188.285145][ T8145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 188.332948][ T8145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.343258][ T8145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.717296][ T7162] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 188.802137][ T7162] bond2: (slave veth3): making interface the new active one [ 188.866915][ T7162] bond2: active interface up! [ 188.993122][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.000400][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.068794][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.076052][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.617345][ T5741] xfrm0 speed is unknown, defaulting to 1000 [ 189.632546][ T5741] syz0: Port: 1 Link ACTIVE [ 189.637552][ T5741] xfrm0 speed is unknown, defaulting to 1000 [ 189.652578][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.938003][ T8185] netlink: 'syz.1.572': attribute type 12 has an invalid length. [ 190.062008][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.157940][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.210621][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.556550][ T8199] netlink: 'syz.2.576': attribute type 1 has an invalid length. [ 190.598546][ T8199] netlink: 'syz.2.576': attribute type 4 has an invalid length. [ 190.650609][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'. [ 190.705975][ T8199] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.576'. [ 191.444710][ T8203] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 191.456291][ T8223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.582'. [ 191.588200][ T8215] bond3: (slave dummy0): Releasing active interface [ 191.684413][ T8215] bridge_slave_0: left allmulticast mode [ 191.729860][ T8215] bridge_slave_0: left promiscuous mode [ 191.759729][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.788506][ C1] net_ratelimit: 33046 callbacks suppressed [ 191.788525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.802889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.811299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.819693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.828035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.836412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.844758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.853116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.861465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.869837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.895969][ T8235] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.914184][ T8215] bridge_slave_1: left allmulticast mode [ 191.954404][ T8215] bridge_slave_1: left promiscuous mode [ 191.976507][ T8215] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.047200][ T8215] bond0: (slave bond_slave_0): Releasing backup interface [ 192.125293][ T8215] bond0: (slave bond_slave_1): Releasing backup interface [ 192.216488][ T8215] team0: Port device team_slave_0 removed [ 192.352404][ T8215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.363747][ T8253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.588'. [ 192.377297][ T8215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.393490][ T8215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.402422][ T8215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.861331][ T8257] netlink: 'syz.2.589': attribute type 31 has an invalid length. [ 193.049226][ T8267] Unsupported ieee802154 address type: 0 [ 193.115354][ T8270] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.593'. [ 194.162521][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.764156][ T8293] syzkaller0: entered promiscuous mode [ 194.795235][ T8293] syzkaller0: entered allmulticast mode [ 195.517300][ T8342] netlink: 'syz.0.605': attribute type 29 has an invalid length. [ 196.798459][ C1] net_ratelimit: 34641 callbacks suppressed [ 196.798480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.812713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.821014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.829292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.837542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.845841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.854116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.862410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.870673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.878932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.532299][ T8349] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 200.612883][ T8352] bridge0: entered allmulticast mode [ 201.042030][ T8360] netlink: 'syz.0.610': attribute type 9 has an invalid length. [ 201.223032][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 201.703109][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 201.808330][ C1] net_ratelimit: 41465 callbacks suppressed [ 201.808349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.822593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.830856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.839108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.847350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.855627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.863897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.872201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.880472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.888741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.721489][ T8409] netlink: 660 bytes leftover after parsing attributes in process `syz.4.627'. [ 203.769329][ T8409] netlink: 76 bytes leftover after parsing attributes in process `syz.4.627'. [ 203.827669][ T29] IPVS: starting estimator thread 0... [ 203.928929][ T8435] IPVS: using max 30 ests per chain, 72000 per kthread [ 204.015322][ T8427] team_slave_1: left promiscuous mode [ 204.126082][ T8427] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 204.158017][ T8438] vlan3: entered promiscuous mode [ 204.396711][ T8452] netlink: 'syz.4.633': attribute type 4 has an invalid length. [ 204.589576][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 204.731193][ T8461] FAULT_INJECTION: forcing a failure. [ 204.731193][ T8461] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.763514][ T8461] CPU: 1 UID: 0 PID: 8461 Comm: syz.1.638 Not tainted syzkaller #0 PREEMPT(full) [ 204.763541][ T8461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 204.763552][ T8461] Call Trace: [ 204.763559][ T8461] [ 204.763568][ T8461] dump_stack_lvl+0xe8/0x150 [ 204.763615][ T8461] should_fail_ex+0x40c/0x560 [ 204.763655][ T8461] prepare_alloc_pages+0x230/0x650 [ 204.763707][ T8461] __alloc_frozen_pages_noprof+0x12f/0x380 [ 204.763743][ T8461] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 204.763779][ T8461] ? __pfx_policy_nodemask+0x10/0x10 [ 204.763808][ T8461] ? __folio_batch_add_and_move+0x11a/0xc50 [ 204.763836][ T8461] ? lock_acquire+0x106/0x350 [ 204.763864][ T8461] alloc_pages_mpol+0x212/0x380 [ 204.763901][ T8461] folio_alloc_mpol_noprof+0x39/0x160 [ 204.763934][ T8461] vma_alloc_folio_noprof+0xe1/0x1e0 [ 204.763963][ T8461] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 204.763994][ T8461] do_wp_page+0x1163/0x4c70 [ 204.764038][ T8461] ? __pfx_do_wp_page+0x10/0x10 [ 204.764058][ T8461] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.764089][ T8461] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 204.764127][ T8461] handle_mm_fault+0x1492/0x3080 [ 204.764169][ T8461] ? handle_mm_fault+0xec/0x3080 [ 204.764203][ T8461] ? __pfx_handle_mm_fault+0x10/0x10 [ 204.764240][ T8461] ? __pfx___up_read+0x10/0x10 [ 204.764271][ T8461] ? lock_mm_and_find_vma+0xa7/0x340 [ 204.764302][ T8461] do_user_addr_fault+0x744/0x1340 [ 204.764340][ T8461] exc_page_fault+0x6a/0xc0 [ 204.764364][ T8461] asm_exc_page_fault+0x26/0x30 [ 204.764383][ T8461] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 204.764411][ T8461] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 204.764427][ T8461] RSP: 0018:ffffc90004437678 EFLAGS: 00050206 [ 204.764445][ T8461] RAX: ffffffff84ad4501 RBX: ffff888050ce00e8 RCX: 000000000000bee0 [ 204.764460][ T8461] RDX: 0000000000000000 RSI: ffff888050ce43d8 RDI: 0000200000055000 [ 204.764473][ T8461] RBP: ffffc90004437800 R08: ffff888050cf02b7 R09: 1ffff1100a19e056 [ 204.764487][ T8461] R10: dffffc0000000000 R11: ffffed100a19e057 R12: 1ffff92000886fbf [ 204.764501][ T8461] R13: 0000200000050d10 R14: ffffc90004437e08 R15: 00000000000101d0 [ 204.764523][ T8461] ? _copy_to_iter+0x171/0x1810 [ 204.764549][ T8461] _copy_to_iter+0x255/0x1810 [ 204.764584][ T8461] ? __pfx__copy_to_iter+0x10/0x10 [ 204.764603][ T8461] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 204.764632][ T8461] ? tipc_wait_for_rcvmsg+0x4f3/0x640 [ 204.764665][ T8461] __skb_datagram_iter+0xf8/0x980 [ 204.764686][ T8461] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 204.764707][ T8461] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 204.764740][ T8461] skb_copy_datagram_iter+0xb5/0x240 [ 204.764767][ T8461] tipc_recvstream+0x6f8/0xe70 [ 204.764817][ T8461] ? __pfx_tipc_recvstream+0x10/0x10 [ 204.764847][ T8461] sock_recvmsg+0x172/0x1b0 [ 204.764878][ T8461] ____sys_recvmsg+0x1e6/0x4a0 [ 204.764908][ T8461] ? __pfx_____sys_recvmsg+0x10/0x10 [ 204.764947][ T8461] ? import_iovec+0x73/0xa0 [ 204.764979][ T8461] ___sys_recvmsg+0x213/0x590 [ 204.764998][ T8461] ? get_pid_task+0x20/0x1f0 [ 204.765020][ T8461] ? get_pid_task+0x20/0x1f0 [ 204.765048][ T8461] ? __pfx____sys_recvmsg+0x10/0x10 [ 204.765075][ T8461] ? __fget_files+0x2a/0x420 [ 204.765118][ T8461] ? __fget_files+0x3a2/0x420 [ 204.765153][ T8461] __x64_sys_recvmsg+0x1ba/0x2a0 [ 204.765178][ T8461] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 204.765210][ T8461] ? __pfx_ksys_write+0x10/0x10 [ 204.765249][ T8461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.765271][ T8461] do_syscall_64+0x174/0x580 [ 204.765292][ T8461] ? trace_irq_disable+0x3b/0x140 [ 204.765321][ T8461] ? clear_bhb_loop+0x40/0x90 [ 204.765345][ T8461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.765364][ T8461] RIP: 0033:0x7f572e19ce59 [ 204.765381][ T8461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.765396][ T8461] RSP: 002b:00007f572eff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 204.765415][ T8461] RAX: ffffffffffffffda RBX: 00007f572e415fa0 RCX: 00007f572e19ce59 [ 204.765428][ T8461] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000003 [ 204.765440][ T8461] RBP: 00007f572eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.765452][ T8461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.765463][ T8461] R13: 00007f572e416038 R14: 00007f572e415fa0 R15: 00007ffef255f6c8 [ 204.765495][ T8461] [ 205.277006][ T8470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.640'. [ 205.293888][ T8470] netlink: 'syz.3.640': attribute type 6 has an invalid length. [ 205.436237][ T8472] netlink: 'syz.3.641': attribute type 1 has an invalid length. [ 205.445923][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.641'. [ 205.966727][ T8499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.648'. [ 206.125192][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 206.152867][ T8505] netlink: 'syz.3.650': attribute type 34 has an invalid length. [ 206.389675][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.651'. [ 206.489352][ T8518] netlink: 'syz.2.654': attribute type 30 has an invalid length. [ 206.516310][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.653'. [ 206.534610][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.653'. [ 206.557731][ T8511] netlink: 6 bytes leftover after parsing attributes in process `syz.3.653'. [ 206.599681][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.653'. [ 206.621080][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.653'. [ 206.642386][ T8513] netlink: 6 bytes leftover after parsing attributes in process `syz.3.653'. [ 206.847823][ T8528] netlink: 'syz.0.656': attribute type 31 has an invalid length. [ 206.922942][ T8531] vti0: entered promiscuous mode [ 206.950249][ T8529] lo: Caught tx_queue_len zero misconfig [ 207.071012][ T8537] net_ratelimit: 13694 callbacks suppressed [ 207.071032][ T8537] netlink: zone id is out of range [ 207.085437][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 207.089248][ T8537] netlink: zone id is out of range [ 207.100127][ T8537] netlink: zone id is out of range [ 207.109776][ T8537] netlink: zone id is out of range [ 207.115088][ T8537] netlink: zone id is out of range [ 207.122845][ T8537] netlink: zone id is out of range [ 207.129504][ T8537] netlink: zone id is out of range [ 207.134828][ T8537] netlink: zone id is out of range [ 207.146190][ T8529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.657'. [ 207.169040][ T8537] netlink: zone id is out of range [ 207.176264][ T8535] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 207.354455][ T8542] netlink: 132 bytes leftover after parsing attributes in process `syz.1.662'. [ 207.430684][ T8546] tipc: Started in network mode [ 207.444276][ T8546] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 207.463539][ T8546] tipc: Enabled bearer , priority 10 [ 208.033069][ T8566] netlink: 'syz.2.670': attribute type 31 has an invalid length. [ 208.057213][ T8570] xfrm0 speed is unknown, defaulting to 1000 [ 208.305639][ T8574] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 208.443931][ T8574] bond4: entered promiscuous mode [ 208.449563][ T8574] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.457134][ T8576] bond4: entered allmulticast mode [ 208.472219][ T5741] tipc: Node number set to 10463914 [ 208.693824][ T8579] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.216942][ T8579] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.375744][ T8579] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.442893][ T8599] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 209.826023][ T8579] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.135980][ T1011] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.223569][ T1011] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.278925][ T1126] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.396727][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.445725][ T8620] netlink: 'syz.1.684': attribute type 11 has an invalid length. [ 210.815683][ T8629] netlink: 'syz.0.687': attribute type 10 has an invalid length. [ 211.502844][ T8653] __nla_validate_parse: 13 callbacks suppressed [ 211.502863][ T8653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.696'. [ 211.553562][ T8654] netlink: 128 bytes leftover after parsing attributes in process `syz.2.696'. [ 211.558841][ T8653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.696'. [ 211.605058][ T8604] Bluetooth: hci1: command 0x0406 tx timeout [ 211.616606][ T8604] Bluetooth: hci0: command 0x0406 tx timeout [ 211.622879][ T8604] Bluetooth: hci3: command 0x0406 tx timeout [ 211.626119][ T5641] Bluetooth: hci2: command 0x0406 tx timeout [ 211.756285][ T8656] syzkaller0: entered promiscuous mode [ 211.762254][ T8656] syzkaller0: entered allmulticast mode [ 212.018752][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.701'. [ 212.348704][ T8678] net_ratelimit: 400 callbacks suppressed [ 212.348724][ T8678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.374521][ T8678] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.702'. [ 212.559820][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.973556][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.897341][ T8673] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 214.070671][ T8684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.704'. [ 214.102289][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 214.738264][ T8713] netlink: 'syz.3.711': attribute type 1 has an invalid length. [ 214.896124][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.711'. [ 214.929712][ T8713] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.123963][ T8719] bond4: (slave veth0_to_bond): making interface the new active one [ 215.179462][ T8719] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 215.253337][ T8726] bond4: entered allmulticast mode [ 215.259056][ T8726] veth0_to_bond: entered allmulticast mode [ 215.317453][ T8713] netlink: 48 bytes leftover after parsing attributes in process `syz.3.711'. [ 215.695259][ T8758] netlink: 40 bytes leftover after parsing attributes in process `syz.2.719'. [ 215.918062][ T8774] FAULT_INJECTION: forcing a failure. [ 215.918062][ T8774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.989406][ T8774] CPU: 1 UID: 0 PID: 8774 Comm: syz.3.723 Not tainted syzkaller #0 PREEMPT(full) [ 215.989432][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 215.989445][ T8774] Call Trace: [ 215.989452][ T8774] [ 215.989461][ T8774] dump_stack_lvl+0xe8/0x150 [ 215.989488][ T8774] should_fail_ex+0x40c/0x560 [ 215.989525][ T8774] _copy_from_user+0x2d/0xb0 [ 215.989548][ T8774] __copy_msghdr+0x382/0x580 [ 215.989575][ T8774] ___sys_sendmsg+0x213/0x360 [ 215.989598][ T8774] ? __lock_acquire+0x683/0x2cd0 [ 215.989624][ T8774] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.989679][ T8774] ? __fget_files+0x2a/0x420 [ 215.989703][ T8774] ? __fget_files+0x3a2/0x420 [ 215.989737][ T8774] __x64_sys_sendmsg+0x1bd/0x2a0 [ 215.989760][ T8774] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.989791][ T8774] ? __pfx_ksys_write+0x10/0x10 [ 215.989827][ T8774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.989848][ T8774] do_syscall_64+0x174/0x580 [ 215.989869][ T8774] ? trace_irq_disable+0x3b/0x140 [ 215.989898][ T8774] ? clear_bhb_loop+0x40/0x90 [ 215.989923][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.989942][ T8774] RIP: 0033:0x7f8ad459ce59 [ 215.989959][ T8774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.989975][ T8774] RSP: 002b:00007f8ad547a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.989995][ T8774] RAX: ffffffffffffffda RBX: 00007f8ad4815fa0 RCX: 00007f8ad459ce59 [ 215.990009][ T8774] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004 [ 215.990021][ T8774] RBP: 00007f8ad547a090 R08: 0000000000000000 R09: 0000000000000000 [ 215.990032][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.990043][ T8774] R13: 00007f8ad4816038 R14: 00007f8ad4815fa0 R15: 00007ffdb7e2ee88 [ 215.990074][ T8774] [ 216.493793][ T8791] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.569929][ T8803] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.595177][ T8798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.610563][ T8798] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 216.646720][ T8807] __nla_validate_parse: 1 callbacks suppressed [ 216.646738][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 216.674827][ T8798] bond3: (slave vti0): Error -95 calling set_mac_address [ 216.792328][ T8807] hsr_slave_0: left promiscuous mode [ 216.824683][ T8807] hsr_slave_1: left promiscuous mode [ 217.060036][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.733'. [ 217.167485][ T8831] sctp: [Deprecated]: syz.2.733 (pid 8831) Use of int in maxseg socket option. [ 217.167485][ T8831] Use struct sctp_assoc_value instead [ 217.190230][ T8828] netlink: 32 bytes leftover after parsing attributes in process `syz.1.732'. [ 217.229986][ T8831] sctp: [Deprecated]: syz.2.733 (pid 8831) Use of int in maxseg socket option. [ 217.229986][ T8831] Use struct sctp_assoc_value instead [ 217.266473][ T8834] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 217.319789][ T8831] sctp: [Deprecated]: syz.2.733 (pid 8831) Use of int in maxseg socket option. [ 217.319789][ T8831] Use struct sctp_assoc_value instead [ 217.329211][ T8827] xfrm0 speed is unknown, defaulting to 1000 [ 217.423799][ T8831] sctp: [Deprecated]: syz.2.733 (pid 8831) Use of int in maxseg socket option. [ 217.423799][ T8831] Use struct sctp_assoc_value instead [ 217.508967][ T8831] sctp: [Deprecated]: syz.2.733 (pid 8831) Use of int in maxseg socket option. [ 217.508967][ T8831] Use struct sctp_assoc_value instead [ 217.588827][ T8831] sctp: [Deprecated]: syz.2.733 (pid 8831) Use of int in maxseg socket option. [ 217.588827][ T8831] Use struct sctp_assoc_value instead [ 217.661935][ T8831] sctp: [Deprecated]: syz.2.733 (pid 8831) Use of int in maxseg socket option. [ 217.661935][ T8831] Use struct sctp_assoc_value instead [ 217.730899][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 217.789566][ T8831] sctp: [Deprecated]: syz.2.733 (pid 8831) Use of int in maxseg socket option. [ 217.789566][ T8831] Use struct sctp_assoc_value instead [ 217.930630][ T8857] netlink: 164 bytes leftover after parsing attributes in process `syz.1.740'. [ 218.074544][ T8865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.741'. [ 219.158527][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 221.957590][ T8905] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 221.964655][ T8905] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 222.507094][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 222.527024][ T8985] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 222.552759][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.754'. [ 222.937962][ T8998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.756'. [ 222.997935][ T9001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.758'. [ 223.014837][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 223.482888][ T9023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.764'. [ 223.539929][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 223.616392][ T9030] ipip0: entered promiscuous mode [ 224.322744][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.776'. [ 224.705451][ T9082] syzkaller0: entered promiscuous mode [ 224.723523][ T9082] syzkaller0: entered allmulticast mode [ 224.780109][ T9085] tipc: New replicast peer: 255.255.255.255 [ 224.791239][ T9085] tipc: Enabled bearer , priority 10 [ 224.808428][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.780'. [ 224.915944][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.780'. [ 225.529826][ T9106] netlink: 'syz.4.785': attribute type 12 has an invalid length. [ 225.687159][ T9110] bond5: ARP target 9.0.0.0 is already present [ 225.694181][ T9110] bond5: option arp_ip_target: invalid value (9) [ 225.706127][ T9110] bond5 (unregistering): Released all slaves [ 225.873543][ T9124] syzkaller0: entered promiscuous mode [ 225.880542][ T9124] syzkaller0: entered allmulticast mode [ 225.929060][ T808] tipc: Node number set to 2657604312 [ 225.996862][ T9130] netlink: 'syz.2.792': attribute type 3 has an invalid length. [ 226.330532][ T808] IPVS: starting estimator thread 0... [ 226.438642][ T9151] IPVS: using max 37 ests per chain, 88800 per kthread [ 226.545904][ T9158] xfrm0 speed is unknown, defaulting to 1000 [ 226.716052][ T9165] syzkaller0: entered promiscuous mode [ 226.723601][ T9165] syzkaller0: entered allmulticast mode [ 227.399158][ T9174] xt_TCPMSS: Only works on TCP SYN packets [ 227.441992][ T9174] 8021q: VLANs not supported on syzkaller1 [ 227.747459][ T9181] syz_tun: entered allmulticast mode [ 227.776765][ T9181] syz_tun (unregistering): left allmulticast mode [ 227.989594][ T9183] syzkaller0: entered promiscuous mode [ 227.995798][ T9183] syzkaller0: entered allmulticast mode [ 228.981301][ T9130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.188270][ T9186] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20001 [ 229.276040][ T9192] netlink: 'syz.0.810': attribute type 2 has an invalid length. [ 229.313972][ T9192] __nla_validate_parse: 3 callbacks suppressed [ 229.313988][ T9192] netlink: 224 bytes leftover after parsing attributes in process `syz.0.810'. [ 229.382983][ T9193] netlink: 48 bytes leftover after parsing attributes in process `syz.0.810'. [ 229.430319][ T9203] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.762102][ T29] hsr0: entered promiscuous mode [ 229.782992][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'. [ 230.189827][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 230.205059][ T9232] : entered promiscuous mode [ 230.370373][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.827'. [ 230.383330][ T9249] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 230.930641][ T9269] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.961702][ T9269] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 231.146471][ T9278] netlink: 'syz.2.835': attribute type 3 has an invalid length. [ 231.164199][ T9278] netlink: 'syz.2.835': attribute type 16 has an invalid length. [ 231.176986][ T9278] netlink: 132 bytes leftover after parsing attributes in process `syz.2.835'. [ 231.194097][ T9280] xt_hashlimit: size too large, truncated to 1048576 [ 231.584078][ T9297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.840'. [ 231.655559][ T9291] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 231.686114][ T9291] bond1: left promiscuous mode [ 231.693032][ T9291] gre1: left promiscuous mode [ 231.700638][ T9291] bond2: left promiscuous mode [ 231.711739][ T9291] ipip0: left promiscuous mode [ 231.729155][ T9291] geneve2: left promiscuous mode [ 231.784510][ T90] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.791577][ T808] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 231.817615][ T90] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.893107][ T90] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.927309][ T90] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.973303][ T12] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 231.987799][ T12] bond3: (slave veth3): making interface the new active one [ 232.022943][ T12] bond3: active interface up! [ 232.250574][ T1126] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 232.403063][ T9324] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.847'. [ 232.441842][ T9325] veth1_to_team: entered promiscuous mode [ 232.461176][ T9325] veth1_to_team: entered allmulticast mode [ 232.563771][ T808] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 232.659416][ T9330] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 232.689401][ T9330] netlink: 96 bytes leftover after parsing attributes in process `syz.1.848'. [ 232.717916][ T9329] xfrm0 speed is unknown, defaulting to 1000 [ 232.725352][ T9338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.848'. [ 233.278937][ T7163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 233.308773][ T7163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 233.524507][ T9340] xfrm0 speed is unknown, defaulting to 1000 [ 234.078506][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.193501][ T9380] netlink: 'syz.3.857': attribute type 26 has an invalid length. [ 234.557002][ T9384] __nla_validate_parse: 4 callbacks suppressed [ 234.557020][ T9384] netlink: 1 bytes leftover after parsing attributes in process `syz.4.858'. [ 235.218264][ T9397] gretap1: entered promiscuous mode [ 235.813611][ T5657] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 235.825005][ T5657] CPU: 1 UID: 0 PID: 5657 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 235.825030][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 235.825041][ T5657] Call Trace: [ 235.825049][ T5657] [ 235.825057][ T5657] dump_stack_lvl+0xe8/0x150 [ 235.825082][ T5657] dump_header+0xd3/0x4b0 [ 235.825115][ T5657] oom_kill_process+0x3ab/0x970 [ 235.825144][ T5657] out_of_memory+0x1064/0x1480 [ 235.825166][ T5657] ? try_charge_memcg+0xbca/0x1590 [ 235.825205][ T5657] ? __pfx_out_of_memory+0x10/0x10 [ 235.825227][ T5657] ? do_raw_spin_unlock+0xf5/0x210 [ 235.825264][ T5657] try_charge_memcg+0xc74/0x1590 [ 235.825294][ T5657] ? __lock_acquire+0x683/0x2cd0 [ 235.825324][ T5657] ? __pfx_try_charge_memcg+0x10/0x10 [ 235.825370][ T5657] ? charge_memcg+0x20/0x2b0 [ 235.825399][ T5657] charge_memcg+0x19c/0x2b0 [ 235.825427][ T5657] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 235.825460][ T5657] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 235.825492][ T5657] __swap_cache_prepare_and_add+0xdd/0x700 [ 235.825520][ T5657] ? page_rmappable_folio+0x9a/0x170 [ 235.825546][ T5657] swap_cache_alloc_folio+0xf1/0x240 [ 235.825572][ T5657] swap_cluster_readahead+0x355/0x670 [ 235.825602][ T5657] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 235.825638][ T5657] ? get_vma_policy+0x27b/0x3c0 [ 235.825670][ T5657] swapin_readahead+0x196/0xc50 [ 235.825697][ T5657] ? swap_table_get+0x1e/0x260 [ 235.825722][ T5657] ? __pfx_swapin_readahead+0x10/0x10 [ 235.825747][ T5657] ? swap_table_get+0x1e/0x260 [ 235.825767][ T5657] ? swap_table_get+0x1e/0x260 [ 235.825784][ T5657] ? swap_table_get+0x1e/0x260 [ 235.825806][ T5657] ? swap_table_get+0x216/0x260 [ 235.825827][ T5657] ? swap_cache_get_folio+0x2ea/0x2f0 [ 235.825854][ T5657] do_swap_page+0x545/0x5340 [ 235.825897][ T5657] ? __pte_offset_map+0x29/0x240 [ 235.825935][ T5657] ? do_swap_page+0x128/0x5340 [ 235.825962][ T5657] ? __pfx_do_swap_page+0x10/0x10 [ 235.825983][ T5657] ? __pte_offset_map+0x1ae/0x240 [ 235.826011][ T5657] ? pte_offset_map_rw_nolock+0xea/0x160 [ 235.826040][ T5657] handle_mm_fault+0x124e/0x3080 [ 235.826079][ T5657] ? handle_mm_fault+0xec/0x3080 [ 235.826112][ T5657] ? __pfx_handle_mm_fault+0x10/0x10 [ 235.826135][ T5657] ? lock_vma_under_rcu+0x45a/0x500 [ 235.826204][ T5657] do_user_addr_fault+0xa4d/0x1340 [ 235.826237][ T5657] ? trace_page_fault_user+0x84/0x1e0 [ 235.826261][ T5657] exc_page_fault+0x6a/0xc0 [ 235.826284][ T5657] asm_exc_page_fault+0x26/0x30 [ 235.826303][ T5657] RIP: 0033:0x7f8ad455d68e [ 235.826322][ T5657] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.826338][ T5657] RSP: 002b:00007ffdb7e2f168 EFLAGS: 00010246 [ 235.826355][ T5657] RAX: 0000000000000000 RBX: 00005555771ce500 RCX: 00007f8ad455d68e [ 235.826368][ T5657] RDX: 00007ffdb7e2f1c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.826380][ T5657] RBP: 00007ffdb7e2f22c R08: 0000000000000000 R09: 0000000000000000 [ 235.826392][ T5657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 235.826403][ T5657] R13: 00000000000927c0 R14: 00000000000395e4 R15: 00007ffdb7e2f280 [ 235.826435][ T5657] [ 235.826555][ T5657] memory: usage 307200kB, limit 307200kB, failcnt 540 [ 236.159792][ T5657] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 236.167814][ T5657] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 236.175240][ T5657] Memory cgroup stats for /syz3: [ 236.175511][ T5657] cache 0 [ 236.185415][ T5657] rss 0 [ 236.188450][ T5657] rss_huge 0 [ 236.191858][ T5657] shmem 0 [ 236.194880][ T5657] mapped_file 0 [ 236.198727][ T5657] dirty 0 [ 236.201770][ T5657] writeback 0 [ 236.205219][ T5657] workingset_refault_anon 2 [ 236.210954][ T5657] workingset_refault_file 0 [ 236.215563][ T5657] swap 196608 [ 236.219155][ T5657] swapcached 212992 [ 236.223100][ T5657] pgpgin 37218 [ 236.226567][ T5657] pgpgout 37216 [ 236.230604][ T5657] pgfault 48372 [ 236.234195][ T5657] pgmajfault 3 [ 236.247530][ T5657] inactive_anon 8192 [ 236.251793][ T5657] active_anon 0 [ 236.255312][ T5657] inactive_file 0 [ 236.259488][ T5657] active_file 0 [ 236.263003][ T5657] unevictable 0 [ 236.266483][ T5657] hierarchical_memory_limit 314572800 [ 236.272415][ T5657] hierarchical_memsw_limit 9223372036854771712 [ 236.278841][ T5657] total_cache 0 [ 236.282353][ T5657] total_rss 0 [ 236.286430][ T5657] total_rss_huge 0 [ 236.294628][ T5657] total_shmem 0 [ 236.298137][ T5657] total_mapped_file 0 [ 236.302973][ T5657] total_dirty 0 [ 236.306517][ T5657] total_writeback 0 [ 236.310821][ T5657] total_workingset_refault_anon 2 [ 236.315935][ T5657] total_workingset_refault_file 0 [ 236.321694][ T5657] total_swap 196608 [ 236.325586][ T5657] total_swapcached 212992 [ 236.330814][ T5657] total_pgpgin 37218 [ 236.334824][ T5657] total_pgpgout 37216 [ 236.339407][ T5657] total_pgfault 48372 [ 236.343580][ T5657] total_pgmajfault 3 [ 236.347573][ T5657] total_inactive_anon 8192 [ 236.352854][ T5657] total_active_anon 0 [ 236.356999][ T5657] total_inactive_file 0 [ 236.361701][ T5657] total_active_file 0 [ 236.365778][ T5657] total_unevictable 0 [ 236.370338][ T5657] anon_cost 0 [ 236.373730][ T5657] file_cost 0 [ 236.377134][ T5657] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.861,pid=9393,uid=0 [ 236.396865][ T5657] Memory cgroup out of memory: Killed process 9393 (syz.3.861) total-vm:102292kB, anon-rss:1240kB, file-rss:23244kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 236.903213][ T9375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.264550][ T9431] netlink: 'syz.1.871': attribute type 11 has an invalid length. [ 237.358489][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.810009][ T9460] veth1_to_bond: entered allmulticast mode [ 237.837881][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'. [ 237.892524][ T9460] veth1_to_bond (unregistering): left allmulticast mode [ 238.335094][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 238.369472][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 238.398453][ T9475] netlink: 1 bytes leftover after parsing attributes in process `syz.4.880'. [ 238.407680][ T9474] netlink: 'syz.3.876': attribute type 11 has an invalid length. [ 238.420117][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 238.733210][ T9485] SET target dimension over the limit! [ 238.899826][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 238.935873][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 238.968503][ T9494] netlink: 1 bytes leftover after parsing attributes in process `syz.4.885'. [ 239.072116][ T9494] netlink: 'syz.4.885': attribute type 2 has an invalid length. [ 239.114266][ T9494] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 239.133034][ T9494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.314749][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 240.877950][ T7163] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.906796][ T7163] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.944566][ T7163] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 240.998947][ T7163] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.028080][ T7163] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.054878][ T7163] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 241.284062][ T7163] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.313848][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 241.345812][ T7163] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.404518][ T7163] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 241.458260][ T7163] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.484969][ T7163] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.527156][ T7163] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 241.739751][ T9577] dvmrp0: entered allmulticast mode [ 241.790778][ T9578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.900'. [ 242.281592][ T9603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.907'. [ 242.433650][ T9611] ip6tnl0: Caught tx_queue_len zero misconfig [ 242.452963][ T9607] syzkaller1: entered promiscuous mode [ 242.460190][ T9611] netlink: 32 bytes leftover after parsing attributes in process `syz.1.911'. [ 242.469705][ T9607] syzkaller1: entered allmulticast mode [ 242.596750][ T9611] tipc: Enabling of bearer rejected, failed to enable media [ 242.684586][ T9617] netlink: 80 bytes leftover after parsing attributes in process `syz.0.913'. [ 243.059309][ T9627] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.141427][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 243.194871][ T9631] xfrm0 speed is unknown, defaulting to 1000 [ 243.310706][ T9637] netlink: 48 bytes leftover after parsing attributes in process `syz.1.920'. [ 243.439598][ T9641] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 243.627405][ T9649] syzkaller0: entered promiscuous mode [ 243.646402][ T9649] syzkaller0: entered allmulticast mode [ 243.663794][ T9649] tipc: Enabled bearer , priority 0 [ 243.672501][ T9648] tipc: Resetting bearer [ 243.707662][ T9648] tipc: Disabling bearer [ 243.840893][ T9654] netlink: 32 bytes leftover after parsing attributes in process `syz.4.927'. [ 243.905858][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.927'. [ 243.913477][ T9654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.927'. [ 244.097810][ T9667] netlink: 'syz.4.932': attribute type 1 has an invalid length. [ 244.297954][ T9667] bond4: entered promiscuous mode [ 244.304638][ T9667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.343634][ T9666] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.354149][ T9666] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 244.365311][ T9666] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 244.395319][ T9666] bond4: (slave ip6gre1): making interface the new active one [ 244.407795][ T9666] ip6gre1: entered promiscuous mode [ 244.415840][ T9666] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 244.740989][ T9692] ip6gre1: entered promiscuous mode [ 244.750458][ T9695] xt_TPROXY: Can be used only with -p tcp or -p udp [ 244.758444][ T9692] ip6gre1: entered allmulticast mode [ 244.801631][ T9697] gretap1: entered allmulticast mode [ 244.836226][ T9693] netlink: 'syz.4.937': attribute type 1 has an invalid length. [ 245.024221][ T9692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.043307][ T9692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.358262][ T9707] tipc: Started in network mode [ 245.365209][ T9707] tipc: Node identity ac14140f, cluster identity 4711 [ 245.373147][ T9707] tipc: New replicast peer: 255.255.255.255 [ 245.379921][ T9707] tipc: Enabled bearer , priority 10 [ 245.407876][ T9709] netlink: 'syz.0.943': attribute type 3 has an invalid length. [ 245.895997][ T9728] syzkaller0: entered promiscuous mode [ 245.919458][ T9728] syzkaller0: entered allmulticast mode [ 246.070204][ T9740] netlink: 'syz.4.950': attribute type 1 has an invalid length. [ 246.129959][ T9728] tipc: Enabled bearer , priority 0 [ 246.231512][ T9740] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.272766][ T9727] tipc: Resetting bearer [ 246.299863][ T9727] tipc: Disabling bearer [ 246.322186][ T9749] bond5: (slave geneve3): making interface the new active one [ 246.334333][ T9749] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 246.343447][ T9751] netlink: 'syz.1.953': attribute type 6 has an invalid length. [ 246.352654][ T9751] netlink: 'syz.1.953': attribute type 7 has an invalid length. [ 246.360501][ T9751] netlink: 'syz.1.953': attribute type 8 has an invalid length. [ 246.385315][ T9754] veth0_macvtap: Caught tx_queue_len zero misconfig [ 246.399865][ T1011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.425172][ T1011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.473792][ T29] tipc: Node number set to 2886997007 [ 246.520581][ T1011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.543508][ T1011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.598153][ T9762] netlink: 'syz.4.956': attribute type 1 has an invalid length. [ 246.710983][ T9762] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.860403][ T9762] bond6: (slave gretap1): making interface the new active one [ 246.879027][ T9762] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 246.946973][ T9777] netlink: 'syz.1.963': attribute type 2 has an invalid length. [ 247.121955][ T9790] syzkaller0: entered promiscuous mode [ 247.136650][ T9790] syzkaller0: entered allmulticast mode [ 247.559368][ T9806] __nla_validate_parse: 11 callbacks suppressed [ 247.559391][ T9806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.970'. [ 248.052380][ T9834] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 248.904311][ T9867] syzkaller0: entered promiscuous mode [ 248.909980][ T9867] syzkaller0: entered allmulticast mode [ 249.027775][ T1170] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 249.048147][ T5292] veth0_vlan: left promiscuous mode [ 249.081987][ T5292] veth0_vlan: entered promiscuous mode [ 249.451376][ T9890] netlink: 160 bytes leftover after parsing attributes in process `syz.3.986'. [ 249.488120][ T9890] netlink: 'syz.3.986': attribute type 11 has an invalid length. [ 251.020073][ T9936] netlink: 48 bytes leftover after parsing attributes in process `syz.2.996'. [ 251.037182][ T9941] syzkaller0: entered promiscuous mode [ 251.059633][ T9941] syzkaller0: entered allmulticast mode [ 251.267148][ T9947] syzkaller0: entered promiscuous mode [ 251.306789][ T9947] syzkaller0: entered allmulticast mode [ 251.346419][ T9958] tipc: Enabled bearer , priority 0 [ 251.404328][ T9947] tipc: Resetting bearer [ 251.622412][ T9969] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1003'. [ 251.665791][ T9969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1003'. [ 251.705145][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1003'. [ 252.055888][ T9980] veth1_to_team: left promiscuous mode [ 252.100696][ T9980] veth1_to_team: left allmulticast mode [ 252.248211][ T9980] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 252.292218][ T9980] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.395972][ T9980] ip6tnl1: left allmulticast mode [ 252.459964][ T9980] hsr1: left allmulticast mode [ 252.488097][ T9980] dummy0: left allmulticast mode [ 252.519275][ T9980] gretap0: left allmulticast mode [ 252.597578][ T9980] ip6gre1: left promiscuous mode [ 252.622723][ T9980] ip6gre1: left allmulticast mode [ 253.136011][ T9943] tipc: Resetting bearer [ 253.257070][ T9943] tipc: Disabling bearer [ 253.618224][T10008] syzkaller0: entered promiscuous mode [ 253.645083][T10008] syzkaller0: entered allmulticast mode [ 254.001902][T10028] tipc: Enabling of bearer rejected, failed to enable media [ 254.150269][T10035] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1017'. [ 254.191304][T10031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1018'. [ 254.212755][T10031] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1018'. [ 254.456066][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 254.669962][T10016] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1015'. [ 254.708021][T10016] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1015'. [ 255.529597][T10052] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1022'. [ 255.605574][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.011091][T10080] lo: Caught tx_queue_len zero misconfig [ 256.257253][T10073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.420594][T10095] tipc: Enabling of bearer rejected, failed to enable media [ 256.630502][T10073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.760012][T10121] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1032'. [ 256.952647][T10073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.137836][T10073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.410658][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.469212][T10133] xt_CT: No such helper "snmp" [ 257.494816][ T1126] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.559469][ T1126] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.606586][ T1126] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.821290][T10141] geneve1: entered promiscuous mode [ 257.875068][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1040'. [ 257.914450][T10145] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.925665][T10156] batadv_slave_0: Caught tx_queue_len zero misconfig [ 257.960586][T10152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1040'. [ 257.978599][T10150] siw: device registration error -23 [ 257.992118][T10141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.044285][T10145] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.084142][T10145] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.102477][T10145] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 258.120377][T10162] syzkaller0: entered promiscuous mode [ 258.125929][T10162] syzkaller0: entered allmulticast mode [ 258.136796][T10164] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 258.148188][T10145] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 258.174504][T10162] tipc: Enabled bearer , priority 0 [ 258.188601][T10145] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 258.201214][T10161] tipc: Resetting bearer [ 258.260126][T10145] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 258.282955][T10161] tipc: Disabling bearer [ 258.343140][T10145] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 258.424053][T10145] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.451278][T10145] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.467767][T10145] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.481279][T10145] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.493774][T10145] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.503464][T10176] tipc: Enabling of bearer rejected, failed to enable media [ 258.933277][T10197] xt_TCPMSS: Only works on TCP SYN packets [ 259.164905][T10210] __nla_validate_parse: 6 callbacks suppressed [ 259.164950][T10210] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.1053'. [ 259.198628][T10210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1053'. [ 259.224022][T10210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1053'. [ 259.440610][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 259.635475][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 259.647974][T10228] netlink: 'syz.2.1061': attribute type 21 has an invalid length. [ 259.864717][T10237] tipc: Enabling of bearer rejected, failed to enable media [ 259.925777][T10240] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1064'. [ 260.004198][T10245] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1063'. [ 260.126409][T10250] xfrm0: Caught tx_queue_len zero misconfig [ 260.376610][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1069'. [ 260.430642][T10265] sctp: [Deprecated]: syz.3.1068 (pid 10265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.430642][T10265] Use struct sctp_sack_info instead [ 260.463663][T10267] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1069'. [ 260.503042][T10269] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 260.513819][T10267] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 260.524154][T10269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.547601][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 260.736120][T10280] netlink: 'syz.0.1071': attribute type 1 has an invalid length. [ 260.770303][T10280] 8021q: adding VLAN 0 to HW filter on device bond6 [ 260.797604][T10280] syzkaller0: entered promiscuous mode [ 260.804345][T10280] syzkaller0: entered allmulticast mode [ 260.942311][T10280] bond6: (slave veth5): Enslaving as an active interface with a down link [ 260.972881][T10286] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 260.984066][T10286] bond6: (slave batadv1): making interface the new active one [ 260.994267][T10286] batadv1: entered promiscuous mode [ 261.000812][T10286] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 261.397789][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1077'. [ 261.491907][T10311] tipc: Enabling of bearer rejected, failed to enable media [ 261.949592][T10341] syzkaller0: entered promiscuous mode [ 261.988139][T10341] syzkaller0: entered allmulticast mode [ 262.022225][T10342] tipc: Enabled bearer , priority 10 [ 262.091733][T10341] tipc: Enabled bearer , priority 0 [ 262.175998][T10353] xfrm0: Caught tx_queue_len zero misconfig [ 262.606710][T10327] tipc: Resetting bearer [ 262.743150][T10327] tipc: Disabling bearer [ 263.019394][ T9553] tipc: Node number set to 66507849 [ 264.056549][T10420] tipc: Enabling of bearer rejected, failed to enable media [ 264.222833][T10427] __nla_validate_parse: 9 callbacks suppressed [ 264.222854][T10427] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1097'. [ 264.434976][T10435] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1101'. [ 264.784608][T10443] veth0_macvtap: Caught tx_queue_len zero misconfig [ 265.140968][T10458] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1109'. [ 265.318051][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 265.346975][T10465] syzkaller0: entered promiscuous mode [ 265.361417][T10465] syzkaller0: entered allmulticast mode [ 265.402608][T10465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1110'. [ 265.425370][T10468] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 265.456866][T10468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1111'. [ 265.474199][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 265.506320][T10474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1112'. [ 265.580162][T10474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1112'. [ 265.833013][T10485] netlink: 'syz.1.1115': attribute type 21 has an invalid length. [ 265.861775][T10485] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.901382][T10493] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1114'. [ 265.926930][T10491] netlink: 'syz.1.1115': attribute type 21 has an invalid length. [ 265.939065][T10485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.946337][T10485] IPv6: NLM_F_CREATE should be set when creating new route [ 265.953663][T10485] IPv6: NLM_F_CREATE should be set when creating new route [ 265.960969][T10485] IPv6: NLM_F_CREATE should be set when creating new route [ 265.971529][T10491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.000085][T10492] 8021q: VLANs not supported on ip_vti0 [ 266.369121][T10508] netlink: 'syz.1.1120': attribute type 3 has an invalid length. [ 266.586851][T10516] ip6gre3: entered promiscuous mode [ 266.603086][T10516] ip6gre3: entered allmulticast mode [ 266.834323][T10524] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20004 [ 266.957502][T10526] sctp: [Deprecated]: syz.2.1126 (pid 10526) Use of int in max_burst socket option deprecated. [ 266.957502][T10526] Use struct sctp_assoc_value instead [ 267.614886][T10552] Cannot find set identified by id 65534 to match [ 268.056152][T10564] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 268.997206][T10564] netlink: 'syz.4.1134': attribute type 10 has an invalid length. [ 269.031484][T10564] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 269.059786][T10564] team0: Port device netdevsim1 added [ 269.183000][T10606] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 269.411628][T10589] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 269.702972][T10622] syzkaller0: entered promiscuous mode [ 269.724342][T10622] syzkaller0: entered allmulticast mode [ 269.787953][T10622] tipc: Enabled bearer , priority 0 [ 270.015419][T10635] netlink: 'syz.4.1155': attribute type 16 has an invalid length. [ 270.029888][T10637] __nla_validate_parse: 7 callbacks suppressed [ 270.029905][T10637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1156'. [ 270.054820][T10635] netlink: 55946 bytes leftover after parsing attributes in process `syz.4.1155'. [ 270.359991][T10651] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1160'. [ 270.415852][T10655] vlan0: entered promiscuous mode [ 270.432651][T10656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1161'. [ 270.469135][T10618] tipc: Resetting bearer [ 270.476399][T10651] netlink: 'syz.1.1160': attribute type 1 has an invalid length. [ 270.529987][T10618] tipc: Disabling bearer [ 270.592056][T10661] netlink: 'syz.1.1160': attribute type 3 has an invalid length. [ 270.607761][T10661] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1160'. [ 270.756003][T10661] 8021q: adding VLAN 0 to HW filter on device bond7 [ 270.806878][T10661] bond6: (slave bond7): making interface the new active one [ 270.825512][T10661] bond6: (slave bond7): Enslaving as an active interface with an up link [ 270.860634][T10664] veth0: entered promiscuous mode [ 270.867119][T10655] xfrm0 speed is unknown, defaulting to 1000 [ 271.370517][T10673] syzkaller0: entered promiscuous mode [ 271.390101][T10673] syzkaller0: entered allmulticast mode [ 271.710797][T10663] veth0: left promiscuous mode [ 271.884610][T10655] virt_wifi0 speed is unknown, defaulting to 1000 [ 272.251856][T10688] bond8: entered promiscuous mode [ 272.391651][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1168'. [ 272.640459][ T12] batadv1: left promiscuous mode [ 272.690557][T10699] IPv6: NLM_F_CREATE should be specified when creating new route [ 273.186610][T10708] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 273.581321][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'. [ 274.244447][T10747] bond0: Caught tx_queue_len zero misconfig [ 274.536789][T10757] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1186'. [ 274.996262][T10771] netlink: 'syz.4.1190': attribute type 13 has an invalid length. [ 275.074363][T10778] netlink: 'syz.1.1193': attribute type 3 has an invalid length. [ 275.091324][T10774] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 275.201284][T10771] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 275.254125][T10771] syzkaller0: entered promiscuous mode [ 275.277598][T10771] syzkaller0: entered allmulticast mode [ 275.304106][T10793] lo: Caught tx_queue_len zero misconfig [ 275.310971][T10793] netlink: 'syz.2.1196': attribute type 14 has an invalid length. [ 275.502274][T10804] netlink: 'syz.3.1199': attribute type 3 has an invalid length. [ 275.660858][T10811] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1201'. [ 275.702384][T10811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1201'. [ 275.791494][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 275.878668][T10820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'. [ 275.903671][T10820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'. [ 275.919722][T10820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'. [ 275.930882][T10820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'. [ 275.941492][T10820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'. [ 275.974764][T10820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'. [ 275.999421][T10820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'. [ 276.025184][T10826] netlink: 'syz.2.1206': attribute type 7 has an invalid length. [ 276.033963][T10826] IPVS: Unknown mcast interface: bridge_slav [ 276.121752][T10826] syzkaller1: entered promiscuous mode [ 276.140447][T10826] syzkaller1: entered allmulticast mode [ 276.703533][T10863] netlink: 'syz.2.1215': attribute type 4 has an invalid length. [ 276.779582][T10866] syzkaller0: entered promiscuous mode [ 276.792237][T10866] syzkaller0: entered allmulticast mode [ 276.817429][T10866] tipc: Enabled bearer , priority 0 [ 276.836767][T10865] tipc: Resetting bearer [ 276.902553][T10865] tipc: Disabling bearer [ 277.093886][T10875] netlink: 'syz.0.1219': attribute type 21 has an invalid length. [ 277.108852][T10875] netlink: 'syz.0.1219': attribute type 4 has an invalid length. [ 277.131343][T10875] netlink: 'syz.0.1219': attribute type 5 has an invalid length. [ 277.141853][T10880] xt_cgroup: invalid path, errno=-2 [ 277.310403][T10881] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 277.782151][T10909] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 277.813567][T10909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.939914][T10915] syzkaller1: entered promiscuous mode [ 277.963043][T10915] syzkaller1: entered allmulticast mode [ 278.843301][T10917] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 278.866921][T10917] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 278.987621][T10969] syzkaller1: entered promiscuous mode [ 279.009615][T10917] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 279.023176][T10969] syzkaller1: entered allmulticast mode [ 279.032490][T10917] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 279.120343][T10917] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.148963][T10917] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 279.227471][T10917] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 279.252188][T10917] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 279.288007][T10981] openvswitch: netlink: Multiple metadata blocks provided [ 279.315438][T10917] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 279.340685][T10917] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 279.710177][T11002] geneve0: entered promiscuous mode [ 279.877407][T10996] xfrm0 speed is unknown, defaulting to 1000 [ 280.172010][ T9553] IPVS: starting estimator thread 0... [ 280.289574][T11015] syzkaller0: entered promiscuous mode [ 280.299017][T11029] IPVS: using max 28 ests per chain, 67200 per kthread [ 280.333247][T11015] syzkaller0: entered allmulticast mode [ 280.998256][T10996] virt_wifi0 speed is unknown, defaulting to 1000 [ 281.250538][T11076] __nla_validate_parse: 111 callbacks suppressed [ 281.250557][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 281.383898][T11076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1265'. [ 282.349928][T11100] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 282.505157][T11134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1274'. [ 282.563668][T11134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1274'. [ 282.610515][T11135] IPv6: NLM_F_REPLACE set, but no existing node found! [ 282.653064][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 282.697418][T11134] geneve4: entered promiscuous mode [ 283.495646][T11172] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1284'. [ 283.563227][T11176] lo: entered allmulticast mode [ 283.796330][T11185] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.1288'. [ 283.869182][T11185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1288'. [ 283.909717][T11185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1288'. [ 283.935400][T11190] lo: Caught tx_queue_len zero misconfig [ 283.970245][T11195] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1291'. [ 284.634401][ T50] block nbd1: Receive control failed (result -1) [ 286.288649][T11289] validate_nla: 3 callbacks suppressed [ 286.288666][T11289] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 286.314392][T11289] dummy0: left promiscuous mode [ 286.367810][T11295] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 286.370106][T11290] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 286.412378][T11289] team0: Port device dummy0 added [ 286.506131][T11301] __nla_validate_parse: 4 callbacks suppressed [ 286.506150][T11301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1318'. [ 286.552693][T11303] openvswitch: netlink: Key 32 has unexpected len 16 expected 2 [ 286.600078][T11290] team0: Port device dummy0 removed [ 286.633807][T11290] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 286.905169][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1323'. [ 286.992438][T11310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1325'. [ 287.532884][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'. [ 287.562296][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'. [ 287.600758][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.690632][T11345] xfrm0 speed is unknown, defaulting to 1000 [ 287.815531][T11350] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1338'. [ 288.047396][T11363] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1341'. [ 288.145682][T11345] virt_wifi0 speed is unknown, defaulting to 1000 [ 288.157772][T11350] siw: device registration error -23 [ 288.203606][T11369] nbd: nbd0 already in use [ 288.221330][T11369] block nbd1: NBD_DISCONNECT [ 288.252265][T11369] block nbd1: Send disconnect failed -22 [ 288.325636][T11369] block nbd1: shutting down sockets [ 288.623223][T11371] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 288.879698][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.143980][T11451] IPVS: length: 35 != 24 [ 290.801878][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.929306][T11489] netlink: 'syz.2.1374': attribute type 10 has an invalid length. [ 290.931106][T11491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1373'. [ 290.966974][T11489] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1374'. [ 291.005996][T11491] veth7: entered allmulticast mode [ 291.012144][T11497] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1372'. [ 291.296590][T11505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.303937][T11505] IPv6: NLM_F_CREATE should be set when creating new route [ 291.311252][T11505] IPv6: NLM_F_CREATE should be set when creating new route [ 292.081749][ T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.341831][T11555] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 292.617850][T11571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1396'. [ 292.724180][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.812162][T11586] netlink: 207 bytes leftover after parsing attributes in process `syz.1.1400'. [ 292.833068][T11586] netlink: 'syz.1.1400': attribute type 3 has an invalid length. [ 292.926017][T11571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 293.017208][T11594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1401'. [ 293.160859][T11594] team0: Port device netdevsim1 removed [ 293.226682][T11594] team0: Port device netdevsim2 removed [ 293.257554][T11594] bond1: (slave gre1): Releasing backup interface [ 293.284488][T11594] bond2: (slave ipip0): Releasing backup interface [ 293.296850][T11594] bond3: (slave veth3): Releasing active interface [ 293.308027][T11594] bond4: (slave ip6gre1): Releasing backup interface [ 293.315286][T11594] ip6gre1: left promiscuous mode [ 293.342674][T11594] bond5: (slave geneve3): Releasing active interface [ 293.380981][T11594] bond6: (slave gretap1): Releasing active interface [ 293.413090][T11599] team0: Mode changed to "roundrobin" [ 293.423722][T11605] vlan0: entered promiscuous mode [ 293.432460][ T157] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.449116][ T157] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.478446][ T157] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.516578][ T157] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.613356][T11619] sctp: [Deprecated]: syz.4.1408 (pid 11619) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.613356][T11619] Use struct sctp_sack_info instead [ 293.962226][T11634] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1410'. [ 294.000065][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.346272][T11644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.359707][T11643] veth0_to_bridge: entered promiscuous mode [ 294.367902][T11643] macvtap1: entered allmulticast mode [ 294.381652][T11643] veth0_to_bridge: entered allmulticast mode [ 294.393387][T11643] veth0_to_bridge: left allmulticast mode [ 294.404934][T11643] veth0_to_bridge: left promiscuous mode [ 294.829107][T11655] netlink: 'syz.1.1416': attribute type 3 has an invalid length. [ 294.863143][T11655] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1416'. [ 294.946182][T11660] netlink: 'syz.4.1419': attribute type 10 has an invalid length. [ 294.981265][T11660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 295.014306][T11660] team0: Port device netdevsim1 added [ 295.032632][T11658] tipc: Enabled bearer , priority 0 [ 295.060521][T11657] tipc: Disabling bearer [ 295.263823][T11669] netlink: 'syz.1.1423': attribute type 11 has an invalid length. [ 296.388210][T11700] syzkaller0: entered promiscuous mode [ 296.403021][T11700] syzkaller0: entered allmulticast mode [ 296.417514][T11708] tipc: Enabled bearer , priority 0 [ 296.439021][T11704] tipc: Disabling bearer [ 296.665502][T11714] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.1436'. [ 296.690062][T11714] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 296.973038][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1438'. [ 297.845184][ T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.117285][T11723] tunl0: Caught tx_queue_len zero misconfig [ 299.392348][T11746] netlink: 'syz.4.1440': attribute type 9 has an invalid length. [ 299.400972][T11746] netlink: 'syz.4.1440': attribute type 6 has an invalid length. [ 299.410500][T11746] netlink: 'syz.4.1440': attribute type 7 has an invalid length. [ 299.418754][T11746] netlink: 'syz.4.1440': attribute type 8 has an invalid length. [ 299.622146][T11748] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1443'. [ 299.721690][T11756] tipc: Enabled bearer , priority 0 [ 299.760663][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.769478][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.932084][T11769] netlink: 'syz.1.1448': attribute type 3 has an invalid length. [ 300.102030][T11778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.121506][T11782] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 300.665632][T11823] sctp: [Deprecated]: syz.2.1461 (pid 11823) Use of int in maxseg socket option. [ 300.665632][T11823] Use struct sctp_assoc_value instead [ 300.758700][T11824] nbd3: detected capacity change from 0 to 63 [ 300.770338][T11819] block nbd3: NBD_DISCONNECT [ 300.797254][T11819] block nbd3: Disconnected due to user request. [ 300.822435][T11819] block nbd3: shutting down sockets [ 300.854490][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.863797][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 300.884211][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.893362][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 300.901229][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.910311][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 300.918138][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.927216][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 300.935117][ T8400] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.953593][ T8400] Buffer I/O error on dev nbd3, logical block 0, async page read [ 300.966916][ T8400] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.994969][ T8400] Buffer I/O error on dev nbd3, logical block 1, async page read [ 301.013436][ T8400] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.026364][ T8400] Buffer I/O error on dev nbd3, logical block 2, async page read [ 301.046067][T11824] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 301.063110][ T8400] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.077844][ T9523] tipc: Node number set to 3797785240 [ 301.085903][ T8400] Buffer I/O error on dev nbd3, logical block 3, async page read [ 301.108161][ T8400] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.152503][ T8400] Buffer I/O error on dev nbd3, logical block 0, async page read [ 301.171261][ T8400] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.205619][ T8400] Buffer I/O error on dev nbd3, logical block 1, async page read [ 301.226614][ T8400] ldm_validate_partition_table(): Disk read failed. [ 301.237011][ T8400] Dev nbd3: unable to read RDB block 0 [ 301.246498][ T8400] nbd3: unable to read partition table [ 301.339171][ T8400] ldm_validate_partition_table(): Disk read failed. [ 301.360395][ T8400] Dev nbd3: unable to read RDB block 0 [ 301.384752][ T8400] nbd3: unable to read partition table [ 301.420034][T11845] [ 301.422423][T11845] ====================================================== [ 301.429472][T11845] WARNING: possible circular locking dependency detected [ 301.436522][T11845] syzkaller #0 Not tainted [ 301.440961][T11845] ------------------------------------------------------ [ 301.448004][T11845] syz.1.1465/11845 is trying to acquire lock: [ 301.454093][T11845] ffffffff8ea84d80 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 301.463463][T11845] [ 301.463463][T11845] but task is already holding lock: [ 301.470848][T11845] ffff888035e92530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 301.480114][T11845] [ 301.480114][T11845] which lock already depends on the new lock. [ 301.480114][T11845] [ 301.490572][T11845] [ 301.490572][T11845] the existing dependency chain (in reverse order) is: [ 301.499612][T11845] [ 301.499612][T11845] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 301.507197][T11845] __mutex_lock+0x19d/0x1590 [ 301.512353][T11845] __ipv6_dev_mc_inc+0x4e/0xa40 [ 301.517749][T11845] addrconf_join_solict+0x104/0x190 [ 301.523483][T11845] __ipv6_dev_ac_inc+0x8fd/0xb90 [ 301.528962][T11845] ipv6_sock_ac_join+0x665/0x820 [ 301.534440][T11845] do_ipv6_setsockopt+0x20f1/0x3190 [ 301.540184][T11845] ipv6_setsockopt+0x59/0x170 [ 301.545402][T11845] do_sock_setsockopt+0x17c/0x1b0 [ 301.550970][T11845] __x64_sys_setsockopt+0x13d/0x1b0 [ 301.556702][T11845] do_syscall_64+0x174/0x580 [ 301.561856][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.568287][T11845] [ 301.568287][T11845] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 301.576048][T11845] lock_sock_nested+0x41/0x100 [ 301.581350][T11845] inet_shutdown+0x6a/0x390 [ 301.586401][T11845] nbd_mark_nsock_dead+0x2cb/0x550 [ 301.592054][T11845] recv_work+0x1cef/0x1e10 [ 301.597015][T11845] process_scheduled_works+0xa8e/0x14e0 [ 301.603091][T11845] worker_thread+0xa47/0xfb0 [ 301.608211][T11845] kthread+0x389/0x470 [ 301.612836][T11845] ret_from_fork+0x514/0xb70 [ 301.617957][T11845] ret_from_fork_asm+0x1a/0x30 [ 301.623257][T11845] [ 301.623257][T11845] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 301.630923][T11845] __mutex_lock+0x19d/0x1590 [ 301.636052][T11845] nbd_queue_rq+0x373/0x1150 [ 301.641204][T11845] blk_mq_dispatch_rq_list+0x499/0x1990 [ 301.647296][T11845] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 301.654167][T11845] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 301.660684][T11845] blk_mq_run_hw_queue+0x348/0x4f0 [ 301.666462][T11845] blk_mq_dispatch_list+0xd11/0xe10 [ 301.672197][T11845] blk_mq_flush_plug_list+0x45f/0x540 [ 301.678105][T11845] __blk_flush_plug+0x3ed/0x4d0 [ 301.683493][T11845] __submit_bio+0x465/0x560 [ 301.688556][T11845] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 301.694738][T11845] block_read_full_folio+0x599/0x830 [ 301.700560][T11845] filemap_read_folio+0x12c/0x3a0 [ 301.706127][T11845] do_read_cache_folio+0x354/0x590 [ 301.711778][T11845] read_part_sector+0xb6/0x2b0 [ 301.717079][T11845] adfspart_check_ICS+0xb1/0x960 [ 301.722553][T11845] bdev_disk_changed+0x82b/0x1780 [ 301.728115][T11845] blkdev_get_whole+0x372/0x510 [ 301.733495][T11845] bdev_open+0x324/0xd70 [ 301.738269][T11845] blkdev_open+0x461/0x600 [ 301.743234][T11845] do_dentry_open+0x816/0x1380 [ 301.748533][T11845] vfs_open+0x3b/0x340 [ 301.753152][T11845] path_openat+0x2e3b/0x3890 [ 301.758278][T11845] do_file_open+0x23e/0x4a0 [ 301.763332][T11845] do_sys_openat2+0x113/0x200 [ 301.768568][T11845] __x64_sys_openat+0x138/0x170 [ 301.773963][T11845] do_syscall_64+0x174/0x580 [ 301.779094][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.785539][T11845] [ 301.785539][T11845] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 301.792770][T11845] __mutex_lock+0x19d/0x1590 [ 301.797916][T11845] nbd_queue_rq+0xc1/0x1150 [ 301.802954][T11845] blk_mq_dispatch_rq_list+0x499/0x1990 [ 301.809039][T11845] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 301.815915][T11845] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 301.822433][T11845] blk_mq_run_hw_queue+0x348/0x4f0 [ 301.828079][T11845] blk_mq_dispatch_list+0xd11/0xe10 [ 301.833821][T11845] blk_mq_flush_plug_list+0x45f/0x540 [ 301.839726][T11845] __blk_flush_plug+0x3ed/0x4d0 [ 301.845112][T11845] __submit_bio+0x465/0x560 [ 301.850151][T11845] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 301.856319][T11845] block_read_full_folio+0x599/0x830 [ 301.862136][T11845] filemap_read_folio+0x12c/0x3a0 [ 301.867700][T11845] do_read_cache_folio+0x354/0x590 [ 301.873361][T11845] read_part_sector+0xb6/0x2b0 [ 301.878660][T11845] adfspart_check_ICS+0xb1/0x960 [ 301.884146][T11845] bdev_disk_changed+0x82b/0x1780 [ 301.889706][T11845] blkdev_get_whole+0x372/0x510 [ 301.895095][T11845] bdev_open+0x324/0xd70 [ 301.899868][T11845] blkdev_open+0x461/0x600 [ 301.904815][T11845] do_dentry_open+0x816/0x1380 [ 301.910138][T11845] vfs_open+0x3b/0x340 [ 301.914753][T11845] path_openat+0x2e3b/0x3890 [ 301.919890][T11845] do_file_open+0x23e/0x4a0 [ 301.924934][T11845] do_sys_openat2+0x113/0x200 [ 301.930141][T11845] __x64_sys_openat+0x138/0x170 [ 301.935524][T11845] do_syscall_64+0x174/0x580 [ 301.940646][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.947074][T11845] [ 301.947074][T11845] -> #3 (set->srcu){.+.+}-{0:0}: [ 301.954216][T11845] __synchronize_srcu+0xc9/0x2f0 [ 301.959689][T11845] elevator_switch+0x1e8/0x7b0 [ 301.964990][T11845] elevator_change+0x2fa/0x480 [ 301.970282][T11845] elevator_set_default+0x375/0x440 [ 301.976008][T11845] blk_register_queue+0x3f3/0x4e0 [ 301.981564][T11845] __add_disk+0x6cb/0xe30 [ 301.986450][T11845] add_disk_fwnode+0xfb/0x4b0 [ 301.991684][T11845] nbd_dev_add+0x733/0xb60 [ 301.996643][T11845] nbd_init+0x15f/0x1e0 [ 302.001335][T11845] do_one_initcall+0x250/0x870 [ 302.006637][T11845] do_initcall_level+0x10a/0x1a0 [ 302.012115][T11845] do_initcalls+0x59/0xa0 [ 302.016983][T11845] kernel_init_freeable+0x29d/0x3e0 [ 302.022710][T11845] kernel_init+0x1d/0x1d0 [ 302.027597][T11845] ret_from_fork+0x514/0xb70 [ 302.032721][T11845] ret_from_fork_asm+0x1a/0x30 [ 302.038025][T11845] [ 302.038025][T11845] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 302.045858][T11845] __mutex_lock+0x19d/0x1590 [ 302.050986][T11845] elevator_change+0x1af/0x480 [ 302.056283][T11845] elevator_set_none+0xb5/0x140 [ 302.061676][T11845] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 302.068020][T11845] nbd_start_device+0x189/0xb30 [ 302.073406][T11845] nbd_genl_connect+0x1597/0x1c10 [ 302.078970][T11845] genl_family_rcv_msg_doit+0x233/0x340 [ 302.085063][T11845] genl_rcv_msg+0x614/0x7a0 [ 302.090105][T11845] netlink_rcv_skb+0x226/0x4a0 [ 302.095402][T11845] genl_rcv+0x28/0x40 [ 302.099919][T11845] netlink_unicast+0x7bb/0x940 [ 302.105238][T11845] netlink_sendmsg+0x813/0xb40 [ 302.110534][T11845] ____sys_sendmsg+0x9b9/0xa20 [ 302.115828][T11845] ___sys_sendmsg+0x2a5/0x360 [ 302.121044][T11845] __x64_sys_sendmsg+0x1bd/0x2a0 [ 302.126522][T11845] do_syscall_64+0x174/0x580 [ 302.131697][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.138291][T11845] [ 302.138291][T11845] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 302.146934][T11845] blk_alloc_queue+0x544/0x690 [ 302.152245][T11845] __blk_mq_alloc_disk+0x194/0x390 [ 302.157916][T11845] nbd_dev_add+0x494/0xb60 [ 302.162878][T11845] nbd_init+0x15f/0x1e0 [ 302.167578][T11845] do_one_initcall+0x250/0x870 [ 302.172895][T11845] do_initcall_level+0x10a/0x1a0 [ 302.178370][T11845] do_initcalls+0x59/0xa0 [ 302.183232][T11845] kernel_init_freeable+0x29d/0x3e0 [ 302.189031][T11845] kernel_init+0x1d/0x1d0 [ 302.193932][T11845] ret_from_fork+0x514/0xb70 [ 302.199149][T11845] ret_from_fork_asm+0x1a/0x30 [ 302.204489][T11845] [ 302.204489][T11845] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 302.211715][T11845] __lock_acquire+0x1520/0x2cd0 [ 302.217105][T11845] lock_acquire+0x106/0x350 [ 302.222143][T11845] fs_reclaim_acquire+0x71/0x100 [ 302.227712][T11845] __kmalloc_cache_noprof+0x40/0x660 [ 302.233539][T11845] __ipv6_dev_mc_inc+0x447/0xa40 [ 302.239024][T11845] __ipv6_sock_mc_join+0x4f7/0x740 [ 302.244682][T11845] inet6_addr_add+0x3a4/0xb50 [ 302.249892][T11845] inet6_rtm_newaddr+0x9f3/0xdf0 [ 302.255368][T11845] rtnetlink_rcv_msg+0x802/0xc00 [ 302.260846][T11845] netlink_rcv_skb+0x226/0x4a0 [ 302.266144][T11845] netlink_unicast+0x7bb/0x940 [ 302.271446][T11845] netlink_sendmsg+0x813/0xb40 [ 302.276747][T11845] ____sys_sendmsg+0x9b9/0xa20 [ 302.282047][T11845] ___sys_sendmsg+0x2a5/0x360 [ 302.287256][T11845] __x64_sys_sendmsg+0x1bd/0x2a0 [ 302.292724][T11845] do_syscall_64+0x174/0x580 [ 302.297853][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.304289][T11845] [ 302.304289][T11845] other info that might help us debug this: [ 302.304289][T11845] [ 302.314619][T11845] Chain exists of: [ 302.314619][T11845] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 302.314619][T11845] [ 302.327258][T11845] Possible unsafe locking scenario: [ 302.327258][T11845] [ 302.334721][T11845] CPU0 CPU1 [ 302.340182][T11845] ---- ---- [ 302.345561][T11845] lock(&idev->mc_lock); [ 302.349911][T11845] lock(sk_lock-AF_INET6); [ 302.356943][T11845] lock(&idev->mc_lock); [ 302.363798][T11845] lock(fs_reclaim); [ 302.367795][T11845] [ 302.367795][T11845] *** DEADLOCK *** [ 302.367795][T11845] [ 302.375942][T11845] 3 locks held by syz.1.1465/11845: [ 302.381154][T11845] #0: ffffffff8fdc1540 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65e/0xdf0 [ 302.390578][T11845] #1: ffff888033040aa0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_addr_add+0x394/0xb50 [ 302.400519][T11845] #2: ffff888035e92530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 302.410197][T11845] [ 302.410197][T11845] stack backtrace: [ 302.416107][T11845] CPU: 1 UID: 0 PID: 11845 Comm: syz.1.1465 Not tainted syzkaller #0 PREEMPT(full) [ 302.416129][T11845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 302.416144][T11845] Call Trace: [ 302.416152][T11845] [ 302.416160][T11845] dump_stack_lvl+0xe8/0x150 [ 302.416181][T11845] print_circular_bug+0x2e1/0x300 [ 302.416206][T11845] check_noncircular+0x12e/0x150 [ 302.416231][T11845] __lock_acquire+0x1520/0x2cd0 [ 302.416252][T11845] ? rcu_is_watching+0x15/0xb0 [ 302.416272][T11845] ? trace_contention_end+0x3d/0x140 [ 302.416296][T11845] ? __mutex_lock+0x30f/0x1590 [ 302.416319][T11845] ? __kmalloc_cache_noprof+0x40/0x660 [ 302.416343][T11845] lock_acquire+0x106/0x350 [ 302.416360][T11845] ? __kmalloc_cache_noprof+0x40/0x660 [ 302.416386][T11845] ? __pfx___mutex_lock+0x10/0x10 [ 302.416407][T11845] ? in6_dev_get+0x1a/0x290 [ 302.416427][T11845] fs_reclaim_acquire+0x71/0x100 [ 302.416452][T11845] ? __kmalloc_cache_noprof+0x40/0x660 [ 302.416476][T11845] __kmalloc_cache_noprof+0x40/0x660 [ 302.416501][T11845] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 302.416534][T11845] __ipv6_dev_mc_inc+0x447/0xa40 [ 302.416556][T11845] __ipv6_sock_mc_join+0x4f7/0x740 [ 302.416574][T11845] ? __local_bh_enable_ip+0xd0/0x130 [ 302.416592][T11845] inet6_addr_add+0x3a4/0xb50 [ 302.416614][T11845] inet6_rtm_newaddr+0x9f3/0xdf0 [ 302.416642][T11845] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 302.416665][T11845] ? __dev_queue_xmit+0x29b/0x37f0 [ 302.416688][T11845] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 302.416720][T11845] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 302.416743][T11845] rtnetlink_rcv_msg+0x802/0xc00 [ 302.416770][T11845] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 302.416794][T11845] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 302.416819][T11845] ? ref_tracker_free+0x689/0x830 [ 302.416838][T11845] ? __pfx_ref_tracker_free+0x10/0x10 [ 302.416858][T11845] netlink_rcv_skb+0x226/0x4a0 [ 302.416876][T11845] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 302.416902][T11845] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.416941][T11845] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.416959][T11845] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.416979][T11845] netlink_unicast+0x7bb/0x940 [ 302.417010][T11845] netlink_sendmsg+0x813/0xb40 [ 302.417038][T11845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.417058][T11845] ? aa_sock_msg_perm+0xf1/0x1b0 [ 302.417084][T11845] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.417107][T11845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.417127][T11845] ____sys_sendmsg+0x9b9/0xa20 [ 302.417145][T11845] ? __might_fault+0xaf/0x130 [ 302.417170][T11845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.417190][T11845] ? import_iovec+0x73/0xa0 [ 302.417211][T11845] ___sys_sendmsg+0x2a5/0x360 [ 302.417228][T11845] ? __lock_acquire+0x683/0x2cd0 [ 302.417247][T11845] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.417268][T11845] ? futex_wake+0x4d7/0x5b0 [ 302.417301][T11845] ? __fget_files+0x2a/0x420 [ 302.417322][T11845] ? __fget_files+0x3a2/0x420 [ 302.417347][T11845] __x64_sys_sendmsg+0x1bd/0x2a0 [ 302.417366][T11845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.417388][T11845] ? rcu_is_watching+0x15/0xb0 [ 302.417411][T11845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.417429][T11845] do_syscall_64+0x174/0x580 [ 302.417449][T11845] ? trace_irq_disable+0x3b/0x140 [ 302.417474][T11845] ? clear_bhb_loop+0x40/0x90 [ 302.417494][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.417511][T11845] RIP: 0033:0x7f572e19ce59 [ 302.417529][T11845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.417544][T11845] RSP: 002b:00007f572eff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.417562][T11845] RAX: ffffffffffffffda RBX: 00007f572e415fa0 RCX: 00007f572e19ce59 [ 302.417575][T11845] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 302.417587][T11845] RBP: 00007f572e232d6f R08: 0000000000000000 R09: 0000000000000000 [ 302.417598][T11845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.417608][T11845] R13: 00007f572e416038 R14: 00007f572e415fa0 R15: 00007ffef255f6c8 [ 302.417629][T11845] [ 302.958692][T11852] nbd4: detected capacity change from 0 to 63 [ 302.965859][T11854] block nbd4: NBD_DISCONNECT [ 302.971200][T11854] block nbd4: Disconnected due to user request. [ 302.979211][T11854] block nbd4: shutting down sockets [ 302.989169][ T8400] ldm_validate_partition_table(): Disk read failed. [ 303.019069][ T8400] Dev nbd4: unable to read RDB block 0 [ 303.026598][ T8400] nbd4: unable to read partition table [ 303.040701][ T8400] ldm_validate_partition_table(): Disk read failed. [ 303.048865][ T8400] Dev nbd4: unable to read RDB block 0 [ 303.055618][ T8400] nbd4: unable to read partition table [ 303.599439][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.879799][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.518814][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.527443][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.359112][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.999423][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.638763][ T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.279025][ T90] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog