last executing test programs: 6.49414563s ago: executing program 1 (id=5771): recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x23, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e27, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="48dfff00", @ANYRES16=r5, @ANYBLOB="000825bd7000fedbdf254c0000000c00a6002600000000000000080001007063690011000200303030303a30303a31302e30000000000c00a6000400000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x2000c081}, 0x4001) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6a2f3b6aff9bc2f1af59106a2a1667f8", 0x0, 0x0, {0x4000000000009, 0x9d5f}, {0xd, 0x41}, 0x10001, [0xde9c, 0x8e9, 0xc, 0xc4, 0x7, 0xfffffffffffffffb, 0x28, 0x1, 0x7fffffffffffffff, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x212b, 0x7, 0x4]}) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1e00010c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c000200050001000000000008000740000000001c0018"], 0x90}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000580)=0x7c, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r1, 0xd044, 0xa, 0xfffffffffffffffd, 0xa4}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x38}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000001, 0x31, r3, 0x0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005200010b27bd7000f9dbdf250a0800050007000000400000"], 0x1c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 6.075495091s ago: executing program 4 (id=5776): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd2c, 0x25dbdbfd, {0x2}, [@NHA_OIF={0x8}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x100000000000000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 5.910227752s ago: executing program 1 (id=5779): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) r1 = accept(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@private1, @remote, 0x10, 0x1e}}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000280)={'ah\x00'}, &(0x7f00000002c0)=0x1e) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="1f515299688a341dfbdcd830ac15fc3454d77da5c08e81f459d6e637b90ea8e446aa1042b259e2bb1186442b29abed1781281694012c1a507da8596110ccca5d0e2146d1113c3cbdf7497a16d37deb595bbc5c123b56f921bbc6ce6b3f03b320df50419b70f3b53937fcd1f45b4895acd55c7561f2eb984d0c060658b0a6e4ef9cccaf59011abff172b6c3bed8c378d02dd1abd0985fb33bf26ef85af7e64b81c2452298a98c78aaca3b1080649d2dd7", 0xb0}], 0x1, &(0x7f0000000440)=[{0x98, 0x6, 0x0, "92aa34d4450820cce06bc70e10d031a90f24f81dbc1fbc4449c6f940c11c9a7fd01cdb5601cb538f98cf864d9bb92ab20f925e3247357b2f76057e7e0b6163f250149c169af5f4d3de54b1c5762480c96cc6b37c8f39086eb802d6e76543ab87cbd9710c9338802a4b1dec3f9e2ca3cf373e9ef64f9d76fc5187e4a01c1630e6179718"}, {0xe8, 0x0, 0x6, "410d38e0edcc2d00ae414b4b7de7a525501d2ac9e91040af6b810ffc65845a22f7d781ba95a697a9a9e4b6cb663a007120761e68574f388ae6abd5a20bcbcda9a481c2c7c4040245346e7fdc9c9615b26ae6bbc5036a47e4a9a2b26fdc28917aca50db70206e57640441106f72c2775a51d4646c45e00bc8dc8e2017799fb178832d1529319f7091c35ebcb11e14f0e2a2a1279d67b6ae08e86856a03996c1cba49265723f3cc10a60567294b40b567aa7c9d2e695e1be3f79d9f7635984d73790835fbce800206761e1b82f4742e85ac236ba3c59"}, {0x70, 0x10a, 0x97, "9badebb6dc0ea3a04f4fad461cac89228af1d6899d9aa4991ac3887d7b89dd58e3115ceb4d113c3e724cd20fecbe1aa45200b2900d1d809a17cc806878c37d55fc3227fd3ee8bd542c1091f1bf5b415ab1e6299edb51a7eb5b3d988777"}, {0x60, 0x115, 0x8, "1ee7d7f0f28974260bb44e8c25d326481745abbc9a94df8fc83e63a61f5f27a4f7e4f9ac9098ef60e60a548f90ffbe99ff7535c5a8a9bf484eac1df9191b3c8029ce79b86585a5b7d133d4fa19cd6b"}], 0x250}, 0x4000000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000700)={r3, 0x0, 0x1}) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x100, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc9}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x26a1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x208d7ee0cf344cff}, 0x800) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000900)=0xa) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000940)={'IDLETIMER\x00'}, &(0x7f0000000980)=0x1e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x885}, 0x40) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000ac0)={0x0, 0x1ff}, &(0x7f0000000b00)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000b40)={r9, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0xe5d5, 0x8}, &(0x7f0000000c00)=0x90) openat$cgroup_devices(r6, &(0x7f0000000c40)='devices.deny\x00', 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000c80)={0x3ff, 0xfffffffffffffffb, 0xf5, 0x6, 0x7fffffff, 0x7, 0x800, 0xfffffffffffffff7}, &(0x7f0000000cc0)={0x12f0, 0x7, 0x0, 0xd, 0x4, 0x10001, 0x2, 0x40}, &(0x7f0000000d00)={0x56d2, 0xc00, 0x2800, 0x8, 0x8ca4, 0xfffffffffffffffe, 0x1000, 0x6}, &(0x7f0000000d40)={0x77359400}, &(0x7f0000000dc0)={&(0x7f0000000d80)={[0xd]}, 0x8}) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x6c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x6c}}, 0x801) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x84) r10 = socket$netlink(0x10, 0x3, 0x7) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r10, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r11, 0x311, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r12}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.871295878s ago: executing program 3 (id=5780): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x2f32, 0x4) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000001c0)=0xffff8001, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r10 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="9ce3609d5be6614a888e59cdf99ac9162ccfadd24ab7", 0x16}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x404c8d4) recvmmsg(r10, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1}, 0x3}], 0x1, 0x2001, 0x0) 5.608502874s ago: executing program 1 (id=5781): syz_emit_ethernet(0x3e, &(0x7f0000000480)={@multicast, @random="0100000000c9", @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "d82b06", 0x8, 0x0, 0x0, @private1, @mcast2, {[@hopopts={0x29}]}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2c020400) bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r2, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r1}, 0x38) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000004e00)={0x0, 0x0, &(0x7f0000004dc0)={&(0x7f0000004c80)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8100}, 0x20000090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x100000f}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4095}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xc, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x0, 0x0, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5.538949147s ago: executing program 4 (id=5783): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@mcast2, 0x78}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000080)=""/174, &(0x7f0000000140)=0xae) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x6, 0x3, 0x8001, 0x9, 0x23, 0x3, 0xfe}, 0x9c) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x0) recvmmsg$unix(r2, &(0x7f00000030c0)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/104, 0x68}, {&(0x7f0000001400)=""/207, 0xcf}, {&(0x7f0000001500)=""/28, 0x1c}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/156, 0x9c}, {&(0x7f0000002600)=""/75, 0x4b}, {&(0x7f0000002680)=""/186, 0xba}, {&(0x7f0000002740)=""/93, 0x5d}], 0x9, &(0x7f0000002880)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002940)=""/7, 0x7}, {&(0x7f0000002980)=""/180, 0xb4}, {&(0x7f0000002a40)}, {&(0x7f0000002a80)=""/119, 0x77}, {&(0x7f0000002b00)=""/38, 0x26}, {&(0x7f0000002b40)=""/16, 0x10}, {&(0x7f0000002b80)=""/27, 0x1b}], 0x7}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000003000)=[{&(0x7f0000002cc0)=""/109, 0x6d}, {&(0x7f0000002d40)=""/193, 0xc1}, {&(0x7f0000002e40)=""/143, 0x8f}, {&(0x7f0000002f00)=""/231, 0xe7}], 0x4, &(0x7f0000003040)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}], 0x3, 0x2, &(0x7f0000003180)={0x77359400}) getsockopt$bt_BT_POWER(r10, 0x112, 0x9, &(0x7f00000031c0)=0x2, &(0x7f0000003200)=0x1) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) getsockopt$inet6_opts(r8, 0x29, 0x3b, &(0x7f0000003240)=""/136, &(0x7f0000003300)=0x88) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003380), r11) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000003480)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x6c, r14, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x88d072696ba1afaf}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000003740)={'syztnl1\x00', &(0x7f00000036c0)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x24, 0x2, 0x8, @mcast1, @local, 0x8, 0x7, 0x81, 0x10}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000038c0)=@bpf_lsm={0x1d, 0x1c, &(0x7f00000034c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x2, 0x4, 0x9, 0x6, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7ea541a6c5cb7a93}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @jmp={0x5, 0x1, 0xc, 0x0, 0x6, 0x0, 0x8}, @alu={0x4, 0x1, 0x2, 0x8, 0xb, 0xc, 0x8}, @alu={0x4, 0x1, 0x9, 0x2, 0x4, 0xfffffffffffffffe, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f00000035c0)='syzkaller\x00', 0x2000000, 0xa7, &(0x7f0000003600)=""/167, 0x41100, 0x41, '\x00', r15, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003780)={0x1, 0x2, 0x6, 0x80000000}, 0x10, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000037c0)=[r11, r3, r6], &(0x7f0000003800)=[{0x5, 0x3, 0x2, 0x7}, {0x0, 0x2, 0xe, 0x1}, {0x0, 0x4, 0x8, 0xc}, {0x2, 0x1, 0xc}, {0x4, 0x4, 0xf, 0xa}, {0x5, 0x2, 0x3, 0xa}, {0x3, 0x5, 0xa, 0x9}, {0x1, 0x1, 0xf, 0xb}, {0x5, 0x5, 0xe, 0xa}], 0x10, 0x1ff}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r9, 0xc0096616, &(0x7f0000003980)={0x3, [0x0, 0x0, 0x0]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003ac0)={@cgroup=r13, 0x3, 0x0, 0x1, &(0x7f00000039c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000003a00)=[0x0], &(0x7f0000003a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r17 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003b00)={r8, r15, 0x25, 0x0, @val=@netkit={@void, @value=r3, @void, @void, r16}}, 0x1c) ioctl$XFS_IOC_FSGROWFSRT(r17, 0x40105870, &(0x7f0000003b40)={0x3, 0x9}) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x34, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004840}, 0x40000) r18 = socket$nl_sock_diag(0x10, 0x3, 0x4) listen(r18, 0x36) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000003d40)={0x0, 0xbc, &(0x7f0000003c80)=[@in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x1409}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e23, 0x7c81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x400, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x9}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0xe}]}, &(0x7f0000003d80)=0x10) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000003e80)={'nat\x00', 0x0, 0x3, 0x0, [0xa, 0xffffffff, 0x8, 0x3, 0x0, 0x5], 0x8, &(0x7f0000003dc0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000003e40)}, &(0x7f0000003f00)=0x78) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000003f40)={0x2, 'wg1\x00', {0x80000000}, 0x3}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004040)={r4, 0x58, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r12, &(0x7f0000004100)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)=@mpls_getnetconf={0x1c, 0x52, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r19}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x801) listen(0xffffffffffffffff, 0x3) 5.47190411s ago: executing program 4 (id=5784): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 5.315412473s ago: executing program 4 (id=5785): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x4c, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008d5}, 0x8001) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 4.614440819s ago: executing program 0 (id=5790): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000340)=""/65, 0x41}, {&(0x7f00000005c0)=""/178, 0xb2}, {&(0x7f0000000680)=""/39, 0x27}, {&(0x7f00000006c0)=""/82, 0x52}], 0x4, 0xffff, 0xff) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYRESDEC=r0, @ANYRES32=r8], 0x1c}}, 0x4008054) r9 = socket(0x2c, 0xa, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000000180), &(0x7f0000000240)=0xc) write$nci(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r5, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="540100001800010027bd7000fddbdf251d0106001e01060007060302ff71ec6d721744cd5200080000f8cfcad4c4ec1608ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d6766d8ede646c6406e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e3c2f14e456d2a01953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c03db8d03000000000000002a5e15c8a95d29e5b2ea000015000300030000200501000054a01bff001d82a3060000000800"], 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) socket$pppl2tp(0x18, 0x1, 0x1) 4.586812825s ago: executing program 1 (id=5791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20400) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, 0x0, 0x18}, 0xc800) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) bind$ax25(r3, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r7, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x89, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000240)={0x1f, 0x1}, 0x6) ioctl$sock_bt_hci(r8, 0x800448d5, &(0x7f0000000400)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x64, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) 4.449862415s ago: executing program 2 (id=5792): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000540)={r3, @in6={{0xa, 0x4e20, 0x4, @mcast2, 0xd3}}, [0x9b, 0x9, 0x0, 0x6, 0x9, 0x3ff, 0x7a6f, 0xecf9, 0xe8cc, 0x388, 0x7, 0x5, 0x2, 0xf90, 0x10001]}, &(0x7f0000000640)=0x100) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @multicast2}, {0x20000010304, @local}, 0x12, {0x2, 0x4e24, @multicast1}, 'lo\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket(0x28, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="720ac4ff000000007110da000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r4}, 0x8) socket(0x21, 0x80000, 0x955c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x6, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x1, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 4.302958609s ago: executing program 3 (id=5793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x4, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x0, 0x84}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048c15}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x4}]}}]}, 0x154}}, 0x20000004) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x10000000, 0x6, 0xa}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x4) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r13, 0x1c}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb085f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0xfffffffb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.240936613s ago: executing program 1 (id=5794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffd73, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x16}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xf, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xb7d, 0x794c32ae, 0x1578}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004061}, 0x4890) r5 = socket$isdn_base(0x22, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x4071}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) bind$isdn_base(r5, &(0x7f0000000000)={0x22, 0x1, 0x6, 0xff, 0x5}, 0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xa, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 3.9080208s ago: executing program 3 (id=5795): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x6) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f0000000480)=""/242, 0xf2, 0x22, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x81800) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x7ff, 0x1000, 0x5}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x70bd27, 0x27dfdffd, {}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) ioctl$OCFS2_IOC_GROUP_ADD(r3, 0x40186f02, &(0x7f0000000500)={0x9, 0x1, 0x3}) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x160}}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), 0xffffffffffffffff) r11 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)={0x10, 0x1c, 0x20, 0x70bd27, 0x25dfdbfd}, 0x10}, {&(0x7f00000005c0)={0x10, 0x2a, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x10}], 0x2, 0x0, 0x0, 0x4044810}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000000)={0x38, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x800, 0xbddf, 0x5, 0x93f, 0x6, 0x7ff, 0x5bab]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x8, 0x47, 0x5, 0x2, {{0x1e, 0x4, 0x1, 0x19, 0x78, 0x68, 0x0, 0x2, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, {[@end, @timestamp_addr={0x44, 0x4c, 0xa1, 0x1, 0x3, [{@local, 0x5613e1b9}, {@broadcast, 0x9}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x78}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x401}, {@empty, 0x8}, {@rand_addr=0x64010101, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x115}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @noop, @generic={0x89, 0x6, "a8de764c"}, @lsrr={0x83, 0xf, 0x2a, [@multicast1, @remote, @rand_addr=0x64010100]}]}}}}}) 3.62048705s ago: executing program 0 (id=5796): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000000440)=""/4070, 0xfe6, 0x101, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) sendmsg$802154_dgram(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000400)={0x0}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000001540)={{r0, &(0x7f0000000180)='\'[!.+\x00', 0x480000, &(0x7f00000001c0)={@align=0x3, {0x8, 0x7, 0x2, 0xac0}}, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x6}, {[0x0, 0x40, 0x64, 0x2]}, 0x7fffffff, 0xed, &(0x7f0000001440)=""/237}) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f00000015c0)={@dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008110200ac1414000c00028005000100000000002c00018006"], 0x88}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) recvfrom(r0, &(0x7f0000000440)=""/4070, 0xfe6, 0x101, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) sendmsg$802154_dgram(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000400)={0x0}}, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000001540)={{r0, &(0x7f0000000180)='\'[!.+\x00', 0x480000, &(0x7f00000001c0)={@align=0x3, {0x8, 0x7, 0x2, 0xac0}}, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x6}, {[0x0, 0x40, 0x64, 0x2]}, 0x7fffffff, 0xed, &(0x7f0000001440)=""/237}) (async) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f00000015c0)={@dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008110200ac1414000c00028005000100000000002c00018006"], 0x88}}, 0x0) (async) 3.590778817s ago: executing program 0 (id=5797): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000640)=[{&(0x7f0000000280)="95", 0x1}], 0x1, 0x3, 0x80000080) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x2000, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={r6, 0x3}, 0x8) close(r3) (async) sendmmsg$inet(r3, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="199b6a6a7803de698c387fe1705dfcc9", 0x10}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20008041) sendfile(r3, r2, 0x0, 0xf03a0005) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x98, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x4001) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x8816) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) (async) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) 3.48255869s ago: executing program 0 (id=5798): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000012c0)={0xa415, 0x7f, 0xe7d7, 0x5, 0x5, 0x7, 0xbf04}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f0000002640)=0xfdc) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000001680)=0xe) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001100)={@empty, @multicast1, 0x0}, &(0x7f0000001140)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000011c0)={0x800, 0x0}, 0x8) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001240)=@generic={&(0x7f0000001200)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x14, 0x7, &(0x7f0000001080)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000010c0)='GPL\x00', 0x45d6, 0x0, 0x0, 0x40f00, 0x25, '\x00', r3, @fallback=0x1d, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x5, 0x10, 0x8, 0x3}, 0x10, r4, r5, 0x1, 0x0, &(0x7f0000001280)=[{0x3, 0x3, 0x7, 0x3}], 0x10, 0xffff0748}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8=r0], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x0, 0x36, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860186dd8aa2ddb2c10ac3c85234a83f873095d7f82e3a5c192fbc95aea9fd21015964c929747a2b2c8f89f9", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.325809414s ago: executing program 2 (id=5799): r0 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="74fba0"], 0x50}}, 0x4000850) socket$kcm(0x2, 0xa, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$qrtr(r0, &(0x7f0000000280)={0x2a, 0xffffffffffffffff, 0x1}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fcffffff0000000000000100850000003600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000002850000008200000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r6, 0x305, 0x70bd27, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x24044080) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0xa2ec9000) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000340)=""/114, &(0x7f00000003c0)=0x72) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r1, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000040)="09000000010001", 0x7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @private}, &(0x7f0000000540)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 3.279989188s ago: executing program 2 (id=5800): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000001280)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800d02b7030000000000008500000083000000bf090000000000005509010000000000950000000000000007090000080080ffbf91000000000000b7020000000000008500000085000000b70600000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x1}, 0x94) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000500000000000800060000020000080007"], 0x44}}, 0x0) 3.062596563s ago: executing program 2 (id=5801): r0 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538", 0x58}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4004014}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/99, 0x63}], 0x2}, 0x20) recvfrom(r4, &(0x7f00000023c0)=""/231, 0xe7, 0x20, 0x0, 0x0) (async) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @private}}, 0x1e) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000000000000500000000010000000000000e0100000000000000000000000000000900000000002e2e2e61"], &(0x7f0000000140)=""/4096, 0x46, 0x1000, 0x1}, 0x28) (async) r6 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001340)={r2, 0x0, 0xa2f, 0x1000}) sendmsg$nl_xfrm(r7, &(0x7f0000001740)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001700)={&(0x7f00000013c0)=@delsa={0x32c, 0x11, 0x200, 0x70bd2d, 0x25dfdbfd, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2, 0xff}, [@sec_ctx={0x56, 0x8, {0x52, 0x8, 0x1, 0x2, 0x4a, "db0db5a1ebeb46147bc1f93f084e62afe44b347440365fde266f42fd41c247497d6d5640e690bc7d2db85e1f8cea7b43ed0fbdb736a71d47359fc03bd9c26e2b15b90df481a73e4a407e"}}, @algo_auth_trunc={0x57, 0x14, {{'vmac64(aes)\x00'}, 0x58, 0x80, "f7d260829c9cb728dcdb89"}}, @tmpl={0x184, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x4d4, 0x3c}, 0xa, @in=@broadcast, 0x3505, 0x4, 0x2, 0x19, 0x5, 0x10001, 0x200}, {{@in=@local, 0x4d5, 0x2b}, 0x2, @in6=@local, 0x3501, 0x4, 0x0, 0xac, 0xfffffff0, 0xd480, 0x8}, {{@in6=@remote, 0x4d5, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x2, 0x0, 0x9, 0x401, 0x2}, {{@in=@private=0xa010102, 0x4d6, 0x32}, 0x2, @in6=@empty, 0x3503, 0x2, 0x0, 0xd4, 0x1ff, 0x5, 0x2}, {{@in=@loopback, 0x4d2, 0x2b}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x4, 0xd, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3506, 0x2, 0x3, 0xb, 0x42af, 0x10, 0x3}]}, @etimer_thresh={0x8, 0xc, 0x669}, @proto={0x5, 0x19, 0xff}, @etimer_thresh={0x8, 0xc, 0x6}, @sec_ctx={0x8f, 0x8, {0x8b, 0x8, 0x1, 0xb, 0x83, "63ea427b775172e01b5f20ead6482cccc523ede44a9970e5695037771e769e53ef8e797530817122dc8c658dd3858c0e1089c18f02d5508995373eb362450c7f55263f354974eae0f5f444b9cc89955e65ef023362c842b1d4da866fa5c6e9c2c95016031679f954daef5d023b5b523fc5fbb2e5de31444701d2cd4280d7a1237b6cf0"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e22, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @mark={0xc, 0x15, {0x35075c, 0x80000001}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x40}, 0x8084) (async) sendmsg$key(r6, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x18, 0x7f, 0x2, 0xb, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast1}}, @sadb_address={0x3, 0x12, 0x3c, 0x80, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x58}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0xfffffffc, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000003, 0xb4, 0x5}}]}, 0x128}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010440000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000000001480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c0000800800034000000002"], 0x100}}, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe800000000000000000000000000000100000000000000000dfff00004e2200000000000002000000000000000000007b0fc44c61fa2ee24bd882c6a54242de4718e6e7277b40e7715c0af43de1029ccde438e8137dd4140a3cfaf3bc1cd7e0ddf9eb792c3f709fe4c740a809dcada53775ff0d5f39e29dcd9089172e98c3fa3676fb2a2b82107ee029ed8ff2ebd144e47fe96531b566ba82c1f0671e03c068875f7db02618c3af166dffc31fe043ada2ef770b8515be7131e48a8ab3807cbd3a3596a74488806a8d851626be8a2dbb5410be15", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) 750.63419ms ago: executing program 3 (id=5802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x94}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100030000000000000081"], 0x30}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x3, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xbfa}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xc]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_ZONE={0x6}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x21}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xa}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x40000085) 737.431852ms ago: executing program 1 (id=5803): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x62040400) listen(0xffffffffffffffff, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x2, 0x9, {{0x2c, 0x4, 0x0, 0x18, 0xb0, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x13, 0x4b, [@local, @empty, @private=0xa010100, @local]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x84, [@empty, @loopback]}, @cipso={0x86, 0x29, 0x2, [{0xc, 0xe, "357c6d20931778c3e80f0c90"}, {0x5, 0x10, "b00e947ca22be969e0697ff000ea"}, {0x0, 0x5, "f23e16"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xbe, 0x3, 0x3, [{@multicast1, 0x5}, {@multicast1, 0xe}]}, @timestamp={0x44, 0x14, 0xb3, 0x0, 0x2, [0x8, 0x5, 0x29, 0x129b]}, @ra={0x94, 0x4}, @cipso={0x86, 0x1f, 0x1, [{0x6, 0xa, "7e9172ce451ec226"}, {0x1, 0x3, '4'}, {0x0, 0xc, "3016e87be58d5308d5ba"}]}]}}}}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e22, 0x0, 0x4e20, 0xfe01, 0xa, 0x80, 0x20, 0x2b, r2, r5}, {0x6, 0x8000000000000001, 0x0, 0xd, 0x4, 0x0, 0x4, 0x8}, {0x9, 0x1, 0x0, 0x4}, 0x9, 0x6e6bb6, 0x0, 0x0, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x3, 0x3, 0x2d, 0x0, 0xca, 0x7fffffff}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 721.876159ms ago: executing program 0 (id=5804): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0xf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, 0x2e) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="12000000400000000400000002"], 0x50) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x4000}, {{}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x59}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 438.78431ms ago: executing program 2 (id=5805): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, 0x90) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000007060101fc868e6f49c78c500100e807fe00020073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0xc415}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x1}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}]}, 0x44}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}, 0x10) 438.051644ms ago: executing program 3 (id=5806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x7, 0x2, 0x3, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="ec231f1c7ea9336d181a02000000", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x2, 0x9, 0x0, r0, 0x100}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x1}, 0x94) 342.204361ms ago: executing program 4 (id=5807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$inet(0x2, 0xa, 0x4) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x9c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x24, r4, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4) 268.780428ms ago: executing program 0 (id=5808): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480100001000fbf425bd7000f759de2500000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e22, 0x3, 'rr\x00', 0x28, 0x5, 0x72}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa0100fe, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x6, @loopback, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x20000040) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)="1e", 0x1}], 0x1}, 0x4c00c) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@empty, @mcast1, @private1, 0x80000000, 0x9, 0x3, 0x400, 0xf1b9, 0x800000, r8}) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x2, 0xffffffed}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) socket$netlink(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x2, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="070000000000fefbdf250500f6001800018014000000200003801c0003801800018011000200646f6e745f6170707261697365000000"], 0x4c}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 138.91553ms ago: executing program 3 (id=5809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xfffffffe, @mcast2}], 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x54, r4, 0x1, 0x70bd2c, 0x1200, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x25, 0x0, 0x2}]}) 16.38396ms ago: executing program 4 (id=5810): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x4e21, @empty}, {0x6, @local}, 0x2a, {0x2, 0x4e21, @local}, 'sit0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000081000000000000001d00000018610000ac89f6300dba3de66cd856c31c7b8a48bc0c73c88f7b6558f54202c6b53f31336acfc773cda1b8a4943a5a6602e68ce988f638fb30951362e700267a68c28a7530026ab62b0867bbef79eea78cfbbcc5b923ce2e2325bd830e", @ANYRES8=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010", 0x5}], 0x1}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000000200004000000000000000", @ANYBLOB="24e39362", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r9, &(0x7f0000000080), &(0x7f0000000340)=""/10}, 0x20) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000100)={r11, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x3, 0x6}, 0x0) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000f9000000000000000000000000b13bcffdcf77cf8fe497cfd57584ba3a6d2ed7df8af88d0f186fabccc8d2ba2bf5ce41a01016ab71cfe2183f24d36d6c21028f75ce76c8e79a38e38a79dd25b3cfd18d08ad58fe6ccf15c5b3eab42fdcbca9f5761ee3d5edbb34af55ea78464e1b14de3bb4cfff82d4fbdf6ecb324c0d7d5a92c89c3a5bdf74f6411c908cdf1ff8ad3a7861433ad8b4df9d3b", @ANYRES32=0x0, @ANYRESOCT=r10, @ANYBLOB="00000000000000000000000000000000000000000010000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r12}, 0x0, &(0x7f0000000140)=r4}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x12, 0x8, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet_sctp(r0, &(0x7f0000001100)={&(0x7f0000000280)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000580)="93b46e4090e84d049b332c01b0d3546626eb37e1a5a6e59f31e4367057694fe3b63adadc12675fdc19fbae85711051a1083e6dae4b31525c57de7f0440299e31df1c08709545366533e6d33923ba0c64c5a05de5ed7ab30dee5687b502221ac19cad8b324fa22b4e6808421d4292c6b5226aea8360c99c8701266d946450f27c9f0664a70153ed982e7cdfe8774c659a95eb9fe14d135e953fcf448e9b9bd21bb2c34eee3fc0ad7daaaa032774447dd6e032ea0cb0db29727c79883d05c7723758791d63e87b2bb6", 0xc8}, {&(0x7f0000000c80)="2fd4548b6b328dfc4fd1b5763721816f5c69f4e4cd17d25f5ad8fd7bf12f0b7a8c37d8c8659f5f6e0c7bdb8eda692d0dc3735ebb2f53426ad3dfa9b03d4d52d9b8b141c861675bf61c00c1e78539615e197a85e67dc330861c046944868b1617b004145ae81cde830d3658033a6bac3b599e6256bad03afcf3863c264f25502779b29ffc97667c856e0044b956a8cc957f42eed9aa6291654ab5a572f2bbefd2f12b6c16e68f4cffa2b55af9dc859e1a247eeac4160f08116bb5386a9bd5f431d7bcf09c40c6d0b0b1f76a3122816cfc7064eee1f433dce59a262c543ed4535b0f8370", 0xe3}, {&(0x7f0000000d80)="e0a978ce6324a78736921e0b0a6f7e04c7768d67c1daf5bb55e15218fdfaf2deb602e645829c377f4f9e7fdd138d85af18c75dd83cfcb9e5620a283b48fa2e1d7c4e8646dd611552892c3ea5f9b7a05d5a5db182a53cf6e8ab93c2c717779b041fceacc6e14c115969efb252f5590429f0514d4f932c3cbc476c3babba2f0df4c0e62b07c67841d53682d7479d47ce85ec739a5dbf68354cab18269ce0c8d244283a02afcf0bc5560d6c1ef61f678f4bd4bc15564d495589d5cd4652965500959a730bf1", 0xc4}, {&(0x7f0000000680)="d6f1602a5b7b50cd206a281209153613d834248c35d08bcc547cb65d9d0895c17954f972005a217c5dcf4045f62dcf650954a6202b7153a79590c1d315da3a42955c095e329d322f934f13f91bf9b28cb0c953d5b1d2c092e9ef4ad6570449db1c28e946a20b7a9af9435e033a321bcab45e3816cb42ae22704ffa147137d23c892af0a5c30d63adf16c6b8d46f45a0cbf55b1a08222cf98d348660d8dac18b96f70e8", 0xa3}, {&(0x7f0000000f40)="4ed0152283b627f1986d853c98c406dd618c9125402303c6ca4ebd2ca4d52f8f8847df531abf2982b7a84c4fc2baaf1003e62df4f8ee76eb9a", 0x39}, {&(0x7f0000000380)="8c8457101b14aefb19ac600c59182fc51d60be81ceeb42f1bdd73ed383b6e7ee47cc391418311cb677743521d0baeea1643eb5636caca3", 0x37}, {&(0x7f0000001000)="ca4983c17b93f2c95314d6372bcaeed2bf75e8cf9afa5b000fc29f1ed04e00a5363f4c406aa9f4556e6b559c37b1cf9d05ad37e1", 0x34}], 0x7, &(0x7f00000010c0), 0x0, 0x20048000}, 0x800) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240)) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000000801040000000000000000020000050900010073797a310000000005000300060000000c000480080001400000007f060002a100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 0s ago: executing program 2 (id=5811): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x138, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x47, &(0x7f0000000080), 0x30, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xcf, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f0000000540)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}], 0x38}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x70f, 0x6, 0xe6761ffb5c9b73b0, 0xb29f, 0xfe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd26, 0x27dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004011}, 0x40d0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r8) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x24, r9, 0x6a513da061e1002b, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000017c0)=ANY=[@ANYRES32=r1, @ANYBLOB="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"]) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r11, &(0x7f0000000440), 0x10) listen(r11, 0xfffffffe) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000400)="05896d544d688c155b2634607aff136d3553df4cf1c590821b2a41cd74be4659981319decb2a", 0x26}], 0x1) r13 = accept4$unix(r11, 0x0, 0x0, 0x0) recvmmsg(r13, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r13, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.167415][T23087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 736.215044][ T29] tipc: Node number set to 2886997007 [ 736.227187][T23074] pim6reg: left allmulticast mode [ 736.414058][T23087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.432314][T23087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 736.617062][T23087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.628651][T23087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 736.717518][T23126] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 736.968414][T23131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.140961][T15945] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 737.165326][T15945] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 737.257635][T15975] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 737.266657][T23127] netlink: 'syz.0.4162': attribute type 4 has an invalid length. [ 737.273902][T15975] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 737.304161][T23141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4165'. [ 737.326570][T23135] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.344900][T23135] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.396555][T15975] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 737.406951][T15975] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 737.485580][T23144] macvtap1: entered promiscuous mode [ 737.495504][T23144] macvtap1: entered allmulticast mode [ 737.506888][T23144] veth1_vlan: entered allmulticast mode [ 737.526567][T23135] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.554187][T23135] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.572687][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.599357][T23139] macvtap2: entered promiscuous mode [ 737.611543][T23139] macvtap2: entered allmulticast mode [ 737.652364][T15942] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 737.666424][T15942] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 737.716260][T23135] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.742767][T23135] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.776244][T23151] sctp: [Deprecated]: syz.0.4168 (pid 23151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 737.776244][T23151] Use struct sctp_sack_info instead [ 737.795323][T23151] sctp: [Deprecated]: syz.0.4168 (pid 23151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 737.795323][T23151] Use struct sctp_sack_info instead [ 737.833538][T23151] delete_channel: no stack [ 737.936778][T23135] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.959532][T23154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4169'. [ 737.988722][T23135] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.284901][T15976] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.293852][T15976] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.355455][T15976] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.364499][T15976] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.391710][T15976] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.400901][T15976] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.425654][T15976] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.434415][T15976] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.621880][T23169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4174'. [ 738.930077][T23181] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4177'. [ 739.021732][T23185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4178'. [ 739.251451][T23199] bond0: (slave bond_slave_1): Releasing backup interface [ 740.265060][T23244] IPv6: NLM_F_CREATE should be specified when creating new route [ 740.276745][T23244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 740.284390][T23244] IPv6: NLM_F_CREATE should be set when creating new route [ 740.291728][T23244] IPv6: NLM_F_CREATE should be set when creating new route [ 740.299028][T23244] IPv6: NLM_F_CREATE should be set when creating new route [ 740.337583][T23246] __nla_validate_parse: 1 callbacks suppressed [ 740.337598][T23246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4196'. [ 740.392241][T23246] macvtap1: entered promiscuous mode [ 740.408515][T23246] veth1_to_hsr: entered promiscuous mode [ 740.425135][T23246] macvtap1: entered allmulticast mode [ 740.440793][T23246] veth1_to_hsr: entered allmulticast mode [ 740.594064][T23249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4197'. [ 740.628383][T23249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.693030][T15976] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 740.731450][T15976] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 740.770246][T15976] bond0: now running without any active interface! [ 741.122892][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4201'. [ 741.154363][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4201'. [ 741.204885][T23265] dvmrp6: entered allmulticast mode [ 741.214829][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4201'. [ 741.218307][T23267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4203'. [ 741.248134][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4201'. [ 741.279573][T23267] hsr_slave_1 (unregistering): left promiscuous mode [ 741.301054][T23262] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4203'. [ 741.310728][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4201'. [ 741.322236][T23262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4203'. [ 741.526202][T23272] netlink: 'syz.3.4204': attribute type 1 has an invalid length. [ 742.655200][T23316] netlink: 'syz.2.4216': attribute type 1 has an invalid length. [ 742.890034][T23325] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 742.942827][ T7520] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 743.136028][T23343] netlink: 'syz.1.4220': attribute type 1 has an invalid length. [ 743.231273][T23347] netlink: 'syz.3.4223': attribute type 4 has an invalid length. [ 743.285386][T23350] netlink: 'syz.3.4223': attribute type 4 has an invalid length. [ 743.332183][T15975] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 743.383848][ T7520] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 743.427195][T23350] netlink: 'syz.3.4223': attribute type 10 has an invalid length. [ 743.500919][T23350] bond0: (slave wlan1): Opening slave failed [ 743.910117][T23371] sit0: entered allmulticast mode [ 743.924196][T23371] tipc: Enabled bearer , priority 0 [ 743.955491][T23370] tipc: Disabling bearer [ 744.011822][T23384] SET target dimension over the limit! [ 744.124412][T23387] netlink: 'syz.1.4237': attribute type 1 has an invalid length. [ 744.149349][T23387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.215821][T23387] netlink: 'syz.1.4237': attribute type 1 has an invalid length. [ 744.249703][T23387] nbd: error processing sock list [ 744.402102][T15975] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 744.443798][T15975] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 744.570343][T23414] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 744.730689][T23419] tipc: New replicast peer: 255.255.255.255 [ 744.754062][T23419] tipc: Enabled bearer , priority 10 [ 744.902331][T23423] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.920853][T23423] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.053055][T23423] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.078477][T23423] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.177403][T23423] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.208511][T23423] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.387619][T23423] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.403520][T23423] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.416705][ T7528] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 745.526878][T23462] netlink: 'syz.0.4259': attribute type 4 has an invalid length. [ 745.569434][T23462] __nla_validate_parse: 15 callbacks suppressed [ 745.570657][T23462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4259'. [ 745.604485][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.624640][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.671431][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.676308][T23470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4259'. [ 745.686400][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.773310][T15976] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.786526][T15976] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.824834][T23468] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode [ 745.832649][T23468] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode [ 745.840614][T15976] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.851519][T15976] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.891083][T23475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4264'. [ 745.941069][T23477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4263'. [ 746.027130][T23486] netlink: 'syz.2.4266': attribute type 2 has an invalid length. [ 746.213347][T23496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4267'. [ 746.263224][T23498] netlink: 'syz.0.4268': attribute type 1 has an invalid length. [ 746.282715][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 746.360380][T23501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4268'. [ 746.426564][T23498] 8021q: adding VLAN 0 to HW filter on device bond5 [ 746.504531][ T7509] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 746.523677][T23513] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4272'. [ 746.713139][ T7509] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 746.841061][T23534] netlink: 268 bytes leftover after parsing attributes in process `syz.4.4280'. [ 746.876859][T23534] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4280'. [ 746.903164][T23534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4280'. [ 746.929864][T23524] vlan2: entered promiscuous mode [ 746.942831][T23524] erspan0: entered promiscuous mode [ 747.574781][ T7509] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 748.095369][T23590] netlink: 'syz.4.4294': attribute type 1 has an invalid length. [ 748.132848][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 748.173522][T23590] bond5: entered promiscuous mode [ 748.196282][T23590] 8021q: adding VLAN 0 to HW filter on device bond5 [ 748.254774][T23589] netlink: 'syz.0.4295': attribute type 25 has an invalid length. [ 748.271444][T23589] netlink: 'syz.0.4295': attribute type 3 has an invalid length. [ 748.322772][T23590] nbd0: detected capacity change from 0 to 63 [ 748.721266][T23601] xt_l2tp: invalid flags combination: 8 [ 748.733006][T23611] netlink: 'syz.0.4299': attribute type 11 has an invalid length. [ 748.906193][T17525] block nbd0: Receive control failed (result -104) [ 749.707663][T23645] netlink: 'syz.1.4310': attribute type 6 has an invalid length. [ 749.857351][T23651] netlink: 'syz.1.4310': attribute type 6 has an invalid length. [ 749.941714][T23654] netlink: 'syz.3.4314': attribute type 62 has an invalid length. [ 750.167534][T23660] dvmrp1: entered allmulticast mode [ 750.192830][T23663] dvmrp1: left allmulticast mode [ 750.218404][T23663] dvmrp6: left allmulticast mode [ 750.268765][T23660] x_tables: duplicate underflow at hook 2 [ 750.720002][T23690] __nla_validate_parse: 14 callbacks suppressed [ 750.720023][T23690] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4323'. [ 750.736709][T23690] netlink: 'syz.1.4323': attribute type 1 has an invalid length. [ 750.745001][T23690] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4323'. [ 750.878277][T23701] IPVS: set_ctl: invalid protocol: 115 172.20.20.37:20004 [ 750.909325][T23703] netlink: 'syz.1.4326': attribute type 1 has an invalid length. [ 750.951960][T23703] 8021q: adding VLAN 0 to HW filter on device bond4 [ 750.990120][T23703] vlan2: entered promiscuous mode [ 751.016486][T23703] bond4: entered promiscuous mode [ 751.021739][T23703] vlan2: entered allmulticast mode [ 751.032597][T23703] bond4: entered allmulticast mode [ 751.047446][T23711] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4326'. [ 751.104227][T23711] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 751.116102][T23711] bond4: (slave batadv1): making interface the new active one [ 751.124624][T23711] batadv1: entered promiscuous mode [ 751.130198][T23711] batadv1: entered allmulticast mode [ 751.137394][T23711] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 751.297868][T23723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4330'. [ 751.515554][T23737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4333'. [ 751.545320][T23737] netlink: 'syz.1.4333': attribute type 4 has an invalid length. [ 751.590954][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4335'. [ 751.684117][T23744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.692505][T23745] bridge_slave_0: left allmulticast mode [ 751.699317][T23745] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.709468][T23746] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 751.747402][T23745] bridge_slave_1: left allmulticast mode [ 751.768277][T23745] bridge_slave_1: left promiscuous mode [ 751.812358][T23745] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.874513][T23745] bond0: (slave bond_slave_0): Releasing backup interface [ 751.913100][T23745] bond0: (slave bond_slave_1): Releasing backup interface [ 751.952251][T23745] team0: Port device team_slave_0 removed [ 751.996445][T23745] team0: Port device team_slave_1 removed [ 752.021100][T23745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.038869][T23745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.051802][T23745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.060171][T23745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.077346][T23745] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 752.241724][T23766] netlink: 'syz.4.4342': attribute type 1 has an invalid length. [ 752.257010][T23766] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4342'. [ 752.350467][T23766] bond6: option resend_igmp: invalid value (437455678) [ 752.357837][T23766] bond6: option resend_igmp: allowed values 0 - 255 [ 752.371948][T23766] bond6 (unregistering): Released all slaves [ 752.442279][T23772] syzkaller0: entered promiscuous mode [ 752.482712][T23772] syzkaller0: entered allmulticast mode [ 752.771733][T23787] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 752.932669][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 752.944961][T23800] netlink: 656 bytes leftover after parsing attributes in process `syz.1.4351'. [ 752.958521][T23800] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4351'. [ 753.060353][T23805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4352'. [ 753.073014][T23805] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 753.085316][T23805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.124533][T23787] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 753.274047][T23807] validate_nla: 1 callbacks suppressed [ 753.274068][T23807] netlink: 'syz.2.4353': attribute type 12 has an invalid length. [ 753.463124][T23787] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 753.476847][T23787] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.118012][T23851] netlink: zone id is out of range [ 754.136710][T23851] netlink: zone id is out of range [ 754.153749][T23851] netlink: zone id is out of range [ 754.165305][T23851] netlink: zone id is out of range [ 754.177671][T23851] netlink: zone id is out of range [ 754.201583][T23851] netlink: zone id is out of range [ 755.262952][T23888] tipc: Enabling of bearer rejected, failed to enable media [ 755.492690][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 755.600295][T23904] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 755.781270][T23910] __nla_validate_parse: 18 callbacks suppressed [ 755.781296][T23910] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4382'. [ 755.912352][T23917] netlink: 'syz.0.4385': attribute type 1 has an invalid length. [ 756.560457][T23918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4383'. [ 756.626401][T23951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4395'. [ 756.645992][T23951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4395'. [ 756.830771][T23959] netlink: 'syz.3.4398': attribute type 5 has an invalid length. [ 756.896772][T23954] netlink: 'syz.0.4396': attribute type 1 has an invalid length. [ 756.955309][T23962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'. [ 757.008564][T23954] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 757.039295][T23954] syzkaller1: Refused to change device type [ 757.049794][T23929] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4387'. [ 757.065506][T23971] netlink: 'syz.2.4401': attribute type 1 has an invalid length. [ 757.311737][T23983] netlink: 'syz.0.4403': attribute type 1 has an invalid length. [ 757.717978][T24008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4410'. [ 757.747858][T24008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4410'. [ 757.810532][T24011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4410'. [ 758.419544][T24039] netlink: 'syz.4.4421': attribute type 8 has an invalid length. [ 758.436207][T24039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4421'. [ 758.596856][T24058] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 758.723374][T24071] netlink: 'syz.2.4429': attribute type 1 has an invalid length. [ 758.811112][T24071] 8021q: adding VLAN 0 to HW filter on device bond5 [ 758.865563][T24075] gtp1: entered promiscuous mode [ 758.887520][T24075] gtp1: entered allmulticast mode [ 759.059913][T24090] syzkaller0: entered promiscuous mode [ 759.066261][T24090] syzkaller0: entered allmulticast mode [ 759.080699][T24090] netlink: 'syz.3.4434': attribute type 32 has an invalid length. [ 759.430104][T24112] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 759.648965][T24120] team0: No ports can be present during mode change [ 760.337909][T24138] bond6: entered allmulticast mode [ 760.356577][T24141] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 760.823184][T24170] netlink: 'syz.1.4459': attribute type 1 has an invalid length. [ 760.856842][T24170] __nla_validate_parse: 11 callbacks suppressed [ 760.856863][T24170] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4459'. [ 761.137198][T24180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4462'. [ 761.403736][T24200] netlink: 'syz.1.4468': attribute type 9 has an invalid length. [ 761.432999][T24200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4468'. [ 761.533625][T24200] macvlan2: entered promiscuous mode [ 761.556298][T24200] macvlan2: entered allmulticast mode [ 761.580356][T24200] erspan0: entered allmulticast mode [ 761.689159][T24210] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 761.852735][ T7520] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 761.865613][T24219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4475'. [ 762.032663][T24229] ip6tnl0: Caught tx_queue_len zero misconfig [ 762.049047][T24229] sch_tbf: burst 240 is lower than device ip6tnl0 mtu (1452) ! [ 762.084528][T24229] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4478'. [ 762.438759][ T7520] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 762.525828][T24229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.549693][T24229] bond0 (unregistering): Released all slaves [ 762.676308][T24237] bond5: entered promiscuous mode [ 762.718158][T24242] 8021q: VLANs not supported on nlmon0 [ 762.851344][T24258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4486'. [ 762.881276][T24258] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4486'. [ 762.942120][T24263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4487'. [ 763.198109][T24273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4489'. [ 763.219670][T24271] sctp: [Deprecated]: syz.1.4490 (pid 24271) Use of int in max_burst socket option. [ 763.219670][T24271] Use struct sctp_assoc_value instead [ 763.245304][T24274] bond6: option resend_igmp: invalid value (2878) [ 763.264231][T24274] bond6: option resend_igmp: allowed values 0 - 255 [ 763.308204][T24274] bond6 (unregistering): Released all slaves [ 763.386789][T24286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4493'. [ 763.700783][T24298] team0: entered promiscuous mode [ 763.710302][T24298] team_slave_0: entered promiscuous mode [ 763.716725][T24298] team_slave_1: entered promiscuous mode [ 763.723976][T24298] veth1_to_bridge: entered promiscuous mode [ 763.730280][T24298] net_ratelimit: 349 callbacks suppressed [ 763.730297][T24298] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 763.796263][T24301] tipc: Started in network mode [ 763.803838][T24301] tipc: Node identity aa2845631d09, cluster identity 4711 [ 763.819607][T24301] tipc: Enabled bearer , priority 0 [ 764.028995][T24305] syzkaller0: entered promiscuous mode [ 764.042782][T24305] syzkaller0: entered allmulticast mode [ 764.060247][T24305] tipc: Resetting bearer [ 764.151212][T24299] tipc: Resetting bearer [ 767.002037][T24299] tipc: Disabling bearer [ 767.011536][T24323] __nla_validate_parse: 2 callbacks suppressed [ 767.011557][T24323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4503'. [ 767.039033][T24326] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 767.089543][ T7507] tipc: Node number set to 3072410979 [ 767.366884][T24352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4509'. [ 767.521514][T24359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.551389][T24359] tap0: tun_chr_ioctl cmd 21731 [ 767.805585][T24363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4514'. [ 768.079803][T24377] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4517'. [ 768.091544][T24377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4517'. [ 768.338697][T24384] batman_adv: batadv0: Adding interface: vlan3 [ 768.345287][T24384] batman_adv: batadv0: The MTU of interface vlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.371181][T24384] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 769.012598][T24403] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 769.024737][T24404] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 769.034499][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4527'. [ 769.048578][T24410] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 769.051305][ T7507] IPVS: starting estimator thread 0... [ 769.212836][T24409] IPVS: using max 27 ests per chain, 64800 per kthread [ 769.535663][T24437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4534'. [ 769.566513][T24437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4534'. [ 769.824832][T24455] tipc: Enabling of bearer rejected, failed to enable media [ 770.197360][T24475] netlink: 'syz.0.4544': attribute type 1 has an invalid length. [ 770.265851][T24482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4546'. [ 770.300801][T24484] tls_set_device_offload_rx: netdev not found [ 770.308389][T24477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4545'. [ 770.356566][T24477] vlan4: entered allmulticast mode [ 770.361992][T24477] macvtap0: entered allmulticast mode [ 770.368168][T24477] veth0_macvtap: entered allmulticast mode [ 770.421990][T24477] syzkaller1: entered promiscuous mode [ 770.444937][T24477] syzkaller1: entered allmulticast mode [ 770.802189][T24507] netlink: 'syz.4.4552': attribute type 1 has an invalid length. [ 770.852768][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 770.999558][T24507] 8021q: adding VLAN 0 to HW filter on device bond6 [ 771.204511][T24524] netlink: 'syz.0.4555': attribute type 11 has an invalid length. [ 771.238223][T24526] IPv6: NLM_F_CREATE should be specified when creating new route [ 771.248013][T24526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 771.255345][T24526] IPv6: NLM_F_CREATE should be set when creating new route [ 771.262704][T24526] IPv6: NLM_F_CREATE should be set when creating new route [ 771.269979][T24526] IPv6: NLM_F_CREATE should be set when creating new route [ 771.280145][T24519] bond8: option xmit_hash_policy: invalid value (10) [ 771.306206][T24519] bond8 (unregistering): Released all slaves [ 771.579301][T24535] lo: Caught tx_queue_len zero misconfig [ 771.820936][T24545] tap0: tun_chr_ioctl cmd 1074025681 [ 771.845735][T24544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.035743][T24558] SET target dimension over the limit! [ 772.047700][T24556] netlink: 'syz.4.4569': attribute type 28 has an invalid length. [ 772.122199][T24565] __nla_validate_parse: 8 callbacks suppressed [ 772.122220][T24565] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4571'. [ 772.272258][T24572] 8021q: VLANs not supported on ip_vti0 [ 772.285045][T24571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4572'. [ 772.300233][T24572] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4573'. [ 772.318989][T24572] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4573'. [ 772.322209][T24574] netlink: 'syz.3.4574': attribute type 1 has an invalid length. [ 772.431635][T24580] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 772.458698][T24584] syz_tun: entered allmulticast mode [ 772.468042][T24586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4577'. [ 772.482819][T24586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4577'. [ 772.538623][T24573] syz_tun: left allmulticast mode [ 772.699204][T24596] netlink: 'syz.1.4578': attribute type 3 has an invalid length. [ 772.773604][T15976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.784923][ T7507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.795905][ T7520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.811003][ T7528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.816548][T24592] delete_channel: no stack [ 773.183436][T24619] 5Ò: entered promiscuous mode [ 773.334576][T24627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4586'. [ 773.414245][T15945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.425856][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.443185][ T7507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.506794][T24632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4589'. [ 773.638264][T24642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4590'. [ 773.806952][T24642] tipc: Started in network mode [ 773.824879][T24642] tipc: Node identity 4ee7f9a32ebd, cluster identity 4711 [ 773.850589][T24642] tipc: Enabled bearer , priority 0 [ 773.884062][T24642] tipc: Resetting bearer [ 773.931558][T24641] tipc: Disabling bearer [ 774.141132][T24657] netlink: 'syz.0.4593': attribute type 2 has an invalid length. [ 774.346763][T24654] vlan5: entered promiscuous mode [ 774.361321][T24654] geneve1: entered promiscuous mode [ 774.386248][T24654] vlan5: entered allmulticast mode [ 774.402066][T24654] geneve1: entered allmulticast mode [ 774.801889][T24674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4598'. [ 775.333707][T15976] net_ratelimit: 1 callbacks suppressed [ 775.333729][T15976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.350609][ T7520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.366075][ T7516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.895948][ T7528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.955940][T24707] netlink: 'syz.0.4607': attribute type 13 has an invalid length. [ 776.062813][ T7516] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 776.295147][ T7516] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 776.337676][T24713] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 776.454347][ T7516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.873500][T24738] ip6gretap0: left promiscuous mode [ 776.885835][T24738] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 777.036863][T24749] tipc: Enabling of bearer rejected, failed to enable media [ 777.081449][T24761] netlink: 'syz.3.4623': attribute type 29 has an invalid length. [ 777.496545][ T7516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.597184][T24778] syzkaller0: entered promiscuous mode [ 777.649788][T24798] syzkaller0: entered promiscuous mode [ 777.658263][T24798] syzkaller0: entered allmulticast mode [ 777.744518][T24804] __nla_validate_parse: 9 callbacks suppressed [ 777.744562][T24804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4631'. [ 777.974546][T24816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4634'. [ 778.539127][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.547389][T15976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.557675][ T1626] block nbd0: Possible stuck request ffff88802759e000: control (read@0,1024B). Runtime 30 seconds [ 778.558312][ T7507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.573160][ T1626] block nbd0: Possible stuck request ffff88802759e1c0: control (read@1024,1024B). Runtime 30 seconds [ 778.590074][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.615888][ T1626] block nbd0: Possible stuck request ffff88802759e380: control (read@2048,1024B). Runtime 30 seconds [ 778.627076][ T1626] block nbd0: Possible stuck request ffff88802759e540: control (read@3072,1024B). Runtime 30 seconds [ 780.459953][T15945] net_ratelimit: 1 callbacks suppressed [ 780.459975][T15945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.475448][ T7507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.511527][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.909220][T24804] tipc: Enabled bearer , priority 0 [ 780.917172][T24814] lo speed is unknown, defaulting to 1000 [ 780.923606][T24814] lo speed is unknown, defaulting to 1000 [ 780.999288][T24794] tipc: Resetting bearer [ 781.047716][T24794] tipc: Disabling bearer [ 781.096573][T24814] lo speed is unknown, defaulting to 1000 [ 781.190756][T24814] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 781.342896][T24814] lo speed is unknown, defaulting to 1000 [ 781.456838][T24814] lo speed is unknown, defaulting to 1000 [ 781.474816][T24814] lo speed is unknown, defaulting to 1000 [ 781.509212][T24814] lo speed is unknown, defaulting to 1000 [ 781.540844][T24814] lo speed is unknown, defaulting to 1000 [ 781.547148][T24850] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4641'. [ 781.566713][T24814] lo speed is unknown, defaulting to 1000 [ 781.572781][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.614984][T24814] lo speed is unknown, defaulting to 1000 [ 781.654027][ T7507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.738215][T24850] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 781.885908][T24868] netlink: 'syz.1.4646': attribute type 19 has an invalid length. [ 782.107102][T24882] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4647'. [ 782.147300][T24882] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4647'. [ 782.372986][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 782.471722][T24893] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4651'. [ 782.563670][T24886] syzkaller0: entered promiscuous mode [ 782.569267][T24886] syzkaller0: entered allmulticast mode [ 782.612828][ T7516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.990974][T24917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4656'. [ 783.023506][ T7528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.026727][T24917] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4656'. [ 783.142241][T24918] netlink: 'syz.4.4656': attribute type 1 has an invalid length. [ 783.153594][T24918] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4656'. [ 783.165944][T24918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4656'. [ 783.654815][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.299168][ T6564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.309831][ T7528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.734389][ T5898] net_ratelimit: 2 callbacks suppressed [ 785.734431][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.975811][T24894] lo speed is unknown, defaulting to 1000 [ 786.482404][T24953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4666'. [ 786.486548][T24950] GUP no longer grows the stack in syz.4.4665 (24950): 200000003000-20000000a000 (200000001000) [ 786.522683][T24950] CPU: 0 UID: 0 PID: 24950 Comm: syz.4.4665 Not tainted syzkaller #0 PREEMPT(full) [ 786.522715][T24950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 786.522728][T24950] Call Trace: [ 786.522738][T24950] [ 786.522747][T24950] dump_stack_lvl+0xe8/0x150 [ 786.522785][T24950] __get_user_pages+0x2453/0x29d0 [ 786.522833][T24950] ? __gup_longterm_locked+0xc4e/0x1630 [ 786.522860][T24950] ? down_read_killable+0x1bb/0x340 [ 786.522889][T24950] ? try_get_folio+0xec/0x650 [ 786.522922][T24950] __gup_longterm_locked+0xdcf/0x1630 [ 786.522977][T24950] gup_fast_fallback+0x1d82/0x22e0 [ 786.523042][T24950] ? __pfx_gup_fast_fallback+0x10/0x10 [ 786.523071][T24950] ? is_valid_gup_args+0x11f/0x200 [ 786.523099][T24950] ? get_user_pages_fast+0x4d/0xb0 [ 786.523128][T24950] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 786.523159][T24950] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 786.523195][T24950] iov_iter_get_pages2+0x5e/0xa0 [ 786.523221][T24950] __se_sys_vmsplice+0x7b3/0x1490 [ 786.523271][T24950] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 786.523310][T24950] ? __pfx_futex_wake+0x10/0x10 [ 786.523336][T24950] ? lockdep_hardirqs_on+0x7a/0x110 [ 786.523415][T24950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.523439][T24950] do_syscall_64+0x15f/0xf80 [ 786.523463][T24950] ? trace_irq_disable+0x3b/0x140 [ 786.523485][T24950] ? clear_bhb_loop+0x40/0x90 [ 786.523511][T24950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.523530][T24950] RIP: 0033:0x7fb330f9c819 [ 786.523551][T24950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.523578][T24950] RSP: 002b:00007fb331ec4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 786.523603][T24950] RAX: ffffffffffffffda RBX: 00007fb331215fa0 RCX: 00007fb330f9c819 [ 786.523619][T24950] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 786.523633][T24950] RBP: 00007fb331032c91 R08: 0000000000000000 R09: 0000000000000000 [ 786.523652][T24950] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 786.523664][T24950] R13: 00007fb331216038 R14: 00007fb331215fa0 R15: 00007ffd6904c0e8 [ 786.523700][T24950] [ 786.535756][T24948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.764711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.782957][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.293448][T24971] IPVS: Error connecting to the multicast addr [ 787.334731][ T7507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.409640][T24984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4673'. [ 787.480355][T24986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4675'. [ 787.678347][T24958] lec:lec_atm_close: lec0: Shut down! [ 787.705323][T24989] gre1: entered allmulticast mode [ 787.711803][T24991] lo: Caught tx_queue_len zero misconfig [ 787.718069][T24991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4676'. [ 787.813917][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.126617][T25014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4683'. [ 788.552895][ T7509] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 788.857140][ T7516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.881668][T25045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4689'. [ 789.414766][ T7528] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 789.703252][ T7516] lec:lec_start_xmit: lec0:No lecd attached [ 789.767342][T25087] pim6reg: entered allmulticast mode [ 789.793913][T25093] pim6reg: left allmulticast mode [ 789.893828][ T7516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.115879][T25107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4700'. [ 790.142001][T25113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4700'. [ 790.383339][ T7528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.504793][T25125] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4702'. [ 790.567877][T25129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4706'. [ 790.900856][T25137] vlan2: entered allmulticast mode [ 790.920209][T25137] bridge0: port 3(vlan2) entered blocking state [ 790.937674][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.957564][T25137] bridge0: port 3(vlan2) entered disabled state [ 790.978174][T25137] vlan2: entered promiscuous mode [ 791.160823][T25160] syzkaller1: entered promiscuous mode [ 791.180726][T25163] smc: net device wlan0 erased user defined pnetid SYZ0 [ 791.205927][T25160] syzkaller1: entered allmulticast mode [ 791.207132][T25158] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4712'. [ 791.604443][T25184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4718'. [ 791.657956][T25190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4720'. [ 791.674429][T25184] 8021q: adding VLAN 0 to HW filter on device bond7 [ 791.707000][T25190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.717693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.738065][T25191] bond7: (slave batadv2): Opening slave failed [ 791.748545][T25190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.822762][T25190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4720'. [ 791.904698][T25198] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.914445][T25198] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.107469][T25190] vlan3: entered allmulticast mode [ 792.113414][T25190] bridge0: port 3(vlan3) entered blocking state [ 792.119890][T25190] bridge0: port 3(vlan3) entered disabled state [ 792.145670][T25190] vlan3: entered promiscuous mode [ 792.210619][T15945] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.220458][T15945] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.233412][T15945] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.242082][T15945] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.251405][T15945] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.260389][T15945] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.269678][T15945] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.283604][T15945] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.493573][T25280] pimreg: entered allmulticast mode [ 793.559581][T25280] __nla_validate_parse: 6 callbacks suppressed [ 793.559602][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4747'. [ 793.652951][T25289] ip6tnl2: entered allmulticast mode [ 793.664684][T25297] x_tables: duplicate entry at hook 3 [ 793.969257][T25304] delete_channel: no stack [ 794.169876][T25317] netlink: 'syz.3.4755': attribute type 4 has an invalid length. [ 794.222246][T25318] netlink: 'syz.3.4755': attribute type 4 has an invalid length. [ 794.334507][T25326] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4759'. [ 794.386450][T25326] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4759'. [ 794.457557][T25323] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4759'. [ 794.475022][T25339] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4762'. [ 794.624404][T25349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.662344][T25349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.697612][T25349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.750104][T25355] SET target dimension over the limit! [ 794.753086][T25359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.842834][T25359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.924960][T25370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4766'. [ 794.937712][T25359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.956183][T25370] netlink: 'syz.2.4766': attribute type 11 has an invalid length. [ 794.964568][T25370] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.4766'. [ 795.172922][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5460 ms [ 795.183220][ C1] lec:lec_tx_timeout: lec0 [ 795.188657][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 795.458978][T25388] x_tables: duplicate underflow at hook 1 [ 795.470781][T25387] x_tables: duplicate underflow at hook 1 [ 795.488683][T25380] netlink: 'syz.2.4768': attribute type 4 has an invalid length. [ 795.518281][T25380] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4768'. [ 795.644280][T25401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4773'. [ 795.843857][T25404] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4774'. [ 796.718345][T25434] nbd: couldn't find a device at index 2 [ 796.814322][T25437] netlink: 'syz.3.4782': attribute type 5 has an invalid length. [ 797.141758][T25448] vlan5: entered promiscuous mode [ 797.153538][T25448] vlan5: entered allmulticast mode [ 797.179979][T25428] lo speed is unknown, defaulting to 1000 [ 797.515336][T25470] netlink: 'syz.0.4789': attribute type 1 has an invalid length. [ 797.769869][T25476] bridge0: left promiscuous mode [ 797.785474][T25476] bridge0: left allmulticast mode [ 798.546190][T25494] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 798.674200][T25498] tipc: Invalid UDP bearer configuration [ 798.700609][T25498] tipc: Enabling of bearer rejected, failed to enable media [ 798.767050][T25503] žÿ: renamed from team_slave_1 [ 798.820274][T25506] sctp: [Deprecated]: syz.0.4800 (pid 25506) Use of int in max_burst socket option deprecated. [ 798.820274][T25506] Use struct sctp_assoc_value instead [ 799.216127][T25480] lo speed is unknown, defaulting to 1000 [ 799.923932][T25538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.204616][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 800.212746][ C1] lec:lec_tx_timeout: lec0 [ 800.217823][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 800.389385][T25559] syzkaller0: entered promiscuous mode [ 800.404882][T25559] syzkaller0: entered allmulticast mode [ 800.612901][T25539] lo speed is unknown, defaulting to 1000 [ 800.770752][T25581] syzkaller1: entered promiscuous mode [ 800.793359][T25581] syzkaller1: entered allmulticast mode [ 801.085658][T25595] netlink: 'syz.4.4825': attribute type 1 has an invalid length. [ 801.217726][T25604] __nla_validate_parse: 10 callbacks suppressed [ 801.217748][T25604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4826'. [ 801.236210][T25604] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4826'. [ 801.289370][T25605] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4825'. [ 801.314736][T25605] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4825'. [ 801.379773][T25601] bond7: (slave veth9): Enslaving as an active interface with a down link [ 801.505641][T25595] bond7: (slave veth11): Enslaving as an active interface with a down link [ 801.531754][T25605] 8021q: adding VLAN 0 to HW filter on device bond7 [ 801.676991][T25618] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 801.692094][T25622] rdma_op ffff88807a8699f0 conn xmit_rdma 0000000000000000 [ 801.708571][T25618] bond4: (slave lo): Enslaving as an active interface with an up link [ 801.737483][T25618] net_ratelimit: 7 callbacks suppressed [ 801.737497][T25618] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 801.924039][T25618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4830'. [ 803.138322][T25689] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4842'. [ 803.725148][T25716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.760550][T25716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.793010][T25716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.806483][T25719] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4849'. [ 803.836478][T25716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.892381][T25716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.916258][T25714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.123920][T25730] block nbd0: reconnected socket [ 804.376054][T25734] bond8: invalid ARP target 0.0.0.0 specified for addition [ 804.409914][T25734] bond8: option arp_ip_target: invalid value (0) [ 804.420879][T17525] block nbd0: Receive control failed (result -32) [ 804.445449][T25734] bond8 (unregistering): Released all slaves [ 804.591671][T25739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4854'. [ 804.786413][T25753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.812705][T25753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.841006][T25753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.006922][T25766] netlink: 'syz.4.4861': attribute type 2 has an invalid length. [ 805.143951][T25771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4863'. [ 805.203052][T25776] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4864'. [ 805.232532][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 805.240790][ C1] lec:lec_tx_timeout: lec0 [ 805.245590][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 806.260472][T25790] lo speed is unknown, defaulting to 1000 [ 806.627082][T25827] __nla_validate_parse: 1 callbacks suppressed [ 806.627104][T25827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4877'. [ 806.967198][T25837] batadv0: entered promiscuous mode [ 807.011454][T25837] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 807.047822][T25837] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 807.085741][T25837] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 807.112023][T25837] batadv0: left promiscuous mode [ 807.149440][T25804] lo speed is unknown, defaulting to 1000 [ 807.169425][T25845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4882'. [ 807.480060][T25847] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.4880'. [ 807.608581][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4880'. [ 807.931578][T25872] syzkaller0: entered promiscuous mode [ 807.948076][T25872] syzkaller0: entered allmulticast mode [ 807.987664][T25844] block nbd0: NBD_DISCONNECT [ 807.994890][T25844] block nbd0: Send disconnect failed -32 [ 808.000895][T25844] block nbd0: shutting down sockets [ 808.031500][ C1] blk_print_req_error: 136 callbacks suppressed [ 808.031524][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.047123][ C1] buffer_io_error: 138 callbacks suppressed [ 808.047140][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 808.067263][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.076429][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 808.084367][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.093470][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 808.101433][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.110543][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 808.127159][T22659] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.143008][T22659] Buffer I/O error on dev nbd0, logical block 0, async page read [ 808.153497][T22659] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.164180][T22659] Buffer I/O error on dev nbd0, logical block 1, async page read [ 808.174641][T22659] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.184004][T22659] Buffer I/O error on dev nbd0, logical block 2, async page read [ 808.192079][T22659] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.201650][T22659] Buffer I/O error on dev nbd0, logical block 3, async page read [ 808.210619][T22659] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.226365][T22659] Buffer I/O error on dev nbd0, logical block 0, async page read [ 808.235525][T22659] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.245013][T22659] Buffer I/O error on dev nbd0, logical block 1, async page read [ 808.319821][T22659] ldm_validate_partition_table(): Disk read failed. [ 808.345431][T22659] Dev nbd0: unable to read RDB block 0 [ 808.364995][T22659] nbd0: unable to read partition table [ 808.395840][T22659] ldm_validate_partition_table(): Disk read failed. [ 808.433366][T22659] Dev nbd0: unable to read RDB block 0 [ 808.441184][T22659] nbd0: unable to read partition table [ 808.464951][T25892] syzkaller0: entered promiscuous mode [ 808.477013][T25892] syzkaller0: entered allmulticast mode [ 808.495511][T25841] lo speed is unknown, defaulting to 1000 [ 808.816836][T25908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4894'. [ 808.898813][T25909] netlink: 'syz.2.4895': attribute type 1 has an invalid length. [ 809.112099][T25918] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 809.831970][T25938] batadv0: entered promiscuous mode [ 809.867907][T25938] batadv0: entered allmulticast mode [ 810.070342][T25952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4906'. [ 810.112595][T25952] netlink: 'syz.1.4906': attribute type 4 has an invalid length. [ 810.199049][T25961] ip6t_srh: unknown srh invflags BA61 [ 810.229425][T25961] ip6t_srh: unknown srh invflags BA61 [ 810.242855][T25961] ip6t_srh: unknown srh invflags BA61 [ 810.252505][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 810.257806][T25961] ip6t_srh: unknown srh invflags BA61 [ 810.262310][ C1] lec:lec_tx_timeout: lec0 [ 810.270839][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 810.287672][T25961] ip6t_srh: unknown srh invflags BA61 [ 810.320787][T25961] ip6t_srh: unknown srh invflags BA61 [ 810.334057][T25961] ip6t_srh: unknown srh invflags BA61 [ 810.376378][T25961] ip6t_srh: unknown srh invflags BA61 [ 810.406493][T25961] ip6t_srh: unknown srh invflags BA61 [ 810.422731][T25961] ip6t_srh: unknown srh invflags BA61 [ 810.485679][T25971] netlink: 'syz.3.4910': attribute type 1 has an invalid length. [ 810.598224][T25977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4912'. [ 810.669915][T25971] 8021q: adding VLAN 0 to HW filter on device bond5 [ 810.682683][T25980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4911'. [ 810.910428][T25995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4916'. [ 810.921672][T25996] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4915'. [ 811.194597][T26000] bond7: Unable to set up delay as MII monitoring is disabled [ 811.221412][T26000] bond7 (unregistering): Released all slaves [ 811.238623][T26006] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 811.790214][T26033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4923'. [ 811.819907][T26035] batadv_slave_0: entered promiscuous mode [ 811.840588][T26034] batadv_slave_0: left promiscuous mode [ 811.880553][T26037] bridge_slave_1: left allmulticast mode [ 811.906754][T26037] bridge_slave_1: left promiscuous mode [ 811.937993][T26037] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.086611][T26051] netlink: 'syz.0.4929': attribute type 21 has an invalid length. [ 812.237899][T26058] netlink: 'syz.4.4932': attribute type 20 has an invalid length. [ 812.257289][T26058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4932'. [ 812.320675][T26062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4933'. [ 812.330002][T26012] lo speed is unknown, defaulting to 1000 [ 812.336085][T15975] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.360261][T26062] macvtap1: entered promiscuous mode [ 812.366850][T26062] macvtap1: entered allmulticast mode [ 812.374979][T15975] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.400340][T15975] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.420368][T15975] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.514244][T26069] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4935'. [ 812.534303][T26070] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4935'. [ 812.923764][T26074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4936'. [ 812.970549][T26047] lo speed is unknown, defaulting to 1000 [ 813.756902][T26057] lo speed is unknown, defaulting to 1000 [ 814.162102][T26111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4945'. [ 814.264705][T26090] lo speed is unknown, defaulting to 1000 [ 814.463932][T26121] can: request_module (can-proto-5) failed. [ 814.599218][T26128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4948'. [ 815.327061][T26144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4954'. [ 815.386385][T26146] net_ratelimit: 7 callbacks suppressed [ 815.386407][T26146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 815.531371][T26150] netlink: 'syz.2.4955': attribute type 29 has an invalid length. [ 815.966209][T26173] openvswitch: netlink: Multiple metadata blocks provided [ 816.043671][T26177] openvswitch: netlink: IP tunnel dst address not specified [ 816.052526][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 816.060602][ C1] lec:lec_tx_timeout: lec0 [ 816.065806][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 816.073605][T26176] openvswitch: netlink: IP tunnel dst address not specified [ 816.082062][T26176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4962'. [ 816.099680][T26179] netlink: 'syz.4.4962': attribute type 13 has an invalid length. [ 816.099719][T26177] netlink: 'syz.4.4962': attribute type 13 has an invalid length. [ 816.117853][T26177] netlink: 'syz.4.4962': attribute type 17 has an invalid length. [ 816.143219][T26179] netlink: 'syz.4.4962': attribute type 17 has an invalid length. [ 816.234086][T26177] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.261528][T26177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 816.265400][T26182] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 816.279203][ T7557] lo speed is unknown, defaulting to 1000 [ 816.304580][T26179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 816.325779][T26160] lo speed is unknown, defaulting to 1000 [ 816.391988][T26189] netlink: 'syz.0.4966': attribute type 8 has an invalid length. [ 817.100674][T26219] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 817.519644][T26232] syzkaller0: entered promiscuous mode [ 817.525901][T26232] syzkaller0: entered allmulticast mode [ 817.548948][T26235] Bluetooth: MGMT ver 1.23 [ 817.902753][T26251] __nla_validate_parse: 1 callbacks suppressed [ 817.902774][T26251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4982'. [ 817.989431][T26255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4980'. [ 818.127748][T26263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'. [ 818.766858][T26290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.777431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.806322][T26291] netlink: 296 bytes leftover after parsing attributes in process `syz.1.4991'. [ 818.909378][T26296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4991'. [ 818.941788][T26296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4991'. [ 818.957988][T26265] lo speed is unknown, defaulting to 1000 [ 819.269143][T26314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.303712][T26313] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 819.329033][T26320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.628912][T26331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5000'. [ 819.687091][T26332] netlink: 'syz.1.5000': attribute type 4 has an invalid length. [ 819.769554][T26331] hsr_slave_0: left promiscuous mode [ 819.824267][T26331] hsr_slave_1: left promiscuous mode [ 820.082178][T26351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5004'. [ 820.118438][T26354] sctp: [Deprecated]: syz.2.5005 (pid 26354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 820.118438][T26354] Use struct sctp_sack_info instead [ 820.230747][T26362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5008'. [ 820.268415][T26366] xt_bpf: check failed: parse error [ 820.896133][T26381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5012'. [ 821.092589][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 821.100726][ C1] lec:lec_tx_timeout: lec0 [ 821.106079][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 821.669684][T26396] net_ratelimit: 2 callbacks suppressed [ 821.669706][T26396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.686891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.815938][T26403] netlink: 'syz.4.5018': attribute type 4 has an invalid length. [ 821.831308][T26401] netlink: 'syz.2.5017': attribute type 4 has an invalid length. [ 822.112953][T26426] netlink: 'syz.3.5021': attribute type 309 has an invalid length. [ 822.158763][T26429] IPv6: sit1: Disabled Multicast RS [ 822.282697][T26436] netlink: 'syz.2.5026': attribute type 10 has an invalid length. [ 822.322613][T26436] syz_tun: entered promiscuous mode [ 822.378026][T26436] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 822.458185][T26441] bond6: entered promiscuous mode [ 822.464520][T26441] 8021q: adding VLAN 0 to HW filter on device bond6 [ 822.491260][ T7559] syz1: Port: 1 Link ACTIVE [ 822.910498][T26474] netlink: 'syz.4.5035': attribute type 1 has an invalid length. [ 822.919563][T26474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 822.930482][T26474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.131435][T26483] __nla_validate_parse: 10 callbacks suppressed [ 823.131457][T26483] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5037'. [ 823.391859][T26490] netlink: 'syz.2.5038': attribute type 11 has an invalid length. [ 823.416239][T26490] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.5038'. [ 823.635898][T26503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.645011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.662186][T26504] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5042'. [ 823.771078][T26507] syzkaller0: entered promiscuous mode [ 823.977052][T26521] bridge0: port 2(veth0_to_bridge) entered blocking state [ 824.007539][T26521] bridge0: port 2(veth0_to_bridge) entered disabled state [ 824.038539][T26521] veth0_to_bridge: entered allmulticast mode [ 824.062578][T26521] veth0_to_bridge: entered promiscuous mode [ 824.470464][T26535] netlink: 'syz.2.5049': attribute type 3 has an invalid length. [ 825.075137][T26561] x_tables: duplicate underflow at hook 2 [ 825.132813][T26559] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 825.397722][T26533] lo speed is unknown, defaulting to 1000 [ 825.501415][T26570] bond8: option arp_interval: invalid value (18446744073709551615) [ 825.606110][T26570] bond8: option arp_interval: allowed values 0 - 2147483647 [ 825.657357][T26570] bond8 (unregistering): Released all slaves [ 826.112468][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 826.120587][ C1] lec:lec_tx_timeout: lec0 [ 826.125479][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 826.431429][T26609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.440061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.495596][T26609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.508617][T15975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.560460][T26609] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5064'. [ 826.908890][T26587] lo speed is unknown, defaulting to 1000 [ 827.496428][T26621] lec:lec_atm_close: lec0: Shut down! [ 827.541219][T26652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5069'. [ 827.646571][T22659] block nbd0: NBD_DISCONNECT [ 827.723447][T22659] block nbd0: Disconnected due to user request. [ 827.774284][T22659] block nbd0: shutting down sockets [ 828.220863][T22659] udevd[22659]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 828.341692][T26657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5071'. [ 828.467301][T26660] bond8: entered allmulticast mode [ 828.508497][T26664] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 828.556085][T26664] lo: entered allmulticast mode [ 828.561484][T26664] bond8: (slave lo): Enslaving as an active interface with an up link [ 828.595415][T26664] net_ratelimit: 2 callbacks suppressed [ 828.595435][T26664] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 828.765902][T26688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5074'. [ 828.809960][T26688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5074'. [ 828.916321][T26693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5077'. [ 829.066711][T26702] netlink: 51 bytes leftover after parsing attributes in process `syz.1.5079'. [ 829.106114][T26708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5080'. [ 829.130635][T26699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.141329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.152968][T26708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5080'. [ 829.165968][T26711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5082'. [ 829.179586][T26698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.188054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.215708][T26698] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5078'. [ 829.219916][T26708] netlink: 'syz.0.5080': attribute type 18 has an invalid length. [ 829.233245][T26699] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5078'. [ 829.296411][T26702] 8021q: adding VLAN 0 to HW filter on device bond9 [ 829.373691][ T7528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.424792][T15942] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.461664][T15942] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.508294][T15942] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.534797][T15942] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.136187][ T7528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.151707][T26762] netlink: 'syz.4.5093': attribute type 2 has an invalid length. [ 830.167062][T26762] netlink: 'syz.4.5093': attribute type 2 has an invalid length. [ 830.335490][T15942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.572379][T26775] syzkaller1: entered promiscuous mode [ 830.591201][T26775] syzkaller1: entered allmulticast mode [ 830.674705][T26778] netlink: 'syz.1.5097': attribute type 7 has an invalid length. [ 830.738823][T26780] netlink: 'syz.1.5097': attribute type 8 has an invalid length. [ 830.895415][T26784] netlink: 'syz.4.5100': attribute type 1 has an invalid length. [ 830.920762][T26784] netlink: 'syz.4.5100': attribute type 1 has an invalid length. [ 831.416358][T15975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.444566][T15975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.820557][T26811] nbd: device at index 64 is going down [ 832.072970][T22275] udevd[22275]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 832.188809][T22659] udevd[22659]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 832.226054][T26824] xt_ipcomp: unknown flags 1D [ 833.092541][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5600 ms [ 833.100654][ C1] lec:lec_tx_timeout: lec0 [ 833.105398][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 833.755889][T26887] __nla_validate_parse: 14 callbacks suppressed [ 833.755911][T26887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5130'. [ 833.834571][T26882] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.903211][T26882] net_ratelimit: 2 callbacks suppressed [ 833.903223][T26882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 834.169844][T26899] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5133'. [ 834.198480][T26899] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5133'. [ 834.667261][T26920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5137'. [ 835.033915][T26929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.198537][T26933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5145'. [ 835.442769][T26946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5146'. [ 835.466507][T26946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5146'. [ 835.533096][T26949] syz_tun: entered allmulticast mode [ 835.573115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.751934][T26953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5149'. [ 835.835295][T26955] hmó3)óÿ: entered promiscuous mode [ 836.121470][T26962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5153'. [ 836.294337][T26959] mac80211_hwsim hwsim59 syzkaller0: left promiscuous mode [ 836.314459][T26959] mac80211_hwsim hwsim59 syzkaller0: left allmulticast mode [ 836.323281][T26967] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5154'. [ 836.333566][T26959] bond4: left promiscuous mode [ 836.340238][T26959] veth1_to_hsr: left allmulticast mode [ 836.346153][T26959] veth1_to_hsr: left promiscuous mode [ 836.353991][T26959] macvtap1: left promiscuous mode [ 836.363895][T26959] macvtap1: left allmulticast mode [ 836.376807][T26959] bond5: left promiscuous mode [ 836.405195][T26959] ip6tnl2: left allmulticast mode [ 836.433855][ T7559] lo speed is unknown, defaulting to 1000 [ 836.440322][T26936] lo speed is unknown, defaulting to 1000 [ 836.440365][ T7559] syz2: Port: 1 Link DOWN [ 836.673030][T15942] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.703150][T15942] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.725270][T15942] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.746158][T15942] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.790960][T26970] ipvlan2: entered promiscuous mode [ 836.801475][T26985] xt_hashlimit: invalid rate [ 836.838740][T15942] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.854847][T15942] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.869317][T15942] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.884924][T15942] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.939916][T26988] xfrm0: entered allmulticast mode [ 836.946218][T26988] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 837.196909][T27006] netlink: 'syz.0.5164': attribute type 29 has an invalid length. [ 837.684517][T27029] syzkaller0: entered promiscuous mode [ 837.700240][T26993] lo speed is unknown, defaulting to 1000 [ 838.112451][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 838.120558][ C1] lec:lec_tx_timeout: lec0 [ 838.125748][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 838.165726][T27038] 8021q: adding VLAN 0 to HW filter on device bond7 [ 838.809902][T27043] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 838.914905][T27047] netlink: 'syz.3.5177': attribute type 15 has an invalid length. [ 838.925669][T27047] __nla_validate_parse: 1 callbacks suppressed [ 838.925688][T27047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5177'. [ 838.968517][T27047] netlink: 'syz.3.5177': attribute type 15 has an invalid length. [ 838.979349][T15975] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 838.992784][T27047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5177'. [ 839.002131][T15975] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 839.055828][T15975] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 839.080342][T27053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5178'. [ 839.081024][T15975] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 839.100258][T27053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5178'. [ 839.128062][T27053] netlink: 332 bytes leftover after parsing attributes in process `syz.2.5178'. [ 839.159408][T27053] netlink: 'syz.2.5178': attribute type 9 has an invalid length. [ 839.168516][T27053] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5178'. [ 839.183462][T27053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5178'. [ 839.213621][T27054] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5178'. [ 839.607388][T27066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5181'. [ 839.636900][T27068] dvmrp0: entered allmulticast mode [ 839.955865][T27085] tipc: New replicast peer: 255.255.255.255 [ 839.979071][T27085] tipc: Enabled bearer , priority 10 [ 840.017734][T27085] netlink: 'syz.2.5189': attribute type 39 has an invalid length. [ 840.420361][T27113] netlink: 'syz.1.5196': attribute type 1 has an invalid length. [ 840.444159][T27113] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5196'. [ 840.462376][T27112] netlink: 'syz.1.5196': attribute type 1 has an invalid length. [ 840.745094][T27076] lo speed is unknown, defaulting to 1000 [ 840.771862][T27129] macsec2: entered promiscuous mode [ 840.778133][T27129] macsec2: entered allmulticast mode [ 840.816925][T27134] netlink: 'syz.0.5204': attribute type 4 has an invalid length. [ 841.285776][T27158] x_tables: duplicate underflow at hook 2 [ 841.685605][T27171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 841.699770][T27174] netlink: 'syz.1.5217': attribute type 83 has an invalid length. [ 841.708705][T27176] openvswitch: netlink: Unknown key attributes 2 [ 841.836774][T27183] netlink: 'syz.1.5217': attribute type 83 has an invalid length. [ 841.860989][T27187] tipc: Invalid UDP bearer configuration [ 841.861091][T27187] tipc: Enabling of bearer rejected, failed to enable media [ 842.571031][T27208] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 842.603438][T27209] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 843.132468][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 843.140754][ C1] lec:lec_tx_timeout: lec0 [ 843.147185][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 843.405650][T27260] SET target dimension over the limit! [ 843.772997][T27243] lo speed is unknown, defaulting to 1000 [ 844.113151][T27288] __nla_validate_parse: 12 callbacks suppressed [ 844.113173][T27288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5241'. [ 844.214263][T27290] syzkaller1: entered promiscuous mode [ 844.226548][T27290] syzkaller1: entered allmulticast mode [ 844.403785][T27254] lo speed is unknown, defaulting to 1000 [ 844.601634][T27294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5244'. [ 844.651737][T27294] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5244'. [ 844.684912][T27294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5244'. [ 844.737630][T27294] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5244'. [ 844.788579][T27294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5244'. [ 845.072821][ T7529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.228356][T27311] netlink: 'syz.1.5248': attribute type 13 has an invalid length. [ 845.253484][T27311] netlink: 14589 bytes leftover after parsing attributes in process `syz.1.5248'. [ 845.462132][T27312] bond7: option tlb_dynamic_lb: invalid value (5) [ 845.484362][T27312] bond7 (unregistering): Released all slaves [ 845.732691][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 845.759286][T27333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5253'. [ 845.814538][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.970373][T27348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5257'. [ 845.979858][T27348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5257'. [ 845.991789][T27348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.009239][T27348] xt_hashlimit: overflow, rate too high: 0 [ 846.380927][T27360] Unknown options in mask 6 [ 846.544576][T27363] veth5: entered promiscuous mode [ 846.746587][T27367] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode [ 846.770439][T27367] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode [ 847.071322][T27377] geneve2: entered promiscuous mode [ 847.088272][ T6568] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 36801 - 0 [ 847.200434][ T6568] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 36801 - 0 [ 847.243551][ T6568] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 36801 - 0 [ 847.278928][ T6568] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 36801 - 0 [ 847.902549][T27384] lo speed is unknown, defaulting to 1000 [ 848.162825][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 848.170935][ C1] lec:lec_tx_timeout: lec0 [ 848.175616][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 849.126086][T27427] __nla_validate_parse: 3 callbacks suppressed [ 849.126108][T27427] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5276'. [ 849.204830][T27433] IPVS: Error connecting to the multicast addr [ 849.232978][T27433] IPVS: Error connecting to the multicast addr [ 849.255148][T27436] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5276'. [ 849.277529][T27436] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5276'. [ 849.421989][T27440] x_tables: duplicate underflow at hook 3 [ 849.658782][T27445] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5281'. [ 849.741126][T27444] netlink: 'syz.0.5281': attribute type 1 has an invalid length. [ 849.905535][T27449] netlink: 'syz.4.5282': attribute type 1 has an invalid length. [ 850.276916][T27454] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 850.326123][T27454] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 850.527498][T27456] bond8: (slave gretap3): making interface the new active one [ 850.545864][T27456] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 851.162308][T27487] can: request_module (can-proto-3) failed. [ 851.238249][T27493] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5290'. [ 851.425354][T27502] netlink: 404 bytes leftover after parsing attributes in process `syz.1.5292'. [ 851.441464][T27502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5292'. [ 851.472728][T27502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5292'. [ 851.494232][T27502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5292'. [ 851.518000][T27505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5293'. [ 851.961766][T27535] openvswitch: netlink: Missing key (keys=40, expected=80) [ 852.139877][T27540] netlink: 'syz.0.5301': attribute type 2 has an invalid length. [ 852.167711][T27540] netlink: 'syz.0.5301': attribute type 11 has an invalid length. [ 852.320431][T27546] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 852.364749][T27549] tipc: Enabling of bearer rejected, failed to enable media [ 852.685872][T27527] lo speed is unknown, defaulting to 1000 [ 852.782075][T27568] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 853.182450][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 853.190569][ C1] lec:lec_tx_timeout: lec0 [ 853.196041][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 853.626885][T27591] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 853.664201][T27591] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 853.849778][T27591] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 853.873738][T27591] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 853.971118][T27591] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 853.981223][T27591] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 854.059844][T27591] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 854.081065][T27591] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 854.286542][T27620] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 854.308807][T27620] bond10 (unregistering): Released all slaves [ 854.406270][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 854.416459][T27620] syzkaller1: entered promiscuous mode [ 854.432600][T27620] syzkaller1: entered allmulticast mode [ 854.537369][T27641] __nla_validate_parse: 7 callbacks suppressed [ 854.537476][T27641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5329'. [ 854.621340][ T6557] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 854.632803][ T6557] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 854.734248][T15975] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 854.768786][T15975] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 854.836150][T27654] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5333'. [ 854.860171][ T6568] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 854.885615][ T6568] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 854.949909][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 854.970720][ T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 855.093409][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 855.216484][T27676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5338'. [ 855.278887][T27685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5340'. [ 855.422322][T27690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5341'. [ 855.485900][T27695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5343'. [ 855.526370][T27695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5343'. [ 855.540340][T27698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5345'. [ 855.549988][T27695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5343'. [ 855.550146][T27695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5343'. [ 855.573497][T27698] veth1_macvtap: left promiscuous mode [ 855.626244][T27706] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 856.063596][T27727] netlink: 'syz.0.5354': attribute type 4 has an invalid length. [ 856.200321][T27744] netlink: 'syz.1.5356': attribute type 89 has an invalid length. [ 856.234324][T27743] tipc: Failed to remove unknown binding: 66,0,0/0:1088873402/1088873404 [ 856.246805][T27743] tipc: Failed to remove unknown binding: 66,0,0/0:1088873402/1088873403 [ 856.259491][T27743] tipc: Failed to remove unknown binding: 66,0,0/0:1088873402/1088873404 [ 856.260688][T27744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.268177][T27743] tipc: Failed to remove unknown binding: 66,0,0/0:1088873402/1088873403 [ 856.309457][T27744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.327513][T27744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.362245][T27749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.403599][T27749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.762122][T27770] netlink: 'syz.3.5365': attribute type 4 has an invalid length. [ 857.425537][T27795] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 857.443117][T27795] syzkaller1: linktype set to 260 [ 857.701112][T27817] netlink: 'syz.3.5374': attribute type 1 has an invalid length. [ 857.702020][T27811] netlink: 'syz.1.5373': attribute type 1 has an invalid length. [ 857.888733][T27824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.898736][T27821] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 857.910670][T27821] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 857.917922][T27825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.959697][T27827] syzkaller1: entered promiscuous mode [ 857.985708][T27827] syzkaller1: entered allmulticast mode [ 858.202469][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 858.210771][ C1] lec:lec_tx_timeout: lec0 [ 858.216310][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 858.245946][T27839] openvswitch: netlink: Message has 4 unknown bytes. [ 858.264702][T27839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 858.395319][T27846] vxcan3: entered promiscuous mode [ 858.421258][T27857] netlink: 'syz.3.5380': attribute type 19 has an invalid length. [ 858.436025][T27857] netlink: 'syz.3.5380': attribute type 20 has an invalid length. [ 858.875089][T27865] veth13: entered allmulticast mode [ 859.010656][T27865] bond8: (slave veth13): Enslaving as an active interface with an up link [ 859.113531][T27874] bond8 (unregistering): (slave veth13): Releasing backup interface [ 859.140670][T27874] bond8 (unregistering): Released all slaves [ 859.613558][T27911] __nla_validate_parse: 40 callbacks suppressed [ 859.613579][T27911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5393'. [ 859.665253][T27915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5394'. [ 859.944073][T27928] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5397'. [ 860.350840][T27946] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 860.779832][T27970] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5408'. [ 861.111214][T27974] bond11: entered allmulticast mode [ 861.210177][T27987] netlink: 'syz.2.5412': attribute type 16 has an invalid length. [ 861.227034][T27980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5410'. [ 861.241153][T27987] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5412'. [ 861.417768][T27990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5413'. [ 863.083928][T18950] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 863.098565][T18950] CPU: 1 UID: 0 PID: 18950 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 863.098595][T18950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 863.098608][T18950] Call Trace: [ 863.098615][T18950] [ 863.098623][T18950] dump_stack_lvl+0xe8/0x150 [ 863.098661][T18950] dump_header+0xd3/0x4c0 [ 863.098690][T18950] oom_kill_process+0x3ab/0x970 [ 863.098725][T18950] out_of_memory+0x106c/0x1410 [ 863.098752][T18950] ? try_charge_memcg+0xba6/0x1560 [ 863.098786][T18950] ? __pfx___mutex_lock+0x10/0x10 [ 863.098821][T18950] ? __pfx_out_of_memory+0x10/0x10 [ 863.098847][T18950] ? do_raw_spin_unlock+0xf5/0x210 [ 863.098881][T18950] try_charge_memcg+0xc53/0x1560 [ 863.098935][T18950] ? __pfx_try_charge_memcg+0x10/0x10 [ 863.098973][T18950] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 863.099007][T18950] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 863.099044][T18950] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 863.099080][T18950] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 863.099116][T18950] __swap_cache_prepare_and_add+0xe8/0x760 [ 863.099152][T18950] ? page_rmappable_folio+0x9a/0x170 [ 863.099184][T18950] swap_cache_alloc_folio+0xf1/0x240 [ 863.099215][T18950] swap_cluster_readahead+0x369/0x690 [ 863.099250][T18950] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 863.099299][T18950] ? get_vma_policy+0x27b/0x3c0 [ 863.099324][T18950] swapin_readahead+0x196/0xc50 [ 863.099355][T18950] ? swap_table_get+0x1e/0x260 [ 863.099386][T18950] ? __pfx_swapin_readahead+0x10/0x10 [ 863.099415][T18950] ? swap_table_get+0x1e/0x260 [ 863.099438][T18950] ? swap_table_get+0x1e/0x260 [ 863.099460][T18950] ? swap_table_get+0x1e/0x260 [ 863.099493][T18950] ? swap_table_get+0x216/0x260 [ 863.099519][T18950] ? swap_cache_get_folio+0x513/0x520 [ 863.099552][T18950] do_swap_page+0x56f/0x5a20 [ 863.099604][T18950] ? do_swap_page+0x127/0x5a20 [ 863.099627][T18950] ? __pfx_do_swap_page+0x10/0x10 [ 863.099649][T18950] ? __pte_offset_map+0x1ae/0x240 [ 863.099681][T18950] ? pte_offset_map_rw_nolock+0xea/0x160 [ 863.099713][T18950] handle_mm_fault+0x12d2/0x3310 [ 863.099762][T18950] ? handle_mm_fault+0xee/0x3310 [ 863.099798][T18950] ? __pfx_handle_mm_fault+0x10/0x10 [ 863.099821][T18950] ? lock_vma_under_rcu+0x45a/0x500 [ 863.099882][T18950] do_user_addr_fault+0xa73/0x1340 [ 863.099919][T18950] ? rcu_is_watching+0x15/0xb0 [ 863.099949][T18950] ? trace_page_fault_user+0x84/0x1e0 [ 863.099980][T18950] exc_page_fault+0x6a/0xc0 [ 863.100007][T18950] asm_exc_page_fault+0x26/0x30 [ 863.100026][T18950] RIP: 0033:0x7fc88566a837 [ 863.100048][T18950] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 80 af ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 79 ae ed 00 48 01 d1 39 7c 24 [ 863.100066][T18950] RSP: 002b:00007ffc940cca00 EFLAGS: 00010206 [ 863.100086][T18950] RAX: 0000001b2cc24000 RBX: 00000000000005bd RCX: 00000000000d2730 [ 863.100101][T18950] RDX: 000000000dc3c625 RSI: 00007ffc940cca90 RDI: 000000000000001a [ 863.100114][T18950] RBP: 00007ffc940cca3c R08: 0000000034822190 R09: 3fffffffffffffff [ 863.100129][T18950] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 863.100143][T18950] R13: 00000000000927c0 R14: 00000000000d2003 R15: 00007ffc940cca90 [ 863.100178][T18950] [ 863.101906][T18950] memory: usage 306160kB, limit 307200kB, failcnt 745 [ 863.225016][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 863.225049][ C1] lec:lec_tx_timeout: lec0 [ 863.236590][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 863.456290][T18950] memory+swap: usage 223900kB, limit 9007199254740988kB, failcnt 0 [ 863.464816][T18950] kmem: usage 222492kB, limit 9007199254740988kB, failcnt 0 [ 863.478063][T18950] Memory cgroup stats for /syz0: [ 863.478260][T18950] cache 0 [ 863.487109][T18950] rss 0 [ 863.489929][T18950] rss_huge 0 [ 863.496757][T18950] shmem 0 [ 863.499931][T18950] mapped_file 0 [ 863.503930][T18950] dirty 0 [ 863.507030][T18950] writeback 0 [ 863.510331][T18950] workingset_refault_anon 11 [ 863.515884][T18950] workingset_refault_file 213 [ 863.520614][T18950] swap 163840 [ 863.524997][T18950] swapcached 217088 [ 863.528859][T18950] pgpgin 150458 [ 863.532334][T18950] pgpgout 150457 [ 863.536814][T18950] pgfault 306634 [ 863.540415][T18950] pgmajfault 10 [ 863.544335][T18950] inactive_anon 0 [ 863.548019][T18950] active_anon 4096 [ 863.551757][T18950] inactive_file 0 [ 863.555988][T18950] active_file 0 [ 863.559504][T18950] unevictable 0 [ 863.563641][T18950] hierarchical_memory_limit 314572800 [ 863.569057][T18950] hierarchical_memsw_limit 9223372036854771712 [ 863.580219][T18950] total_cache 0 [ 863.584548][T18950] total_rss 0 [ 863.587885][T18950] total_rss_huge 0 [ 863.591620][T18950] total_shmem 0 [ 863.595674][T18950] total_mapped_file 0 [ 863.599701][T18950] total_dirty 0 [ 863.604047][T18950] total_writeback 0 [ 863.607908][T18950] total_workingset_refault_anon 11 [ 863.613519][T18950] total_workingset_refault_file 213 [ 863.618764][T18950] total_swap 163840 [ 863.623556][T18950] total_swapcached 217088 [ 863.627929][T18950] total_pgpgin 150458 [ 863.631929][T18950] total_pgpgout 150457 [ 863.637169][T18950] total_pgfault 306634 [ 863.641287][T18950] total_pgmajfault 10 [ 863.646357][T18950] total_inactive_anon 0 [ 863.650639][T18950] total_active_anon 4096 [ 863.659509][T18950] total_inactive_file 0 [ 863.664261][T18950] total_active_file 0 [ 863.668658][T18950] total_unevictable 0 [ 863.673123][T18950] anon_cost 0 [ 863.676460][T18950] file_cost 0 [ 863.679768][T18950] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5402,pid=27945,uid=0 [ 863.698151][T18950] Memory cgroup out of memory: Killed process 27948 (syz.0.5402) total-vm:98712kB, anon-rss:1240kB, file-rss:21664kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 868.242548][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 868.250706][ C1] lec:lec_tx_timeout: lec0 [ 868.255568][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 873.262904][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 873.271147][ C1] lec:lec_tx_timeout: lec0 [ 873.276086][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 879.102558][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms [ 879.110871][ C1] lec:lec_tx_timeout: lec0 [ 879.115865][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 883.279774][T28021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5423'. [ 883.550437][T28040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5428'. [ 883.695267][T28049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5430'. [ 883.870260][T28057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5432'. [ 883.996160][T28063] netlink: 'syz.1.5433': attribute type 1 has an invalid length. [ 884.014042][T28063] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5433'. [ 884.122494][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 884.130625][ C1] lec:lec_tx_timeout: lec0 [ 884.135806][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 884.159560][T28068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5435'. [ 884.468776][T28083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5439'. [ 885.087443][T28111] netlink: 'syz.3.5445': attribute type 1 has an invalid length. [ 885.119439][T28111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5445'. [ 885.162367][T28110] netlink: 'syz.2.5447': attribute type 13 has an invalid length. [ 885.176043][T28111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5445'. [ 885.180030][T28110] netlink: 'syz.2.5447': attribute type 17 has an invalid length. [ 885.328343][T28111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5445'. [ 885.443742][T28110] syz_tun: left promiscuous mode [ 885.508135][T28110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 885.560825][T28121] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 885.575430][T28111] 8021q: adding VLAN 0 to HW filter on device bond8 [ 885.601347][T28092] lo speed is unknown, defaulting to 1000 [ 885.601699][T27849] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 885.629416][T27849] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 885.647078][T27849] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 885.657686][T27849] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 885.694874][T28140] netlink: 'syz.0.5452': attribute type 7 has an invalid length. [ 885.703136][T28140] netlink: 'syz.0.5452': attribute type 8 has an invalid length. [ 886.467272][T28171] ip6tnl0: Caught tx_queue_len zero misconfig [ 886.569341][T28173] syzkaller1: entered promiscuous mode [ 886.577699][T28173] syzkaller1: entered allmulticast mode [ 886.716378][T28182] nbd: must specify a size in bytes for the device [ 887.138737][T28203] bond9 (unregistering): Released all slaves [ 887.250584][T28211] pim6reg: entered allmulticast mode [ 887.468173][T28225] netlink: 'syz.3.5478': attribute type 3 has an invalid length. [ 887.547660][T27848] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.579603][T27848] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.609802][T27848] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.627822][T27848] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.645661][T28183] lo speed is unknown, defaulting to 1000 [ 887.645772][T28209] pim6reg: left allmulticast mode [ 887.694951][T28235] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 888.101642][T28256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 888.550101][T28272] netlink: 'syz.0.5489': attribute type 2 has an invalid length. [ 888.663184][T28223] lo speed is unknown, defaulting to 1000 [ 888.789628][T28276] syzkaller0: entered promiscuous mode [ 888.805956][T28276] syzkaller0: entered allmulticast mode [ 889.142442][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 889.150625][ C1] lec:lec_tx_timeout: lec0 [ 889.156233][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 889.205050][T28283] sctp: [Deprecated]: syz.0.5492 (pid 28283) Use of int in max_burst socket option. [ 889.205050][T28283] Use struct sctp_assoc_value instead [ 889.564257][T28293] __nla_validate_parse: 34 callbacks suppressed [ 889.564432][T28293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5494'. [ 892.462263][T28283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5492'. [ 892.619405][T28299] netlink: 332 bytes leftover after parsing attributes in process `syz.3.5496'. [ 892.629234][T28299] netlink: 'syz.3.5496': attribute type 9 has an invalid length. [ 892.638617][T28299] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5496'. [ 892.651088][T28299] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5496'. [ 893.120756][T28320] tipc: Enabled bearer , priority 10 [ 893.183880][T28323] netlink: 'syz.0.5501': attribute type 21 has an invalid length. [ 893.234645][T28323] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5501'. [ 893.278574][T28323] netlink: 'syz.0.5501': attribute type 5 has an invalid length. [ 893.305036][T28323] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5501'. [ 893.414500][T28328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5504'. [ 893.428371][T28328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5504'. [ 893.458032][T28328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5504'. [ 894.134124][T28351] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 894.162738][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 894.171000][ C1] lec:lec_tx_timeout: lec0 [ 894.175735][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 894.192252][T28351] CPU: 0 UID: 0 PID: 28351 Comm: syz.2.5510 Not tainted syzkaller #0 PREEMPT(full) [ 894.192272][T28351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 894.192280][T28351] Call Trace: [ 894.192286][T28351] [ 894.192292][T28351] dump_stack_lvl+0xe8/0x150 [ 894.192316][T28351] sysfs_warn_dup+0x8e/0xa0 [ 894.192334][T28351] sysfs_do_create_link_sd+0xc0/0x110 [ 894.192352][T28351] device_add_class_symlinks+0x1cf/0x240 [ 894.192381][T28351] device_add+0x475/0xb70 [ 894.192409][T28351] wiphy_register+0x1dc5/0x2dc0 [ 894.192454][T28351] ? __pfx_wiphy_register+0x10/0x10 [ 894.192490][T28351] ? __pfx_netdev_run_todo+0x10/0x10 [ 894.192512][T28351] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 894.192549][T28351] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 894.192579][T28351] ieee80211_register_hw+0x3d82/0x4a70 [ 894.192624][T28351] ? ieee80211_register_hw+0x1981/0x4a70 [ 894.192679][T28351] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 894.192709][T28351] ? __asan_memset+0x22/0x50 [ 894.192735][T28351] ? __hrtimer_setup+0x1b7/0x260 [ 894.192763][T28351] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 894.192798][T28351] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 894.192862][T28351] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 894.192893][T28351] ? kstrndup+0xbf/0x160 [ 894.192926][T28351] hwsim_new_radio_nl+0xf6a/0x1c00 [ 894.192983][T28351] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 894.193023][T28351] ? rcu_is_watching+0x15/0xb0 [ 894.193055][T28351] ? trace_kmalloc+0x2a/0xf0 [ 894.193094][T28351] ? __nla_parse+0x40/0x60 [ 894.193121][T28351] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 894.193146][T28351] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 894.193180][T28351] genl_family_rcv_msg_doit+0x22a/0x330 [ 894.193213][T28351] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 894.193253][T28351] ? bpf_lsm_capable+0x9/0x20 [ 894.193276][T28351] ? security_capable+0x7e/0x2c0 [ 894.193313][T28351] genl_rcv_msg+0x61c/0x7a0 [ 894.193344][T28351] ? __pfx_genl_rcv_msg+0x10/0x10 [ 894.193367][T28351] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 894.193416][T28351] netlink_rcv_skb+0x232/0x4b0 [ 894.193449][T28351] ? __pfx_genl_rcv_msg+0x10/0x10 [ 894.193484][T28351] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 894.193536][T28351] ? down_read+0x270/0x2e0 [ 894.193563][T28351] ? genl_rcv+0xd/0x40 [ 894.193589][T28351] genl_rcv+0x28/0x40 [ 894.193610][T28351] netlink_unicast+0x75c/0x8e0 [ 894.193653][T28351] netlink_sendmsg+0x813/0xb40 [ 894.193696][T28351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.193732][T28351] ? aa_sock_msg_perm+0xf1/0x1b0 [ 894.193764][T28351] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 894.193800][T28351] ____sys_sendmsg+0x972/0x9f0 [ 894.193832][T28351] ? __might_fault+0xaf/0x130 [ 894.193870][T28351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 894.193914][T28351] ? import_iovec+0x73/0xa0 [ 894.193942][T28351] ___sys_sendmsg+0x2a5/0x360 [ 894.193972][T28351] ? __lock_acquire+0x6b5/0x2cf0 [ 894.194003][T28351] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.194041][T28351] ? futex_wake+0x4ac/0x580 [ 894.194096][T28351] ? __fget_files+0x2a/0x420 [ 894.194122][T28351] ? __fget_files+0x3a0/0x420 [ 894.194163][T28351] __x64_sys_sendmsg+0x1bd/0x2a0 [ 894.194199][T28351] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 894.194242][T28351] ? rcu_is_watching+0x15/0xb0 [ 894.194285][T28351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.194310][T28351] do_syscall_64+0x15f/0xf80 [ 894.194338][T28351] ? clear_bhb_loop+0x40/0x90 [ 894.194365][T28351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.194385][T28351] RIP: 0033:0x7facd5f9c819 [ 894.194406][T28351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.194424][T28351] RSP: 002b:00007facd6f3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.194448][T28351] RAX: ffffffffffffffda RBX: 00007facd6215fa0 RCX: 00007facd5f9c819 [ 894.194464][T28351] RDX: 0000000000000300 RSI: 0000200000000000 RDI: 0000000000000004 [ 894.194487][T28351] RBP: 00007facd6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 894.194502][T28351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.194514][T28351] R13: 00007facd6216038 R14: 00007facd6215fa0 R15: 00007ffce8fc1878 [ 894.194550][T28351] [ 894.839883][T28379] __nla_validate_parse: 4 callbacks suppressed [ 894.839905][T28379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5516'. [ 894.841265][ T5933] tipc: Node number set to 1616574883 [ 895.174471][T28406] netlink: 'syz.1.5525': attribute type 1 has an invalid length. [ 895.201640][T28387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.340215][T28406] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 895.382315][T28417] syzkaller1: entered promiscuous mode [ 895.446203][T28417] syzkaller1: entered allmulticast mode [ 895.489824][T28426] 8021q: VLANs not supported on ip_vti0 [ 895.505975][T28426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.528246][T28426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.545637][T28426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.559694][T28429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.590781][T28429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.618209][T28426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.628622][T28426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.656008][T28433] nftables ruleset with unbound chain [ 895.760555][T28435] batadv_slave_0: entered promiscuous mode [ 895.799302][T28435] netlink: 'syz.3.5534': attribute type 15 has an invalid length. [ 895.820012][T28441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5536'. [ 895.851475][T28440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5533'. [ 895.881152][T28440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5533'. [ 895.915601][T28434] batadv_slave_0: left promiscuous mode [ 895.989422][T28450] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.5537'. [ 896.012752][T28450] openvswitch: netlink: Missing key (keys=40, expected=100) [ 896.061327][ T30] audit: type=1804 audit(1776618065.444:7): pid=28450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5537" name="/newroot/529/memory.events" dev="tmpfs" ino=2725 res=1 errno=0 [ 896.145594][ T30] audit: type=1800 audit(1776618065.444:8): pid=28450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5537" name="memory.events" dev="tmpfs" ino=2725 res=0 errno=0 [ 896.267534][T28463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5542'. [ 896.273086][T28464] netlink: 'syz.3.5543': attribute type 1 has an invalid length. [ 896.302512][T28464] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5543'. [ 896.433249][T28470] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 896.449487][T28462] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 896.539372][T28462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5542'. [ 896.723565][T28477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5546'. [ 896.825322][T28477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5546'. [ 897.319890][T28516] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 897.340720][T28516] pim6reg0: persist disabled [ 898.416569][T28555] syzkaller0: entered promiscuous mode [ 898.422200][T28555] syzkaller0: entered allmulticast mode [ 899.182819][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 899.190966][ C1] lec:lec_tx_timeout: lec0 [ 899.196109][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 900.944704][T28493] Set syz1 is full, maxelem 65536 reached [ 901.144104][T28579] __nla_validate_parse: 2 callbacks suppressed [ 901.144126][T28579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5567'. [ 901.161716][T28578] netlink: del zone limit has 4 unknown bytes [ 902.943802][T28548] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 902.953719][T28548] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 36801 - 0 [ 902.965779][T28548] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 903.046225][T28548] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 903.073730][T28548] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 36801 - 0 [ 903.100011][T28548] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 903.215950][T28548] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 903.237920][T28548] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 36801 - 0 [ 903.269064][T28548] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 903.399388][T28548] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 903.432627][T28548] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 36801 - 0 [ 903.453896][T28548] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 903.502050][T28604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 903.669727][T28620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5578'. [ 903.745445][ T6560] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 903.758001][ T6560] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 903.771803][ T6560] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 36801 - 0 [ 903.907028][T28629] sock: sock_set_timeout: `syz.2.5581' (pid 28629) tries to set negative timeout [ 904.099787][ T6557] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 904.148031][ T6557] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 904.168351][ T6557] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 36801 - 0 [ 904.202927][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 904.211313][ C1] lec:lec_tx_timeout: lec0 [ 904.216631][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 904.241958][T28548] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 904.264860][T28548] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 904.286338][T28548] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 36801 - 0 [ 904.412350][T28548] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 904.439692][T28548] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 904.461997][T28548] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 36801 - 0 [ 904.613303][T28657] syzkaller1: entered promiscuous mode [ 904.645224][T28657] syzkaller1: entered allmulticast mode [ 904.829590][T28629] lo speed is unknown, defaulting to 1000 [ 905.332051][T28688] netlink: 'syz.1.5597': attribute type 1 has an invalid length. [ 905.536899][T28691] bond13: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 905.549832][T28688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5597'. [ 905.748533][T28694] veth7: entered promiscuous mode [ 905.768268][T28694] bond13: (slave veth7): Enslaving as a backup interface with a down link [ 905.834874][ T6560] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 905.858221][T28688] 8021q: adding VLAN 0 to HW filter on device bond13 [ 906.058509][ T6560] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 906.179949][T28712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5602'. [ 906.193958][T28712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5602'. [ 906.210645][T28712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 906.500632][T28720] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5605'. [ 906.698406][T28701] lo speed is unknown, defaulting to 1000 [ 906.952533][T28731] netlink: 'syz.3.5609': attribute type 12 has an invalid length. [ 907.244680][T28745] --map-set only usable from mangle table [ 907.288918][T28746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5613'. [ 907.758068][T28767] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 907.793681][T28765] syzkaller0: entered promiscuous mode [ 907.793805][T28767] netlink: 'syz.2.5620': attribute type 1 has an invalid length. [ 907.806982][T28765] syzkaller0: entered allmulticast mode [ 907.879251][T28771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5622'. [ 907.920299][T28773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5623'. [ 907.965401][T28773] netlink: 'syz.2.5623': attribute type 1 has an invalid length. [ 907.973540][T28773] netlink: 476 bytes leftover after parsing attributes in process `syz.2.5623'. [ 907.983848][T28773] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.5623'. [ 908.001783][T28771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5622'. [ 908.253700][T28786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5624'. [ 908.319915][T28795] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 908.353077][ T5898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 908.507182][T28803] netlink: 'syz.4.5632': attribute type 8 has an invalid length. [ 908.584386][T28812] netlink: 'syz.0.5633': attribute type 1 has an invalid length. [ 908.594703][T28805] 8021q: adding VLAN 0 to HW filter on device bond9 [ 908.841624][T28822] netlink: 'syz.4.5636': attribute type 18 has an invalid length. [ 909.040084][ T30] audit: type=1804 audit(1776618078.424:9): pid=28826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5638" name="/newroot/509/cgroup.controllers" dev="tmpfs" ino=2636 res=1 errno=0 [ 909.090238][ T30] audit: type=1800 audit(1776618078.424:10): pid=28826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5638" name="cgroup.controllers" dev="tmpfs" ino=2636 res=0 errno=0 [ 909.116971][T28830] netlink: 'syz.0.5640': attribute type 8 has an invalid length. [ 909.135984][T28830] sch_fq: defrate 0 ignored. [ 909.180395][T28829] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 909.186893][T28829] syzkaller1: linktype set to 780 [ 909.223463][T28833] pimreg: left allmulticast mode [ 909.232413][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 909.240581][ C1] lec:lec_tx_timeout: lec0 [ 909.245563][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 909.252775][ T5898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 909.384213][T28842] tunl0: Caught tx_queue_len zero misconfig [ 910.207153][T28841] macvlan2: entered allmulticast mode [ 910.249985][T28856] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 910.516251][T28874] bond9 (unregistering): Released all slaves [ 910.699930][T28885] bond10: option lp_interval: invalid value (18446744073709551612) [ 910.710629][T28885] bond10: option lp_interval: allowed values 1 - 2147483647 [ 910.730052][T28885] bond10 (unregistering): Released all slaves [ 911.273307][T28918] sit0: Caught tx_queue_len zero misconfig [ 911.669072][T28928] syzkaller0: entered promiscuous mode [ 911.692534][T28928] syzkaller0: entered allmulticast mode [ 911.866600][T28943] __nla_validate_parse: 9 callbacks suppressed [ 911.866622][T28943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5670'. [ 911.986783][T28959] sctp: [Deprecated]: syz.4.5674 (pid 28959) Use of int in maxseg socket option. [ 911.986783][T28959] Use struct sctp_assoc_value instead [ 912.025864][T28959] sctp: [Deprecated]: syz.4.5674 (pid 28959) Use of int in maxseg socket option. [ 912.025864][T28959] Use struct sctp_assoc_value instead [ 912.264654][T28964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5675'. [ 912.333712][T28964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5675'. [ 912.344217][T28964] netlink: 'syz.3.5675': attribute type 12 has an invalid length. [ 912.355862][T28964] netlink: 'syz.3.5675': attribute type 11 has an invalid length. [ 912.403996][T28968] netlink: 'syz.2.5677': attribute type 1 has an invalid length. [ 912.587548][T28982] xt_hashlimit: Unknown mode mask 65FA9C18, kernel too old? [ 912.670396][T28972] bond9: (slave geneve4): making interface the new active one [ 912.713332][T28972] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 912.751879][T27847] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 912.768361][T27847] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 912.789988][T27847] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 912.811950][T27847] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 913.074079][T29002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5684'. [ 913.084803][T29003] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5681'. [ 913.125831][T29004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5684'. [ 913.455073][T28996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 913.465817][T29016] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5687'. [ 913.465920][T29016] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5687'. [ 913.506573][T29012] netlink: 'syz.1.5686': attribute type 21 has an invalid length. [ 913.722633][T29028] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5692'. [ 914.063254][T29011] lo speed is unknown, defaulting to 1000 [ 914.252490][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 914.260641][ C1] lec:lec_tx_timeout: lec0 [ 914.265744][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 914.783269][T29051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5698'. [ 914.792281][T19884] IPVS: ip_vs_send_async error -101 [ 915.617887][T29084] ip6gre2: entered promiscuous mode [ 915.624090][T29084] ip6gre2: entered allmulticast mode [ 916.514581][T29122] tipc: New replicast peer: 255.255.255.255 [ 916.536239][T29122] tipc: Enabled bearer , priority 10 [ 916.565390][T29129] sch_fq: defrate 4294967293 ignored. [ 917.402321][T29158] bpq0: entered promiscuous mode [ 917.423422][T29158] bpq0: entered allmulticast mode [ 917.746377][ T5933] tipc: Node number set to 617855578 [ 917.864092][T29171] syzkaller0: entered promiscuous mode [ 917.869771][T29171] syzkaller0: entered allmulticast mode [ 918.504483][T29210] netlink: 'syz.4.5741': attribute type 1 has an invalid length. [ 919.279808][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 919.287868][ C1] lec:lec_tx_timeout: lec0 [ 919.292620][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 921.187078][T29210] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 921.277244][T29216] nbd: socks must be embedded in a SOCK_ITEM attr [ 921.430815][T29226] __nla_validate_parse: 5 callbacks suppressed [ 921.430835][T29226] netlink: 300 bytes leftover after parsing attributes in process `syz.3.5743'. [ 921.836682][T29251] netlink: 'syz.4.5750': attribute type 2 has an invalid length. [ 921.888971][T29260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5750'. [ 921.906176][T29251] !: entered promiscuous mode [ 921.957397][T29262] xfrm2: entered allmulticast mode [ 922.041135][T29271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 922.114601][T29277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5758'. [ 922.145612][T29277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5758'. [ 922.160136][T29280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5759'. [ 922.177646][T29277] netlink: 552 bytes leftover after parsing attributes in process `syz.0.5758'. [ 922.203962][T29280] team1: entered promiscuous mode [ 922.205905][T29277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5758'. [ 922.213879][T29280] team1: entered allmulticast mode [ 922.232906][T29277] netlink: 'syz.0.5758': attribute type 5 has an invalid length. [ 922.245659][T29280] 8021q: adding VLAN 0 to HW filter on device team1 [ 922.320024][T29276] bond8: Unable to set down delay as MII monitoring is disabled [ 922.340401][T29276] bond8 (unregistering): Released all slaves [ 923.201397][T29313] veth9: entered allmulticast mode [ 923.514509][T29340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5774'. [ 924.334062][T29368] netlink: 41 bytes leftover after parsing attributes in process `syz.0.5782'. [ 924.348131][T29368] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5782'. [ 924.458337][T29365] syzkaller0: entered promiscuous mode [ 924.475472][T29365] syzkaller0: entered allmulticast mode [ 924.706344][T29387] netlink: 'syz.0.5788': attribute type 1 has an invalid length. [ 924.915417][T29378] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.965194][T29380] syzkaller0: entered promiscuous mode [ 925.092405][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms [ 925.100517][ C1] lec:lec_tx_timeout: lec0 [ 925.106217][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 925.143336][T29378] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.301663][T29400] bpq0: left promiscuous mode [ 925.336114][T29400] bpq0: left allmulticast mode [ 925.404058][T29378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.543304][T29378] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.623167][T29406] syzkaller0: entered promiscuous mode [ 925.677862][T29416] syzkaller0: entered promiscuous mode [ 925.683696][T29416] syzkaller0: entered allmulticast mode [ 928.903122][T15968] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 928.967229][T27848] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.112600][T27848] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.125802][T29449] __nla_validate_parse: 5 callbacks suppressed [ 929.125821][T29449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5802'. [ 929.273133][T27850] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.553738][T29473] netlink: 296 bytes leftover after parsing attributes in process `syz.0.5808'. [ 929.777784][T29485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.903988][T29478] [ 929.906380][T29478] ====================================================== [ 929.913420][T29478] WARNING: possible circular locking dependency detected [ 929.920467][T29478] syzkaller #0 Not tainted [ 929.924996][T29478] ------------------------------------------------------ [ 929.932118][T29478] syz.3.5809/29478 is trying to acquire lock: [ 929.938185][T29478] ffff88802765bd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 929.947588][T29478] [ 929.947588][T29478] but task is already holding lock: [ 929.955044][T29478] ffff88802765b840 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 929.965272][T29478] [ 929.965272][T29478] which lock already depends on the new lock. [ 929.965272][T29478] [ 929.975707][T29478] [ 929.975707][T29478] the existing dependency chain (in reverse order) is: [ 929.984730][T29478] [ 929.984730][T29478] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 929.993360][T29478] blk_alloc_queue+0x546/0x680 [ 929.998753][T29478] __blk_mq_alloc_disk+0x197/0x390 [ 930.004485][T29478] nbd_dev_add+0x499/0xb50 [ 930.009442][T29478] nbd_init+0x168/0x1f0 [ 930.014233][T29478] do_one_initcall+0x250/0x870 [ 930.019637][T29478] do_initcall_level+0x104/0x190 [ 930.025203][T29478] do_initcalls+0x59/0xa0 [ 930.030091][T29478] kernel_init_freeable+0x2a6/0x3e0 [ 930.035836][T29478] kernel_init+0x1d/0x1d0 [ 930.040707][T29478] ret_from_fork+0x514/0xb70 [ 930.045835][T29478] ret_from_fork_asm+0x1a/0x30 [ 930.051136][T29478] [ 930.051136][T29478] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 930.058356][T29478] fs_reclaim_acquire+0x71/0x100 [ 930.063823][T29478] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 930.070166][T29478] __alloc_skb+0x27d/0x7d0 [ 930.075121][T29478] __ip6_append_data+0x2d6d/0x3f70 [ 930.080774][T29478] ip6_append_data+0x10f/0x280 [ 930.086093][T29478] rawv6_sendmsg+0x12d3/0x18e0 [ 930.091397][T29478] ____sys_sendmsg+0x80a/0x9f0 [ 930.096726][T29478] ___sys_sendmsg+0x2a5/0x360 [ 930.102037][T29478] __x64_sys_sendmsg+0x1bd/0x2a0 [ 930.107525][T29478] do_syscall_64+0x15f/0xf80 [ 930.112732][T29478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.119154][T29478] [ 930.119154][T29478] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 930.122397][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 930.126896][T29478] lock_sock_nested+0x41/0x100 [ 930.134961][ C1] lec:lec_tx_timeout: lec0 [ 930.140201][T29478] inet_shutdown+0x6a/0x390 [ 930.146956][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 930.149660][T29478] nbd_mark_nsock_dead+0x2e9/0x560 [ 930.161216][T29478] recv_work+0x1c2e/0x1d40 [ 930.166169][T29478] process_scheduled_works+0xb5d/0x1860 [ 930.172265][T29478] worker_thread+0xa53/0xfc0 [ 930.177510][T29478] kthread+0x388/0x470 [ 930.182210][T29478] ret_from_fork+0x514/0xb70 [ 930.187348][T29478] ret_from_fork_asm+0x1a/0x30 [ 930.192652][T29478] [ 930.192652][T29478] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 930.200315][T29478] __mutex_lock+0x1a3/0x1550 [ 930.205459][T29478] nbd_queue_rq+0x37b/0x1100 [ 930.210588][T29478] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 930.216673][T29478] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 930.223626][T29478] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 930.230174][T29478] blk_mq_run_hw_queue+0x348/0x4f0 [ 930.235829][T29478] blk_mq_dispatch_list+0xd16/0xe10 [ 930.241549][T29478] blk_mq_flush_plug_list+0x48d/0x570 [ 930.247530][T29478] __blk_flush_plug+0x3ed/0x4d0 [ 930.252996][T29478] __submit_bio+0x28d/0x580 [ 930.258034][T29478] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 930.264193][T29478] block_read_full_folio+0x599/0x830 [ 930.270018][T29478] filemap_read_folio+0x137/0x3b0 [ 930.275714][T29478] do_read_cache_folio+0x358/0x590 [ 930.281371][T29478] read_part_sector+0xb6/0x2b0 [ 930.286755][T29478] adfspart_check_ICS+0xb1/0x960 [ 930.292226][T29478] bdev_disk_changed+0x817/0x1770 [ 930.297832][T29478] blkdev_get_whole+0x380/0x510 [ 930.303212][T29478] bdev_open+0x31e/0xd30 [ 930.307978][T29478] blkdev_open+0x470/0x610 [ 930.312922][T29478] do_dentry_open+0x785/0x14e0 [ 930.318322][T29478] vfs_open+0x3b/0x340 [ 930.323030][T29478] path_openat+0x2e08/0x3860 [ 930.328175][T29478] do_file_open+0x23e/0x4a0 [ 930.333239][T29478] do_sys_openat2+0x113/0x200 [ 930.338644][T29478] __x64_sys_openat+0x138/0x170 [ 930.344256][T29478] do_syscall_64+0x15f/0xf80 [ 930.349836][T29478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.356281][T29478] [ 930.356281][T29478] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 930.363543][T29478] __mutex_lock+0x1a3/0x1550 [ 930.368765][T29478] nbd_queue_rq+0xc6/0x1100 [ 930.373805][T29478] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 930.379878][T29478] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 930.386729][T29478] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 930.393238][T29478] blk_mq_run_hw_queue+0x348/0x4f0 [ 930.398882][T29478] blk_mq_dispatch_list+0xd16/0xe10 [ 930.404619][T29478] blk_mq_flush_plug_list+0x48d/0x570 [ 930.410523][T29478] __blk_flush_plug+0x3ed/0x4d0 [ 930.415902][T29478] __submit_bio+0x28d/0x580 [ 930.420933][T29478] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 930.427348][T29478] block_read_full_folio+0x599/0x830 [ 930.433162][T29478] filemap_read_folio+0x137/0x3b0 [ 930.438713][T29478] do_read_cache_folio+0x358/0x590 [ 930.444353][T29478] read_part_sector+0xb6/0x2b0 [ 930.449638][T29478] adfspart_check_ICS+0xb1/0x960 [ 930.455096][T29478] bdev_disk_changed+0x817/0x1770 [ 930.460642][T29478] blkdev_get_whole+0x380/0x510 [ 930.466020][T29478] bdev_open+0x31e/0xd30 [ 930.470790][T29478] blkdev_open+0x470/0x610 [ 930.475730][T29478] do_dentry_open+0x785/0x14e0 [ 930.481038][T29478] vfs_open+0x3b/0x340 [ 930.485638][T29478] path_openat+0x2e08/0x3860 [ 930.490770][T29478] do_file_open+0x23e/0x4a0 [ 930.495810][T29478] do_sys_openat2+0x113/0x200 [ 930.501016][T29478] __x64_sys_openat+0x138/0x170 [ 930.506397][T29478] do_syscall_64+0x15f/0xf80 [ 930.511514][T29478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.517950][T29478] [ 930.517950][T29478] -> #1 (set->srcu){.+.+}-{0:0}: [ 930.525180][T29478] __synchronize_srcu+0xca/0x300 [ 930.530647][T29478] elevator_switch+0x1e8/0x7a0 [ 930.535932][T29478] elevator_change+0x2cc/0x450 [ 930.541652][T29478] elevator_set_default+0x36c/0x430 [ 930.547457][T29478] blk_register_queue+0x3e9/0x4e0 [ 930.553197][T29478] __add_disk+0x677/0xd50 [ 930.558063][T29478] add_disk_fwnode+0xfb/0x480 [ 930.563265][T29478] nbd_dev_add+0x72c/0xb50 [ 930.568204][T29478] nbd_init+0x168/0x1f0 [ 930.572922][T29478] do_one_initcall+0x250/0x870 [ 930.578216][T29478] do_initcall_level+0x104/0x190 [ 930.583682][T29478] do_initcalls+0x59/0xa0 [ 930.588629][T29478] kernel_init_freeable+0x2a6/0x3e0 [ 930.594354][T29478] kernel_init+0x1d/0x1d0 [ 930.599236][T29478] ret_from_fork+0x514/0xb70 [ 930.604445][T29478] ret_from_fork_asm+0x1a/0x30 [ 930.609740][T29478] [ 930.609740][T29478] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 930.617567][T29478] __lock_acquire+0x15a5/0x2cf0 [ 930.622954][T29478] lock_acquire+0x106/0x350 [ 930.628004][T29478] __mutex_lock+0x1a3/0x1550 [ 930.633129][T29478] elevator_change+0x1b3/0x450 [ 930.638515][T29478] elevator_set_none+0xb5/0x140 [ 930.643975][T29478] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 930.650407][T29478] nbd_start_device+0x17f/0xb10 [ 930.656215][T29478] nbd_genl_connect+0x165b/0x1cf0 [ 930.661768][T29478] genl_family_rcv_msg_doit+0x22a/0x330 [ 930.667859][T29478] genl_rcv_msg+0x61c/0x7a0 [ 930.672890][T29478] netlink_rcv_skb+0x232/0x4b0 [ 930.678184][T29478] genl_rcv+0x28/0x40 [ 930.682692][T29478] netlink_unicast+0x75c/0x8e0 [ 930.687986][T29478] netlink_sendmsg+0x813/0xb40 [ 930.693281][T29478] ____sys_sendmsg+0x972/0x9f0 [ 930.698579][T29478] ___sys_sendmsg+0x2a5/0x360 [ 930.703786][T29478] __x64_sys_sendmsg+0x1bd/0x2a0 [ 930.709258][T29478] do_syscall_64+0x15f/0xf80 [ 930.714381][T29478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.720796][T29478] [ 930.720796][T29478] other info that might help us debug this: [ 930.720796][T29478] [ 930.731032][T29478] Chain exists of: [ 930.731032][T29478] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 930.731032][T29478] [ 930.745053][T29478] Possible unsafe locking scenario: [ 930.745053][T29478] [ 930.752511][T29478] CPU0 CPU1 [ 930.757905][T29478] ---- ---- [ 930.763271][T29478] lock(&q->q_usage_counter(io)#52); [ 930.768657][T29478] lock(fs_reclaim); [ 930.775265][T29478] lock(&q->q_usage_counter(io)#52); [ 930.783204][T29478] lock(&q->elevator_lock); [ 930.787800][T29478] [ 930.787800][T29478] *** DEADLOCK *** [ 930.787800][T29478] [ 930.795944][T29478] 6 locks held by syz.3.5809/29478: [ 930.801141][T29478] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 930.809333][T29478] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 930.818431][T29478] #2: ffff88801ef749c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 930.829926][T29478] #3: ffff88801ef748d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 930.840898][T29478] #4: ffff88802765b840 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 930.851760][T29478] #5: ffff88802765b878 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 930.862646][T29478] [ 930.862646][T29478] stack backtrace: [ 930.868722][T29478] CPU: 0 UID: 0 PID: 29478 Comm: syz.3.5809 Not tainted syzkaller #0 PREEMPT(full) [ 930.868742][T29478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 930.868753][T29478] Call Trace: [ 930.868760][T29478] [ 930.868768][T29478] dump_stack_lvl+0xe8/0x150 [ 930.868793][T29478] print_circular_bug+0x2e1/0x300 [ 930.868821][T29478] check_noncircular+0x12e/0x150 [ 930.868856][T29478] __lock_acquire+0x15a5/0x2cf0 [ 930.868887][T29478] ? elevator_change+0x1b3/0x450 [ 930.868901][T29478] lock_acquire+0x106/0x350 [ 930.868921][T29478] ? elevator_change+0x1b3/0x450 [ 930.868942][T29478] __mutex_lock+0x1a3/0x1550 [ 930.868963][T29478] ? elevator_change+0x1b3/0x450 [ 930.868980][T29478] ? rcu_is_watching+0x15/0xb0 [ 930.869004][T29478] ? work_grab_pending+0x3d1/0x990 [ 930.869028][T29478] ? elevator_change+0x1b3/0x450 [ 930.869044][T29478] ? __pfx___mutex_lock+0x10/0x10 [ 930.869070][T29478] ? enable_work+0x17f/0x230 [ 930.869085][T29478] ? lockdep_hardirqs_on+0x7a/0x110 [ 930.869107][T29478] ? __cancel_work_sync+0xf7/0x110 [ 930.869122][T29478] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 930.869142][T29478] elevator_change+0x1b3/0x450 [ 930.869161][T29478] elevator_set_none+0xb5/0x140 [ 930.869176][T29478] ? __pfx_elevator_set_none+0x10/0x10 [ 930.869194][T29478] ? xa_load+0x1db/0x210 [ 930.869217][T29478] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 930.869243][T29478] ? kernfs_add_one+0x477/0x5c0 [ 930.869268][T29478] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 930.869291][T29478] ? sysfs_add_file_mode_ns+0x259/0x300 [ 930.869313][T29478] nbd_start_device+0x17f/0xb10 [ 930.869334][T29478] ? device_create_file+0xf4/0x1b0 [ 930.869353][T29478] nbd_genl_connect+0x165b/0x1cf0 [ 930.869370][T29478] ? __pfx___nla_validate_parse+0x10/0x10 [ 930.869390][T29478] ? __pfx_nbd_genl_connect+0x10/0x10 [ 930.869409][T29478] ? rcu_is_watching+0x15/0xb0 [ 930.869431][T29478] ? trace_kmalloc+0x2a/0xf0 [ 930.869458][T29478] ? __nla_parse+0x40/0x60 [ 930.869474][T29478] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 930.869493][T29478] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 930.869515][T29478] genl_family_rcv_msg_doit+0x22a/0x330 [ 930.869537][T29478] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 930.869559][T29478] ? __lock_acquire+0x6b5/0x2cf0 [ 930.869583][T29478] genl_rcv_msg+0x61c/0x7a0 [ 930.869603][T29478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 930.869619][T29478] ? __pfx_nbd_genl_connect+0x10/0x10 [ 930.869641][T29478] netlink_rcv_skb+0x232/0x4b0 [ 930.869664][T29478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 930.869682][T29478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 930.869710][T29478] ? down_read+0x270/0x2e0 [ 930.869730][T29478] ? genl_rcv+0xd/0x40 [ 930.869747][T29478] genl_rcv+0x28/0x40 [ 930.869762][T29478] netlink_unicast+0x75c/0x8e0 [ 930.869787][T29478] netlink_sendmsg+0x813/0xb40 [ 930.869815][T29478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.869839][T29478] ? aa_sock_msg_perm+0xf1/0x1b0 [ 930.869862][T29478] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 930.869888][T29478] ____sys_sendmsg+0x972/0x9f0 [ 930.869913][T29478] ? __might_fault+0xaf/0x130 [ 930.869937][T29478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 930.869964][T29478] ? import_iovec+0x73/0xa0 [ 930.869982][T29478] ___sys_sendmsg+0x2a5/0x360 [ 930.870006][T29478] ? __lock_acquire+0x6b5/0x2cf0 [ 930.870028][T29478] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.870062][T29478] ? futex_wake+0x4ac/0x580 [ 930.870087][T29478] ? __fget_files+0x2a/0x420 [ 930.870106][T29478] ? __fget_files+0x3a0/0x420 [ 930.870130][T29478] __x64_sys_sendmsg+0x1bd/0x2a0 [ 930.870155][T29478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 930.870183][T29478] ? rcu_is_watching+0x15/0xb0 [ 930.870209][T29478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.870226][T29478] do_syscall_64+0x15f/0xf80 [ 930.870245][T29478] ? trace_irq_disable+0x3b/0x140 [ 930.870262][T29478] ? clear_bhb_loop+0x40/0x90 [ 930.870280][T29478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.870297][T29478] RIP: 0033:0x7f9d4b19c819 [ 930.870313][T29478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.870329][T29478] RSP: 002b:00007f9d4bfdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.870346][T29478] RAX: ffffffffffffffda RBX: 00007f9d4b415fa0 RCX: 00007f9d4b19c819 [ 930.870359][T29478] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000008 [ 930.870370][T29478] RBP: 00007f9d4b232c91 R08: 0000000000000000 R09: 0000000000000000 [ 930.870381][T29478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.870391][T29478] R13: 00007f9d4b416038 R14: 00007f9d4b415fa0 R15: 00007ffe678966b8 [ 930.870410][T29478] [ 931.330607][T29459] lo speed is unknown, defaulting to 1000 [ 931.461719][T29480] lo speed is unknown, defaulting to 1000 [ 931.498867][T17525] block nbd3: Receive control failed (result -32) [ 931.505804][T17525] block nbd3: Receive control failed (result -32) [ 931.540431][T29214] block nbd3: NBD_DISCONNECT [ 931.545231][T29214] block nbd3: Send disconnect failed -32 [ 931.550995][T29214] block nbd3: Send disconnect failed -32 [ 931.556797][T29214] block nbd3: shutting down sockets [ 931.825509][T29214] udevd[29214]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 935.162429][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 935.170580][ C1] lec:lec_tx_timeout: lec0 [ 935.175372][ C1] lec:lec_start_xmit: lec0:No lecd attached