last executing test programs: 4.786529791s ago: executing program 0 (id=2612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r1, 0xc881717e1445f34, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x76d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x56f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9c8e}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8e0}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) (async, rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0xb, 0x1, 0x5, 0xfffffffffffffff4}, @ldst={0x3, 0x2, 0x4, 0x2, 0x9, 0xffffffffffffffc0, 0x8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3f}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x400}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81}], &(0x7f00000002c0)='GPL\x00', 0x4, 0x13, &(0x7f0000000300)=""/19, 0x41100, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x4, 0x3, 0x7fffffff}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x5, 0x2, 0x7, 0x4}, {0x3, 0x2, 0xe, 0xc}, {0x3, 0x2, 0x2, 0x5}, {0x2, 0x3, 0x6, 0xc}, {0x3, 0x2, 0x1}, {0x5, 0x1, 0x5, 0x9}, {0x4, 0x5, 0x6, 0x1}, {0x3, 0x5, 0xc, 0xa}, {0x2, 0x5, 0x9, 0xa}, {0x5, 0x5, 0x2, 0xb}], 0x10, 0x2000000}, 0x94) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x80, 0x40, 0xffffffff, 0x8, {{0x2a, 0x4, 0x1, 0x0, 0xa8, 0x66, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@rr={0x7, 0xb, 0xa6, [@multicast1, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x3c, 0x85, 0x1, 0xf, [{@empty, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@broadcast, 0x7}, {@remote, 0x4}, {@rand_addr=0x64010100, 0x2}, {@multicast1, 0x2800000}, {@rand_addr=0x64010100, 0x400}]}, @cipso={0x86, 0x42, 0xffffffffffffffff, [{0x7, 0xc, "74c7a0b7d5a5b9763c7f"}, {0x7, 0xd, "899c4e024bb047b4e2123d"}, {0x7, 0x7, "df14d5a086"}, {0x0, 0x10, "37699a4177864e8829b1a5d03187"}, {0x5, 0xc, "1efa410158697a342351"}]}, @end, @end, @lsrr={0x83, 0x7, 0x61, [@broadcast]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r2, r3, 0x25, 0x4, @val=@kprobe_multi=@syms={0x1, 0x1, &(0x7f0000000700)=[&(0x7f00000006c0)='\x00'], 0x0, 0x3}}, 0x30) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000780)="b5377c547b4e3263c4b4cf337e5c4ea07a9e72e141c1a4532135f0d74034874de3038700087ea2702ae3319501f832b952d5f4d09e58f0f3e8ed8bef8c377074b26506ffdcca59969a64aec0c19a20bea2fe8c213e3e7365240e5c74397f58e45f671d60770f96098fe4897f91a6242db1cf689d832ad4eae25e4bd6da2873edcc0768c93052f896e24326fbaaa81e648498f8a4820289281d25feaf8037fa27edfd123e23a4854a0ff65d55ae7945e225f08a264092", 0xb6, 0x4008095, &(0x7f0000000840)={0xa, 0x4e20, 0x7, @empty, 0x5}, 0x1c) r5 = accept$inet6(r4, &(0x7f0000000880)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000008c0)=0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/245, 0xf5, 0x0, &(0x7f0000000a00)}, &(0x7f0000000a80)=0x40) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40000) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002100)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000000d80)={0x1334, r8, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1008, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&,-\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&--%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xee8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+[:+j\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2024}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '{N^.&*,\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x4}]}, @ETHTOOL_A_BITSET_VALUE={0x45, 0x4, "992b9d845e81b0cf0b594d52dc6cff9f1fbcdf06662c9e7c180ec23712f8916306d26c9ffba2464e892acfb1b36d98942839117f53d34c6a425691c1c8afb91447"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe9, 0x5, "0b6e1284b5fe80dd7f0b1d3b108628dc12f8d0a5607b7945e7e0de98eb21ae7d15e7c2b159e87e515e313460b5b73f25a0c71e435c636b9dc18c7a4f2c073f3594616c3de364398b956826a2d412a1cb16d3f87ccec99ada6a501d5174d29f8769e107e1e5cc175fbe9907d8547b28709b6628dad7d20738049f9592ddb87e92dd5c68290b61bfb8a58511b79307a82f839906e6ebf145376431d1fe73c798617f201f0243f8d28ed41cfde2bae56d129359ae3657584a3d27d1a30b48def8109d1282de84d904775ea1ecf6e35127a22a275b9d002848ae9c45a4549ab3d9a6ddfa77bc1c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1334}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x30, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x20, r10, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x56}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c855}, 0x40010) (async, rerun: 64) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000023c0)={'bond_slave_1\x00', {0x2, 0x4e23, @multicast1}}) (async, rerun: 64) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002440), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_CALIPSO_C_LISTALL(r11, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, r12, 0x695610d8e24d72b0, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x40) r13 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r13, 0x107, 0x13, &(0x7f0000002540), &(0x7f0000002580)=0x4) bind$inet6(r5, &(0x7f00000025c0)={0xa, 0x4e24, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c) (async, rerun: 32) ioctl$XFS_IOC_GET_RESBLKS(r5, 0x80105873, &(0x7f0000002600)) (async, rerun: 32) r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002680), r11) sendmsg$NLBL_CALIPSO_C_ADD(r11, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x1c, r14, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 4.630789913s ago: executing program 0 (id=2616): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20040804) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000071117b000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003300000018000180140002007665746830"], 0x2c}}, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r9}, 0x20) connect$unix(r8, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 4.259861671s ago: executing program 1 (id=2621): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0x6d64, 0x8, 0x7, 0x400, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1a}, @remote}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="ac141411e0000001000000002c000000000000000000000007000000441c13d9"], 0x50}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0x6d64, 0x8, 0x7, 0x400, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1a}, @remote}, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="ac141411e0000001000000002c000000000000000000000007000000441c13d9"], 0x50}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 3.948380897s ago: executing program 1 (id=2625): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0xe7d02281b1d40445, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x1c}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) r6 = accept4(r4, &(0x7f0000000180)=@hci, &(0x7f0000000240)=0x80, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f00000002c0)={'gre0\x00', {0x2, 0x0, @loopback}}) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x100, @loopback, 0x8001e}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x40030) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r4], 0x1000f) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="021800001c0000000000000014c524c7d094bc13000000000a00000000000000fe8000000000000000000000000000aa00000000000000000800120000001500000000000000000006000000000000040000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000008001953d3c485fe7d3f1d241130aca27a0c7593031be73be841a54de3ea2ac362ceaf"], 0xe0}}, 0x24000010) socket(0x26, 0x1, 0x8) 3.699535586s ago: executing program 4 (id=2628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="c6b98e89f017"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x50}}, 0x40000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r4, 0x200, 0x0, 0x25dfdbff, {0x45}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}}, 0x20004800) 3.638898221s ago: executing program 0 (id=2630): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @remote}, 0x10) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000001240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x1, 0x4, 0x3c, 0x65, 0x0, 0x15, 0x6, 0x0, @local, @loopback}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x4, 0x0, 0x1, 0x4, 0x2, 0x1, 0x4e23, 0x4e24, 0x1, 0x2}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x1, 0x4, 0x3c, 0x65, 0x0, 0x15, 0x6, 0x0, @local, @loopback}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x4, 0x0, 0x1, 0x4, 0x2, 0x1, 0x4e23, 0x4e24, 0x1, 0x2}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d02000000000002400128009000100626f6e64000000001400028008001f00ffffff7f082cf3365e3ebf00"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 3.451780013s ago: executing program 4 (id=2632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000140003800800024000000009080001400001"], 0xc8}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 3.450698043s ago: executing program 0 (id=2634): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x2, 0x30}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xa8}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="a905000000407464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x28}}], 0x2, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10110420}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xf0, r6, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1f}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xc}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x8}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x3}, {0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x2, 0x4}, {0x5, 0x9}, {0x7, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0x5}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x9}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x2, 0x8}, {0x1, 0x4}, {0x4, 0x1}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x9}, {0x6, 0x1}, {0x1, 0x8}, {0x3, 0x3}, {0x4, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x4, 0x4}, {0x4, 0x4}, {}, {0x2, 0x5}, {0x6, 0x3}, {0x4, 0x4}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x6}, {0x2, 0xa}, {0x0, 0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x5, 0x2}, {0x2, 0x6}, {0x1, 0x9}, {0x6, 0x7}, {0x1, 0x3}, {0x2, 0x4}, {0x2, 0x2}, {0x2, 0x4}, {0x1, 0x1}, {0x6, 0x6}, {}, {0x7, 0xa}, {0x4, 0x4}, {0x1}, {0x6, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x5, 0x7}, {0x1, 0x6}, {0x1, 0x2}, {0x4, 0x8}, {0x2, 0x4}, {0x1, 0x3}, {0x7, 0xa}, {0x6, 0x8}, {0x7, 0x8}, {0x0, 0x1}, {0x6, 0x7}, {0x7, 0x5}, {0x3}, {0x4, 0x5}, {0x3, 0x3}, {0x6}, {0x7, 0x3}, {0x4, 0x1}, {0x1, 0xa}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x6c, 0x5, 0xc, 0x18, 0x48, 0x6c, 0x3, 0x30, 0xc, 0x36, 0x24, 0x9, 0x24, 0x60, 0x1, 0x9, 0x6c, 0x18, 0x30, 0x48]}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x2000c050}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001940)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x29}}]}, 0x38}}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x1, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000000808001a40000000000800034000000400240018802700014000007fff0800014000000008080001400000000408000340ffffff4a0800154000000002"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x80) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r13, 0x80, 0xbb}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x39}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000800)={0x0, 0x1000, "29f8ad814687257fef593b03206665a8ed56b04eef8b5d4972d23da01782b87418dc677975f488e322fdf1120110ad26090f65bfcaaa01fa452d35dcc24c1190cc835c3276f9d68972bb71f6c1e92e9b0f8349020db3f9267c271757f78e7f9f314dc1c94ac0f09bea99b0a2ba01075d7fde65cd11328cccb8dc16aa2da736efe7da09ea5fd266d748fefd800146a8430a30c4f7eea8401dabd70d3e91f9498c0c001ad71c609139139386027c37128fb424d8f0a469e3e50bff1a057ae4a067b040f8c2aeec007547a38dc077b0da1755991558f5250e77b3054bbe96d8ffb47eb1cd8f63539794c1e67d4dbea1fb91c7d046e08569d7744d03718e60b97f65a4b3e0a0f396ab73a3da67f329368381ca9466c9ac4051f755f9c45946734b4c8189ef64454df39c855365d5d4dae72bd1d94c5b26264bec544e2f4535d67a1a5c993cb75276fc3d60bb43fb484901d070ac63ff4e9d8ddb9429e59cfa65d46b21f5d6aa3befebf336074bfa1d1429568e0b94e996593ee3378345bbfeb80c4b8b4627c4acb851d935555230ffff4fd9d190cc24d135dd196f156e55f95c7129d90f7abb1bfe85956e67b22164105730bfbafb82163e26e31a4159023978d4f25358c63f2c744f0371a362463da2ad229f25ecdfacbefd9df1cee43a5201e3cbb990a8336f58b7f7b4536fb17a95501676f96c2052440092bc3ccc287a74fb162d7cf448a9ad990c44d6ade093bbd2a6e62877cba75f4cc54c014f45b2b2fbe3f76fbfe6d11946eb9f31c16837c2aa768ca3ce79c7706038c45c2dfb45a0a433685901fe43be249d9cb923e7f61602212a9f066b8e541d2388ed6054bfcbcf2bc81d2eaa87741d7c35cf2c0603600ec2c1d244c53598385ec573a8637cd6884133f58509dd1f3c61e1289646ccacdf155af105f16fadb397066a32147c10901b5c2dc2431ea7be50d5e00b2f3f27f880ad2312876f152402bd85beaab0e3af897e8184454307d9117ccae4140341d653d0b926d772b84108e0874d90ee749294fda90f4cb21295459bef4fe581fa45edfc7e8797dcb07662cec29200abc3215c1791d18881e37e1325423f495f8d03b03a066c98b28c93a50c5edb28c5332283e6deea25b8a7d49368dac1c6f68cc9507c0cc7b50cdf91faf1ebef5740367729275a3332cc5f04211e41a9ec9c41326c03af3987671b3272a10e4883a1767ba7d40a40f90139c7c1fdefe0898a424d9abf2ee7daead96b7276f92872794ead8f4bb03689122835bdb22b497c3d6402591b7f51ab30290b91af116dcb1c47c63baf96a858676beb145349657b5d7ee000c8c02d10e1ab835279ba7c06941492197683cd4d775b095a0a0980dcbeda3a3d94126a1b9e82ea1195c186e2cd0f8c629af77dd28fc392765e33b74d8f3d4e6324cacee0818f2b045b09444942f2241efd763aa3956246e4c981e4f61102f4e1171214e8c7a8c698557f4579c2347f57080046990d029005496ea519ca7356c2a8d3be96e3b645c6624c1514c8da5883e12540370ec3d6464e609d69ed914ded23947a8577ccf1c05eeb692460985760e9f7f7e235012777484fefdb3f731c62cf4bd6e7594dfe14c24d35923c852644097f15b8f431c40ba33761603524c439331a29fef97361f91ae0278e1de2976ab21d7d946a55c6a74ad2f864e11f68f1dbb50137ac858e7301b39e24472da9a81ef66bb484fe27b822a5c18066a2d654ecbb4803e6afb9cfceb26cfcb2461c6e33191c483adbe3cb392b08528fac25e653a0e9ed80425b98e19147345d2059ab91e60dec883fdf00e5673984713a73d1420ffea9b8b964036a882b94dac08c72629c5757efa0b94263399348ba98884f112ed8b8524e0a718c97ff938d5d07536bb81f71a979fce0b5b232960e0dc8540168bc1ce78425a508e061482d0eee647ff41dfc68f5e017039e34c9b2644892665590a96fc8a733d62477b50f61f70240ba718e8f2ee167ef83132c1f06d6a351d1342198862bb6f7938fa297ac4eec93664cf55dfe94803bc4ccc3d04f4f9b1aeba5e5b09dc768b6925699da5dc63dfc1caf037074468c63e13d296794c769d705d0558df0709db14b173bce1432210423445b2b1b6d6cfb172faa61b4a037ed84c54c71456c92dca7f7259a55e8d57cfbf851586b56aee2460ca5b33e20216bbef7ee970b9258bb626dcd980454ea54105d7504c2146f0dea64e96f14fe2085ccb7f6d9d9b24e04e91c615846fa22468f01677ce4c569a444e48fd0dbc12c1d3999a100d47e57eafafb7589332cc5cb3c0b527f2e69ee27edd7734b21ef057694dce4a42e8d36964817f6fe31bc5093acee9dabffcdf0a27b3d422865249fd5ff515444d4f444b40497db067889b8c8920842e56fcc7a1795fd7c33e49a71810eebc3c24fbef36ba4e82d5b27b0389211cedae7d81410b7a56e960df7bf9688d20308506f8808d9987479af8dd9d0e8ecbec58752fc14d513ab4c5f934e663b2d213ece8d14874c22a64d8df81f52556b192fa238edb665d50bd8440247c38a7e32a5d6e7de5862806b54d25de63e18d6737cecbfc3b5fd7de2d4706e5841a59d134325be91e22179e716308b83313aa214f1d1bda5eb7a0c3cab0d7d2d4dc2307c81aad77da6faeb7942af2a8652132b2621e0dfd563be237e6daffc056ed5cae5c40ce331d3775381b133d89451a2ceebcb855e71f0702a91d28f8680cd7f6b6541ebb6705a87a20eca9f30b98f57f570facd40b5aaf6e79ba6e9cecc8b2085aff0c70a15d55a78de2a8a21481a659e0b54b9a366c292a06e9a92a4ba168d23bb3da38e0cea352e5b7df804f90050f961933632d7778cedc4948085302aa11c0e564bb308f4a764b542f9ad7fe2cc88237f3c630d4f4b18e6769cdc93393efa51c9cd69a0a449bc6fe6350a3f43df3a81a3191d74423a9fa9d2e89ac6bd44e92c016d5d5c750015b8b0e8a38f5c64e9f93e5f932a8cfa512448cbd0c370b6ffef86373e4f82937131d601f652a949bb81d4ed01865fec07912c80cf4bf2110a19bd2d733890c62cf1177104e65a7e3240ea8620523fbedb3cf1c632f9191e59c4c5a537ac76da8c8ce9198aa9c75c80d3e125b11f149e6b31dfa6605cd7c9f09671cf4c98a0a5f25c24da159397c72cd72e1e30f93cc232eb2a4c7a27beae4282af8346d9fd0aa9976ccc4ef54dc37cc0663d717eaf66727083e21ca4cfffa24ea5682b768b7c24c9cb0c093df9bdaa5ff3c5172d1f89a5e0e926931f00f0b84ce6cefb5778f43446429e4d14264b0dd538a1e27a574ab7537dddf5a0c815e342d213a2254ddbae195960c26baeaa02aeb35469713288ab6118433709cb8a8528c7cc731b76aea09eb141ea2218dccf2f91be25f5b5589e4a75d948badd287c6157bccc59e8e0585b6389660e64c98587067cf128350ea8006285c9458bf7917665a8170374b9a5f26d7c496333bb334b96824b23278217379a6746d86bf8d8027db9a3571a0017ade10a2cb36f02ef127750a4b057c4245f0c21df836962adf0e3125004708f44e31f02e0ccca8c990e080df43749279b7c26f34d1b74b828beac1daecb0551753d0fb49cacfcc4709d1ce61dd56c7317cbb299d9955e7e6c9a26fedbed889867cf6b0b6fad859ffc0c068934bee91863cfd8e65963a249064a78c6aecdaf86a5344b81d7f5f1c277777804ea1ab23ba04399de90ed0dcbb958f9665d5d19963eee5bc6c319d654ae05652bd9c3678f95173b8dd52461132e99fdfa5ec93e72c785807f198b9a17a9207b74300e93888a2a44fe4f24524df586f463d966284ac659e9051526a975f0d0d5f9d3a4fdc5ddeebe3d3fba1a33aab983d4d2cdb698b4ee3890baf0212779adef7f3f03442291442db1561fc47a1cad40ea89357683b53bd0100839029ca2977604648fc24ccc35aa51fbf9eb23515fb33fba6a11d6b48595b19c1578f58c0ae35d3dc36a718355e470107376ed5be16c687ebe7b5ecf3ba6c72d715d8a569ab857f717b0ba84911be6322d5bc722ab8f4c6332c893b0cf9b26dba6271f0a6d88e9455d3322f629176826a6f493111cdfa37a7697d7046b50a31c8aaab72bad1e11947de7be772715efe5c40a8ea194d3618252b89bd5d7b688a2fb6f6ee8663bdf75b613f6c545637520e2a17d5a7b331e9a7ee942a1e38b0769fecf55fca9da5ed50befd4acde9d210fe0b12f9eb89c491449529e648e2fa8605797ea623b78a8ca882655e229c7814a97189e89d16abbd928e39c7df5cd94bfbae8490122293113be431e8417c09a559331941208408e08d948683e39b2f3b52fb51e6fe7e2ff62e1ed290e4eecdb89080d50f80ac387b557c3821e645f11237f7666ffd2321018d5829fbddb5d854b96d30a7b3aac095b68a7f59ea494fbb3fdbaf5d52ab98484ad5a640fd6c2e942505f4fddb78a37b54aaea96006ddb314226b65302d03fd79e6e9aea2b60429387b08165252abf9ff1c154e8ee332849d6a64069aa71e081f6c6b1b6baebe0fec454576b9612de9ac253db82a11c73a6a11a518f4d2801e384db989863bc21bf476ca89adf61037bceea12dc308a4603ae5355f3504e4760c7bd9e8b6a01c05cdc26bc5835f36d77108faeeda63a9e10ce4afc2be04459ac96cb16ec7c2f31db91208ddd0f68602973b090a776e1dd5c0ff092265e7011332059f2556fd77f1aed06260d8f2bcb4cd197aa11746dea6cbaa2f86fee789038af97955c64c15b530e7f992133fbcbb468e5937da8eeb65bf4e3275a1f13e11981db4732b48f590f59e200b55896973ee95830eeaa4885ffeba46eb5ac114c7fa20bb31fe4476ed278a0fc6469c9682bbf445b8ea487e329a95055eb00ba9a211afd79ae0a9c965b2f93186b12af3813be8ff1beb07d49ab5136450e3424b7246e04733e24279ede15fa4b635d476fa94cf24bef4d6dedfa59e2ef636cc08a4b4a3ad1854d8f78a254473d6f4096567c8c417afbf6c28bf003d30532cbe3fac8d84ffc0333dd8c9c4ae62093ef222e019b3af525252c95c1c89670587ab555b0d8710b6e8158f2cb6722fa8db0131165d85a403b486a5d84945bac59c509b863df36e5dcadfc8283ee449b95768a3622c6d95f74a94e1d5701831fbb53c71cf7a89addd4f9b2841f9f1e2457de18046eae086f3addd3cabbfabbc90f33788cc55dcbf915cd68011670b0a3ef51d48c91fbea2da965d55996d9df00f9979adae573d93039447cecac86da080995d14040ab8a5753e75a57c626cee07b06aae782f954d0ef2aef016ea156342076e7900bcf589a83abff58e104dc4d4e438d1f0e07e7ec775f9ff175aaeb48048e1c607c0caf23bfb875d94f4894a0e7d121285d333e0825d7d7c150446b3eab559a8ecd1ca3d2ad2fa7842da69c657dcbe115b2dd33d358d146dbdd3e61215fb97e31249afb4d4be8d75c911ebd164acbf783d91366d5ba4d08b739bb40a3d25d3270c8f38e148c074c0d50deea608bd9d036dcfdddc5cba3eb19be878f602f23b3f090b8394254b6d71e9410214472d7ff5b34c8906ddf025ceea7b220b9583afec55e5cf7dd6d83a7d4cbc979209267f21d2c399136927ab1385816730044f5534f33db1756e9180ac8e18fbe34172d76eac21bf2cd0bd34059b1a837844901ade9d0eb3a337b37a0deed13101bd041c367320782787ecb1ad1d191f140b717aba8ce42637680ff32b9aac600d658bf183d7b79864d3e5c5ec0f8d2610fc3871944d6ed24ecb89321731286996"}, &(0x7f0000001840)=0x1008) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000001880)={r15, 0x9}, &(0x7f00000018c0)=0x8) 3.175981678s ago: executing program 3 (id=2637): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x3, 0x8, 0x0, 0x5, 0x2, 0x1, 0x2, 0x6}}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1914}}, 0x4048010) 3.036840936s ago: executing program 2 (id=2639): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffc) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x7d4165c9) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x7d4165c9) listen(r8, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 2.975790213s ago: executing program 1 (id=2640): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x54, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x9}}]}, 0x54}}, 0x48000) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="20002abd7000fcdbdf251b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00020000001d0001006e507464657673696d0000000f0002006e657464657673696d30000008000b00bb000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4084) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES8=r3, @ANYRES16=r3], 0x2a8}, 0x1, 0x0, 0x0, 0x48094}, 0xc000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000200000000000000000000008500000087000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="5767c331e895cd135c5b7feeffd9", 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) close(r3) 2.922307871s ago: executing program 1 (id=2641): syz_emit_ethernet(0x26, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c20000020180c200000088a8010081001f00000c0100000006020000e4df3f6408372d1f8b26579d9451d49a05fb7cbd57348b36d54e82ff3202cd32e85a0b4fdf7c7e"], &(0x7f0000000180)={0x0, 0x2, [0xd91, 0xafa, 0x556, 0x662]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff34, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x0, 0x5, 0xb}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x4c, 0x10, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}]}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xdb}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x883e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x3ae7916e320a024c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8100}]}]}], {0x14, 0x14}}, 0x8c}}, 0x20000040) 1.180105876s ago: executing program 0 (id=2642): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x0, 0x20000100}]}, {0x0, [0x2e, 0x61]}}, 0x0, 0x28}, 0x28) (async) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x15, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x89, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xc7, 0x3, 0xc, [{@broadcast, 0x4}, {@multicast1, 0x9}, {@private=0xa010100, 0x1000}, {@empty, 0x100}]}, @timestamp_addr={0x44, 0x14, 0xf2, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x6}]}, @timestamp={0x44, 0x4, 0xb3, 0x0, 0xd}, @lsrr={0x83, 0x3, 0x71}]}}}}}}}, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4, 0x2}, 0x10}, 0x94) 1.116516899s ago: executing program 3 (id=2643): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_getnexthop={0x18, 0x6a, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.113694333s ago: executing program 2 (id=2644): ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000000)={0x80, 0x9, 0x0, 0x3, 0x8, 0x0, [{0x4, 0x4, 0x1000, '\x00', 0x400}, {0xc4e, 0x10000, 0x7, '\x00', 0x680}, {0x5, 0x9, 0x7}, {0x4, 0x7, 0x8, '\x00', 0x800}, {0x3, 0x40, 0x8, '\x00', 0xc00}, {0x1, 0x6, 0x6, '\x00', 0x200}, {0x6, 0x2, 0x6, '\x00', 0x800}, {0x205, 0x60c1, 0x2, '\x00', 0x1405}]}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x80, 0x0, [0x0, 0x7, 0x0, 0x1ff, 0x4], [0x8, 0x0, 0x1, 0x1ff, 0x2, 0x76, 0x7ff, 0xd, 0x0, 0x4b, 0x400000000, 0x84, 0x5, 0x2798, 0x2, 0x2, 0x9c3, 0x0, 0x1, 0x4, 0xffffffff, 0x7, 0x200, 0x7, 0x8, 0xff, 0x3f, 0x1, 0x2, 0x7, 0x7, 0x80000001, 0x7, 0xcc, 0xfffffffffffffffe, 0x1, 0x6, 0x81, 0x6, 0x3, 0x10, 0x8, 0x5, 0x2, 0x7, 0x5, 0x3d, 0x2, 0x3e6, 0x6, 0x15, 0x3, 0x3ff, 0xa9, 0x10, 0x9, 0xdc, 0x442e, 0x401, 0xd6, 0x7, 0x8, 0xffffffff00000001, 0x8, 0x8, 0x1, 0x1, 0x7fffffffffffffff, 0x4, 0x7fffffffffffffff, 0xe, 0x101, 0x1, 0x200, 0x4, 0x1a25, 0x400, 0x7ff, 0xffffffff, 0x6, 0xe, 0x0, 0x7, 0x40, 0x7, 0x100000000, 0x6, 0x4, 0x0, 0x2, 0x9, 0x6, 0x2b34, 0xffffffffffffff00, 0xd04, 0x5, 0x2, 0x0, 0x6, 0x4, 0xe49, 0x6, 0x10, 0x5, 0xce1, 0xba0e, 0xfffffffffffff290, 0xf40c, 0xffff, 0x9, 0x2, 0x1, 0xffffffff, 0x2, 0xd535, 0x3, 0xa6c, 0x1, 0x4, 0xe000000000000000, 0xfff]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000640)={r1, 0xdc3, 0x1, [0x7, 0xffffffffffffffff, 0x8, 0x4, 0x6], [0xac32, 0x0, 0x2, 0x111, 0x0, 0xac13, 0x2, 0xc8, 0x1, 0x0, 0x0, 0x7, 0xffffffffffffed70, 0x700000000, 0x2f5, 0x400, 0x8, 0x0, 0x8, 0x8, 0x5, 0x5, 0x0, 0x8000000000000001, 0xc9, 0x1, 0x4, 0xfffffffffffffff1, 0x2, 0x8, 0x3, 0xb9c, 0x6, 0xd, 0x2, 0x7, 0x6, 0x7, 0x4, 0x3, 0x9, 0x5, 0x8, 0x800, 0x8, 0x8000000000000001, 0x96fb, 0x30, 0x1, 0x8000000000000000, 0x5, 0x3, 0x0, 0x87, 0x7fff, 0x6c3b75c7, 0xc, 0x9, 0x3, 0x101, 0x0, 0x8001, 0x9, 0x101, 0x3, 0xd3, 0x6, 0x6b0, 0x0, 0x0, 0x5, 0x80000001, 0xffffffff7fffffff, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x7, 0x5, 0x8, 0x80, 0x2, 0x100000001, 0x1ff, 0x100, 0x7, 0xa, 0x6, 0x3, 0x8, 0x4, 0x3, 0x4, 0x7, 0xfffffffffffffff9, 0xff, 0xf4, 0x7c8, 0x2, 0x10000, 0x7, 0x7, 0x8, 0x3, 0x4, 0x3, 0x7fffffffffffffff, 0xf, 0x1, 0xffffffff80000001, 0xffffffffffffff8d, 0x8000000000000001, 0x8, 0xff, 0x3ff, 0x0, 0x7fff, 0x8, 0x7ff, 0xf9]}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000a80)={0x0, 0x4, 0x8, 0x1}, &(0x7f0000000ac0)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000b00)={r2, 0x1, 0x8001}, 0x8) (async, rerun: 32) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000b40)=0x3f0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40800) r4 = socket$inet6(0xa, 0x5, 0x9) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000cc0), 0xffffffffffffffff) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000d00)={r2, 0x4}, 0x8) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000d40), r6) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000d80)=0x5, 0x4) (async) r7 = accept4$inet(r5, &(0x7f0000000dc0)={0x2, 0x0, @private}, &(0x7f0000000e00)=0x10, 0x800) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000e40)={r2, 0x0, 0x1000, 0x9}, 0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000e80)={r2, 0x2}, &(0x7f0000000ec0)=0x8) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000001040)=[{&(0x7f0000000f00)="c12d23e27790826fd617b6e27c5716bfd2e614489382fb0781ee4ce9ef1d5263bd7541a18cdaa7a05324cd055c3b8f60eb09cf9ba24a8d", 0x37}, {&(0x7f0000000f40)="8c5fb31f64306a4467dce66e7ecbcaffbc2f71dd9c06ee9192da0ef6d85fdcbd984d7cb4ee4c93f435a3849b8cce84a906d82948e22f74f69cfaac7712356a02e7d923ca7dbe20a0a506d1ddf6a654d2280d0ace92f728c5ff38a476639d64c760048f8e70a5587d0ba6629e56ed54e05e5b5290935e9f49041bea1a3058360a74672df4c4293e60f7535dd410a344ffc1b0d648e99ac552977ca1803fbc9d009f4bb61b942e3efe263d28d4ea497f13098b5e56405b19b3fcf35d21148661343ab022f7587f", 0xc6}], 0x2, 0x80000000, 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000001080)={0x0, 0x7a, 0x0, 0x6, 0x7, 0x80}, &(0x7f00000010c0)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000001100)={r10, @in6={{0xa, 0x4e21, 0x7, @local, 0xff}}, 0x1, 0x1, 0x3ff, 0x81, 0x20, 0x8}, 0x9c) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000011c0)={r9, 0x1, 0x5}, 0x8) (async) r11 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000001, 0x50, r11, 0x67537238b37dae31) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r6) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xe4, r12, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x4}, {0x5, 0x3}, {0x4, 0x1}], "97532dfcf22d17ce"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xc, 0x1}, {0x3, 0x4}, {0x9, 0x2}, {0x4, 0x1}, {0x6, 0x5}, {0x9d, 0x5}, {0x9, 0x1}, {0x1, 0x3}, {0x8, 0x5}, {0x9, 0x4}, {0x8, 0x3}, {0x80, 0x1}, {0x1, 0x7}, {0x7, 0x9}, {0x40, 0x2}, {0x7, 0x2}], "c24d06d8d439f3ca"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xc}, {0x10, 0x3}, {0x9, 0x1}, {0x1, 0x3}, {0x1, 0x5}, {0xff, 0x2}, {0x9, 0x5}, {0x4, 0x2}, {0xfa, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x18, 0x7}, {0xd}, {0x6, 0x7}, {0x1a, 0x3}, {0x4, 0x3}, {0x8, 0x3}, {0x10, 0x3}, {0xd, 0x3}], "7a9903947e18d94c"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x3, 0x7}, {0x2, 0x3}, {0xc2}, {0x4, 0x7}, {0x7e, 0x7}, {0x3}, {0x7, 0x4}, {0x3, 0x7}, {0xd4, 0x7}, {0x2, 0x5}, {0x8, 0x1}, {0x0, 0x6}], "61baff5373444cb4"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x2, 0x6}, {0x2, 0x2}, {0x80, 0x1}, {}, {0x0, 0x1}, {0x0, 0x3}, {0xb}, {0x8, 0x2}, {0xbd, 0x6}, {0xd, 0x1}, {0x6, 0x4}, {0x45, 0x6}, {0x8, 0x3}, {0x81}, {0x1}, {}, {0x7, 0x4}, {0x0, 0x4}, {0x7f, 0x1}, {0x3, 0x1}, {0x3b, 0x6}], "9737f362edeb643a"}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 1.080543845s ago: executing program 1 (id=2645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0xfffd, 0x97}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="79933ba8190000e5ffa53b00008f", 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) 926.07195ms ago: executing program 3 (id=2646): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r0) (async) r2 = socket$inet(0x2, 0x6, 0x8ff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000019c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x24, r1, 0x9d292b3bf99534c1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40044) 856.346627ms ago: executing program 2 (id=2647): r0 = socket(0x15, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40007, 0x200004}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}}}, 0x50}}, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0xa00, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc30e}]}, @IPSET_ATTR_FAMILY={0xf, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) 855.996727ms ago: executing program 4 (id=2648): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xba6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4df}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 666.514058ms ago: executing program 4 (id=2649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x89}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x82}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c874}, 0x20000080) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000280)={0xa7, 0x81}) 547.823928ms ago: executing program 3 (id=2650): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000fd"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, &(0x7f0000000140)}, 0x20) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r2, 0x58, &(0x7f0000000600)}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0x7ccd4176) 471.895697ms ago: executing program 4 (id=2651): r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2476f88a", @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf250100000008000100030000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x8000) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r2, &(0x7f0000000180)="22979341", 0x4, 0x24040090, &(0x7f0000000000)={0x2, 0x3, @empty}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) 357.113885ms ago: executing program 3 (id=2652): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x2a, 0x0, 0x0, 0x800001}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x17, 0x3, 0x6, 0x7, 0x20400, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, r0, 0x1, 0x2, 0x5}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, r0, 0x0, 0x4, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, &(0x7f0000000000), &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x88, &(0x7f0000000100)=""/136, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x5, 0x7, 0xfffff000}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[r1, r2], &(0x7f0000000500)=[{0x5, 0x2, 0xe, 0xc}, {0x2, 0x2, 0x7, 0x8}, {0x5, 0x3, 0x9, 0x3}, {0x5, 0x1, 0x9, 0x7}]}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000101840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff050000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10}, 0x90) 343.326733ms ago: executing program 2 (id=2653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x4, 0x70bd25, 0x2, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000300)={0x6b4, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x76, 0x4c}}}}, [@NL80211_ATTR_TID_CONFIG={0x480, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb8d}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbd}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4800000000000000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4f}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x773f0c06}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x8}, {0x4, 0x8}, {0x1, 0xa}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf87d, 0x2b, 0x54a6, 0xff, 0x8, 0x4, 0x6, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x200, 0x8, 0x20, 0x8ff, 0xb0, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x2, 0x16, 0x16, 0x6, 0x60, 0x60, 0x2, 0x2, 0x36, 0x24, 0x4, 0x12, 0x3, 0x1b, 0x5, 0x3, 0x36, 0x5, 0x36, 0xb, 0x4, 0x2, 0x16, 0x6a, 0x5, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x2}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x7}, {0x6, 0x1}, {0x3, 0x5}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x6, 0x4}, {0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0xa}, {0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x6}, {0x1, 0x2}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x6c, 0x36, 0x3, 0x36, 0x48, 0x6c, 0x1b, 0x4, 0x36, 0x5, 0x36, 0x16, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x2, 0x7ff, 0x200, 0x1, 0x5, 0xfffe, 0xfffa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8c2, 0x7, 0x937, 0xff, 0x8001, 0x3, 0xfffd, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa313, 0x6, 0x9, 0x100, 0x3, 0x2, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x0, 0x9, 0x7, 0x0, 0x100, 0xfff7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x8}, {0x1, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x274, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x58}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x23c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x1000, 0x0, 0x6, 0x7ff, 0x9, 0x7, 0x3]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0x6}, {0x3, 0x8}, {0x7, 0x1}, {0x1, 0x7}, {0x2, 0x6}, {0x4, 0x4}, {0x4, 0x9}, {0x5, 0x6}, {0x7, 0x7}, {0x5, 0xa}, {0x2, 0x4}, {0x2}, {0x4, 0x4}, {0x7, 0x3}, {0x6, 0x3}, {0x3, 0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x5, 0x9, 0x4, 0x9, 0x3, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x1, 0x7, 0x3, 0xc, 0xd1, 0xff38, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x60, 0x9, 0x30, 0x6, 0x30, 0x24, 0x26]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd47, 0x1, 0x4, 0x3a26, 0x6, 0x1, 0x100, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x5}, {0x2, 0x2}, {0x6}, {0x6, 0xa}, {0x4, 0x5}, {0x2, 0x1}, {0x1, 0x3}, {0x5, 0x6}, {0x1, 0x8}, {0x5, 0x8}, {0x6, 0x8}, {0x4, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x5}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0xa}, {0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0x2}, {0x7, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb9, 0x800, 0x0, 0x3, 0x2, 0x81, 0xfffc, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x4, 0x6}, {0x3, 0x7}, {0x0, 0x6}, {0x1, 0x4}, {0x0, 0x8}, {0x2, 0x8}, {0x4, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x5}, {0x2}, {0x5, 0x6}, {0x4, 0x3}, {0x7, 0x4}, {0x7, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x6, 0x7}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x7}, {0x6, 0x1}, {0x5, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0x5}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x5}, {0x5, 0x5}, {}, {0x3, 0x7}, {0x7, 0x3}, {0x4, 0x3}, {0x3, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0x7}, {0x1, 0x5}, {0x2}, {0x4}, {0x3, 0x9}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x7}, {0x2, 0x6}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0x9}, {0x0, 0x7}, {0x7, 0x4}, {0x3, 0x9}, {0x7, 0x7}, {0x2, 0x4}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x1b, 0x2, 0x1, 0x3, 0xb, 0x24, 0x2, 0x48, 0x30, 0x2, 0x2]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x18, 0x24, 0xc, 0x18]}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x401, 0x5, 0x100, 0xf, 0x3, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x527, 0x5, 0x800, 0x4, 0x2, 0x8000, 0x8, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0xc6, 0x3, 0x1bfb, 0x2, 0xffb7, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x4, 0x5, 0x8, 0xad, 0x5]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x3, 0x6c, 0x5, 0xc, 0x9, 0x3, 0xb, 0x6, 0x5, 0xb, 0xb, 0x18, 0x6c, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xa1b, 0x1, 0x1800, 0x534c, 0x7, 0x7ff, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0xfc09, 0x4, 0x100, 0x6, 0x78a3, 0x9, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x5, 0x4, 0xa6, 0x7, 0x0, 0x1]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x9, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xcc, 0x8, 0x6, 0x401, 0xa, 0x1, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf8c6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x14}]}]}, @NL80211_ATTR_TID_CONFIG={0x20c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1b}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x69}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x33}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x799, 0xfae, 0x62, 0x3, 0x1b, 0x1, 0x400]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xb, 0x6c, 0x9, 0x1, 0x24, 0xb, 0xc, 0x1, 0x4, 0xc, 0x0, 0x30, 0x1b, 0x36, 0x24, 0x6, 0x6c, 0x12, 0x36, 0x364fa733b1028d8c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x8}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x39d4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000001}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x2}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000b00)={'wg0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b40)={0x0, @empty, @empty}, &(0x7f0000000b80)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c00)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000d40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xb0, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r9, 0x541b, &(0x7f0000000d80)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, 0x0, 0x9, 0x0, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)=@newtclass={0x38, 0x28, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa, 0x10}, {0xfff1, 0xfff3}, {0xffeb, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40041}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r11, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x80, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0x6, 0xc96, 0x6, 0x9]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008002}, 0x20004050) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001100)={'wlan0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f0000001140)={0x0, r10, 0x8000, 0x88, 0x7fffffff, 0x9}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001180)={0x0, 0x9, 0x6, 0x9, 0x400, 0x6}, &(0x7f00000011c0)=0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001200)={r12, 0x3ff, 0x3, [0xff, 0xb, 0x1]}, &(0x7f0000001240)=0xe) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f00000012c0)={0x3, &(0x7f0000001280)=[{0xffff, 0x4a, 0x64}, {0x9, 0x17, 0xf, 0xf52b}, {0x10, 0x4, 0xff, 0x800}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000001340)={0x4, &(0x7f0000001300)=[{0xc52, 0x96, 0x2, 0x2c}, {0x3, 0x3, 0x8, 0x4}, {0x0, 0x1, 0x3, 0x7}, {0x3ff, 0x1, 0x1, 0xca}]}, 0x10) ioctl$XFS_IOC_START_COMMIT(r10, 0x80585882, &(0x7f0000001380)={0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r11) sendmsg$TIPC_NL_NET_SET(r11, &(0x7f0000001580)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={0xa8, r14, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49c4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53a3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9dc9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8c0}, 0x40000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r13, 0x10f, 0x84, &(0x7f00000015c0), &(0x7f0000001600)=0x4) 260.321624ms ago: executing program 4 (id=2654): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='b', 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0x38}}, 0x880) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048014}, 0x20048804) ioctl$FICLONE(r2, 0x40049409, r0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r10) sendmsg$NFC_CMD_START_POLL(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r11, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}]}]}}}, @IFLA_LINK={0x8}]}, 0x78}}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c0001", @ANYBLOB="4642e8e8dabfa6abe57cfe91cfdc39d9eb31d8d97d5bb9f281e7b979"], 0x38}, 0x1, 0x0, 0x0, 0x2008814}, 0x48080) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000500)="f7c4d81a693734409c60d0bb3149b7006ce3fbc8023088235da229043252851b7aad27ed5634feae3ed445000092d6b0557a204db0a958f009faa0ceb1ee76756e3bf8c1316920310424adf332efbcb0a8a9363eeb520650c1d84286e8836fb746f57c9aa851af0a6c861f46097db090a991c2a3b262db3e6b580000000000000000", &(0x7f0000000140)=""/161}, 0x20) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@getpolicy={0x21c, 0x15, 0x2, 0x70bd2a, 0x25dfdbfd, {{@in6=@local, @in=@broadcast, 0x4e23, 0x80, 0x4e24, 0x2, 0xa, 0x80, 0xa0, 0x87, 0x0, 0xffffffffffffffff}, 0x6e6bb3, 0x1}, [@migrate={0x1cc, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in=@remote, @in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x32, 0x0, 0x0, 0x3500, 0xa, 0xf}, {@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x3501, 0xa, 0x2}, {@in6=@mcast2, @in6=@mcast1, @in=@empty, @in=@private=0xa010100, 0x6c, 0x2, 0x0, 0x34ff, 0x2, 0xa}, {@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010101, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in6=@remote, 0x32, 0x3, 0x0, 0x3507, 0x2, 0x2}, {@in6=@loopback, @in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x32, 0x1, 0x0, 0x3503, 0x2, 0xa}, {@in=@empty, @in6=@mcast1, @in6=@remote, @in=@local, 0xc3, 0x2, 0x0, 0x3505, 0xa, 0x4}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x8000}, 0x240088d2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) 197.903016ms ago: executing program 0 (id=2655): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x10}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000079100000000000006200000000000000950074000000000002bf7ac06b0bba6dae5599772183b0be1ce6508a4bcdfe52782f28f91e7fdaa8e2e6dbedd2309cbbdb7835c610f677b40089f20c1250843791e0e134073a88cfcabe01ba5e03ab30"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000000)) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x2) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000004c0)={@multicast2, @remote, 0x0}, &(0x7f0000000500)=0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f00000002c0)="baccbc8d220f86c5525f5709e195e57ff5f0", 0x12}], 0x1, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xffffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5d241057}}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0xde, &(0x7f00000003c0)=""/222, 0x41100, 0x12, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xd, 0x8, 0x1d}, 0x10, 0x1574f, r3, 0x3, &(0x7f00000005c0)=[r1, r6, r1, r1, r1], &(0x7f0000000600)=[{0x5, 0x2, 0x1, 0x7}, {0x2, 0x4, 0x1, 0x8}, {0x5, 0x1, 0xd, 0x5}], 0x10, 0x9e61}, 0x94) 193.460607ms ago: executing program 3 (id=2656): recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {0x0}, {&(0x7f0000004300)=""/214, 0xd6}], 0x3}, 0x4}], 0x1, 0x23, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfd}, 0x18) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001300)) readv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 112.481268ms ago: executing program 2 (id=2657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x798a}}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) 53.065057ms ago: executing program 1 (id=2658): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4f20, 0x40007f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b2c, &(0x7f0000000040)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) (async) sendmmsg$inet(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289", 0x1f}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x4004884) recvmmsg(r3, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/199, 0xc7}], 0x1}, 0xdac}], 0x1, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) (async) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1) (async) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001000000000008000200000000000c00028005000100000000002400038014000180080001000000000000010000000000240001801400018008000100ac1414bb08000200ac1414000c00028005000100"/128], 0x80}}, 0x0) (async) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000480)=0x8, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='#-,}\x00', 0x100, &(0x7f0000000040)={@_ha_fsid={[0x6, 0x2]}, {0x7, 0xf, 0x0, 0x20000005}}, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x2}) r7 = epoll_create(0x401) writev(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000072009fb3000000000000000007000000e6"], 0x18}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[], 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r9, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="93d7a7723ca70dc8a22ad514e9392a80b0f2c4bf9ceae41a8ac758a8a662a87f1632b4a8173e05b749240f2ff16e26d86c98e8dce4bc8c52da1fbe323f67dc9aca1baf848abc218d5268b783d844caf886312f984b76a6a9938e3897d7629d82865ddd43c79276412f78bc8e2e2b30f294e786ee44b1e66100b9d85a2e9efa77e744172be7f80d1216c29ae12099bc757d9ec6ef878d1be246a162e5d4e7", @ANYRES16=r10, @ANYBLOB="000327bd7000fbdbdf25020000002b00070073797374656d5f753a6f626a6563745f723a756e636f6e66696e65645f657865635f743a733000000500010005000000140006006d6163766c616e30000000000000000014000200fc01000000000000000000000000000014000200fe8000000000000000000000000000aa2700070073797374656d5f753a6f626a6563745f723a7570647077645f657865635f743a73300000080004006401010708000400ffffffff08000500ac1414bb14000300fc00"/210], 0xd8}, 0x1, 0x0, 0x0, 0x40085}, 0x4049890) 0s ago: executing program 2 (id=2659): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000002100010000000000000000000a001000000000000000000014000200fc"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): length. [ 144.619942][ T8801] netlink: 32 bytes leftover after parsing attributes in process `syz.1.805'. [ 144.694044][ T8794] team0: Port device dummy0 added [ 144.778548][ T8808] netlink: 'syz.1.807': attribute type 2 has an invalid length. [ 144.794590][ T8808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.807'. [ 144.826263][ T8808] raw_sendmsg: syz.1.807 forgot to set AF_INET. Fix it! [ 145.174611][ T8832] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 145.189201][ T8834] batadv_slave_1: entered promiscuous mode [ 145.190956][ T8835] netlink: 'syz.3.815': attribute type 18 has an invalid length. [ 145.208126][ T8831] batadv_slave_1: left promiscuous mode [ 145.291319][ T8835] netlink: 'syz.3.815': attribute type 18 has an invalid length. [ 145.474450][ T8853] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 145.575140][ T8860] netlink: 'syz.3.822': attribute type 58 has an invalid length. [ 145.595237][ T8860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.822'. [ 145.615035][ T8860] netlink: 'syz.3.822': attribute type 58 has an invalid length. [ 145.660556][ T8860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.822'. [ 145.688186][ T8860] netlink: 'syz.3.822': attribute type 58 has an invalid length. [ 145.732395][ T8860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.822'. [ 145.854126][ T8868] syzkaller1: entered promiscuous mode [ 145.860012][ T8868] syzkaller1: entered allmulticast mode [ 146.473478][ T8893] pimreg: entered allmulticast mode [ 146.510770][ T8893] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 146.510770][ T8893] Please contact the netfilter-devel mailing list or update your nftables rules. [ 146.836732][ T8921] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 147.359226][ T8939] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 147.385074][ T8939] bond3 (unregistering): Released all slaves [ 148.049669][ T8994] ipt_rpfilter: unknown options [ 148.058972][ T8994] wg1 speed is unknown, defaulting to 1000 [ 148.079823][ T8994] wg1 speed is unknown, defaulting to 1000 [ 148.117010][ T8994] wg1 speed is unknown, defaulting to 1000 [ 148.144332][ T8994] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 148.170725][ T8994] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 148.197519][ T8994] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 148.222752][ T8994] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.283879][ T8994] wg1 speed is unknown, defaulting to 1000 [ 148.307538][ T8994] wg1 speed is unknown, defaulting to 1000 [ 148.317529][ T8994] wg1 speed is unknown, defaulting to 1000 [ 148.348840][ T8994] wg1 speed is unknown, defaulting to 1000 [ 148.357758][ T8994] wg1 speed is unknown, defaulting to 1000 [ 148.404307][ T7712] nci: nci_rsp_packet: unknown rsp opcode 0x26 [ 148.493784][ T9016] ip6tnl1: entered allmulticast mode [ 148.560120][ T9019] syzkaller0: entered promiscuous mode [ 148.583316][ T9018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.595486][ T9019] syzkaller0: entered allmulticast mode [ 149.144962][ T9008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.357369][ T9050] validate_nla: 66 callbacks suppressed [ 149.357388][ T9050] netlink: 'syz.0.876': attribute type 3 has an invalid length. [ 149.389005][ T9053] netlink: 'syz.4.878': attribute type 11 has an invalid length. [ 149.467623][ T9052] : entered promiscuous mode [ 149.632056][ T9061] __nla_validate_parse: 74 callbacks suppressed [ 149.632073][ T9061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.881'. [ 149.675170][ T9066] netlink: 'syz.0.883': attribute type 11 has an invalid length. [ 149.684150][ T9066] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.883'. [ 149.897581][ T9076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.938349][ T9085] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 149.992772][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'. [ 150.059870][ T9087] syzkaller0: entered promiscuous mode [ 150.065542][ T9087] syzkaller0: entered allmulticast mode [ 150.153284][ T9093] netlink: 44 bytes leftover after parsing attributes in process `syz.0.892'. [ 150.179095][ T9093] netlink: 43 bytes leftover after parsing attributes in process `syz.0.892'. [ 150.206351][ T9093] netlink: 'syz.0.892': attribute type 6 has an invalid length. [ 150.224069][ T9093] netlink: 'syz.0.892': attribute type 5 has an invalid length. [ 150.254082][ T9099] netlink: 68 bytes leftover after parsing attributes in process `syz.0.892'. [ 150.285665][ T9093] netlink: 43 bytes leftover after parsing attributes in process `syz.0.892'. [ 150.314767][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 150.355212][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 150.379573][ T9107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.897'. [ 150.389024][ T9104] veth1_to_bridge: entered allmulticast mode [ 150.424542][ T9107] netlink: 'syz.2.897': attribute type 1 has an invalid length. [ 150.537120][ T9107] bond4: entered promiscuous mode [ 150.554637][ T9107] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.576028][ T9118] netlink: 'syz.1.901': attribute type 3 has an invalid length. [ 150.657364][ T9114] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.691091][ T9114] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 150.714136][ T9114] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 150.731462][ T9114] bond4: (slave vti0): making interface the new active one [ 150.748838][ T9114] vti0: entered promiscuous mode [ 150.751484][ T9132] netlink: 'syz.4.903': attribute type 11 has an invalid length. [ 150.768064][ T9114] bond4: (slave vti0): Enslaving as an active interface with an up link [ 150.774742][ T9132] netlink: 'syz.4.903': attribute type 11 has an invalid length. [ 150.893731][ T9127] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 150.913226][ T9127] syzkaller1: linktype set to 823 [ 151.169793][ T9150] xt_limit: Overflow, try lower: 604147548/4200216962 [ 151.318968][ T9158] netlink: 'syz.4.912': attribute type 2 has an invalid length. [ 151.381620][ T9158] netlink: 'syz.4.912': attribute type 2 has an invalid length. [ 151.785033][ T9177] 0: reclassify loop, rule prio 0, protocol 800 [ 151.945582][ T9198] syzkaller1: entered promiscuous mode [ 151.963008][ T9198] syzkaller1: entered allmulticast mode [ 152.531647][ T9234] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 152.566373][ T9234] tipc: Disabling bearer [ 152.677714][ T9241] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 152.704577][ T9241] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 152.713825][ T9241] gretap1: entered promiscuous mode [ 152.719236][ T9241] gretap1: entered allmulticast mode [ 152.794143][ T9245] veth0_to_bridge: entered promiscuous mode [ 152.821553][ T9244] veth0_to_bridge: left promiscuous mode [ 153.281364][ T9280] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 154.150480][ T9329] syzkaller0: entered promiscuous mode [ 154.158736][ T9329] syzkaller0: entered allmulticast mode [ 154.323516][ T9337] bond2: Unable to set down delay as MII monitoring is disabled [ 154.333312][ T9337] bond2 (unregistering): Released all slaves [ 154.837246][ T9368] __nla_validate_parse: 14 callbacks suppressed [ 154.837267][ T9368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.971'. [ 155.061185][ T9380] netlink: 'syz.0.975': attribute type 23 has an invalid length. [ 155.123722][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'. [ 155.230186][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.979'. [ 156.259254][ T9441] netlink: 'syz.4.988': attribute type 6 has an invalid length. [ 156.310279][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 156.374751][ T9441] bridge4: port 1(veth5) entered blocking state [ 156.393709][ T9441] bridge4: port 1(veth5) entered disabled state [ 156.407325][ T9441] veth5: entered allmulticast mode [ 156.415083][ T9441] veth5: entered promiscuous mode [ 156.430982][ T9449] bridge4: port 2(veth0_to_bond) entered blocking state [ 156.473513][ T9449] bridge4: port 2(veth0_to_bond) entered disabled state [ 156.486957][ T9449] veth0_to_bond: entered allmulticast mode [ 156.497500][ T9449] veth0_to_bond: entered promiscuous mode [ 156.505544][ T9449] bridge4: port 2(veth0_to_bond) entered blocking state [ 156.512654][ T9449] bridge4: port 2(veth0_to_bond) entered forwarding state [ 156.534035][ T9457] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 156.642192][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.996'. [ 156.683891][ T9469] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 156.695279][ T9469] bond3 (unregistering): Released all slaves [ 157.410824][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'. [ 157.592415][ T9527] tipc: New replicast peer: 255.255.255.255 [ 157.604892][ T9527] tipc: Enabled bearer , priority 10 [ 157.656348][ T9535] netlink: 'syz.0.1014': attribute type 9 has an invalid length. [ 158.085817][ T4947] Bluetooth: hci4: command tx timeout [ 158.717487][ T1632] tipc: Node number set to 3794778552 [ 160.295749][ T9503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.497439][ T9561] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.519363][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1021'. [ 160.633964][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 160.681974][ T9573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.814338][ T9582] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1026'. [ 160.856325][ T9584] netlink: 'syz.3.1027': attribute type 10 has an invalid length. [ 160.903943][ T9584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.918194][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 160.944651][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.985308][ T9584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.011224][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.073642][ T9597] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1031'. [ 161.284588][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 161.292223][ T9607] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1033'. [ 161.485975][ T4947] block nbd1: Receive control failed (result -32) [ 161.698150][ T9631] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1041'. [ 161.713806][ T9624] netlink: 'syz.0.1040': attribute type 1 has an invalid length. [ 162.082880][ T9660] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 162.147911][ T9664] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1050'. [ 162.495519][ T9681] netlink: 'syz.0.1058': attribute type 1 has an invalid length. [ 162.503687][ T9681] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1058'. [ 162.653295][ T9694] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 162.705476][ T9695] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 162.744412][ T9698] tipc: Enabled bearer , priority 0 [ 162.802742][ T9698] syzkaller0: entered promiscuous mode [ 162.809983][ T9698] syzkaller0: entered allmulticast mode [ 162.827900][ T9700] tipc: Resetting bearer [ 164.377669][ T9700] tipc: Disabling bearer [ 164.393316][ T9727] netlink: 'syz.0.1071': attribute type 29 has an invalid length. [ 164.424126][ T9728] netlink: 'syz.0.1071': attribute type 29 has an invalid length. [ 164.784914][ T9756] tipc: Started in network mode [ 164.794658][ T9756] tipc: Node identity cafa09c55298, cluster identity 4711 [ 164.816556][ T9756] tipc: Enabled bearer , priority 0 [ 164.836238][ T9756] syzkaller0: entered promiscuous mode [ 164.852251][ T9756] syzkaller0: entered allmulticast mode [ 164.882897][ T9756] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 165.095519][ T9763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.107578][ T9765] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 165.139407][ T9765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.294656][ T9771] dvmrp1: entered allmulticast mode [ 165.303761][ T9771] netlink: 'syz.0.1083': attribute type 39 has an invalid length. [ 165.487164][ T9744] tipc: Resetting bearer [ 165.567017][ T9744] tipc: Disabling bearer [ 165.667974][ T9779] __nla_validate_parse: 4 callbacks suppressed [ 165.667992][ T9779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1085'. [ 165.699090][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1085'. [ 165.767540][ T9784] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1086'. [ 165.813601][ T9784] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1086'. [ 165.851989][ T9784] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1086'. [ 165.887465][ T9784] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1086'. [ 168.647669][ T9779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.834945][ T9822] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 168.871062][ T9828] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 168.907239][ T9828] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 168.962410][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1100'. [ 169.031723][ T9837] sock: sock_timestamping_bind_phc: sock not bind to device [ 169.063310][ T9837] netlink: 'syz.2.1101': attribute type 1 has an invalid length. [ 169.087393][ T9837] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1101'. [ 169.188410][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 169.322877][ T9853] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1106'. [ 169.589924][ T9847] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 169.691531][ T10] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 170.039240][ T9876] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.079785][ T9876] netlink: 'syz.3.1109': attribute type 7 has an invalid length. [ 170.113578][ T9876] netlink: 'syz.3.1109': attribute type 8 has an invalid length. [ 170.184175][ T9878] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.202830][ T9886] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 170.379378][ T9893] xt_hashlimit: size too large, truncated to 1048576 [ 172.939845][ T9870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.166401][ T9923] netlink: 'syz.2.1119': attribute type 4 has an invalid length. [ 173.198493][ T9913] netlink: 'syz.4.1120': attribute type 9 has an invalid length. [ 173.348717][ T9929] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.408986][ T9934] xt_limit: Overflow, try lower: 271964/0 [ 173.432681][ T9935] __nla_validate_parse: 5 callbacks suppressed [ 173.432699][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1126'. [ 173.723673][ T9941] bond6: invalid ARP target 0.0.0.0 specified for addition [ 173.745206][ T9941] bond6: option arp_ip_target: invalid value (0) [ 173.772396][ T9958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1129'. [ 173.803960][ T9958] netlink: 'syz.4.1129': attribute type 7 has an invalid length. [ 173.813795][ T9941] bond6 (unregistering): Released all slaves [ 173.826666][ T9958] netlink: 'syz.4.1129': attribute type 8 has an invalid length. [ 173.846531][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 173.925147][ T9954] syzkaller1: entered promiscuous mode [ 173.935469][ T9954] syzkaller1: entered allmulticast mode [ 173.973669][ T9963] netlink: 'syz.1.1130': attribute type 2 has an invalid length. [ 173.985810][ T9963] netlink: 'syz.1.1130': attribute type 2 has an invalid length. [ 174.506486][ T9981] netlink: 'syz.1.1134': attribute type 14 has an invalid length. [ 174.520960][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1137'. [ 174.612629][ T9990] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1138'. [ 174.872151][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1143'. [ 174.898238][T10003] bond6: Removing last ns target with arp_interval on [ 175.011301][T10019] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1145'. [ 175.305540][T10039] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1150'. [ 175.804282][T10066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.818469][T10067] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1158'. [ 175.830866][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'. [ 176.472706][T10108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.480004][T10108] IPv6: NLM_F_CREATE should be set when creating new route [ 176.878882][T10130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.963281][T10135] macvlan2: entered promiscuous mode [ 176.969076][T10135] macvlan2: entered allmulticast mode [ 176.975620][T10135] bond3: entered promiscuous mode [ 176.982242][T10135] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 176.995413][T10135] bond3: left promiscuous mode [ 177.122513][T10141] bond0: entered allmulticast mode [ 177.164804][T10141] ip6gre1: entered allmulticast mode [ 177.189298][T10144] macvlan2: entered promiscuous mode [ 177.201062][T10144] macvlan2: entered allmulticast mode [ 177.212845][T10142] bond0: left allmulticast mode [ 177.218003][T10142] ip6gre1: left allmulticast mode [ 177.400529][T10159] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 177.559101][T10165] syzkaller0: entered promiscuous mode [ 177.564676][T10165] syzkaller0: entered allmulticast mode [ 177.575752][T10165] TC_ACT_REPEAT abuse ? [ 177.581827][T10165] netlink: 'syz.3.1185': attribute type 1 has an invalid length. [ 177.604276][T10165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.763293][T10169] IPVS: sh: FWM 3 0x00000003 - no destination available [ 177.770860][ T5758] IPVS: starting estimator thread 0... [ 177.866485][T10170] IPVS: using max 34 ests per chain, 81600 per kthread [ 177.985168][T10181] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 178.285115][T10203] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 178.450876][T10210] __nla_validate_parse: 11 callbacks suppressed [ 178.450895][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1197'. [ 178.556887][T10216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1197'. [ 178.605247][T10210] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1197'. [ 178.734914][T10221] netlink: 'syz.4.1200': attribute type 1 has an invalid length. [ 178.759400][T10224] xt_ecn: cannot match TCP bits for non-tcp packets [ 178.799943][T10221] bond3: entered promiscuous mode [ 178.805414][T10221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.825202][T10223] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.869508][T10223] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 178.903676][T10223] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 178.918555][T10223] bond3: (slave ip6gre1): making interface the new active one [ 178.931622][T10223] ip6gre1: entered promiscuous mode [ 178.955895][T10223] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 178.970008][T10232] netlink: 'syz.0.1203': attribute type 4 has an invalid length. [ 179.009951][T10245] netlink: 'syz.3.1206': attribute type 1 has an invalid length. [ 179.101803][T10254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1208'. [ 179.140961][T10245] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.155395][T10249] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 179.181971][T10256] xt_ipcomp: unknown flags 1D [ 179.231784][T10250] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1205'. [ 179.279127][T10261] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1212'. [ 179.323585][T10264] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1210'. [ 179.399190][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'. [ 179.431828][T10271] bridge1: port 1(veth3) entered blocking state [ 179.438833][T10271] bridge1: port 1(veth3) entered disabled state [ 179.445393][T10271] veth3: entered allmulticast mode [ 179.458507][T10271] veth3: entered promiscuous mode [ 179.478023][T10274] bridge1: port 2(veth0_to_bond) entered blocking state [ 179.497138][T10274] bridge1: port 2(veth0_to_bond) entered disabled state [ 179.504572][T10274] veth0_to_bond: entered allmulticast mode [ 179.523894][T10274] veth0_to_bond: entered promiscuous mode [ 179.549022][T10271] netlink: 'syz.0.1214': attribute type 1 has an invalid length. [ 179.561468][T10271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.574811][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 179.670786][T10285] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1218'. [ 180.727362][ T5638] Bluetooth: hci4: command 0x0405 tx timeout [ 181.930751][T10240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.263695][ T7707] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.282000][ T7707] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.380630][T10342] bond5: entered promiscuous mode [ 182.387574][T10342] bond5: entered allmulticast mode [ 182.394129][T10342] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.402669][ T7707] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.429610][ T7707] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.710926][T10369] openvswitch: netlink: Flow actions attr not present in new flow. [ 182.762829][T10373] netlink: 'syz.4.1245': attribute type 4 has an invalid length. [ 182.791939][T10373] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 182.942260][T10379] bridge_slave_1: left allmulticast mode [ 182.978384][T10379] bridge_slave_1: left promiscuous mode [ 182.999040][T10379] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.068071][T10379] bridge_slave_0: left allmulticast mode [ 183.088244][T10379] bridge_slave_0: left promiscuous mode [ 183.102042][T10379] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.283911][T10398] netlink: 'syz.1.1251': attribute type 11 has an invalid length. [ 183.349228][T10403] Bluetooth: MGMT ver 1.23 [ 183.707044][T10421] __nla_validate_parse: 8 callbacks suppressed [ 183.707063][T10421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1258'. [ 183.711649][T10420] sit0: entered promiscuous mode [ 183.765545][T10421] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1258'. [ 183.792041][T10420] netlink: 'syz.0.1259': attribute type 1 has an invalid length. [ 183.824644][T10420] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1259'. [ 183.897748][T10423] syzkaller0: entered promiscuous mode [ 183.927363][T10423] syzkaller0: entered allmulticast mode [ 184.284182][T10442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1268'. [ 184.296584][T10444] sock: sock_timestamping_bind_phc: sock not bind to device [ 184.494784][T10448] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 184.524643][T10448] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.1272'. [ 184.561014][T10448] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1272'. [ 184.660398][T10463] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1276'. [ 184.790571][T10465] syzkaller0: entered promiscuous mode [ 184.809644][T10465] syzkaller0: entered allmulticast mode [ 184.892688][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1277'. [ 185.244746][T10475] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.255234][T10475] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.047445][T10535] netlink: 'syz.2.1298': attribute type 4 has an invalid length. [ 187.770793][T10546] netlink: 'syz.3.1301': attribute type 1 has an invalid length. [ 187.796008][T10546] netlink: 'syz.3.1301': attribute type 3 has an invalid length. [ 187.826595][T10546] netlink: 'syz.3.1301': attribute type 7 has an invalid length. [ 187.851003][T10546] netlink: 'syz.3.1301': attribute type 8 has an invalid length. [ 187.863860][T10546] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1301'. [ 187.880250][T10546] NCSI netlink: No device for ifindex 131092 [ 188.135593][T10574] sctp: [Deprecated]: syz.4.1310 (pid 10574) Use of int in max_burst socket option deprecated. [ 188.135593][T10574] Use struct sctp_assoc_value instead [ 188.522697][T10588] bond0: (slave bond_slave_0): Releasing backup interface [ 188.548698][T10594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.711934][T10603] x_tables: duplicate underflow at hook 1 [ 188.774556][T10588] netlink: 'syz.3.1314': attribute type 1 has an invalid length. [ 188.799215][T10588] netlink: 'syz.3.1314': attribute type 2 has an invalid length. [ 188.973181][T10621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'. [ 189.113407][T10626] netlink: 'syz.4.1322': attribute type 25 has an invalid length. [ 189.194108][T10635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1323'. [ 189.235071][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1323'. [ 189.259621][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 189.314146][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 189.448733][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 189.473612][T10650] netlink: 'syz.3.1329': attribute type 5 has an invalid length. [ 189.545752][T10657] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1330'. [ 189.811122][T10673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1334'. [ 189.920851][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 189.954882][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 190.107738][ T7693] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.145276][ T7693] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.182659][ T7693] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.219472][ T7693] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.471854][T10707] 8021q: VLANs not supported on sit0 [ 190.619062][T10720] netlink: 'syz.0.1350': attribute type 12 has an invalid length. [ 190.667154][ T29] audit: type=1800 audit(1780053921.686:5): pid=10717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1349" name="memory.events" dev="tmpfs" ino=1371 res=0 errno=0 [ 190.721445][T10721] netem: change failed [ 190.797437][ T7709] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.828735][ T7709] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.842507][T10731] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20002 [ 190.950503][ T7709] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.975640][ T7709] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.125856][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 191.144609][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 191.144620][ T5645] Bluetooth: hci3: command 0x0401 tx timeout [ 191.147833][T10742] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 191.193228][T10742] ip6gretap0: entered promiscuous mode [ 191.211940][T10742] ip6gretap0: entered allmulticast mode [ 191.235153][T10751] validate_nla: 4 callbacks suppressed [ 191.235169][T10751] netlink: 'syz.2.1361': attribute type 1 has an invalid length. [ 191.300279][T10752] netlink: 'syz.2.1361': attribute type 1 has an invalid length. [ 191.394993][T10757] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 191.414120][T10752] openvswitch: netlink: IP tunnel dst address not specified [ 191.919193][T10794] netlink: 'syz.1.1369': attribute type 2 has an invalid length. [ 191.940261][T10794] netlink: 'syz.1.1369': attribute type 8 has an invalid length. [ 192.033948][T10799] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.041697][T10799] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.066902][T10799] bridge0: entered promiscuous mode [ 192.101189][T10800] xt_hashlimit: size too large, truncated to 1048576 [ 192.459688][T10818] netlink: 'syz.0.1375': attribute type 16 has an invalid length. [ 192.482447][T10818] netlink: 'syz.0.1375': attribute type 17 has an invalid length. [ 192.520242][T10821] xt_connbytes: Forcing CT accounting to be enabled [ 192.697765][T10832] geneve0: entered allmulticast mode [ 192.964212][T10842] netlink: 'syz.3.1381': attribute type 1 has an invalid length. [ 192.996775][ T5293] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 193.095170][T10849] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 193.102194][T10853] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 193.329170][T10861] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 193.347766][T10863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.369787][T10865] netlink: 'syz.3.1389': attribute type 11 has an invalid length. [ 193.460602][T10871] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 193.741664][T10885] syzkaller0: entered promiscuous mode [ 193.751663][T10885] syzkaller0: entered allmulticast mode [ 193.770410][ T5293] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 193.783540][T10890] netlink: 'syz.0.1395': attribute type 4 has an invalid length. [ 193.784607][T10885] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 194.175007][ T1314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 194.215150][T10907] team0: Cannot enslave team device to itself [ 194.439905][T10916] netlink: 'syz.1.1406': attribute type 1 has an invalid length. [ 194.461558][T10916] __nla_validate_parse: 9 callbacks suppressed [ 194.461574][T10916] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1406'. [ 194.486235][T10916] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1406'. [ 194.500921][T10925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1409'. [ 194.525065][T10925] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 194.541957][T10916] netlink: 'syz.1.1406': attribute type 1 has an invalid length. [ 194.563718][T10916] netlink: 606 bytes leftover after parsing attributes in process `syz.1.1406'. [ 194.576479][T10921] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1406'. [ 194.591232][T10921] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1406'. [ 194.607977][T10921] netlink: 606 bytes leftover after parsing attributes in process `syz.1.1406'. [ 194.771439][T10939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1413'. [ 194.800520][T10942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1413'. [ 194.983016][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 195.395461][T10974] tls_set_device_offload_rx: netdev not found [ 196.731157][T11022] validate_nla: 5 callbacks suppressed [ 196.731175][T11022] netlink: 'syz.0.1439': attribute type 5 has an invalid length. [ 197.070221][T11040] netlink: 'syz.2.1443': attribute type 58 has an invalid length. [ 197.181710][T11043] netlink: 'syz.3.1444': attribute type 2 has an invalid length. [ 197.389662][T11044] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 197.408951][T11049] netlink: 'syz.0.1445': attribute type 11 has an invalid length. [ 197.426447][T11044] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 197.473615][T10849] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 197.559592][T11044] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 197.704086][T11044] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 197.770690][ T5293] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 198.086072][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 199.468413][T11061] netlink: 'syz.0.1447': attribute type 3 has an invalid length. [ 199.694735][T11080] lo: entered promiscuous mode [ 199.769357][T11080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.119923][T11111] x_tables: duplicate underflow at hook 2 [ 200.278181][T11113] sock: sock_timestamping_bind_phc: sock not bind to device [ 200.311258][T11117] netlink: 'syz.2.1467': attribute type 1 has an invalid length. [ 200.327387][T11121] __nla_validate_parse: 5 callbacks suppressed [ 200.327403][T11121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1466'. [ 200.351770][T11117] netlink: 'syz.2.1467': attribute type 1 has an invalid length. [ 200.483976][T11115] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 28 [ 200.535092][T11131] netlink: zone id is out of range [ 200.548404][T11131] netlink: zone id is out of range [ 200.555505][T11131] netlink: zone id is out of range [ 200.562620][T11131] netlink: zone id is out of range [ 200.568490][T11131] netlink: zone id is out of range [ 200.572166][T11125] netlink: set zone limit has 4 unknown bytes [ 200.580280][T11131] netlink: zone id is out of range [ 200.592788][T11131] netlink: zone id is out of range [ 200.613331][T11131] netlink: zone id is out of range [ 200.938193][T11157] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 200.948313][T11157] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 200.952698][T11155] netlink: 'syz.0.1478': attribute type 83 has an invalid length. [ 201.077617][T11163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1481'. [ 201.148739][T11166] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 201.158386][T11166] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1483'. [ 201.172858][T11166] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1483'. [ 201.182373][T11167] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 201.191828][T11167] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1483'. [ 201.201409][T11167] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1483'. [ 201.420273][ T29] audit: type=1107 audit(1780053932.446:6): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÞZ‘jÕˆòÝVþTØL A`6ñølWš"¿NëÅ•†N'Z [ 201.420273][ T29] ûj/8Ö»“' [ 201.613971][T11169] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.1482'. [ 201.630888][T11184] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.642643][T11185] tipc: Started in network mode [ 201.665110][T11185] tipc: Node identity ac14140f, cluster identity 4711 [ 201.674764][T11185] tipc: New replicast peer: 255.255.255.255 [ 201.709465][T11185] tipc: Enabled bearer , priority 10 [ 201.749139][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1487'. [ 201.758996][T11186] netlink: 'syz.2.1487': attribute type 10 has an invalid length. [ 201.782259][T11192] netlink: 'syz.3.1488': attribute type 12 has an invalid length. [ 201.792832][ T5293] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 201.806734][T11192] netlink: 'syz.3.1488': attribute type 29 has an invalid length. [ 201.830476][T11192] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1488'. [ 201.875571][T11192] netlink: 'syz.3.1488': attribute type 1 has an invalid length. [ 201.903652][T11192] netlink: 'syz.3.1488': attribute type 2 has an invalid length. [ 201.915829][T11192] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1488'. [ 201.992662][T11186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.059064][T11186] team0: Port device netdevsim1 added [ 202.064847][T11192] vlan1: entered allmulticast mode [ 202.080286][T11192] vet: entered allmulticast mode [ 202.114436][T11206] pim6reg1: entered promiscuous mode [ 202.143276][T11206] pim6reg1: entered allmulticast mode [ 202.212958][T11212] netlink: 'syz.0.1493': attribute type 1 has an invalid length. [ 202.369938][T11218] bond4: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 202.435854][T11218] bond4: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 202.470438][T11218] bond4: (slave ip6gre3): making interface the new active one [ 202.502409][T11231] netlink: 'syz.1.1498': attribute type 20 has an invalid length. [ 202.513641][T11218] bond4: (slave ip6gre3): Enslaving as an active interface with an up link [ 202.528152][T11225] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.767118][T11243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.816484][T11243] bond0 (unregistering): Released all slaves [ 202.851439][ T5759] tipc: Node number set to 2886997007 [ 203.126153][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 203.860939][T11298] bond0: entered promiscuous mode [ 203.902522][T11299] macvlan2: entered promiscuous mode [ 203.931739][T11299] macvlan2: entered allmulticast mode [ 203.960457][T11299] bond0: (slave macvlan2): Opening slave failed [ 204.063781][T11304] macvlan2: entered promiscuous mode [ 204.076138][T11304] macvlan2: entered allmulticast mode [ 204.088424][T11304] bond0: (slave macvlan2): Opening slave failed [ 204.149065][T11316] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 204.168196][T11312] syzkaller1: entered promiscuous mode [ 204.174758][T11312] syzkaller1: entered allmulticast mode [ 204.502558][T11339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.510149][T11390] __nla_validate_parse: 14 callbacks suppressed [ 205.510167][T11390] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1537'. [ 205.579531][T11396] veth3: entered promiscuous mode [ 205.590870][T11396] veth3: entered allmulticast mode [ 205.661603][T11396] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1539'. [ 205.947357][T11413] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 206.008988][T11419] netlink: 'syz.2.1545': attribute type 3 has an invalid length. [ 206.046631][ T5293] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.101211][T10849] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.168049][T11426] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1547'. [ 206.370728][T11433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.500134][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 206.706449][T11443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1553'. [ 206.752152][T11451] SET target dimension over the limit! [ 207.054541][T11469] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1563'. [ 207.103046][T11476] net_ratelimit: 38 callbacks suppressed [ 207.103065][T11476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.207517][T11477] syzkaller0: entered promiscuous mode [ 207.222366][T11477] syzkaller0: entered allmulticast mode [ 207.620875][T11514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.622141][T11513] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1576'. [ 207.630308][T11514] team0: Port device batadv0 added [ 207.675021][T11519] macvlan0: entered promiscuous mode [ 207.725083][T11522] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1576'. [ 207.734544][T11522] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 207.753040][T11523] h: entered promiscuous mode [ 207.838086][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 207.849300][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 208.165887][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 210.599282][T11513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.612349][T11535] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 210.620926][T11535] __nla_validate_parse: 5 callbacks suppressed [ 210.620942][T11535] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1583'. [ 210.663696][T11535] workqueue: Failed to create a rescuer kthread for wq "phy5": -EINTR [ 210.766363][T11550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1587'. [ 211.254733][T11581] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1596'. [ 211.298963][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1596'. [ 211.407519][T11589] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1600'. [ 211.448414][T11589] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1600'. [ 211.470060][T11589] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1600'. [ 211.493803][T11591] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1600'. [ 211.530614][T11597] syzkaller0: entered promiscuous mode [ 211.532210][T11591] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1600'. [ 211.551650][T11597] syzkaller0: entered allmulticast mode [ 211.576018][T11591] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1600'. [ 212.337375][T11639] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 212.345366][T11639] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 212.354589][T11638] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 212.362951][T11638] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 212.470580][T11642] netlink: 'syz.3.1615': attribute type 1 has an invalid length. [ 213.205903][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 213.354852][T11708] netlink: 'syz.2.1632': attribute type 3 has an invalid length. [ 213.525861][T11719] sctp: [Deprecated]: syz.0.1637 (pid 11719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.525861][T11719] Use struct sctp_sack_info instead [ 213.600631][T11727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.663493][T11727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.731101][T11732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.991573][T11726] syzkaller1: entered promiscuous mode [ 214.011726][T11726] syzkaller1: entered allmulticast mode [ 214.155447][T11706] infiniband syz0: set active [ 214.177431][T11706] infiniband syz0: added veth0_vlan [ 214.217246][T11754] ip6gre4: entered allmulticast mode [ 214.318376][T11706] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 214.344430][T11706] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 214.393002][T11706] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 214.553018][T11706] RDS/IB: syz0: added [ 214.562896][T11706] smc: adding ib device syz0 with port count 1 [ 214.570611][T11706] smc: ib device syz0 port 1 has no pnetid [ 214.698708][T11771] bond6: invalid ARP target 0.0.0.0 specified for addition [ 214.745325][T11771] bond6: option arp_ip_target: invalid value (0) [ 214.767498][T11771] bond6 (unregistering): Released all slaves [ 215.228091][T11805] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 215.387381][T11812] bond5: Invalid ad_actor_system MAC address. [ 215.396677][T11812] bond5: option ad_actor_system: invalid value (1) [ 215.423408][T11812] bond5 (unregistering): Released all slaves [ 215.447172][T11819] openvswitch: netlink: Flow actions attr not present in new flow. [ 215.680994][T11825] netlink: 'syz.3.1668': attribute type 15 has an invalid length. [ 215.700471][T11825] __nla_validate_parse: 19 callbacks suppressed [ 215.700487][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1668'. [ 215.727836][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1667'. [ 215.767315][ T7352] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 215.776521][ T7352] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 215.801050][ T7352] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 215.820097][ T7352] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 215.942734][T11833] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 216.183857][T11838] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1673'. [ 216.727281][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1681'. [ 216.891502][T11862] netlink: 'syz.3.1682': attribute type 1 has an invalid length. [ 216.908615][T11862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.035028][T11865] netlink: 'syz.0.1683': attribute type 1 has an invalid length. [ 217.167018][T11865] bond5: entered promiscuous mode [ 217.172543][T11865] 8021q: adding VLAN 0 to HW filter on device bond5 [ 217.203364][T11871] bond5: (slave bridge5): making interface the new active one [ 217.211472][T11871] bridge5: entered promiscuous mode [ 217.217989][T11871] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 217.242180][T11872] h: entered promiscuous mode [ 217.271787][T11874] sctp: [Deprecated]: syz.3.1685 (pid 11874) Use of int in maxseg socket option. [ 217.271787][T11874] Use struct sctp_assoc_value instead [ 217.305864][T11854] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 217.708058][T11898] tipc: Enabled bearer , priority 11 [ 217.779884][T11900] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1692'. [ 217.801261][T11900] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1692'. [ 217.810779][T11900] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1692'. [ 217.896107][T11900] bridge5: entered promiscuous mode [ 217.917073][T11900] bridge5: entered allmulticast mode [ 218.129495][T11922] veth0_to_bond: entered allmulticast mode [ 218.168427][T11924] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 218.224108][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1701'. [ 218.245865][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 218.271263][T11928] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1701'. [ 218.328438][T11931] bond6: (slave geneve4): making interface the new active one [ 218.339515][T11931] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 218.350751][ T7681] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 218.375079][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1703'. [ 218.391933][ T7681] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 218.412518][ T7681] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 218.440492][ T7681] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 218.587547][T11946] 8021q: VLANs not supported on bond0 [ 218.832209][ T5852] tipc: Node number set to 2556561861 [ 218.939642][T11969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.944504][T11968] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 219.215177][T11991] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 219.526769][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.622353][T12009] ve: renamed from ip6gre0 (while UP) [ 219.682980][T12022] siw: device registration error -23 [ 219.737003][T12022] »»»»»»: renamed from lo [ 219.779627][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.789790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.840711][T12027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.851903][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.984100][T12038] 8021q: VLANs not supported on ip6tnl0 [ 220.133715][T12043] syzkaller0: entered promiscuous mode [ 220.140703][T12043] syzkaller0: entered allmulticast mode [ 220.155555][T12043] xt_socket: unknown flags 0xe4 [ 220.566068][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.594129][T12066] xt_l2tp: v2 doesn't support IP mode [ 220.651015][T12066] netlink: 'syz.4.1742': attribute type 1 has an invalid length. [ 220.710196][T12044] netlink: 'syz.3.1734': attribute type 4 has an invalid length. [ 220.726465][T12044] __nla_validate_parse: 10 callbacks suppressed [ 220.726480][T12044] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1734'. [ 220.842040][T12078] netlink: 'syz.4.1745': attribute type 15 has an invalid length. [ 220.942518][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1747'. [ 220.962961][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1747'. [ 221.262256][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1751'. [ 221.268369][T12101] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 221.316954][T12099] syzkaller1: entered promiscuous mode [ 221.322716][T12099] syzkaller1: entered allmulticast mode [ 221.392786][T12110] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20002 [ 221.636014][T12115] vlan3: entered allmulticast mode [ 221.653382][T12115] bond0: entered allmulticast mode [ 221.658806][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.671733][T12115] bond_slave_0: entered allmulticast mode [ 221.682671][T12115] bond_slave_1: entered allmulticast mode [ 221.702436][T12114] tipc: Invalid UDP bearer configuration [ 221.702486][T12114] tipc: Enabling of bearer rejected, failed to enable media [ 221.959828][T12130] bond8: (slave gre0): Device is not bonding slave [ 221.969553][T12130] bond8: option active_slave: invalid value (gre0) [ 221.981702][T12130] bond8 (unregistering): Released all slaves [ 222.019021][T12138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1763'. [ 222.030650][T12140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1763'. [ 222.214146][T12150] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 222.338053][T12154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1766'. [ 222.370703][T12157] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1767'. [ 222.417541][T12159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.418713][T10849] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 222.725997][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.808249][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.816862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.286122][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 223.765998][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.246889][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.256978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.809404][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.398655][T12173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1772'. [ 225.401378][T12168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1771'. [ 225.484584][T12168] syzkaller0: entered promiscuous mode [ 225.504646][T12168] syzkaller0: entered allmulticast mode [ 225.820416][T12183] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 225.845926][ T5852] net_ratelimit: 3 callbacks suppressed [ 225.845943][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.892652][T12183] bond1 (unregistering): Released all slaves [ 226.038306][T12209] __nla_validate_parse: 1 callbacks suppressed [ 226.038326][T12209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1779'. [ 226.057315][T12200] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 226.069819][T12200] bond4 (unregistering): Released all slaves [ 226.297994][T12219] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1782'. [ 226.472765][T12228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1787'. [ 226.540097][T12232] netlink: 'syz.4.1787': attribute type 3 has an invalid length. [ 226.885885][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.995550][T12266] x_tables: duplicate underflow at hook 2 [ 227.279002][T12277] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1800'. [ 227.616428][T12279] syzkaller0: entered promiscuous mode [ 227.625932][T12279] syzkaller0: entered allmulticast mode [ 227.774113][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 227.851193][T12315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.892800][T12315] netlink: 'syz.1.1807': attribute type 1 has an invalid length. [ 227.909651][T12315] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1807'. [ 227.929689][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.938391][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.946942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.325838][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 228.660934][T12333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1809'. [ 228.671032][T12333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1809'. [ 228.743881][T12334] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 228.967235][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.007607][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.016726][ T7707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.025078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.119870][T12304] syzkaller0: entered promiscuous mode [ 230.125394][T12304] syzkaller0: entered allmulticast mode [ 230.476889][T12349] netlink: 'syz.1.1813': attribute type 3 has an invalid length. [ 230.527058][T12349] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1813'. [ 230.647037][ T7693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.787201][T12359] syzkaller0: entered promiscuous mode [ 230.822875][T12359] syzkaller0: entered allmulticast mode [ 231.046714][ T5852] net_ratelimit: 1 callbacks suppressed [ 231.046731][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.117274][T12377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1821'. [ 231.166390][T12377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1821'. [ 231.545041][T12405] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1826'. [ 231.589902][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1825'. [ 231.830951][T12409] tipc: Started in network mode [ 231.855948][T12409] tipc: Node identity e26473bee957, cluster identity 4711 [ 231.877579][T12409] tipc: Enabled bearer , priority 0 [ 231.918296][T12416] syzkaller0: entered promiscuous mode [ 231.934583][T12416] syzkaller0: entered allmulticast mode [ 231.966531][T12409] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 232.034573][T12409] tipc: Resetting bearer [ 232.080530][T12408] tipc: Resetting bearer [ 232.090900][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.140959][T12408] tipc: Disabling bearer [ 232.218921][T12428] xt_TCPMSS: Only works on TCP SYN packets [ 232.659630][T12455] syzkaller0: entered promiscuous mode [ 232.668410][T12455] syzkaller0: entered allmulticast mode [ 232.690640][T12453] netlink: 'syz.3.1839': attribute type 3 has an invalid length. [ 232.694992][T12455] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1840'. [ 232.708780][T12453] netlink: 'syz.3.1839': attribute type 3 has an invalid length. [ 232.722980][T12455] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1840'. [ 232.730991][T12414] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 232.822396][T12459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.997855][T12470] netlink: 'syz.3.1844': attribute type 83 has an invalid length. [ 233.056855][ T5638] Bluetooth: hci4: command 0x0405 tx timeout [ 233.064728][T12473] x_tables: duplicate underflow at hook 1 [ 233.136668][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.351207][T12482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.362382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.372275][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 233.706985][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.715437][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.753611][T12498] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1855'. [ 234.002301][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1860'. [ 234.098118][T12523] sit0: Caught tx_queue_len zero misconfig [ 234.167925][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.588861][T12554] syzkaller1: entered allmulticast mode [ 235.050215][T12583] veth5: entered allmulticast mode [ 235.126352][ T5638] Bluetooth: hci4: command 0x0405 tx timeout [ 235.207417][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.282882][T12597] only policy match revision 0 supported [ 235.282904][T12597] unable to load match [ 235.349709][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1881'. [ 235.384871][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1881'. [ 235.571738][T12613] xt_hashlimit: size too large, truncated to 1048576 [ 235.769155][ T7693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.226259][T12634] pim6reg: entered allmulticast mode [ 236.259116][ T24] net_ratelimit: 1 callbacks suppressed [ 236.259132][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.329420][T12646] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 236.407168][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.415605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.055107][T12697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.249478][T12704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.286846][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.528270][T12724] __nla_validate_parse: 1 callbacks suppressed [ 237.528288][T12724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1916'. [ 237.591340][T12724] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 238.013060][T12754] netlink: 'syz.3.1927': attribute type 1 has an invalid length. [ 238.022876][T12756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1926'. [ 238.054287][T12752] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.1928'. [ 238.078324][T12763] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1927'. [ 238.092228][T12755] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 238.131054][T12761] netlink: 'syz.0.1929': attribute type 2 has an invalid length. [ 238.253484][T12774] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 238.302774][T12774] 8021q: adding VLAN 0 to HW filter on device bond8 [ 238.327704][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.343387][T12770] bond8: (slave gretap1): making interface the new active one [ 238.352215][T12770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.363145][T12770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.386468][T12770] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 238.405792][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 238.462552][T12786] netlink: 'syz.4.1935': attribute type 1 has an invalid length. [ 238.534035][T12789] netlink: 'syz.0.1934': attribute type 1 has an invalid length. [ 238.557003][T12790] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.1935'. [ 238.558501][T12792] syz.3.1936: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 238.582340][T12792] CPU: 0 UID: 0 PID: 12792 Comm: syz.3.1936 Not tainted syzkaller #0 PREEMPT(full) [ 238.582368][T12792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.582381][T12792] Call Trace: [ 238.582388][T12792] [ 238.582401][T12792] dump_stack_lvl+0xe8/0x150 [ 238.582431][T12792] warn_alloc+0x249/0x340 [ 238.582461][T12792] ? stack_trace_save+0xa9/0x100 [ 238.582491][T12792] ? __pfx_warn_alloc+0x10/0x10 [ 238.582524][T12792] ? kasan_save_track+0x4f/0x80 [ 238.582548][T12792] ? kasan_save_track+0x3e/0x80 [ 238.582579][T12792] ? __kasan_kmalloc+0x93/0xb0 [ 238.582606][T12792] ? __kmalloc_cache_noprof+0x31c/0x660 [ 238.582632][T12792] ? xskq_create+0x56/0x170 [ 238.582658][T12792] ? xsk_setsockopt+0x54c/0x990 [ 238.582681][T12792] ? do_sock_setsockopt+0x17c/0x1b0 [ 238.582709][T12792] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 238.582735][T12792] ? do_syscall_64+0x174/0x580 [ 238.582758][T12792] __vmalloc_node_range_noprof+0x132/0x1750 [ 238.582817][T12792] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 238.582851][T12792] ? __kasan_kmalloc+0x93/0xb0 [ 238.582882][T12792] vmalloc_user_noprof+0xad/0xe0 [ 238.582910][T12792] ? xskq_create+0xbf/0x170 [ 238.582938][T12792] xskq_create+0xbf/0x170 [ 238.582967][T12792] xsk_init_queue+0x8a/0xe0 [ 238.582996][T12792] xsk_setsockopt+0x54c/0x990 [ 238.583024][T12792] ? __pfx_xsk_setsockopt+0x10/0x10 [ 238.583049][T12792] ? __pfx_aa_sk_perm+0x10/0x10 [ 238.583080][T12792] ? aa_sock_opt_perm+0xff/0x1a0 [ 238.583109][T12792] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 238.583136][T12792] ? __pfx_xsk_setsockopt+0x10/0x10 [ 238.583164][T12792] do_sock_setsockopt+0x17c/0x1b0 [ 238.583196][T12792] __x64_sys_setsockopt+0x13d/0x1b0 [ 238.583223][T12792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.583243][T12792] do_syscall_64+0x174/0x580 [ 238.583260][T12792] ? trace_irq_disable+0x3b/0x140 [ 238.583285][T12792] ? clear_bhb_loop+0x40/0x90 [ 238.583311][T12792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.583327][T12792] RIP: 0033:0x7f2ff4b9ce59 [ 238.583346][T12792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.583362][T12792] RSP: 002b:00007f2ff5981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 238.583383][T12792] RAX: ffffffffffffffda RBX: 00007f2ff4e15fa0 RCX: 00007f2ff4b9ce59 [ 238.583397][T12792] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 238.583408][T12792] RBP: 00007f2ff4c32d6f R08: 0000000000000004 R09: 0000000000000000 [ 238.583418][T12792] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.583429][T12792] R13: 00007f2ff4e16038 R14: 00007f2ff4e15fa0 R15: 00007ffeb62016c8 [ 238.583461][T12792] [ 238.583547][T12792] Mem-Info: [ 238.620296][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1935'. [ 238.627147][T12792] active_anon:6435 inactive_anon:0 isolated_anon:0 [ 238.627147][T12792] active_file:2699 inactive_file:40015 isolated_file:0 [ 238.627147][T12792] unevictable:768 dirty:65 writeback:0 [ 238.627147][T12792] slab_reclaimable:10936 slab_unreclaimable:106575 [ 238.627147][T12792] mapped:29296 shmem:1320 pagetables:1371 [ 238.627147][T12792] sec_pagetables:0 bounce:0 [ 238.627147][T12792] kernel_misc_reclaimable:0 [ 238.627147][T12792] free:1310735 free_pcp:17050 free_cma:0 [ 238.694412][T12796] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1934'. [ 238.699188][T12792] Node 0 active_anon:25740kB inactive_anon:0kB active_file:10796kB inactive_file:159856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119784kB dirty:260kB writeback:0kB shmem:3744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14808kB pagetables:5228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 238.729535][T12786] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.752090][T12792] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 239.010143][T12789] 8021q: adding VLAN 0 to HW filter on device bond7 [ 239.040050][T12792] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.070892][T12799] bond5: (slave bridge6): making interface the new active one [ 239.098282][T12799] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 239.113914][T12792] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 239.129714][T12792] Node 0 DMA32 free:1293112kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25988kB inactive_anon:0kB active_file:10796kB inactive_file:159856kB unevictable:1536kB writepending:264kB zspages:0kB present:3129332kB managed:2552800kB mlocked:0kB bounce:0kB free_pcp:60824kB local_pcp:27024kB free_cma:0kB [ 239.170114][T12792] lowmem_reserve[]: 0 0 0 0 0 [ 239.175072][T12792] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 239.208645][T12792] lowmem_reserve[]: 0 0 0 0 0 [ 239.213420][T12792] Node 1 Normal free:3940432kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.268307][T12792] lowmem_reserve[]: 0 0 0 0 0 [ 239.276498][T12792] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 239.289713][T12792] Node 0 DMA32: 5169*4kB (UM) 2559*8kB (UME) 768*16kB (UME) 218*32kB (UM) 77*64kB (UM) 136*128kB (UM) 90*256kB (UM) 64*512kB (UME) 23*1024kB (UM) 16*2048kB (UM) 268*4096kB (UM) = 1292604kB [ 239.308935][T12792] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 239.320742][T12792] Node 1 Normal: 0*4kB 6*8kB (UM) 10*16kB (UM) 14*32kB (UM) 5*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3940432kB [ 239.363537][T12792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.374581][T12792] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.384682][T12792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.404340][T12792] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.415062][T12792] 44004 total pagecache pages [ 239.425746][T12792] 0 pages in swap cache [ 239.436469][T12792] Free swap = 124996kB [ 239.445385][T12792] Total swap = 124996kB [ 239.456269][T12792] 2097051 pages RAM [ 239.498633][T12792] 0 pages HighMem/MovableOnly [ 239.519944][T12792] 427066 pages reserved [ 239.526682][T12817] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1941'. [ 239.536122][T12792] 0 pages cma reserved [ 239.574312][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 239.672093][T12823] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1944'. [ 239.811836][T12838] netlink: 'syz.4.1948': attribute type 1 has an invalid length. [ 239.853661][T12823] hsr_slave_1 (unregistering): left promiscuous mode [ 239.931763][T12831] xt_hl: Unknown TTL match mode: 255 [ 239.940896][T12842] geneve0: left allmulticast mode [ 239.965530][T12845] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 239.976289][T12845] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 239.993023][T12845] bond6: (slave ip6gre2): making interface the new active one [ 240.001298][T12845] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 240.028942][T12847] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 240.043736][T12847] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 240.121995][T12855] veth0_macvtap: Caught tx_queue_len zero misconfig [ 240.380642][T12870] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.657149][T12882] syz.2.1961 (12882) used greatest stack depth: 17944 bytes left [ 241.120636][T12916] bridge6: entered promiscuous mode [ 241.154458][T12916] bridge6: entered allmulticast mode [ 241.289443][ T5759] net_ratelimit: 11 callbacks suppressed [ 241.289460][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.448433][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.474658][T12936] xfrm1: entered allmulticast mode [ 241.494653][T12936] netlink: 'syz.3.1973': attribute type 3 has an invalid length. [ 241.526591][ T7695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.535003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.561097][T12938] SET target dimension over the limit! [ 241.582504][T12938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.690379][ T7693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.941460][T12962] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 242.156025][T12975] netlink: 'syz.2.1984': attribute type 3 has an invalid length. [ 242.177549][T12975] netlink: 'syz.2.1984': attribute type 1 has an invalid length. [ 242.187327][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.195940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.337202][T12979] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 242.486987][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.763664][T13003] __nla_validate_parse: 3 callbacks suppressed [ 242.763683][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'. [ 242.820755][T13003] bridge_slave_1: left allmulticast mode [ 242.846053][T13003] bridge_slave_1: left promiscuous mode [ 242.863315][T13003] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.883595][T13003] bridge_slave_0: left allmulticast mode [ 242.886655][ T94] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.892417][T13003] bridge_slave_0: left promiscuous mode [ 242.905496][T13003] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.054670][T13013] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1997'. [ 243.172557][T13013] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1997'. [ 243.188581][T13022] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1997'. [ 243.245017][T13017] syzkaller0: entered promiscuous mode [ 243.251307][T13017] syzkaller0: entered allmulticast mode [ 243.285137][T13020] netlink: 'syz.2.1998': attribute type 2 has an invalid length. [ 243.334007][T13020] netlink: 'syz.2.1998': attribute type 11 has an invalid length. [ 243.381855][T13020] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1998'. [ 243.427050][T13041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2003'. [ 243.441868][T13041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2003'. [ 243.446029][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 243.487210][T13042] sctp: [Deprecated]: syz.1.2001 (pid 13042) Use of int in max_burst socket option. [ 243.487210][T13042] Use struct sctp_assoc_value instead [ 243.563937][T13047] tipc: Trying to set illegal importance in message [ 243.870177][T13062] ip6t_rpfilter: unknown options [ 245.305359][T13055] netlink: 'syz.4.2004': attribute type 1 has an invalid length. [ 245.316190][T13055] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2004'. [ 245.602100][T13078] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2008'. [ 245.884196][T13096] netlink: 'syz.4.2013': attribute type 5 has an invalid length. [ 245.885451][T13093] veth0_to_bond: left allmulticast mode [ 245.957120][T13093] veth0_to_bond: left promiscuous mode [ 245.994885][T13093] bridge2: port 1(veth0_to_bond) entered disabled state [ 246.088231][T13093] team0: Port device team_slave_0 removed [ 246.115288][T13093] team0: Port device team_slave_1 removed [ 246.127077][T13093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.131870][T13111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2016'. [ 246.143564][T13093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.153284][T13093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.188727][T13093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.223379][T13093] bond0: (slave ip6gre1): Releasing backup interface [ 246.230752][T13093] ip6gre1: left promiscuous mode [ 246.294944][T13116] veth0: entered promiscuous mode [ 246.498995][T13102] syzkaller0: entered promiscuous mode [ 246.507783][T13102] syzkaller0: entered allmulticast mode [ 246.526382][T13116] veth0: left promiscuous mode [ 246.646670][ T24] net_ratelimit: 12 callbacks suppressed [ 246.646688][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.303349][ T94] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.311735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.415915][ T7693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.692139][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.927052][ T7693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.935486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.469920][T13152] netlink: 'syz.4.2026': attribute type 2 has an invalid length. [ 248.485937][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 248.494397][T13152] __nla_validate_parse: 2 callbacks suppressed [ 248.494411][T13152] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2026'. [ 248.527058][ T94] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.536752][T13155] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 248.589391][T13157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2028'. [ 248.599849][T13152] netlink: 'syz.4.2026': attribute type 2 has an invalid length. [ 248.612659][T13152] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2026'. [ 248.684872][T13169] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2029'. [ 248.726988][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.760520][T13163] tipc: Enabled bearer , priority 10 [ 248.935301][T13176] ip6t_srh: unknown srh match flags 5F28 [ 248.942811][T13176] siw: device registration error -23 [ 249.282460][T13196] ip6tnl1: entered allmulticast mode [ 249.369493][ T29] audit: type=1107 audit(1780053980.386:7): pid=13199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 249.818488][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2048'. [ 249.922690][T13225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2048'. [ 249.939885][T13226] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2048'. [ 250.020807][T13228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2049'. [ 250.070342][ T5782] tipc: Node number set to 187921342 [ 250.174961][T13233] netlink: 'syz.1.2053': attribute type 1 has an invalid length. [ 250.247401][T13233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.271550][T13239] bond4: entered promiscuous mode [ 250.285003][T13239] bond4: entered allmulticast mode [ 250.344798][T13249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2056'. [ 250.639951][T13270] syzkaller0: entered promiscuous mode [ 250.654576][T13270] syzkaller0: entered allmulticast mode [ 250.672279][T13276] netlink: 'syz.3.2061': attribute type 1 has an invalid length. [ 251.053986][T13290] netlink: 'syz.3.2068': attribute type 22 has an invalid length. [ 251.074590][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2068'. [ 251.103940][T13290] netlink: 'syz.3.2068': attribute type 22 has an invalid length. [ 251.290751][T13311] netlink: 'syz.3.2071': attribute type 83 has an invalid length. [ 251.579534][ T29] audit: type=1804 audit(1780053982.606:8): pid=13328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2076" name="/newroot/424/cgroup.controllers" dev="tmpfs" ino=2179 res=1 errno=0 [ 251.656920][ T29] audit: type=1800 audit(1780053982.606:9): pid=13328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2076" name="cgroup.controllers" dev="tmpfs" ino=2179 res=0 errno=0 [ 251.758783][T13336] netlink: 'syz.1.2080': attribute type 1 has an invalid length. [ 251.777241][T13336] netlink: 'syz.1.2080': attribute type 1 has an invalid length. [ 251.846021][ T5852] net_ratelimit: 12 callbacks suppressed [ 251.846037][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.938216][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.095370][T13357] netlink: 'syz.1.2087': attribute type 1 has an invalid length. [ 252.239630][T13365] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 252.888273][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.047466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.056552][ T7709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.065168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.075968][ T7707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.084376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.097552][ T7693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.525804][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 253.604606][T13431] __nla_validate_parse: 17 callbacks suppressed [ 253.604624][T13431] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2111'. [ 253.807820][T13443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2116'. [ 253.926113][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.937090][T13450] tipc: Enabling of bearer rejected, already enabled [ 253.990660][T13448] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2118'. [ 254.078349][T13463] netlink: 'syz.4.2120': attribute type 24 has an invalid length. [ 254.214285][T13469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2123'. [ 254.248202][T13469] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2123'. [ 254.404893][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'. [ 254.454312][T13489] syzkaller1: entered promiscuous mode [ 254.471573][T13489] syzkaller1: entered allmulticast mode [ 254.481519][T13484] netlink: 'syz.1.2127': attribute type 1 has an invalid length. [ 254.498926][T13494] netlink: 'syz.3.2130': attribute type 1 has an invalid length. [ 254.499024][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'. [ 254.531218][T13494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.538561][T13494] IPv6: NLM_F_CREATE should be set when creating new route [ 254.540882][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'. [ 254.558690][T13484] netlink: 'syz.1.2127': attribute type 1 has an invalid length. [ 254.584270][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'. [ 254.765285][T13505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2133'. [ 254.835518][T13513] netlink: 'syz.1.2132': attribute type 13 has an invalid length. [ 255.012486][T13524] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 255.311820][T10849] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 255.610611][ T1314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 256.010985][T13575] bond0: ARP target 8.4.0.0 is already present [ 256.026284][T13575] bond0: option arp_ip_target: invalid value (1032) [ 256.131260][T13579] tipc: Enabled bearer , priority 0 [ 256.393097][T13574] syzkaller0: entered promiscuous mode [ 256.417949][T13574] syzkaller0: entered allmulticast mode [ 256.437446][T13574] tipc: Resetting bearer [ 256.534887][T13573] tipc: Resetting bearer [ 257.053297][ T24] net_ratelimit: 70 callbacks suppressed [ 257.053313][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.596035][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.089224][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.179209][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.187596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.250953][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.259567][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.359886][T13573] tipc: Disabling bearer [ 258.378577][T13602] veth1_macvtap: left promiscuous mode [ 258.384222][T13602] macsec0: entered promiscuous mode [ 258.389991][T13602] macsec0: entered allmulticast mode [ 258.402458][T13609] veth1_macvtap: entered promiscuous mode [ 258.411151][T13609] veth1_macvtap: entered allmulticast mode [ 258.420250][T13609] macsec0: left promiscuous mode [ 258.425597][T13609] macsec0: left allmulticast mode [ 258.430829][T13609] veth1_macvtap: left allmulticast mode [ 258.440692][T13618] netlink: 'syz.3.2164': attribute type 3 has an invalid length. [ 258.565848][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 258.633698][T13626] __nla_validate_parse: 12 callbacks suppressed [ 258.633717][T13626] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2167'. [ 258.706301][ T94] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.804967][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'. [ 258.902370][T13642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.947449][T13652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2173'. [ 258.993852][T13642] bridge9: entered promiscuous mode [ 259.022037][T13642] bridge9: entered allmulticast mode [ 259.083924][T13658] netlink: 'syz.4.2174': attribute type 1 has an invalid length. [ 259.105800][T13658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2174'. [ 259.131694][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.562991][T13682] veth1_to_team: Caught tx_queue_len zero misconfig [ 259.752106][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2186'. [ 259.857251][T13697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2189'. [ 260.030319][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2189'. [ 260.060020][T13697] xt_hashlimit: size too large, truncated to 1048576 [ 260.224906][T13714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2193'. [ 260.252856][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'. [ 260.279223][T13714] netlink: 'syz.0.2193': attribute type 1 has an invalid length. [ 260.309083][T13714] netlink: 'syz.0.2193': attribute type 2 has an invalid length. [ 260.748501][T13741] macvtap0: entered allmulticast mode [ 260.755223][T13743] netlink: 'syz.1.2202': attribute type 2 has an invalid length. [ 260.768739][T13741] veth0_macvtap: entered allmulticast mode [ 260.782123][T13743] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2202'. [ 260.950898][T13757] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 260.995226][T13755] bond7: Removing last ns target with arp_interval on [ 261.171860][T13772] netlink: 'syz.4.2210': attribute type 4 has an invalid length. [ 261.192009][ T94] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 261.341409][T13784] block nbd3: Unsupported socket: should be TCP or UNIX. [ 261.896335][T13815] bond8 (unregistering): Released all slaves [ 262.057022][ T7681] net_ratelimit: 5 callbacks suppressed [ 262.057040][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.103211][T13835] netlink: 'syz.2.2223': attribute type 9 has an invalid length. [ 262.246763][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.899173][T13878] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 262.940188][T13881] netlink: 'syz.1.2236': attribute type 1 has an invalid length. [ 262.956657][T13881] netlink: 'syz.1.2236': attribute type 1 has an invalid length. [ 263.167152][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.287061][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.295240][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.303635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.319693][T13902] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 263.367153][ T7707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.375624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.485288][T13915] xt_hashlimit: size too large, truncated to 1048576 [ 263.606020][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 263.898733][T13933] __nla_validate_parse: 11 callbacks suppressed [ 263.898754][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 263.916439][T13933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2245'. [ 263.928731][T13933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2245'. [ 264.016680][T13917] –: renamed from vxcan1 (while UP) [ 264.050437][T13931] netlink: 'syz.2.2245': attribute type 5 has an invalid length. [ 264.317276][ T7707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.513895][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2249'. [ 264.892107][T13966] netlink: 'syz.1.2251': attribute type 21 has an invalid length. [ 264.940622][T13966] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2251'. [ 264.983799][T13972] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2252'. [ 265.007306][T13972] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2252'. [ 265.027797][T13966] netlink: 'syz.1.2251': attribute type 5 has an invalid length. [ 265.063137][T13966] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2251'. [ 265.571699][T14000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2257'. [ 265.632829][T14000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2257'. [ 265.678518][T14002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.770240][T14033] validate_nla: 1 callbacks suppressed [ 266.770258][T14033] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 266.797600][T14038] netlink: 'syz.3.2268': attribute type 1 has an invalid length. [ 266.998216][T14041] macvlan5: entered promiscuous mode [ 267.033058][T14041] macvlan5: entered allmulticast mode [ 267.051169][T14041] bond7: entered promiscuous mode [ 267.078494][T14041] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 267.134540][T14041] bond7: left promiscuous mode [ 267.168282][T14049] bridge_slave_0: default FDB implementation only supports local addresses [ 267.446249][ T810] net_ratelimit: 10 callbacks suppressed [ 267.446266][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.531428][T14069] syzkaller0: entered promiscuous mode [ 267.566056][T14069] syzkaller0: entered allmulticast mode [ 267.594466][T14068] tipc: Enabled bearer , priority 0 [ 267.663893][T14078] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 267.670827][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.689136][T14068] tipc: Resetting bearer [ 267.701919][T14075] can: request_module (can-proto-0) failed. [ 267.716306][T14068] tipc: Disabling bearer [ 267.965508][T14085] kthread_run failed with err -4 [ 268.248745][T14103] xt_hashlimit: max too large, truncated to 1048576 [ 268.409276][ T7709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.417783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.487539][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.495777][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.504692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.647858][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 268.690061][T14121] netlink: 'syz.3.2293': attribute type 10 has an invalid length. [ 268.796832][ T7709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.806844][T14123] bridge4: port 2(veth0_to_bond) entered disabled state [ 268.827787][T14123] bond0: (slave bond_slave_0): Releasing backup interface [ 268.839448][T14123] bond_slave_0 (unregistering): left promiscuous mode [ 268.858903][T14126] netlink: 'syz.4.2294': attribute type 1 has an invalid length. [ 268.910862][T14127] __nla_validate_parse: 10 callbacks suppressed [ 268.910880][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2294'. [ 268.941800][T14123] veth0_to_bond (unregistering): left allmulticast mode [ 268.972618][T14123] veth0_to_bond (unregistering): left promiscuous mode [ 268.979761][T14123] bridge4: port 2(veth0_to_bond) entered disabled state [ 269.028612][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2297'. [ 269.428619][T14160] No such timeout policy "syz0" [ 269.526037][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.577760][T14169] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 269.686067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.390909][T14184] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 271.928981][T14129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.152836][T14197] nbd: must specify at least one socket [ 272.285378][T14212] netlink: 'syz.4.2310': attribute type 16 has an invalid length. [ 272.299756][T14212] netlink: 'syz.4.2310': attribute type 17 has an invalid length. [ 272.326850][T14212] bond0: left promiscuous mode [ 272.344019][T14212] bond_slave_1: left promiscuous mode [ 272.497879][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bd41800: rx timeout, send abort [ 272.518802][T14212] macvtap0: left allmulticast mode [ 272.525828][T14212] veth0_macvtap: left allmulticast mode [ 272.589526][T14212] batadv0: entered promiscuous mode [ 272.599401][T14212] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 272.621633][T14212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.632795][T14212] bridge0: port 3(batadv1) entered blocking state [ 272.639430][T14212] bridge0: port 3(batadv1) entered forwarding state [ 272.647300][ T5852] net_ratelimit: 7 callbacks suppressed [ 272.647314][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.653991][T14212] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 272.679579][T14212] gretap1: left promiscuous mode [ 272.684650][T14212] gretap1: left allmulticast mode [ 272.707250][T14212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.715345][T14212] bond3: left promiscuous mode [ 272.720836][T14212] ip6gre1: left promiscuous mode [ 272.737532][T14212] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.756172][T14212] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.765811][T14212] ip6tnl1: left allmulticast mode [ 272.772113][T14212] 8021q: adding VLAN 0 to HW filter on device team1 [ 272.781086][T14212] 8021q: adding VLAN 0 to HW filter on device bond7 [ 272.797125][ T7707] bridge4: port 1(veth5) entered blocking state [ 272.803527][ T7707] bridge4: port 1(veth5) entered forwarding state [ 272.873195][T14240] pim6reg1: entered promiscuous mode [ 272.886466][T14240] pim6reg1: entered allmulticast mode [ 272.953458][T14242] netlink: 'syz.4.2322': attribute type 13 has an invalid length. [ 272.971000][T14242] macsec0: entered allmulticast mode [ 272.973862][T14244] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2323'. [ 272.989876][T14244] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2323'. [ 272.999465][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880358ae800: rx timeout, send abort [ 273.008662][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bd41800: abort rx timeout. Force session deactivation [ 273.228813][T14255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2326'. [ 273.246281][ T7707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.282083][T14261] netlink: 'syz.4.2328': attribute type 1 has an invalid length. [ 273.344468][T14266] netlink: 'syz.0.2329': attribute type 1 has an invalid length. [ 273.388202][T14268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2328'. [ 273.459161][T14265] bond9 (unregistering): Released all slaves [ 273.493676][T14268] 8021q: adding VLAN 0 to HW filter on device bond8 [ 273.499535][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880358ae800: abort rx timeout. Force session deactivation [ 273.510578][T14252] lo speed is unknown, defaulting to 1000 [ 273.523753][T14252] wg1 speed is unknown, defaulting to 1000 [ 273.541055][ T94] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.550131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.686158][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.695156][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.720185][T14280] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2334'. [ 273.754572][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2332'. [ 273.794025][T14280] openvswitch: netlink: Multiple metadata blocks provided [ 273.821270][T14280] netlink: 'syz.3.2334': attribute type 10 has an invalid length. [ 273.861479][T14280] xt_hashlimit: size too large, truncated to 1048576 [ 273.923919][T14290] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2337'. [ 273.966182][T14289] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2337'. [ 274.168623][ T94] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.177070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.205194][T14306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 274.379198][ T94] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.444850][T14317] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2344'. [ 274.473052][T14319] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2345'. [ 274.570087][T14321] FAULT_INJECTION: forcing a failure. [ 274.570087][T14321] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 274.602072][T14323] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2347'. [ 274.619889][T14321] CPU: 1 UID: 0 PID: 14321 Comm: syz.1.2346 Not tainted syzkaller #0 PREEMPT(full) [ 274.619913][T14321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 274.619924][T14321] Call Trace: [ 274.619931][T14321] [ 274.619939][T14321] dump_stack_lvl+0xe8/0x150 [ 274.619964][T14321] should_fail_ex+0x412/0x560 [ 274.619988][T14321] _copy_from_user+0x2d/0xb0 [ 274.620010][T14321] ___sys_sendmsg+0x1c6/0x360 [ 274.620026][T14321] ? __lock_acquire+0x6b5/0x2cf0 [ 274.620045][T14321] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.620090][T14321] ? __fget_files+0x2a/0x420 [ 274.620110][T14321] ? __fget_files+0x3a0/0x420 [ 274.620136][T14321] __x64_sys_sendmsg+0x1bd/0x2a0 [ 274.620154][T14321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.620178][T14321] ? __pfx_ksys_write+0x10/0x10 [ 274.620210][T14321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.620237][T14321] do_syscall_64+0x174/0x580 [ 274.620254][T14321] ? trace_irq_disable+0x3b/0x140 [ 274.620275][T14321] ? clear_bhb_loop+0x40/0x90 [ 274.620296][T14321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.620311][T14321] RIP: 0033:0x7fdfadf9ce59 [ 274.620327][T14321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.620341][T14321] RSP: 002b:00007fdfaee00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.620359][T14321] RAX: ffffffffffffffda RBX: 00007fdfae215fa0 RCX: 00007fdfadf9ce59 [ 274.620371][T14321] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 274.620382][T14321] RBP: 00007fdfaee00090 R08: 0000000000000000 R09: 0000000000000000 [ 274.620392][T14321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.620402][T14321] R13: 00007fdfae216038 R14: 00007fdfae215fa0 R15: 00007ffc44e876e8 [ 274.620429][T14321] [ 274.811400][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.899467][T14327] netlink: 'syz.3.2349': attribute type 10 has an invalid length. [ 275.016811][T14336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2351'. [ 275.183518][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2352'. [ 275.365071][T14336] veth0_macvtap: left promiscuous mode [ 275.682720][T14374] batadv_slave_1: entered allmulticast mode [ 275.714405][T14373] batadv_slave_1: left allmulticast mode [ 275.731854][T14370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2361'. [ 275.808255][T14380] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2364'. [ 276.075970][T14392] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 276.653229][T14428] vxcan0: entered allmulticast mode [ 276.983050][T14445] netlink: 'syz.4.2384': attribute type 21 has an invalid length. [ 277.184965][T14452] FAULT_INJECTION: forcing a failure. [ 277.184965][T14452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.228810][T14457] Bluetooth: MGMT ver 1.23 [ 277.230798][T14452] CPU: 0 UID: 0 PID: 14452 Comm: syz.4.2386 Not tainted syzkaller #0 PREEMPT(full) [ 277.230822][T14452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.230832][T14452] Call Trace: [ 277.230839][T14452] [ 277.230846][T14452] dump_stack_lvl+0xe8/0x150 [ 277.230887][T14452] should_fail_ex+0x412/0x560 [ 277.230911][T14452] _copy_from_iter+0x1d3/0x1670 [ 277.230934][T14452] ? rcu_is_watching+0x15/0xb0 [ 277.230961][T14452] ? __pfx__copy_from_iter+0x10/0x10 [ 277.230989][T14452] ? netlink_sendmsg+0x650/0xb40 [ 277.231012][T14452] ? skb_put+0x11b/0x210 [ 277.231037][T14452] netlink_sendmsg+0x6c0/0xb40 [ 277.231070][T14452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.231096][T14452] ? aa_sock_msg_perm+0xf1/0x1b0 [ 277.231121][T14452] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.231151][T14452] ____sys_sendmsg+0x972/0x9f0 [ 277.231168][T14452] ? __might_fault+0xaf/0x130 [ 277.231195][T14452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.231219][T14452] ? import_iovec+0x73/0xa0 [ 277.231242][T14452] ___sys_sendmsg+0x2a5/0x360 [ 277.231258][T14452] ? __lock_acquire+0x6b5/0x2cf0 [ 277.231279][T14452] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.231327][T14452] ? __fget_files+0x2a/0x420 [ 277.231346][T14452] ? __fget_files+0x3a0/0x420 [ 277.231375][T14452] __x64_sys_sendmsg+0x1bd/0x2a0 [ 277.231394][T14452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.231419][T14452] ? __pfx_ksys_write+0x10/0x10 [ 277.231450][T14452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.231469][T14452] do_syscall_64+0x174/0x580 [ 277.231486][T14452] ? trace_irq_disable+0x3b/0x140 [ 277.231508][T14452] ? clear_bhb_loop+0x40/0x90 [ 277.231529][T14452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.231545][T14452] RIP: 0033:0x7f6c3a79ce59 [ 277.231560][T14452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.231574][T14452] RSP: 002b:00007f6c3b6dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.231592][T14452] RAX: ffffffffffffffda RBX: 00007f6c3aa15fa0 RCX: 00007f6c3a79ce59 [ 277.231604][T14452] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 277.231614][T14452] RBP: 00007f6c3b6dc090 R08: 0000000000000000 R09: 0000000000000000 [ 277.231624][T14452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.231634][T14452] R13: 00007f6c3aa16038 R14: 00007f6c3aa15fa0 R15: 00007ffec1b3f528 [ 277.231661][T14452] [ 277.753522][T14475] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 277.775281][T14474] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 277.878532][ T94] net_ratelimit: 4 callbacks suppressed [ 277.878549][ T94] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.926034][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.318810][T14515] netlink: 'syz.3.2404': attribute type 2 has an invalid length. [ 278.346107][T14515] netlink: 'syz.3.2404': attribute type 2 has an invalid length. [ 278.647679][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.656759][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.725844][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 278.754066][T14546] IPVS: set_ctl: invalid protocol: 59 172.20.20.53:20004 [ 278.771151][T14545] IPVS: set_ctl: invalid protocol: 59 172.20.20.53:20004 [ 278.973903][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.026150][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.292351][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.301013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.422812][T14555] veth0_to_bond: left allmulticast mode [ 279.456698][T14562] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 279.829199][T14584] bond8 (unregistering): Released all slaves [ 280.007421][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.046430][T14613] __nla_validate_parse: 16 callbacks suppressed [ 280.046447][T14613] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2428'. [ 280.073533][T14612] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2428'. [ 280.148613][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.194973][T14623] FAULT_INJECTION: forcing a failure. [ 280.194973][T14623] name failslab, interval 1, probability 0, space 0, times 0 [ 280.236664][T14623] CPU: 1 UID: 0 PID: 14623 Comm: syz.1.2430 Not tainted syzkaller #0 PREEMPT(full) [ 280.236696][T14623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.236707][T14623] Call Trace: [ 280.236714][T14623] [ 280.236721][T14623] dump_stack_lvl+0xe8/0x150 [ 280.236746][T14623] should_fail_ex+0x412/0x560 [ 280.236771][T14623] should_failslab+0xa8/0x100 [ 280.236788][T14623] ? skb_clone+0x212/0x3a0 [ 280.236805][T14623] kmem_cache_alloc_noprof+0x87/0x650 [ 280.236836][T14623] skb_clone+0x212/0x3a0 [ 280.236855][T14623] __netlink_deliver_tap+0x404/0x850 [ 280.236890][T14623] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.236913][T14623] netlink_deliver_tap+0x19c/0x1b0 [ 280.236938][T14623] netlink_sendskb+0x68/0x140 [ 280.236962][T14623] netlink_rcv_skb+0x2b6/0x4b0 [ 280.236987][T14623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 280.237008][T14623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.237046][T14623] ? down_read+0x270/0x2e0 [ 280.237064][T14623] ? genl_rcv+0xd/0x40 [ 280.237085][T14623] genl_rcv+0x28/0x40 [ 280.237100][T14623] netlink_unicast+0x75c/0x8e0 [ 280.237131][T14623] netlink_sendmsg+0x813/0xb40 [ 280.237162][T14623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.237187][T14623] ? aa_sock_msg_perm+0xf1/0x1b0 [ 280.237210][T14623] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.237234][T14623] ____sys_sendmsg+0x972/0x9f0 [ 280.237250][T14623] ? __might_fault+0xaf/0x130 [ 280.237277][T14623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.237306][T14623] ? import_iovec+0x73/0xa0 [ 280.237330][T14623] ___sys_sendmsg+0x2a5/0x360 [ 280.237346][T14623] ? __lock_acquire+0x6b5/0x2cf0 [ 280.237368][T14623] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.237418][T14623] ? __fget_files+0x2a/0x420 [ 280.237438][T14623] ? __fget_files+0x3a0/0x420 [ 280.237469][T14623] __x64_sys_sendmsg+0x1bd/0x2a0 [ 280.237489][T14623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.237515][T14623] ? __pfx_ksys_write+0x10/0x10 [ 280.237547][T14623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.237566][T14623] do_syscall_64+0x174/0x580 [ 280.237581][T14623] ? trace_irq_disable+0x3b/0x140 [ 280.237603][T14623] ? clear_bhb_loop+0x40/0x90 [ 280.237624][T14623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.237640][T14623] RIP: 0033:0x7fdfadf9ce59 [ 280.237657][T14623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.237671][T14623] RSP: 002b:00007fdfaee00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.237698][T14623] RAX: ffffffffffffffda RBX: 00007fdfae215fa0 RCX: 00007fdfadf9ce59 [ 280.237710][T14623] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 280.237720][T14623] RBP: 00007fdfaee00090 R08: 0000000000000000 R09: 0000000000000000 [ 280.237730][T14623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.237739][T14623] R13: 00007fdfae216038 R14: 00007fdfae215fa0 R15: 00007ffc44e876e8 [ 280.237768][T14623] [ 280.242467][T14627] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2432'. [ 280.275630][T14628] netlink: 'syz.0.2431': attribute type 1 has an invalid length. [ 280.641739][T14628] bond8: entered promiscuous mode [ 280.688762][T14628] 8021q: adding VLAN 0 to HW filter on device bond8 [ 281.012124][T14665] FAULT_INJECTION: forcing a failure. [ 281.012124][T14665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.066498][T14665] CPU: 1 UID: 0 PID: 14665 Comm: syz.3.2443 Not tainted syzkaller #0 PREEMPT(full) [ 281.066530][T14665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.066541][T14665] Call Trace: [ 281.066548][T14665] [ 281.066556][T14665] dump_stack_lvl+0xe8/0x150 [ 281.066581][T14665] should_fail_ex+0x412/0x560 [ 281.066606][T14665] _copy_to_user+0x31/0xb0 [ 281.066630][T14665] simple_read_from_buffer+0xe1/0x170 [ 281.066657][T14665] proc_fail_nth_read+0x1bb/0x230 [ 281.066683][T14665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.066708][T14665] ? rw_verify_area+0x2a6/0x4d0 [ 281.066732][T14665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.066755][T14665] vfs_read+0x20c/0xa70 [ 281.066782][T14665] ? __pfx___mutex_lock+0x10/0x10 [ 281.066802][T14665] ? __pfx_vfs_read+0x10/0x10 [ 281.066825][T14665] ? __fget_files+0x2a/0x420 [ 281.066851][T14665] ? __fget_files+0x3a0/0x420 [ 281.066870][T14665] ? __fget_files+0x2a/0x420 [ 281.066900][T14665] ksys_read+0x150/0x270 [ 281.066926][T14665] ? __pfx_ksys_read+0x10/0x10 [ 281.066958][T14665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.066977][T14665] do_syscall_64+0x174/0x580 [ 281.066995][T14665] ? trace_irq_disable+0x3b/0x140 [ 281.067019][T14665] ? clear_bhb_loop+0x40/0x90 [ 281.067040][T14665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.067057][T14665] RIP: 0033:0x7f2ff4b5d68e [ 281.067074][T14665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 281.067088][T14665] RSP: 002b:00007f2ff5980fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.067107][T14665] RAX: ffffffffffffffda RBX: 00007f2ff59816c0 RCX: 00007f2ff4b5d68e [ 281.067120][T14665] RDX: 000000000000000f RSI: 00007f2ff59810a0 RDI: 0000000000000005 [ 281.067130][T14665] RBP: 00007f2ff5981090 R08: 0000000000000000 R09: 0000000000000000 [ 281.067141][T14665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.067151][T14665] R13: 00007f2ff4e16038 R14: 00007f2ff4e15fa0 R15: 00007ffeb62016c8 [ 281.067179][T14665] [ 281.358249][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2445'. [ 281.480474][T14676] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2446'. [ 281.526396][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2447'. [ 281.733171][T14694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2453'. [ 281.816657][T14694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2453'. [ 281.919953][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2453'. [ 282.017780][T14700] bond8 (unregistering): Released all slaves [ 282.039712][T14710] netlink: 'syz.3.2458': attribute type 10 has an invalid length. [ 282.055545][T14710] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2458'. [ 282.946802][T14750] bridge_slave_1: entered promiscuous mode [ 283.126961][ T24] net_ratelimit: 4 callbacks suppressed [ 283.126978][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.266024][T14760] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 283.539305][T14751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.766114][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 283.776769][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.854321][T14804] bridge0: port 1(syz_tun) entered blocking state [ 283.880320][T14804] bridge0: port 1(syz_tun) entered disabled state [ 283.932841][T14804] syz_tun: entered allmulticast mode [ 283.961775][T14804] syz_tun: entered promiscuous mode [ 283.974539][T14804] bridge0: port 1(syz_tun) entered blocking state [ 283.981225][T14804] bridge0: port 1(syz_tun) entered forwarding state [ 283.990661][T14813] netlink: 'syz.1.2476': attribute type 1 has an invalid length. [ 283.998922][T14813] netlink: 'syz.1.2476': attribute type 1 has an invalid length. [ 284.009757][T14813] netlink: 'syz.1.2476': attribute type 2 has an invalid length. [ 284.044712][T14806] netlink: 'syz.2.2474': attribute type 1 has an invalid length. [ 284.065440][T14804] netlink: 'syz.2.2474': attribute type 1 has an invalid length. [ 284.166307][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.407903][ T7693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.416369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.427233][ T7707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.436960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.488804][T14840] Cannot find map_set index 135 as target [ 284.497313][T14830] netlink: 'syz.0.2480': attribute type 1 has an invalid length. [ 284.542617][T14838] netlink: 'syz.0.2480': attribute type 1 has an invalid length. [ 284.758149][T14829] smbdirect: ib_dev[syz2] removed [ 284.789069][T14830] bond9: entered promiscuous mode [ 284.819725][T14830] 8021q: adding VLAN 0 to HW filter on device bond9 [ 284.922246][ T7707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.087679][T14861] __nla_validate_parse: 27 callbacks suppressed [ 285.087695][T14861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2486'. [ 285.211114][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.360765][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2488'. [ 285.513319][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2490'. [ 285.539773][T14883] sctp: [Deprecated]: syz.1.2493 (pid 14883) Use of int in maxseg socket option. [ 285.539773][T14883] Use struct sctp_assoc_value instead [ 285.579021][T14887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2490'. [ 285.804845][T14887] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 285.817777][T14887] gretap1: entered promiscuous mode [ 285.823198][T14887] gretap1: entered allmulticast mode [ 285.830580][T14892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2494'. [ 285.833524][T14902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.841068][T14892] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2494'. [ 286.068272][T14905] vlan2: entered allmulticast mode [ 286.095597][T14905] bridge_slave_0: entered allmulticast mode [ 286.121984][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'. [ 286.152989][T14914] netlink: 'syz.1.2501': attribute type 61 has an invalid length. [ 286.168164][T14907] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2499'. [ 286.182705][T14915] tls_set_device_offload: netdev not found [ 286.198681][T14907] IPVS: set_ctl: invalid protocol: 48 100.1.1.1:20001 [ 286.362293][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2503'. [ 286.450908][T14930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2507'. [ 286.504231][T14929] tipc: Enabled bearer , priority 0 [ 286.545071][T14933] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_virt_wifi, syncid = 2, id = 0 [ 286.600511][T14935] netlink: 'syz.3.2508': attribute type 58 has an invalid length. [ 286.601145][T14937] netlink: 'syz.3.2508': attribute type 58 has an invalid length. [ 286.622479][T14929] tipc: Resetting bearer [ 287.186164][ T7709] tipc: Resetting bearer [ 287.217117][T14967] syzkaller0: entered promiscuous mode [ 287.234326][T14967] syzkaller0: entered allmulticast mode [ 287.588866][T14991] bond10: option xmit_hash_policy: invalid value (64) [ 287.598357][T14991] bond10 (unregistering): Released all slaves [ 287.757855][T14997] 8021q: adding VLAN 0 to HW filter on device bond13 [ 287.815297][T15011] ipvlan1: entered promiscuous mode [ 288.276874][ T7709] net_ratelimit: 265 callbacks suppressed [ 288.276890][ T7709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.326616][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.805784][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 289.066503][T15088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.082370][T15090] validate_nla: 2 callbacks suppressed [ 289.082388][T15090] netlink: 'syz.1.2557': attribute type 1 has an invalid length. [ 289.262064][T15095] ip6gre1: entered allmulticast mode [ 289.314584][T15105] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 289.371100][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.416984][ T7707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.526668][ T7707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.535111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.662613][T15126] sock: sock_set_timeout: `syz.2.2570' (pid 15126) tries to set negative timeout [ 289.690561][T15122] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 290.058253][T15150] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 290.118756][T15150] __nla_validate_parse: 17 callbacks suppressed [ 290.118774][T15150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2576'. [ 290.138062][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2577'. [ 290.148332][T15150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2576'. [ 290.295205][T15159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2580'. [ 290.304504][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2581'. [ 290.386060][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'. [ 290.449892][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2580'. [ 290.483415][T15171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2582'. [ 290.505826][T15165] netlink: 'syz.1.2580': attribute type 14 has an invalid length. [ 290.529106][T15165] netlink: 'syz.1.2580': attribute type 13 has an invalid length. [ 290.573316][T15173] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2580'. [ 291.623277][T15159] tipc: Resetting bearer [ 291.692567][ T5732] syz0: Port: 1 Link DOWN [ 291.702891][ T7705] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.724727][ T7705] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.742894][ T7705] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.778410][ T7705] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.897310][ T7705] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.931926][ T7705] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.228304][T15227] netlink: 'syz.2.2597': attribute type 11 has an invalid length. [ 292.275092][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2595'. [ 292.358631][T15233] netlink: 'syz.3.2599': attribute type 27 has an invalid length. [ 292.384046][T15233] netlink: 'syz.3.2599': attribute type 4 has an invalid length. [ 292.428912][ T7707] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.473895][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.486308][ T7707] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.566351][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.092845][T15277] bond0: Caught tx_queue_len zero misconfig [ 293.207302][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.484567][T15301] ip6t_REJECT: ECHOREPLY is not supported [ 293.526078][ T5745] net_ratelimit: 9 callbacks suppressed [ 293.526093][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.826142][T15313] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 293.851397][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 294.530349][T15358] 8021q: VLANs not supported on syzkaller0 [ 296.576688][ T4947] block nbd2: Receive control failed (result -110) [ 296.664538][T15362] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 296.726035][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 297.123634][T15414] netlink: 'syz.2.2647': attribute type 5 has an invalid length. [ 297.168529][T15414] netlink: 'syz.2.2647': attribute type 5 has an invalid length. [ 297.197877][T15414] netlink: 'syz.2.2647': attribute type 5 has an invalid length. [ 297.244028][T15414] netlink: 'syz.2.2647': attribute type 5 has an invalid length. [ 297.279626][T15414] netlink: 'syz.2.2647': attribute type 5 has an invalid length. [ 297.323511][T15414] netlink: 'syz.2.2647': attribute type 5 has an invalid length. [ 297.369357][T15414] netlink: 'syz.2.2647': attribute type 5 has an invalid length. [ 297.406113][T15414] netlink: 'syz.2.2647': attribute type 5 has an invalid length. [ 297.442048][T15414] netlink: 'syz.2.2647': attribute type 5 has an invalid length. [ 297.467640][T15414] netlink: 'syz.2.2647': attribute type 5 has an invalid length. [ 297.757652][T15403] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 297.805235][T15439] __nla_validate_parse: 13 callbacks suppressed [ 297.805255][T15439] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2656'. [ 297.874108][T15436] nbd: socks must be embedded in a SOCK_ITEM attr [ 298.014338][T15448] [ 298.016698][T15448] ====================================================== [ 298.023716][T15448] WARNING: possible circular locking dependency detected [ 298.030746][T15448] syzkaller #0 Not tainted [ 298.035145][T15448] ------------------------------------------------------ [ 298.042147][T15448] syz.3.2656/15448 is trying to acquire lock: [ 298.048203][T15448] ffffffff8ea85600 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 298.057369][T15448] [ 298.057369][T15448] but task is already holding lock: [ 298.064725][T15448] ffff888036ea1bb8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 298.074228][T15448] [ 298.074228][T15448] which lock already depends on the new lock. [ 298.074228][T15448] [ 298.084624][T15448] [ 298.084624][T15448] the existing dependency chain (in reverse order) is: [ 298.093627][T15448] [ 298.093627][T15448] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 298.101176][T15448] __might_fault+0xcb/0x130 [ 298.106197][T15448] _copy_from_iter+0x100/0x1670 [ 298.111555][T15448] tcp_sendmsg_locked+0x2121/0x5360 [ 298.117269][T15448] tcp_sendmsg+0x2f/0x50 [ 298.122037][T15448] sock_write_iter+0x406/0x4f0 [ 298.127319][T15448] vfs_write+0x61d/0xb90 [ 298.132075][T15448] ksys_write+0x150/0x270 [ 298.136923][T15448] do_syscall_64+0x174/0x580 [ 298.142025][T15448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.148429][T15448] [ 298.148429][T15448] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 298.156062][T15448] lock_sock_nested+0x41/0x100 [ 298.161336][T15448] inet_shutdown+0x6a/0x390 [ 298.166343][T15448] nbd_mark_nsock_dead+0x2e9/0x560 [ 298.171973][T15448] recv_work+0x1c2e/0x1d40 [ 298.176890][T15448] process_scheduled_works+0xb5d/0x1860 [ 298.182943][T15448] worker_thread+0xa53/0xfc0 [ 298.188038][T15448] kthread+0x389/0x470 [ 298.192614][T15448] ret_from_fork+0x514/0xb70 [ 298.197706][T15448] ret_from_fork_asm+0x1a/0x30 [ 298.202979][T15448] [ 298.202979][T15448] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 298.210604][T15448] __mutex_lock+0x1a3/0x1550 [ 298.215703][T15448] nbd_queue_rq+0x37b/0x1100 [ 298.220805][T15448] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 298.226855][T15448] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 298.233696][T15448] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 298.240186][T15448] blk_mq_run_hw_queue+0x348/0x4f0 [ 298.245803][T15448] blk_mq_dispatch_list+0xd16/0xe10 [ 298.251515][T15448] blk_mq_flush_plug_list+0x48d/0x570 [ 298.257403][T15448] __blk_flush_plug+0x3ed/0x4d0 [ 298.262778][T15448] __submit_bio+0x28d/0x580 [ 298.267797][T15448] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 298.273946][T15448] block_read_full_folio+0x599/0x830 [ 298.279743][T15448] filemap_read_folio+0x137/0x3b0 [ 298.285286][T15448] do_read_cache_folio+0x358/0x590 [ 298.290910][T15448] read_part_sector+0xb6/0x2b0 [ 298.296182][T15448] adfspart_check_ICS+0xb1/0x960 [ 298.301628][T15448] bdev_disk_changed+0x817/0x1770 [ 298.307156][T15448] blkdev_get_whole+0x380/0x510 [ 298.312512][T15448] bdev_open+0x31e/0xd30 [ 298.317262][T15448] blkdev_open+0x470/0x610 [ 298.322187][T15448] do_dentry_open+0x822/0x13a0 [ 298.327452][T15448] vfs_open+0x3b/0x340 [ 298.332025][T15448] path_openat+0x2e08/0x3860 [ 298.337124][T15448] do_file_open+0x23e/0x4a0 [ 298.342150][T15448] do_sys_openat2+0x113/0x200 [ 298.347335][T15448] __x64_sys_openat+0x138/0x170 [ 298.352692][T15448] do_syscall_64+0x174/0x580 [ 298.357782][T15448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.364178][T15448] [ 298.364178][T15448] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 298.371373][T15448] __mutex_lock+0x1a3/0x1550 [ 298.376470][T15448] nbd_queue_rq+0xc6/0x1100 [ 298.381493][T15448] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 298.387547][T15448] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 298.394384][T15448] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 298.400870][T15448] blk_mq_run_hw_queue+0x348/0x4f0 [ 298.406490][T15448] blk_mq_dispatch_list+0xd16/0xe10 [ 298.412191][T15448] blk_mq_flush_plug_list+0x48d/0x570 [ 298.418072][T15448] __blk_flush_plug+0x3ed/0x4d0 [ 298.423433][T15448] __submit_bio+0x28d/0x580 [ 298.428444][T15448] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 298.434582][T15448] block_read_full_folio+0x599/0x830 [ 298.440372][T15448] filemap_read_folio+0x137/0x3b0 [ 298.445906][T15448] do_read_cache_folio+0x358/0x590 [ 298.451530][T15448] read_part_sector+0xb6/0x2b0 [ 298.456798][T15448] adfspart_check_ICS+0xb1/0x960 [ 298.462242][T15448] bdev_disk_changed+0x817/0x1770 [ 298.467773][T15448] blkdev_get_whole+0x380/0x510 [ 298.473135][T15448] bdev_open+0x31e/0xd30 [ 298.477888][T15448] blkdev_open+0x470/0x610 [ 298.482810][T15448] do_dentry_open+0x822/0x13a0 [ 298.488079][T15448] vfs_open+0x3b/0x340 [ 298.492652][T15448] path_openat+0x2e08/0x3860 [ 298.497752][T15448] do_file_open+0x23e/0x4a0 [ 298.502762][T15448] do_sys_openat2+0x113/0x200 [ 298.507942][T15448] __x64_sys_openat+0x138/0x170 [ 298.513305][T15448] do_syscall_64+0x174/0x580 [ 298.518404][T15448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.524811][T15448] [ 298.524811][T15448] -> #3 (set->srcu){.+.+}-{0:0}: [ 298.531923][T15448] __synchronize_srcu+0xca/0x300 [ 298.537365][T15448] elevator_switch+0x1e8/0x7a0 [ 298.542637][T15448] elevator_change+0x2cc/0x450 [ 298.547916][T15448] elevator_set_default+0x36c/0x430 [ 298.553619][T15448] blk_register_queue+0x3e9/0x4e0 [ 298.559153][T15448] __add_disk+0x677/0xd50 [ 298.563993][T15448] add_disk_fwnode+0xfb/0x480 [ 298.569177][T15448] nbd_dev_add+0x72c/0xb50 [ 298.574103][T15448] nbd_init+0x168/0x1f0 [ 298.578768][T15448] do_one_initcall+0x250/0x870 [ 298.584035][T15448] do_initcall_level+0x104/0x190 [ 298.589474][T15448] do_initcalls+0x59/0xa0 [ 298.594305][T15448] kernel_init_freeable+0x2a6/0x3e0 [ 298.600008][T15448] kernel_init+0x1d/0x1d0 [ 298.604843][T15448] ret_from_fork+0x514/0xb70 [ 298.609944][T15448] ret_from_fork_asm+0x1a/0x30 [ 298.615213][T15448] [ 298.615213][T15448] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 298.623015][T15448] __mutex_lock+0x1a3/0x1550 [ 298.628111][T15448] elevator_change+0x1b3/0x450 [ 298.633381][T15448] elevator_set_none+0xb5/0x140 [ 298.638736][T15448] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 298.645053][T15448] nbd_start_device+0x17f/0xb10 [ 298.650413][T15448] nbd_genl_connect+0x165b/0x1cf0 [ 298.655950][T15448] genl_family_rcv_msg_doit+0x22a/0x330 [ 298.662003][T15448] genl_rcv_msg+0x61c/0x7a0 [ 298.667012][T15448] netlink_rcv_skb+0x232/0x4b0 [ 298.672289][T15448] genl_rcv+0x28/0x40 [ 298.676773][T15448] netlink_unicast+0x75c/0x8e0 [ 298.682074][T15448] netlink_sendmsg+0x813/0xb40 [ 298.687348][T15448] ____sys_sendmsg+0x972/0x9f0 [ 298.692611][T15448] ___sys_sendmsg+0x2a5/0x360 [ 298.697790][T15448] __x64_sys_sendmsg+0x1bd/0x2a0 [ 298.703231][T15448] do_syscall_64+0x174/0x580 [ 298.708327][T15448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.714723][T15448] [ 298.714723][T15448] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 298.723315][T15448] blk_alloc_queue+0x546/0x680 [ 298.728586][T15448] __blk_mq_alloc_disk+0x197/0x390 [ 298.734207][T15448] nbd_dev_add+0x499/0xb50 [ 298.739131][T15448] nbd_init+0x168/0x1f0 [ 298.743796][T15448] do_one_initcall+0x250/0x870 [ 298.749063][T15448] do_initcall_level+0x104/0x190 [ 298.754506][T15448] do_initcalls+0x59/0xa0 [ 298.759339][T15448] kernel_init_freeable+0x2a6/0x3e0 [ 298.765041][T15448] kernel_init+0x1d/0x1d0 [ 298.769875][T15448] ret_from_fork+0x514/0xb70 [ 298.774970][T15448] ret_from_fork_asm+0x1a/0x30 [ 298.780239][T15448] [ 298.780239][T15448] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 298.787436][T15448] __lock_acquire+0x15a5/0x2cf0 [ 298.792791][T15448] lock_acquire+0x106/0x350 [ 298.797795][T15448] fs_reclaim_acquire+0x71/0x100 [ 298.803242][T15448] prepare_alloc_pages+0x152/0x650 [ 298.808864][T15448] __alloc_frozen_pages_noprof+0x12f/0x380 [ 298.815184][T15448] alloc_pages_mpol+0x235/0x490 [ 298.820537][T15448] folio_alloc_mpol_noprof+0x39/0x160 [ 298.826415][T15448] vma_alloc_folio_noprof+0xe1/0x1e0 [ 298.832202][T15448] do_wp_page+0x118a/0x4cc0 [ 298.837208][T15448] handle_mm_fault+0x1698/0x3170 [ 298.842651][T15448] do_user_addr_fault+0x75b/0x1340 [ 298.848266][T15448] exc_page_fault+0x6a/0xc0 [ 298.853274][T15448] asm_exc_page_fault+0x26/0x30 [ 298.858628][T15448] rep_movs_alternative+0x4a/0x90 [ 298.864159][T15448] _copy_to_iter+0x255/0x17d0 [ 298.869339][T15448] __skb_datagram_iter+0xf8/0x980 [ 298.874868][T15448] skb_copy_datagram_iter+0xb5/0x240 [ 298.880654][T15448] tipc_recvstream+0x72d/0xe70 [ 298.885927][T15448] sock_recvmsg+0x172/0x1b0 [ 298.890936][T15448] ____sys_recvmsg+0x1e6/0x4a0 [ 298.896201][T15448] ___sys_recvmsg+0x215/0x590 [ 298.901380][T15448] __x64_sys_recvmsg+0x1ba/0x2a0 [ 298.906819][T15448] do_syscall_64+0x174/0x580 [ 298.911917][T15448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.918312][T15448] [ 298.918312][T15448] other info that might help us debug this: [ 298.918312][T15448] [ 298.928518][T15448] Chain exists of: [ 298.928518][T15448] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 298.928518][T15448] [ 298.941018][T15448] Possible unsafe locking scenario: [ 298.941018][T15448] [ 298.948450][T15448] CPU0 CPU1 [ 298.953795][T15448] ---- ---- [ 298.959141][T15448] rlock(&mm->mmap_lock); [ 298.963544][T15448] lock(sk_lock-AF_INET); [ 298.970462][T15448] lock(&mm->mmap_lock); [ 298.977297][T15448] lock(fs_reclaim); [ 298.981261][T15448] [ 298.981261][T15448] *** DEADLOCK *** [ 298.981261][T15448] [ 298.989380][T15448] 2 locks held by syz.3.2656/15448: [ 298.994556][T15448] #0: ffff888038a83520 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_wait_for_rcvmsg+0x345/0x640 [ 299.004637][T15448] #1: ffff888036ea1bb8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 299.014547][T15448] [ 299.014547][T15448] stack backtrace: [ 299.020420][T15448] CPU: 1 UID: 0 PID: 15448 Comm: syz.3.2656 Not tainted syzkaller #0 PREEMPT(full) [ 299.020440][T15448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.020449][T15448] Call Trace: [ 299.020457][T15448] [ 299.020465][T15448] dump_stack_lvl+0xe8/0x150 [ 299.020484][T15448] print_circular_bug+0x2e1/0x300 [ 299.020506][T15448] check_noncircular+0x12e/0x150 [ 299.020526][T15448] __lock_acquire+0x15a5/0x2cf0 [ 299.020546][T15448] ? __lock_acquire+0x6b5/0x2cf0 [ 299.020564][T15448] ? prepare_alloc_pages+0x152/0x650 [ 299.020585][T15448] lock_acquire+0x106/0x350 [ 299.020599][T15448] ? prepare_alloc_pages+0x152/0x650 [ 299.020624][T15448] ? __lock_acquire+0x6b5/0x2cf0 [ 299.020640][T15448] fs_reclaim_acquire+0x71/0x100 [ 299.020660][T15448] ? prepare_alloc_pages+0x152/0x650 [ 299.020681][T15448] prepare_alloc_pages+0x152/0x650 [ 299.020705][T15448] __alloc_frozen_pages_noprof+0x12f/0x380 [ 299.020729][T15448] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 299.020753][T15448] ? __pfx_policy_nodemask+0x10/0x10 [ 299.020771][T15448] alloc_pages_mpol+0x235/0x490 [ 299.020787][T15448] folio_alloc_mpol_noprof+0x39/0x160 [ 299.020802][T15448] vma_alloc_folio_noprof+0xe1/0x1e0 [ 299.020817][T15448] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 299.020841][T15448] do_wp_page+0x118a/0x4cc0 [ 299.020860][T15448] ? __pte_offset_map+0x29/0x240 [ 299.020882][T15448] ? __pfx_do_wp_page+0x10/0x10 [ 299.020897][T15448] ? do_raw_spin_lock+0x12b/0x2f0 [ 299.020919][T15448] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 299.020942][T15448] handle_mm_fault+0x1698/0x3170 [ 299.020965][T15448] ? handle_mm_fault+0xf1/0x3170 [ 299.020985][T15448] ? __pfx_handle_mm_fault+0x10/0x10 [ 299.021007][T15448] ? __lock_acquire+0x6b5/0x2cf0 [ 299.021023][T15448] ? lock_mm_and_find_vma+0xa7/0x340 [ 299.021045][T15448] do_user_addr_fault+0x75b/0x1340 [ 299.021066][T15448] exc_page_fault+0x6a/0xc0 [ 299.021082][T15448] asm_exc_page_fault+0x26/0x30 [ 299.021097][T15448] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 299.021118][T15448] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 299.021132][T15448] RSP: 0000:ffffc90003437698 EFLAGS: 00050206 [ 299.021146][T15448] RAX: ffffffff84af5401 RBX: ffff8880803200e8 RCX: 000000000000e5d0 [ 299.021157][T15448] RDX: 0000000000000000 RSI: ffff888080321ce8 RDI: 0000200000002000 [ 299.021167][T15448] RBP: ffffc90003437808 R08: ffff8880803302b7 R09: 1ffff11010066056 [ 299.021178][T15448] R10: dffffc0000000000 R11: ffffed1010066057 R12: 1ffff92000686fbf [ 299.021190][T15448] R13: 0000200000000400 R14: ffffc90003437e08 R15: 00000000000101d0 [ 299.021204][T15448] ? _copy_to_iter+0x221/0x17d0 [ 299.021223][T15448] _copy_to_iter+0x255/0x17d0 [ 299.021238][T15448] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 299.021258][T15448] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 299.021281][T15448] ? __pfx__copy_to_iter+0x10/0x10 [ 299.021296][T15448] ? lockdep_hardirqs_on+0x7a/0x110 [ 299.021309][T15448] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 299.021331][T15448] ? tipc_wait_for_rcvmsg+0x4f6/0x640 [ 299.021348][T15448] __skb_datagram_iter+0xf8/0x980 [ 299.021364][T15448] ? tipc_sk_anc_data_recv+0xce/0x6b0 [ 299.021378][T15448] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 299.021394][T15448] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 299.021409][T15448] skb_copy_datagram_iter+0xb5/0x240 [ 299.021426][T15448] tipc_recvstream+0x72d/0xe70 [ 299.021453][T15448] ? __pfx_tipc_recvstream+0x10/0x10 [ 299.021474][T15448] sock_recvmsg+0x172/0x1b0 [ 299.021493][T15448] ____sys_recvmsg+0x1e6/0x4a0 [ 299.021511][T15448] ? __pfx_____sys_recvmsg+0x10/0x10 [ 299.021530][T15448] ? import_iovec+0x73/0xa0 [ 299.021548][T15448] ___sys_recvmsg+0x215/0x590 [ 299.021562][T15448] ? futex_private_hash_put+0x13b/0x170 [ 299.021579][T15448] ? __pfx____sys_recvmsg+0x10/0x10 [ 299.021594][T15448] ? __fget_files+0x2a/0x420 [ 299.021618][T15448] ? __fget_files+0x3a0/0x420 [ 299.021639][T15448] __x64_sys_recvmsg+0x1ba/0x2a0 [ 299.021654][T15448] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 299.021672][T15448] ? rcu_is_watching+0x15/0xb0 [ 299.021692][T15448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.021707][T15448] do_syscall_64+0x174/0x580 [ 299.021722][T15448] ? trace_irq_disable+0x3b/0x140 [ 299.021744][T15448] ? clear_bhb_loop+0x40/0x90 [ 299.021761][T15448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.021775][T15448] RIP: 0033:0x7f2ff4b9ce59 [ 299.021789][T15448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.021802][T15448] RSP: 002b:00007f2ff2df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 299.021816][T15448] RAX: ffffffffffffffda RBX: 00007f2ff4e16090 RCX: 00007f2ff4b9ce59 [ 299.021831][T15448] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000009 [ 299.021841][T15448] RBP: 00007f2ff4c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 299.021851][T15448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.021860][T15448] R13: 00007f2ff4e16128 R14: 00007f2ff4e16090 R15: 00007ffeb62016c8 [ 299.021877][T15448] [ 304.885893][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!