last executing test programs: 11.302668199s ago: executing program 1 (id=2660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x2e}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 11.079778404s ago: executing program 1 (id=2663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x6004014) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x6004014) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000003240)={0x1, 0x8, 0x10001, 0xc, 0x800}, 0x14) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000003240)={0x1, 0x8, 0x10001, 0xc, 0x800}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x7decd31a2c8e0f6d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x61780, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.600398509s ago: executing program 4 (id=2667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}]}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)={0x2, 'ip6_vti0\x00', {0x3}, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711084000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000013c0)={'erspan0\x00', &(0x7f0000001380)=@ethtool_cmd={0xa, 0x8, 0x57f959ea, 0x8, 0x6, 0x3, 0xc0, 0x4, 0xca, 0x2, 0x0, 0x4, 0x3, 0x3, 0x7, 0x8, [0x8, 0x34]}}) 10.503624183s ago: executing program 1 (id=2670): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x380000, 0x7fff, 0xf32, 0x0, 0x1}, 0x48) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0xf4, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xbc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xb0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x77}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6a}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x6, 0x4, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xbb}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa0}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014000180080001"], 0x64}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x380000, 0x7fff, 0xf32, 0x0, 0x1}, 0x48) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0xf4, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xbc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xb0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x77}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6a}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x6, 0x4, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xbb}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa0}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014000180080001"], 0x64}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) (async) 10.119029197s ago: executing program 4 (id=2674): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x16) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'ipvlan0\x00', 0x200}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32, @ANYBLOB="80007f0a0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4044004) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000300)={0x8, 0x80, 0x4, 0x0, 0x40, 0x0, 0x8001}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x140c, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040804}, 0x4000000) 10.108211473s ago: executing program 1 (id=2675): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffffffffd32, 0x0}, 0x0) (async) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x0) (async) close(0x3) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB="740000001000010400000006000000000000ffff", @ANYRES32=0x0, @ANYBLOB="21000000000000001c001280090001007866726d000000000c00028008000200ea000000140003007866726d30"], 0x74}}, 0x20000800) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) close(0x3) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, 0x3, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44800}, 0x48000) 9.732527803s ago: executing program 1 (id=2680): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20004000) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xd) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) 9.57442505s ago: executing program 4 (id=2683): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40002000, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote, [@srh]}}}}}}}, 0x0) 9.474748728s ago: executing program 1 (id=2685): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010001fff000000000000000000000008", @ANYRES32=0x0, @ANYBLOB="08000000000000001c0012800b00010062726964676500000c0002800800090003000000"], 0x3c}}, 0x0) 6.294620613s ago: executing program 3 (id=2707): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x81, 0x3}, {0x0, 0x2}, {0x4, 0x5}, {0x85, 0x5}, {0xb5, 0x4}, {0x7, 0x1}, {0x24, 0x4}, {0xff, 0x6}, {0x10, 0x4}, {0x1, 0x4}, {0x58, 0x4}, {0x1, 0x5}, {0x1, 0x3}, {0x3, 0x1}, {0x8, 0x1}, {0xfc, 0x1}, {0x34, 0x2}, {0x0, 0x2}, {0x6, 0x5}, {0x3, 0x6}, {0x87, 0x5}], "0e858253eee63d34"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{}, {0x80, 0x3}, {0xaa, 0x5}, {0x5}, {0x6, 0x7}, {0x8, 0x4}, {0x81, 0x1}, {0x4, 0x4}, {0x80, 0x2}, {0x1, 0x2}, {0x80, 0x6}, {0x4, 0x7}, {0x0, 0x2}, {0x40, 0x6}], "cf7481df1fd2b74b"}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24048001}, 0x24008000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6d}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa71}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4010) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x140c, 0x800, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000003c0)={0x6, 0x9, 0xc}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x91, 0xffff, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8000, 0x1, 0x2, 0xb}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000700)={r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000400)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x600000, 0x0, 0x0, 0x0, 0xf0000000}], &(0x7f0000000440)='syzkaller\x00', 0x8, 0xf1, &(0x7f0000000480)=""/241, 0x41100, 0x20, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000680)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x9, 0x3, 0xff}, 0x10, 0x26c88, r4, 0x3, &(0x7f0000000740)=[r0, r0, 0x1], &(0x7f0000000780)=[{0x2, 0x5, 0x6, 0x2}, {0x2, 0x2, 0xf, 0xa}, {0x5, 0x1, 0xb, 0x7}], 0x10, 0x90a9}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={r0, 0x20, &(0x7f0000000ac0)={&(0x7f0000000a40)=""/51, 0x33, 0x0, &(0x7f0000000a80)=""/39, 0x27}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000880)=@raw=[@alu={0x4, 0x0, 0x5, 0x1, 0x7, 0x8, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe95}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000900)='GPL\x00', 0x2, 0x61, &(0x7f0000000940)=""/97, 0x41000, 0x2, '\x00', r2, 0x1b, r5, 0x8, &(0x7f0000000a00)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, 0x0, 0x3, &(0x7f0000000b40)=[r4], &(0x7f0000000b80)=[{0x2, 0x1, 0x4, 0x6}, {0x0, 0x5, 0x0, 0x1}, {0x0, 0x5, 0x4, 0xb}], 0x10, 0x80}, 0x94) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000c80)={0x3, 0x76, "7cf05d2ef95b8ee988a27d82833e59f84144498cdc99856ddd224b57c8590bde096a56db2af5efe4565394ae0b8a8a6d4bf8eed4b172b0a8c547f875610dd317d243ba3654aba82ae521b1bee815842b19812d1138de3a804a9966559463ae3c8c526bc7eaeb8137cae4a84a7f05d3289689d1628749"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d40)=0x14) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000d80)) sendmsg$nl_route(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@ipmr_delroute={0x24, 0x19, 0x8, 0x70bd29, 0x25dfdbfd, {0x80, 0x20, 0x14, 0xe5, 0x0, 0x2, 0xfe, 0x2, 0x2b00}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4000080) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000000ec0)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7ff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @generic={0xce, 0x3, 0x1, 0x5eaa, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @alu={0x7, 0x1, 0x5, 0x3, 0x7, 0xfffffffffffffffc, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000fc0)='syzkaller\x00', 0x2, 0xf9, &(0x7f0000001000)=""/249, 0x41100, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000001100)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x4, 0xe, 0x3, 0x10001}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001180)=[r4, r0, r0], &(0x7f00000011c0)=[{0x5, 0x4, 0x9, 0x2}, {0x2, 0x2, 0x5, 0x9}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r7, 0x0, 0x0, 0xf7, &(0x7f00000012c0), &(0x7f0000001300)=""/247, 0x0, 0x0, 0xe0, 0x24, &(0x7f0000001400)="9eb7bc7c18429d58c825b24e0a7bbf80e9d91c75adaec1fea38397fe6b7f1b007731630c4cfd4dbab8fbe19ff61dfb3503ed8d13909985c4720eaa449519d8e739e5c2f236e767c4ddf257dea87a346ad960ea2b0890d41c0cccfb346a4a8d42d048f89c08820d251264f4183436af367cb9b1dbe5260511546c0051bdd937920aee295b95d08dcc0ba8ef2d31592d60d0a1a0cae6caefdc197f9de86dae1c0c927ed0f34511b83e7d23d08f4989a51c3a95e5d7915d21c8a7e2a6a5ac9ee7db146ca03b7ddbc17139855e98d122ed511778fadfcad87f9d1e8ce5aa9e35db26", &(0x7f0000001500)="1437ba07f954208b84ab7bd2a20073048d3de0bbe6adbfb5497cd75e453457d7627c94b7", 0x1, 0x0, 0xfff}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000025c0)={0x1, &(0x7f00000015c0)="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"}, 0x20) recvmsg(r4, &(0x7f0000003880)={&(0x7f0000002600)=@can, 0x80, &(0x7f0000003740)=[{&(0x7f0000002680)=""/21, 0x15}, {&(0x7f00000026c0)=""/56, 0x38}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/25, 0x19}], 0x4, &(0x7f0000003780)=""/241, 0xf1}, 0x40000162) setsockopt$MRT6_PIM(r4, 0x29, 0xcf, &(0x7f00000038c0)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003c00)={r4, 0x0, 0xd0, 0x2, &(0x7f0000003900)="449aa24a4b8e121d0f9667d09b3e8575ee2b2c5cd197e642ba800a6562024812f1d11f7e9fbd1dd15b16057984a1a9aa8296ea7d4fcd07bf8236dd244eeb3d35feccf29143539e71403bf1915c0b4f185a764311345cb8be2c55c34dd7f93db55627953846a8113fbc76945fe5c50accc5196c0dd87615741fdf3788a16d7cda703ed27e5841d901622a55710382d99e2652909794466ee0ea75af80ff7b32a09909b08b7e5937e47f15647677d0fc6356c95e655632b200021873a50f0cceecb5ef14b3854f011402afbde59f727188", &(0x7f0000003a00)=""/2, 0x1, 0x0, 0xeb, 0xa2, &(0x7f0000003a40)="8cba3de5e1b903ec97aa99f8d477526cdbfa1e6529db4e8b2759f873e151e149a0fb0962f05be7a3cee5072482795fedf754a759da535dd54e34bd1a971ac1b5283e3102707d0048307d1d77ec812c8fbc367baeecf3890909b5d7446f18b01e13ed5817ac679f8b09215f4a5690a9609df1fe53cd38b3435d014ced261978b8aca4d672bd432090e499192be25357f25db65e4dd63b91b1e64c1904d6334ce3f1fd76301071ad32081b43724120cdde74865bb720a1ddef3bff5929b7a8e6a2981f305295c566093c4ade4f5d4aa8b565aec753a40901a2c246ad1b06a6a2a2a8145a2a6c1e08c2874f70", &(0x7f0000003b40)="9b5c595fdc81680f5c15faeff2db7527e0573af2f89cc938291cbc674255777125ddb8ce974f9c1e10a08c254ad44b6ded39fcd2a94ed8b3e5ede628d4b2a0e9232c0fad36c2f44a6e62ebe0c61e67980785261d57f51b586cd0ebca253771aed658b32802352b831f41e95ce70a4a9fd5842074b104cf0c953300c4c1a64b06fb042ee29f9eaa5a777597e283943f2569f92fd164662411d2558da8905f0b36afdf", 0x6, 0x0, 0xa}, 0x50) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003cc0), r4) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000003d00)={@mcast1, 0x0}, &(0x7f0000003d40)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000003e80)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003e40)={&(0x7f0000003d80)={0x8c, r8, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400c004}, 0x20040005) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003f00), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000003fc0)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x24, r10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000004040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000004100)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x1c, r1, 0x40b, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) 6.211515878s ago: executing program 3 (id=2708): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x9}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x78a1, 0x8000, 0x478a, 0xff, {{0xe, 0x4, 0x2, 0xf, 0x38, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1b, 0xc3, [@multicast2, @multicast2, @remote, @rand_addr=0x64010100, @multicast2, @loopback]}, @rr={0x7, 0x7, 0x14, [@broadcast]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x71}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 6.07268254s ago: executing program 0 (id=2709): syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data={0x4, 0x1200}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd600500e2001c2cfffe8000000000000000000000000000bbfe8000000000000000000000000000aa0800010e0000000080004e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b0c641aa6c6af17c61cbe1b95bb0d2e015a707cc531ef4deac81cf22766286cf519bf5c2b4487b832c4190b11f600aacdba010f6b29a5f2d664acbf4ef8d3cbb247ff27a04fb5ef50c7aee1aba71c4d9e5"], 0x0) 6.050003773s ago: executing program 3 (id=2710): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="120000005400012c000000000000000007"], 0x18}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, &(0x7f0000000140), 0x18) r4 = socket$kcm(0x2, 0x3, 0x2) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000840)={@val={0x8, 0xf8}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x288, 0x5802, 0x294, 0x288, 0x294, 0x3d0, 0x325, 0x378, 0x3d0, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'netpci0\x00', {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x40, 0x78}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 5.931022277s ago: executing program 0 (id=2711): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x100) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) 5.780680015s ago: executing program 2 (id=2712): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r1, 0x0, 0xd, 0x0, &(0x7f0000000080)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x20000) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x21, 0x3}) 5.515815333s ago: executing program 3 (id=2713): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r1, 0x1, 0x48, 0x0, &(0x7f00000003c0)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.458734015s ago: executing program 2 (id=2714): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001200)={0x7, 0x7, 0x202, 0x200, 0x2, 0x9, 0x6, 0xa3d, r1}, 0x20) 5.322730941s ago: executing program 2 (id=2715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x3ab8c2, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x6}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xfff3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8811}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050020007f8f", 0x8}], 0x2}, 0x5) 4.982968496s ago: executing program 0 (id=2716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x38, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x44800}, 0x4000100) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a300000000074000000160a01040000000000000000020000020900020073797a30000000000900010073797a3000000000080007400000000240000380080002400000000108000140000000002c000380140001007767300000000000000000000000000014000100767863616e310000000000000000000014000000110001"], 0xc8}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x38, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x44800}, 0x4000100) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a300000000074000000160a01040000000000000000020000020900020073797a30000000000900010073797a3000000000080007400000000240000380080002400000000108000140000000002c000380140001007767300000000000000000000000000014000100767863616e310000000000000000000014000000110001"], 0xc8}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) (async) 4.780967695s ago: executing program 0 (id=2717): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000006301040000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 4.221153061s ago: executing program 3 (id=2718): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x47}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff29bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0045880db1010067726574617000000c0002800500080005000000"], 0x3c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_buf(r2, 0x0, 0x20, 0x0, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 4.039810127s ago: executing program 4 (id=2719): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000340)) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000340)) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000100)=@raw=[@generic={0x78, 0x0, 0x8, 0x1, 0xaa80}], &(0x7f0000000140)='syzkaller\x00', 0x100090a8, 0x5a, &(0x7f0000000200)=""/90, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x3, 0x81, 0x800}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000300)=[{0x3, 0x1, 0xe, 0x2}, {0x3, 0x3, 0xffffffff, 0x5}, {0x4, 0x4, 0x6, 0xb}, {0x1, 0x4, 0xb, 0x1}, {0x1, 0x1, 0xa, 0xf}, {0x2, 0x3, 0xa, 0x5}, {0x1, 0x2, 0x7, 0xb}, {0x2, 0x2, 0x7, 0x6}, {0x1, 0x3, 0x3, 0xa}], 0x10, 0xffffffff}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x7, 0x4, 0x3, 0x7f2, 0x2}]}, &(0x7f00000004c0)='GPL\x00', 0x8, 0xf, &(0x7f0000000500)=""/15, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x10, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000005c0)=[{0x3, 0x4, 0x3, 0x7}, {0x0, 0x4, 0xd, 0xa}, {0x0, 0x1, 0x1, 0x4}], 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f0000000180), &(0x7f0000000700)=r6}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000900)={'sit0\x00', 0x0, 0x80, 0x8000, 0x0, 0x5, {{0x11, 0x4, 0x2, 0x4, 0x44, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @local, {[@timestamp={0x44, 0xc, 0x4c, 0x0, 0x6, [0xac, 0x6]}, @generic={0x86, 0xd, "e632cdebd3e9e463fb98ad"}, @timestamp_prespec={0x44, 0x14, 0xcc, 0x3, 0x9, [{@multicast2, 0x5bd2}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x7}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000900)={'sit0\x00', 0x0, 0x80, 0x8000, 0x0, 0x5, {{0x11, 0x4, 0x2, 0x4, 0x44, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @local, {[@timestamp={0x44, 0xc, 0x4c, 0x0, 0x6, [0xac, 0x6]}, @generic={0x86, 0xd, "e632cdebd3e9e463fb98ad"}, @timestamp_prespec={0x44, 0x14, 0xcc, 0x3, 0x9, [{@multicast2, 0x5bd2}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x7}]}]}}}}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d80)={'geneve1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000001180)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="6c030000", @ANYRES16=r8, @ANYBLOB="10002abd7000fbdbdf250700000080000180140002006970766c616e3100000000000000000014000200776c616e3100000000000000000000001400020070696d367265673100000000000000000800030001000000140002006d6163766c616e30000000000000000008000100", @ANYRES32=r9, @ANYBLOB="1400020064766d727031000000000000000000000800030002000000740001800800030001000000140002006272696467655f736c6176655f300000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="14000200766c616e300000000000000000000000140002007866726d30000000000000000000000014000200776730000000000000000000000000000800030003000000440001801400020077673100000000000000000000000000080003000300000008000100", @ANYRES32=r7, @ANYBLOB="1400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r7, @ANYBLOB="880001800800030001000000140002006d61637365633000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="14000200636169663000000000000000000000001400020073797a6b616c6c657230000000000000140002006272696467655f736c6176655f30000008000100", @ANYRES32=r7, @ANYBLOB="140002006d6163766c616e3100000000000000004000018008000100", @ANYRES32=r7, @ANYBLOB="0800030002000000080003000000000008000300030000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r7, @ANYBLOB="400001801400020070696d72656731000000000000000000140002006970366772657461703000000000000014000200687372300000000000000000000000000c00018008000100", @ANYRES32=r7, @ANYBLOB="5c000180140002006e65747063693000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000300010000001400020076657468315f766c616e00000000000008000100", @ANYRES32=r7, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="34000180140002007465616d5f736c6176655f300000000008000300010000001400020070696d367265673000000000000000007c000180140002006e657464657673696d300000000000000800030001000000140002006e69637666300000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800030000000000140002006e1add04ce000000000000000000000008008357e9dabc014e05020469703667726574617030000000000000"], 0x36c}, 0x1, 0x0, 0x0, 0x40440a0}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000006c0)={r3, r4, 0x0, r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r12 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r12, &(0x7f0000000b00)={&(0x7f0000000780)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000ac0)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)="8ed4c27f826464c24a93c0daf6ea473c6bd92b1dee7a054c82b01ba99503bc46ebb59ca75aacfd63208983ff9df85366b6e6a04f290f4a7a196c28fba295a7118c58e4b9b0364278d085e59c32e55b0a35cac70d13e02ed1622f2d3c0bcdc8eeed170a349ba1b63e4d7b5594b1b6471b12181c4b8cfeb8eeb9", 0x79}, {&(0x7f00000009c0)="9f2d2503ec8d62e708e85cdefe008db08faf9aff0a291a58f748578f156b1e1beee9c0d4a7b000694e4e21d83bc09a528579e66cc8a7090631df0a1f47f620a362d33357a423a42669d9f11482b03077bd35e71891491d2cc74178f27bfbe9116dc8c2d298ab44e04b26f8cfe6f2e8ba5faeb5aefd4a29f52aa54867c84a5306813bfe07c9542bc8aaeaff59d57cc6514eb6e053e94b0de3", 0x98}, {&(0x7f0000000a80)="59ae4c8282bea108468f8d252142224f6ac4daf6f92a1d84fab482a59f5595f6f15bbb35c7b78e3cb2f27eb6957df3eaf4d36f378d4e45509b1b00e7eb", 0x3d}], 0x4}, 0xc010) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r11, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) (async) r13 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r13, &(0x7f0000000200)={&(0x7f0000001340)=@caif=@dgm={0x25, 0x7, 0xa}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)='G', 0x28}], 0x1}, 0x200480c0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c0001"], 0x114}], 0x1}, 0x0) (async) sendmsg$netlink(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c0001"], 0x114}], 0x1}, 0x0) r15 = syz_genetlink_get_family_id$smc(&(0x7f0000000bc0), r3) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r15, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) 3.814308266s ago: executing program 4 (id=2720): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x5, 0x10, 0x21e, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1bf, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x3, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x53, 0x3, 0x1ff, 0xf8, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0xfffffffd, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x5, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x1, 0x4, 0xffb, 0xc}, {0x6, 0x5, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x74, 0xffffffff, 0x0, 0xfffff740, 0x1, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000002, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0xeec3}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0xd, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x10, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x4, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x5, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x1, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0xfffffffc, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xfffffffc, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x2, 0x2, 0x9, 0x1000, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x8007, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x8001, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x2, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000009}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x3, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x55d81519de704440}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r13, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r14, 0x400454cd, 0x339) socket$kcm(0x2, 0xa, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$kcm(0x10, 0x400000002, 0x0) 812.571955ms ago: executing program 3 (id=2721): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r5 = accept4$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r6, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x9, '\x00', r6, 0xffffffffffffffff, 0x4}, 0x50) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', r6, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000c80)={r5, 0x7, 0x0, 0x101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x16, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x605c}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@alu={0x7, 0x1, 0x7, 0x1, 0x2, 0x50, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ldst={0x2, 0x2, 0x0, 0xc, 0x5, 0xfffffffffffffff0, 0xfffffffffffffffc}, @ldst={0x0, 0x3, 0x2, 0x2, 0xa893fc0fb89ea58b, 0xfffffffffffffff4, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x10, 0x79, &(0x7f0000000a00)=""/121, 0x0, 0xc, '\x00', r2, 0x0, r9, 0x8, &(0x7f0000000ac0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x2, 0xd, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000cc0)=[r10, r11, 0xffffffffffffffff, r12], &(0x7f0000000d00)=[{0x0, 0x2, 0x8, 0x4}, {0x1, 0x1, 0x8}, {0x0, 0x2, 0xa, 0xa}, {0x0, 0x2, 0xe, 0xc}, {0x5, 0x2, 0xa, 0x9}, {0x3, 0x2, 0x5, 0x4}, {0x3, 0x5, 0xb, 0x2}], 0x10, 0x40da0041}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x10, 0x700, 0xffff9635, 0x0, {{0x7, 0x4, 0x2, 0x3b, 0x1c, 0x65, 0x0, 0xf1, 0x4, 0x0, @multicast1, @private=0xa010100, {[@ra={0x94, 0x4}, @generic={0x86, 0x4, "d834"}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x480, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfe, {}, [{0x46c, 0x1, [@m_mirred={0xfc, 0x18, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xcb1, 0x5, 0x10001, 0x4}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80000001, 0xffffffffffffffff, 0x7, 0xb}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0x8, 0x80000001, 0xa91}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1ff, 0x4, 0x6, 0x2}, 0x3, r2}}]}, {0x4e, 0x6, "a949be4113899caa084d2d59575a86f65381944218c25c2f87ea5f902bc7984e1ee1a374b53dba3b92b890cd5445a9b8d55a955da2bee6c0a9ee0b06d2c16c66a69382e58b6d1f8e62bd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x108, 0x6, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '{-[{^(\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x6, 0x5, 0x1ff, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x9, 0x0, 0x20, 0x7}}]}, {0x9d, 0x6, "72dfb5b30a7d3341aa5b11ad2d8839734061174f5447444df1d8512997502051c5e15e7e205fa94744465262060729a5a038cf557cc502e2f6bda1ccb276f23cf1d35acdf2028cd152e58546b71f8d8ad20abb38cf67d027d697b583ef5bd4897fa24f10aa41c14c5f1b624b8b86e12541c543db562f2f14d06bf3ba61613f072f2069ed0aa3ba0e6e65067fc9f19f3b6fc2365996eb01a469"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_ife={0x168, 0x9, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xb, 0x1, 0x7, 0xd, 0xad000000}, 0x1}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x10}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @random="b13e804b712f"}]}, {0xc8, 0x6, "76966d485ecaba48f2c45b20bef41a740755e1f3b06f52a46cecce47a03b49852d044ae2339609f2970f9b03671e33e8205f48e37d597c74c1989db20cc1b5c7001a5ef710a6ae667508ac03d5df3735c99d32662c680055a07a868547cf1d346d078c2fedb7d97900d90a5c707bc0e3bb54526cd8f604059bcbdd5b9d79f655674b84ee96b7fdcfc8485dd336702b80aa50ea6ab3920aa47a765e54790efa37aef680a884a33e93854006a502b9aa9486161c8008bdd24bc65a6867855e506c2389540d"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0xfc, 0x1b, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x0, 0x3, 0x9}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x59, 0x3, 0x1, 0x7e3a, 0x3ff}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x1, 0x7, 0x4, 0x4}, 0xa}}]}, {0x7c, 0x6, "3192218fbda9b9323cd706dd12dc757c6262580c78863f51f382d59dff21a0ee0a439b38278774833511a56b10529792c01a277e573e51c6cb1bf91c3970c5a91f406b2dc67ba2a0da4851262f68600149bc792b5548f971c4dad16697375e066e18d1fbdb2f84bb93ef845cf222a487c83e0727e5166f45"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x480}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 811.899209ms ago: executing program 2 (id=2722): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000140)=0x4, 0x4) 734.061739ms ago: executing program 0 (id=2723): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @local}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x6e, 0x0, 0x18}]}, {0x0, [0x61, 0x61, 0x30]}}, &(0x7f0000000280)=""/163, 0x2d, 0xa3, 0x1, 0x1, 0x10000}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="d35931b821b7ac86a814acf8e12ce2260c96", 0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000580)=[{&(0x7f0000000a40)={0x1c, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @generic="f4"]}, 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x10, 0x7, 0x1, 0x0, "c4a1aa508917483c7fa5c53e"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88be}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}]}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20004080}, 0x1) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x8911, &(0x7f0000000000)="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") 638.009587ms ago: executing program 2 (id=2724): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000180)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000240)=0x1, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x404c8d4) socket$netlink(0x10, 0x3, 0xa) (async) socket$netlink(0x10, 0x3, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x891f, &(0x7f0000000000)={'dummy0\x00'}) (async) ioctl$SIOCSIFMTU(r4, 0x891f, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r3, @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x2, 0x1) (async) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20008004) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r5, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) 369.532742ms ago: executing program 4 (id=2725): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x100) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) 368.441458ms ago: executing program 0 (id=2726): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x20000000002) pipe(0x0) 0s ago: executing program 2 (id=2727): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x80, 0x0, 0x59, 0x80000000, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x68, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x0, 0x8, "21bdfe88df5d"}, {0x5, 0xe, "c89c8db792723c0dc2ceb591"}, {0x0, 0x6, "09bd4621"}, {0x1, 0x8, "8551971545eb"}]}, @generic={0x7, 0xa, "a0c5bf5136be5c29"}, @timestamp_prespec={0x44, 0x24, 0xaa, 0x3, 0x3, [{@broadcast, 0x8}, {@private=0xa010100, 0xfffffffd}, {@private=0xa010101, 0x81}, {@loopback, 0x7}]}, @end, @lsrr={0x83, 0x13, 0x77, [@local, @private=0xa010102, @multicast1, @rand_addr=0x64010102]}, @rr={0x7, 0x13, 0xf7, [@rand_addr=0x64010101, @private=0xa010102, @private=0xa010100, @multicast2]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) kernel console output (not intermixed with test programs): red promiscuous mode [ 183.457838][ T8968] netlink: 'syz.0.932': attribute type 2 has an invalid length. [ 183.484227][ T8968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.515662][ T8967] netlink: 'syz.0.932': attribute type 2 has an invalid length. [ 183.524858][ T8967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.534402][ T8968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.932'. [ 183.682366][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 183.786862][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.935'. [ 183.957170][ T8988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.964481][ T8988] IPv6: NLM_F_CREATE should be set when creating new route [ 183.971827][ T8988] IPv6: NLM_F_CREATE should be set when creating new route [ 185.702673][ T8926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.951810][ T8997] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 185.988521][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.942'. [ 186.001550][ T8997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'. [ 186.258449][ T9017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.947'. [ 186.385793][ T9020] ip6erspan0: entered allmulticast mode [ 186.579237][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.949'. [ 186.669985][ T9040] nbd: must specify at least one socket [ 186.742879][ T9041] bond0: (slave bond_slave_0): Releasing backup interface [ 187.191210][ T9049] syzkaller0: entered promiscuous mode [ 187.199615][ T9049] syzkaller0: entered allmulticast mode [ 187.476593][ T9063] tipc: Failed to remove unknown binding: 66,1,1/0:298216715/298216717 [ 187.493532][ T9063] tipc: Failed to remove unknown binding: 66,1,1/0:298216715/298216717 [ 189.159987][ T9072] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 189.177901][ T9072] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 189.242430][ T9074] netlink: 'syz.0.963': attribute type 4 has an invalid length. [ 189.310554][ T9074] netlink: 'syz.0.963': attribute type 11 has an invalid length. [ 189.387999][ T9076] __nla_validate_parse: 3 callbacks suppressed [ 189.388021][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 189.441589][ T9081] netlink: 48 bytes leftover after parsing attributes in process `syz.3.965'. [ 189.500739][ T9085] netlink: 104 bytes leftover after parsing attributes in process `syz.2.966'. [ 189.582067][ T9081] netlink: 48 bytes leftover after parsing attributes in process `syz.3.965'. [ 189.583272][ T9088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.968'. [ 189.601689][ T9088] xt_hashlimit: size too large, truncated to 1048576 [ 189.724871][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 189.745668][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 189.769387][ T9128] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.970'. [ 189.779491][ T9131] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.970'. [ 189.950216][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.973'. [ 190.496283][ T9195] xt_hashlimit: size too large, truncated to 1048576 [ 190.566582][ T9196] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 190.802435][ T9208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.824703][ T9196] bond3: entered promiscuous mode [ 190.838572][ T9196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.914833][ T9198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.922733][ T9198] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 190.940001][ T9198] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 190.982790][ T9198] bond3: (slave vti0): making interface the new active one [ 190.990297][ T9198] vti0: entered promiscuous mode [ 190.996898][ T9198] bond3: (slave vti0): Enslaving as an active interface with an up link [ 191.071126][ T9205] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 191.088007][ T9205] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 191.106464][ T9205] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 191.177522][ T9205] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 191.272056][ T9205] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 192.052502][ T9248] bond2: option lp_interval: invalid value (0) [ 192.059827][ T9248] bond2: option lp_interval: allowed values 1 - 2147483647 [ 192.071735][ T9248] bond2 (unregistering): Released all slaves [ 192.122186][ T9253] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 192.177292][ T9252] sctp: [Deprecated]: syz.2.998 (pid 9252) Use of int in max_burst socket option. [ 192.177292][ T9252] Use struct sctp_assoc_value instead [ 192.520366][ T9262] erspan0: entered promiscuous mode [ 192.548810][ T9262] erspan0: entered allmulticast mode [ 192.970822][ T9292] xt_socket: unknown flags 0x8 [ 193.714556][ T9325] syzkaller0: entered promiscuous mode [ 193.715339][ T9328] netlink: 'syz.2.1024': attribute type 2 has an invalid length. [ 193.723674][ T9325] syzkaller0: entered allmulticast mode [ 194.070908][ T9343] netlink: 'syz.3.1029': attribute type 20 has an invalid length. [ 194.080124][ T9343] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.126660][ T9338] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 194.166341][ T9338] bond6 (unregistering): Released all slaves [ 194.180891][ T9347] netlink: 'syz.0.1031': attribute type 1 has an invalid length. [ 194.226714][ T9345] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.459728][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.468228][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.719489][ T9378] syzkaller0: entered promiscuous mode [ 194.736528][ T9378] syzkaller0: entered allmulticast mode [ 194.883319][ T9386] __nla_validate_parse: 15 callbacks suppressed [ 194.883341][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1041'. [ 194.917968][ T9386] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1041'. [ 194.956617][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'. [ 195.015801][ T9387] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 195.085443][ T9393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'. [ 195.099054][ T9143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 195.468795][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 195.479041][ T9404] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1047'. [ 195.990418][ T9431] x_tables: duplicate underflow at hook 2 [ 196.126483][ T9439] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1055'. [ 196.234730][ T9141] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.245375][ T9448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1058'. [ 196.266750][ T9141] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.300284][ T9141] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.342136][ T9141] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.571078][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'. [ 196.667017][ T9466] gtp0: entered promiscuous mode [ 196.684312][ T9466] gtp0: entered allmulticast mode [ 196.732292][ T9473] vlan2: entered promiscuous mode [ 196.752694][ T9473] geneve1: entered promiscuous mode [ 196.763341][ T9473] vlan2: entered allmulticast mode [ 196.772850][ T9473] geneve1: entered allmulticast mode [ 196.811032][ T9464] gtp1: entered promiscuous mode [ 196.825194][ T9464] gtp1: entered allmulticast mode [ 196.845716][ T9486] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 196.868180][ T9479] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1068'. [ 196.975755][ T9490] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 197.470012][ T9527] netlink: 'syz.1.1080': attribute type 1 has an invalid length. [ 197.801798][ T9544] netlink: 'syz.4.1086': attribute type 8 has an invalid length. [ 197.807861][ T9541] netlink: 'syz.1.1085': attribute type 83 has an invalid length. [ 198.318503][ T9562] xt_CT: No such helper "snmp_trap" [ 198.674169][ T9548] lo: left promiscuous mode [ 198.687207][ T9548] tunl0: left promiscuous mode [ 198.714494][ T9548] gre0: left promiscuous mode [ 198.767351][ T9548] gretap0: left promiscuous mode [ 198.807804][ T9548] erspan0: left promiscuous mode [ 198.830819][ T9548] ip_vti0: left promiscuous mode [ 198.882163][ T9548] bond0: left allmulticast mode [ 198.888323][ T9548] bond_slave_0: left allmulticast mode [ 198.894318][ T9548] bond_slave_1: left allmulticast mode [ 198.899855][ T9548] dummy0: left allmulticast mode [ 198.968510][ T9548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.988553][ T9548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.075496][ T9548] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 199.102362][ T9548] bond1: left promiscuous mode [ 199.107304][ T9548] bridge2: left promiscuous mode [ 199.117894][ T9548] gretap1: left promiscuous mode [ 199.122929][ T9548] gretap1: left allmulticast mode [ 199.135469][ T9548] bridge3: left promiscuous mode [ 199.140461][ T9548] bridge3: left allmulticast mode [ 199.150347][ T9548] bond5: left promiscuous mode [ 199.156242][ T9548] bridge4: left promiscuous mode [ 199.166161][ T9548] gtp0: left promiscuous mode [ 199.171042][ T9548] gtp0: left allmulticast mode [ 199.177785][ T9548] gtp1: left promiscuous mode [ 199.182509][ T9548] gtp1: left allmulticast mode [ 199.221224][ T9096] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.230444][ T9096] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.246003][ T9096] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.257348][ T9096] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.415246][ T9583] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 199.663631][ T9595] netlink: 'syz.2.1100': attribute type 2 has an invalid length. [ 199.828959][ T9600] syzkaller0: entered promiscuous mode [ 199.855205][ T9600] syzkaller0: entered allmulticast mode [ 199.877453][ T9608] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 199.910917][ T9610] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 200.014275][ T9143] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa3 [ 202.728971][ T9600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.943574][ T9642] __nla_validate_parse: 5 callbacks suppressed [ 202.943597][ T9642] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1111'. [ 203.035263][ T7184] IPVS: starting estimator thread 0... [ 203.053084][ T9647] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 203.126169][ T9653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1115'. [ 203.144522][ T9649] IPVS: using max 27 ests per chain, 64800 per kthread [ 203.174027][ T4942] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.629079][ T9670] syzkaller0: entered promiscuous mode [ 203.656587][ T9670] syzkaller0: entered allmulticast mode [ 203.866110][ T9686] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001 [ 204.104205][ T9699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1131'. [ 204.138814][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1131'. [ 204.269191][ T9708] veth0_to_bond: entered allmulticast mode [ 204.336722][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'. [ 204.417788][ T9712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.614951][ T5639] block nbd2: Receive control failed (result -107) [ 204.644174][ T9712] nbd2: detected capacity change from 0 to 63 [ 204.658254][ T4942] block nbd2: Receive control failed (result -32) [ 204.660587][ T1594] block nbd2: Send control failed (result -32) [ 204.672162][ T1594] block nbd2: Request send failed, requeueing [ 204.685787][ T1660] block nbd2: Dead connection, failed to find a fallback [ 204.697833][ T1660] block nbd2: shutting down sockets [ 204.698640][ T25] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 204.704976][ T1660] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.716087][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 204.726914][ T1660] Buffer I/O error on dev nbd2, logical block 1, async page read [ 204.732678][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 204.749330][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.759246][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 204.769024][ T1660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.775113][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 204.779983][ T1660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 204.787733][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 204.804490][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 204.812348][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 204.823349][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 204.832628][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 204.840591][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 204.849608][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 204.860155][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.861503][ T1660] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.870208][ T25] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 204.893538][ T5722] ldm_validate_partition_table(): Disk read failed. [ 204.902494][ T5722] Dev nbd2: unable to read RDB block 0 [ 204.910124][ T5722] nbd2: unable to read partition table [ 204.921865][ T5722] ldm_validate_partition_table(): Disk read failed. [ 204.930204][ T5722] Dev nbd2: unable to read RDB block 0 [ 204.940572][ T5722] nbd2: unable to read partition table [ 211.896088][ T4942] Bluetooth: hci1: command 0x0406 tx timeout [ 211.896508][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 211.903026][ T4942] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.915276][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 225.668204][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'. [ 225.722155][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 225.745069][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 225.902935][ T9740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.454204][ T9143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 226.469425][ T9771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1153'. [ 226.541660][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1155'. [ 226.669928][ T9781] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 226.959425][ T9795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.998538][ T9797] xt_cluster: node mask cannot exceed total number of nodes [ 227.007115][ T9797] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 227.062396][ T9802] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 227.557086][ T9818] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 227.887812][ T9835] netlink: 'syz.0.1177': attribute type 20 has an invalid length. [ 227.899385][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1177'. [ 227.915192][ T9835] netlink: 'syz.0.1177': attribute type 20 has an invalid length. [ 227.933707][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1177'. [ 228.051167][ T9841] sock: sock_timestamping_bind_phc: sock not bind to device [ 228.082286][ T9842] syzkaller0: entered promiscuous mode [ 228.101140][ T9842] syzkaller0: entered allmulticast mode [ 228.259812][ T9846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1183'. [ 228.529738][ T9863] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1189'. [ 228.692792][ T9869] syzkaller1: entered promiscuous mode [ 228.705823][ T9869] syzkaller1: entered allmulticast mode [ 228.810045][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1194'. [ 229.075533][ T9881] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 229.267662][ T9895] vlan3: entered promiscuous mode [ 229.273947][ T9895] geneve1: entered promiscuous mode [ 229.279699][ T9895] vlan3: entered allmulticast mode [ 229.303348][ T9895] geneve1: entered allmulticast mode [ 229.588991][ T9905] syzkaller0: entered promiscuous mode [ 229.602371][ T9905] syzkaller0: entered allmulticast mode [ 229.933388][ T9907] sctp: [Deprecated]: syz.1.1205 (pid 9907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.933388][ T9907] Use struct sctp_sack_info instead [ 231.270473][ T9919] __nla_validate_parse: 8 callbacks suppressed [ 231.270496][ T9919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1207'. [ 232.154707][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'. [ 232.550933][ T9943] lo speed is unknown, defaulting to 1000 [ 232.589658][ T9952] netlink: 'syz.4.1214': attribute type 30 has an invalid length. [ 232.715102][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 232.749970][ T9946] ±ÿª¨úrBº“: renamed from lo (while UP) [ 232.762632][ T9943] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 232.801067][ T9948] syzkaller0: entered promiscuous mode [ 232.830099][ T9948] syzkaller0: entered allmulticast mode [ 232.859465][ T9943] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 232.874761][ T9948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1216'. [ 232.897612][ T9943] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 232.964259][ T9943] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 233.014317][ T9943] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 233.028042][ T9971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1220'. [ 233.060448][ T9943] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 233.061005][ T9971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1220'. [ 233.232831][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1222'. [ 233.257841][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 233.416687][ T9943] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 233.490838][ T9990] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 233.518455][ T9943] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 235.476071][ T9943] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 235.477706][T10002] syzkaller0: entered promiscuous mode [ 235.489189][T10002] syzkaller0: entered allmulticast mode [ 235.497282][ T5287] veth1_vlan: left promiscuous mode [ 235.659755][ T9943] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 235.691448][ T9943] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 235.837620][T10022] pim6reg: entered allmulticast mode [ 235.928327][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 235.954752][T10032] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1233'. [ 235.970800][T10035] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20003 [ 236.242392][T10046] block nbd0: Unsupported socket: should be TCP or UNIX. [ 236.548163][T10062] netlink: 'syz.0.1240': attribute type 1 has an invalid length. [ 236.576127][T10062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1240'. [ 236.633395][T10062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1240'. [ 236.849738][T10078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1243'. [ 236.865684][T10079] syzkaller0: entered promiscuous mode [ 236.881254][T10079] syzkaller0: entered allmulticast mode [ 237.172193][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 237.248477][T10093] lo: left allmulticast mode [ 237.269677][T10093] tunl0: left allmulticast mode [ 237.292971][T10093] gre0: left allmulticast mode [ 237.311087][T10093] gretap0: left allmulticast mode [ 237.352063][T10093] erspan0: left allmulticast mode [ 237.373499][T10093] ip_vti0: left allmulticast mode [ 237.391124][T10093] ip6_vti0: left allmulticast mode [ 237.410518][T10093] sit0: left allmulticast mode [ 237.438320][T10093] ip6tnl0: left allmulticast mode [ 237.470644][T10093] ip6gre0: left allmulticast mode [ 237.489427][T10093] syz_tun: left allmulticast mode [ 237.522219][T10093] veth0_to_bond: left allmulticast mode [ 237.600173][T10113] bond0: entered promiscuous mode [ 237.621202][T10113] bond_slave_0: entered promiscuous mode [ 237.637076][T10120] netlink: 'syz.3.1255': attribute type 178 has an invalid length. [ 237.640834][T10113] bond_slave_1: entered promiscuous mode [ 237.667764][T10113] dummy0: entered promiscuous mode [ 237.693656][ T9098] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.723657][ T9098] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.778927][ T9098] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.788239][T10125] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 4, id = 0 [ 237.800286][T10124] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1257'. [ 237.832689][ T9098] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.857056][T10132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1256'. [ 237.897769][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 238.201644][T10143] 8021q: adding VLAN 0 to HW filter on device bond7 [ 238.315344][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 238.332133][T10150] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 238.363436][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 238.383180][T10150] bond2 (unregistering): Released all slaves [ 238.682382][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1267'. [ 239.429181][T10204] vlan1: entered allmulticast mode [ 239.448604][T10204] veth0_vlan: entered allmulticast mode [ 239.720225][T10215] bridge_slave_1: left allmulticast mode [ 239.771747][T10215] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.827811][T10220] netlink: 'syz.1.1282': attribute type 1 has an invalid length. [ 239.848911][T10215] bridge_slave_0: left allmulticast mode [ 239.870123][T10215] bridge_slave_0: left promiscuous mode [ 239.894901][T10215] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.011276][T10218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.160239][T10226] bond2: (slave geneve2): making interface the new active one [ 240.169232][T10226] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 240.180069][T10227] syzkaller1: entered promiscuous mode [ 240.188752][T10227] syzkaller1: entered allmulticast mode [ 240.208660][ T9095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.305440][ T9095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.415064][T10239] xt_hashlimit: overflow, rate too high: 0 [ 240.486947][ T9095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.515087][ T9095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.558416][T10239] bridge_slave_0 (unregistering): left allmulticast mode [ 240.604623][T10239] bridge_slave_0 (unregistering): left promiscuous mode [ 240.644395][T10239] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.677700][T10248] netlink: 'syz.2.1286': attribute type 2 has an invalid length. [ 241.033414][T10262] bond0: mtu less than device minimum [ 241.478709][T10282] sctp: [Deprecated]: syz.3.1294 (pid 10282) Use of int in maxseg socket option. [ 241.478709][T10282] Use struct sctp_assoc_value instead [ 241.549806][T10282] sctp: [Deprecated]: syz.3.1294 (pid 10282) Use of int in maxseg socket option. [ 241.549806][T10282] Use struct sctp_assoc_value instead [ 241.575256][T10282] sctp: [Deprecated]: syz.3.1294 (pid 10282) Use of int in maxseg socket option. [ 241.575256][T10282] Use struct sctp_assoc_value instead [ 241.592389][T10282] sctp: [Deprecated]: syz.3.1294 (pid 10282) Use of int in maxseg socket option. [ 241.592389][T10282] Use struct sctp_assoc_value instead [ 241.609401][T10282] sctp: [Deprecated]: syz.3.1294 (pid 10282) Use of int in maxseg socket option. [ 241.609401][T10282] Use struct sctp_assoc_value instead [ 241.650723][T10282] sctp: [Deprecated]: syz.3.1294 (pid 10282) Use of int in maxseg socket option. [ 241.650723][T10282] Use struct sctp_assoc_value instead [ 241.684397][T10282] sctp: [Deprecated]: syz.3.1294 (pid 10282) Use of int in maxseg socket option. [ 241.684397][T10282] Use struct sctp_assoc_value instead [ 241.715053][T10282] sctp: [Deprecated]: syz.3.1294 (pid 10282) Use of int in maxseg socket option. [ 241.715053][T10282] Use struct sctp_assoc_value instead [ 241.734305][T10293] tipc: Enabled bearer , priority 0 [ 241.743479][T10293] syzkaller0: entered promiscuous mode [ 241.749789][T10293] syzkaller0: entered allmulticast mode [ 241.756516][T10282] sctp: [Deprecated]: syz.3.1294 (pid 10282) Use of int in maxseg socket option. [ 241.756516][T10282] Use struct sctp_assoc_value instead [ 241.777478][T10282] sctp: [Deprecated]: syz.3.1294 (pid 10282) Use of int in maxseg socket option. [ 241.777478][T10282] Use struct sctp_assoc_value instead [ 241.792761][T10292] tipc: Resetting bearer [ 241.831703][T10292] tipc: Disabling bearer [ 242.161593][T10313] __nla_validate_parse: 8 callbacks suppressed [ 242.161615][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 242.190050][T10311] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1302'. [ 242.566993][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1306'. [ 242.592131][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1306'. [ 242.620126][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1306'. [ 242.656779][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1306'. [ 242.737718][T10335] syzkaller0: entered promiscuous mode [ 242.755503][T10335] syzkaller0: entered allmulticast mode [ 242.980635][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1311'. [ 243.410873][T10380] netlink: 'syz.3.1316': attribute type 83 has an invalid length. [ 243.526640][T10386] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1318'. [ 243.553336][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1318'. [ 244.082096][T10400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.326486][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 246.381518][T10409] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 246.417320][ T7166] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 246.817250][T10441] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 247.061846][T10452] syzkaller0: entered promiscuous mode [ 247.080067][T10452] syzkaller0: entered allmulticast mode [ 247.424124][T10477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.431569][T10477] IPv6: NLM_F_CREATE should be set when creating new route [ 247.439097][T10477] IPv6: NLM_F_CREATE should be set when creating new route [ 247.777036][T10474] tipc: Started in network mode [ 247.805823][T10474] tipc: Node identity ba26c4ddab72, cluster identity 4711 [ 247.825620][T10474] tipc: Enabled bearer , priority 0 [ 247.886905][T10480] tipc: Resetting bearer [ 247.979778][T10480] tipc: Disabling bearer [ 248.007110][T10490] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 248.017153][T10490] __nla_validate_parse: 7 callbacks suppressed [ 248.017172][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 248.033986][T10490] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.041671][T10490] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.048941][T10490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.246641][ T5765] IPVS: starting estimator thread 0... [ 248.310917][T10508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1345'. [ 248.355919][T10502] IPVS: using max 28 ests per chain, 67200 per kthread [ 248.523011][T10521] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.530912][T10521] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.621343][T10529] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.628653][T10529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.636272][T10529] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.643473][T10529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.686611][T10529] bridge0: entered promiscuous mode [ 248.710820][T10529] bridge0: entered allmulticast mode [ 248.717516][T10532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1351'. [ 248.926364][T10543] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1356'. [ 249.217119][T10563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1361'. [ 249.280437][T10560] syzkaller0: entered promiscuous mode [ 249.299187][T10560] syzkaller0: entered allmulticast mode [ 249.332848][T10562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1359'. [ 249.343605][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'. [ 249.412561][T10570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.458579][T10581] 8021q: VLANs not supported on ip6tnl0 [ 249.540423][T10580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1364'. [ 249.575112][T10580] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1364'. [ 249.881316][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1368'. [ 249.939707][T10605] netlink: 'syz.3.1369': attribute type 1 has an invalid length. [ 250.182996][T10605] bond2: entered promiscuous mode [ 250.198705][T10605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.455370][T10640] openvswitch: netlink: Message has 4 unknown bytes. [ 250.699383][T10655] ip6_vti0: Master is either lo or non-ether device [ 250.738162][T10655] block nbd3: Unsupported socket: should be TCP or UNIX. [ 251.019081][T10674] netlink: 'syz.2.1385': attribute type 1 has an invalid length. [ 251.195360][T10674] 8021q: adding VLAN 0 to HW filter on device bond7 [ 251.233067][T10682] netlink: 'syz.4.1387': attribute type 1 has an invalid length. [ 251.298748][T10685] bond7: (slave geneve2): making interface the new active one [ 251.338404][T10685] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 251.548386][T10682] 8021q: adding VLAN 0 to HW filter on device bond8 [ 251.585494][ T9126] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.598172][ T9126] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.623194][ T9126] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.649532][ T9126] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.723686][T10721] netlink: 'syz.2.1396': attribute type 1 has an invalid length. [ 251.764238][T10721] netlink: 'syz.2.1396': attribute type 1 has an invalid length. [ 252.330758][T10758] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 252.408995][T10758] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 252.434744][T10758] gretap1: entered promiscuous mode [ 252.443947][T10758] gretap1: entered allmulticast mode [ 252.466757][T10772] x_tables: unsorted entry at hook 1 [ 253.345733][T10787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.405994][T10809] netlink: 'syz.0.1417': attribute type 4 has an invalid length. [ 253.408739][T10810] netlink: 'syz.0.1417': attribute type 4 has an invalid length. [ 253.455545][T10811] netlink: 'syz.0.1417': attribute type 4 has an invalid length. [ 253.604702][T10813] syzkaller1: entered promiscuous mode [ 253.625613][T10813] syzkaller1: entered allmulticast mode [ 254.351351][T10840] __nla_validate_parse: 11 callbacks suppressed [ 254.351373][T10840] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1426'. [ 254.408791][T10840] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1426'. [ 254.441857][T10840] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1426'. [ 255.098390][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'. [ 255.126990][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'. [ 255.680431][T10882] netlink: 'syz.2.1437': attribute type 4 has an invalid length. [ 255.727765][T10882] netlink: 'syz.2.1437': attribute type 1 has an invalid length. [ 255.908535][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.919895][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.527479][T10911] syzkaller1: entered promiscuous mode [ 256.575448][T10911] syzkaller1: entered allmulticast mode [ 257.136666][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 257.442827][T10939] tap0: tun_chr_ioctl cmd 1074025672 [ 257.457599][T10939] tap0: ignored: set checksum disabled [ 257.473035][T10939] tap0: tun_chr_ioctl cmd 1074025688 [ 258.192450][T10961] syzkaller0: entered promiscuous mode [ 258.217236][T10961] syzkaller0: entered allmulticast mode [ 258.458236][ T9140] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 258.645836][T10978] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 259.167416][T11000] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 259.185579][T11001] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1475'. [ 259.206945][T11001] openvswitch: netlink: Message has 512 unknown bytes. [ 259.231642][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 259.395935][T11001] vlan3: entered allmulticast mode [ 259.408315][T11001] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 259.898164][T11038] netlink: 716 bytes leftover after parsing attributes in process `syz.2.1484'. [ 260.229973][T11055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.242286][T11055] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1485'. [ 260.657233][T11070] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 260.918650][T11080] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 260.950011][T11080] Cannot find set identified by id 65534 to match [ 261.471948][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'. [ 261.557394][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 261.560119][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'. [ 261.589265][T11101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1502'. [ 261.599624][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'. [ 261.610652][T11101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1502'. [ 261.814506][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 261.842455][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 261.855495][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 261.869956][T11117] netlink: 'syz.4.1507': attribute type 14 has an invalid length. [ 261.879221][T11117] netlink: 'syz.4.1507': attribute type 13 has an invalid length. [ 262.220621][T11132] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20002 [ 262.333546][T11137] bridge_slave_1: left allmulticast mode [ 262.347410][T11137] bridge_slave_1: left promiscuous mode [ 262.371953][T11137] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.456715][T11137] bridge_slave_0: left allmulticast mode [ 262.470791][T11137] bridge_slave_0: left promiscuous mode [ 262.485668][T11137] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.601415][T11151] 8021q: adding VLAN 0 to HW filter on device bond9 [ 262.713530][T11143] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 263.230596][T11198] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 263.318194][T11202] bond0: (slave gre0): refused to change device type [ 263.924153][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 265.785997][T11169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.171862][T11228] IPVS: set_ctl: invalid protocol: 46 10.1.1.0:20000 [ 266.285566][T11242] __nla_validate_parse: 13 callbacks suppressed [ 266.285589][T11242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1537'. [ 266.579968][T11246] nbd3: detected capacity change from 0 to 63 [ 266.641027][ T50] block nbd3: Receive control failed (result -104) [ 267.050167][T11282] syzkaller0: entered promiscuous mode [ 267.072977][T11282] syzkaller0: entered allmulticast mode [ 267.209151][ T30] audit: type=1800 audit(1782464485.099:4): pid=11289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1550" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 267.231353][T11289] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 267.251896][T11289] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 267.283223][T11289] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 267.608781][T11311] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 267.626750][T11301] syzkaller0: entered promiscuous mode [ 267.642186][T11311] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 267.654749][T11301] syzkaller0: entered allmulticast mode [ 267.677963][T11289] syz.4.1550 (11289) used greatest stack depth: 18536 bytes left [ 267.731847][T11315] xfrm2: entered allmulticast mode [ 267.741154][T11315] team0: Device xfrm2 is of different type [ 267.951736][T11325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1561'. [ 268.110994][T11329] vcan1: entered promiscuous mode [ 268.124179][T11329] vcan1: entered allmulticast mode [ 268.165564][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1564'. [ 268.176858][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1564'. [ 268.361531][T11345] xt_CONNSECMARK: invalid mode: 0 [ 268.377652][T11345] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 268.473243][T11349] netlink: 'syz.1.1570': attribute type 4 has an invalid length. [ 268.557586][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1571'. [ 268.586719][T11356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1572'. [ 268.591867][T11355] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1571'. [ 268.762878][T11364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1574'. [ 268.811047][T11366] syz.2.1576: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 268.877896][T11366] CPU: 0 UID: 0 PID: 11366 Comm: syz.2.1576 Not tainted syzkaller #0 PREEMPT(full) [ 268.877930][T11366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 268.877943][T11366] Call Trace: [ 268.877951][T11366] [ 268.877961][T11366] dump_stack_lvl+0xe8/0x150 [ 268.877997][T11366] warn_alloc+0x24c/0x270 [ 268.878031][T11366] ? stack_depot_save_flags+0x33/0x800 [ 268.878061][T11366] ? __pfx_warn_alloc+0x10/0x10 [ 268.878094][T11366] ? kasan_save_track+0x3e/0x80 [ 268.878112][T11366] ? __kasan_kmalloc+0x93/0xb0 [ 268.878134][T11366] ? xsk_setsockopt+0x52a/0x960 [ 268.878160][T11366] ? do_sock_setsockopt+0x17c/0x1b0 [ 268.878180][T11366] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 268.878198][T11366] ? do_syscall_64+0x174/0x580 [ 268.878216][T11366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.878248][T11366] __vmalloc_node_range_noprof+0x12c/0x1730 [ 268.878311][T11366] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 268.878346][T11366] ? __kasan_kmalloc+0x93/0xb0 [ 268.878368][T11366] ? __kmalloc_cache_noprof+0x32d/0x660 [ 268.878406][T11366] ? __kmalloc_cache_noprof+0x150/0x660 [ 268.878441][T11366] vmalloc_user_noprof+0xad/0xe0 [ 268.878485][T11366] ? xskq_create+0xbf/0x170 [ 268.878516][T11366] xskq_create+0xbf/0x170 [ 268.878550][T11366] xsk_init_queue+0x8a/0xe0 [ 268.878583][T11366] xsk_setsockopt+0x52a/0x960 [ 268.878610][T11366] ? __fget_files+0x2a/0x420 [ 268.878632][T11366] ? __pfx_xsk_setsockopt+0x10/0x10 [ 268.878661][T11366] ? __pfx_aa_sk_perm+0x10/0x10 [ 268.878688][T11366] ? aa_sock_opt_perm+0xff/0x1a0 [ 268.878716][T11366] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 268.878742][T11366] ? __pfx_xsk_setsockopt+0x10/0x10 [ 268.878769][T11366] do_sock_setsockopt+0x17c/0x1b0 [ 268.878796][T11366] __x64_sys_setsockopt+0x13d/0x1b0 [ 268.878831][T11366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.878853][T11366] do_syscall_64+0x174/0x580 [ 268.878871][T11366] ? trace_irq_disable+0x3b/0x140 [ 268.878892][T11366] ? clear_bhb_loop+0x40/0x90 [ 268.878920][T11366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.878940][T11366] RIP: 0033:0x7f7ce3f9ce59 [ 268.878961][T11366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.878977][T11366] RSP: 002b:00007f7ce4ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 268.878998][T11366] RAX: ffffffffffffffda RBX: 00007f7ce4215fa0 RCX: 00007f7ce3f9ce59 [ 268.879012][T11366] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 268.879025][T11366] RBP: 00007f7ce4032e6f R08: 0000000000000004 R09: 0000000000000000 [ 268.879037][T11366] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.879050][T11366] R13: 00007f7ce4216038 R14: 00007f7ce4215fa0 R15: 00007ffca5ef85b8 [ 268.879085][T11366] [ 269.177833][T11366] Mem-Info: [ 269.181169][T11366] active_anon:5748 inactive_anon:1 isolated_anon:0 [ 269.181169][T11366] active_file:1 inactive_file:42981 isolated_file:0 [ 269.181169][T11366] unevictable:768 dirty:65 writeback:0 [ 269.181169][T11366] slab_reclaimable:10719 slab_unreclaimable:99029 [ 269.181169][T11366] mapped:29308 shmem:1291 pagetables:3606 [ 269.181169][T11366] sec_pagetables:0 bounce:0 [ 269.181169][T11366] kernel_misc_reclaimable:0 [ 269.181169][T11366] free:1323591 free_pcp:11364 free_cma:0 [ 269.274380][T11366] Node 0 active_anon:23000kB inactive_anon:4kB active_file:4kB inactive_file:171740kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117264kB dirty:260kB writeback:0kB shmem:3628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14772kB pagetables:14252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 269.309804][T11366] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 269.345756][T11366] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.378158][T11366] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 269.384163][T11366] Node 0 DMA32 free:1340656kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23000kB inactive_anon:4kB active_file:4kB inactive_file:171740kB unevictable:1536kB writepending:260kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:45712kB local_pcp:20544kB free_cma:0kB [ 269.422537][T11366] lowmem_reserve[]: 0 0 0 0 0 [ 269.427415][T11366] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.457735][T11366] lowmem_reserve[]: 0 0 0 0 0 [ 269.463018][T11366] Node 1 Normal free:3938168kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 269.496192][T11366] lowmem_reserve[]: 0 0 0 0 0 [ 269.500998][T11366] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 269.533910][T11366] Node 0 DMA32: 2321*4kB (UME) 1637*8kB (UME) 567*16kB (UME) 936*32kB (UME) 522*64kB (UME) 641*128kB (UM) 459*256kB (UME) 240*512kB (UME) 90*1024kB (UM) 6*2048kB (UM) 200*4096kB (UM) = 1340892kB [ 269.571802][T11366] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 269.605316][T11366] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 7*64kB (UM) 3*128kB (UM) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3938220kB [ 269.654952][T11366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.684220][T11391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1583'. [ 269.719450][T11366] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.722067][T11394] netlink: 'syz.4.1585': attribute type 1 has an invalid length. [ 269.770124][T11366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.790525][T11399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1586'. [ 269.809925][T11366] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.848664][T11366] 44271 total pagecache pages [ 269.863318][T11366] 0 pages in swap cache [ 269.873803][T11366] Free swap = 124996kB [ 269.889085][T11366] Total swap = 124996kB [ 269.899266][T11366] 2097051 pages RAM [ 269.907869][T11366] 0 pages HighMem/MovableOnly [ 269.926946][T11366] 427419 pages reserved [ 269.937608][T11410] netlink: 'syz.3.1587': attribute type 10 has an invalid length. [ 269.951294][T11366] 0 pages cma reserved [ 270.031712][T11410] team0: Port device dummy0 added [ 270.627857][T11437] IPv6: NLM_F_REPLACE set, but no existing node found! [ 270.957965][T11455] netlink: 'syz.2.1596': attribute type 10 has an invalid length. [ 271.006188][T11421] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 271.325605][T11471] __nla_validate_parse: 4 callbacks suppressed [ 271.325625][T11471] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1599'. [ 271.416512][T11462] syz.0.1595 (11462) used greatest stack depth: 18312 bytes left [ 271.438040][T11471] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1599'. [ 271.475812][T11471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1599'. [ 271.536276][T11471] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1599'. [ 271.561192][T11471] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1599'. [ 271.585340][T11471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1599'. [ 271.629713][T11471] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1599'. [ 271.641681][T11473] kthread_run failed with err -4 [ 271.658692][T11471] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1599'. [ 271.691439][T11471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1599'. [ 271.759579][T11471] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1599'. [ 271.845101][T11489] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 272.021055][T11498] block nbd4: Unsupported socket: should be TCP or UNIX. [ 272.189177][T11500] veth0_macvtap: refused to change device tx_queue_len [ 272.555830][T11522] syzkaller0: entered promiscuous mode [ 272.582257][T11522] syzkaller0: entered allmulticast mode [ 273.024755][T11533] netlink: 'syz.3.1616': attribute type 4 has an invalid length. [ 273.660414][T11577] netlink: 'syz.4.1625': attribute type 29 has an invalid length. [ 273.836883][T11584] bridge0: entered promiscuous mode [ 273.870243][T11584] bridge0: entered allmulticast mode [ 274.040214][T11600] syzkaller0: entered promiscuous mode [ 274.063842][T11600] syzkaller0: entered allmulticast mode [ 275.562115][T11679] netlink: 'syz.4.1646': attribute type 1 has an invalid length. [ 275.677596][T11686] syzkaller0: entered promiscuous mode [ 275.698246][T11686] syzkaller0: entered allmulticast mode [ 276.152507][T11700] batadv_slave_1: entered promiscuous mode [ 276.213712][T11701] batadv_slave_1: left promiscuous mode [ 276.390581][T11716] __nla_validate_parse: 50 callbacks suppressed [ 276.390604][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 276.439799][T11724] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.1657'. [ 276.456131][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 276.674879][T11735] ip6t_rpfilter: unknown options [ 276.778638][T11741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1664'. [ 276.932390][T11747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1667'. [ 276.990368][T11746] netlink: 'syz.2.1666': attribute type 8 has an invalid length. [ 277.016589][T11748] kthread_run failed with err -4 [ 277.084916][T11759] netlink: 'syz.1.1669': attribute type 1 has an invalid length. [ 277.099189][T11759] netlink: 'syz.1.1669': attribute type 2 has an invalid length. [ 277.140046][T11764] netlink: 'syz.1.1669': attribute type 1 has an invalid length. [ 277.183205][T11764] netlink: 'syz.1.1669': attribute type 2 has an invalid length. [ 277.273380][T11746] syzkaller0: entered promiscuous mode [ 277.289154][T11746] syzkaller0: entered allmulticast mode [ 277.306362][T11753] syzkaller0: entered promiscuous mode [ 277.317494][T11773] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1671'. [ 277.320675][T11753] syzkaller0: entered allmulticast mode [ 277.829597][T11789] gre2: entered promiscuous mode [ 278.018738][T11799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1674'. [ 278.479938][T11816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1679'. [ 278.836768][T11827] netlink: 'syz.0.1682': attribute type 1 has an invalid length. [ 278.899690][T11833] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1682'. [ 279.213036][T11842] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1685'. [ 281.269246][T11819] netlink: 'syz.3.1681': attribute type 1 has an invalid length. [ 281.278189][T11827] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 281.453145][T11862] openvswitch: netlink: Key 0 has unexpected len 256 expected 0 [ 281.547785][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1690'. [ 281.568632][T11864] syzkaller0: entered promiscuous mode [ 281.583961][T11864] syzkaller0: entered allmulticast mode [ 281.817591][T11890] netlink: 'syz.3.1693': attribute type 5 has an invalid length. [ 281.998464][T11901] netlink: 'syz.1.1698': attribute type 1 has an invalid length. [ 282.039926][T11909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1693'. [ 282.063061][T11909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1693'. [ 282.102290][T11890] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1693'. [ 282.173322][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'. [ 282.357703][T11923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1705'. [ 282.622341][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 282.649496][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 282.695623][T11931] netlink: 'syz.1.1708': attribute type 15 has an invalid length. [ 282.715202][T11940] netlink: 'syz.1.1708': attribute type 2 has an invalid length. [ 282.775318][ T9129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.799433][ T9126] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 282.818709][ T7150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.833261][ T7184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.841409][ T9126] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 282.931826][ T9126] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 282.961609][ T9126] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 283.162694][T11954] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1715'. [ 283.433454][T11969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1718'. [ 283.700295][T11978] macsec0: entered promiscuous mode [ 283.713970][T11978] macsec0: entered allmulticast mode [ 283.732399][T11978] veth1_macvtap: entered allmulticast mode [ 283.757085][T11978] macsec0: left promiscuous mode [ 283.768927][T11978] macsec0: left allmulticast mode [ 283.777906][T11978] veth1_macvtap: left allmulticast mode [ 283.847588][T11985] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 283.880019][T11985] netlink: 'syz.2.1720': attribute type 2 has an invalid length. [ 283.925560][ T7184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.953163][T11992] netlink: 'syz.1.1724': attribute type 9 has an invalid length. [ 283.962619][T11992] netlink: 'syz.1.1724': attribute type 6 has an invalid length. [ 284.232267][T11999] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20004 [ 284.302403][T12005] netlink: 'syz.4.1727': attribute type 1 has an invalid length. [ 284.572245][T12008] bond10: (slave geneve2): making interface the new active one [ 284.598983][T12008] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 284.654719][ T9140] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 284.685373][ T9140] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 284.720626][ T9140] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 284.863076][T12022] syzkaller0: entered promiscuous mode [ 284.893865][T12022] syzkaller0: entered allmulticast mode [ 284.920037][ T9140] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 284.934330][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.117611][T12050] netlink: 'syz.4.1738': attribute type 1 has an invalid length. [ 285.147728][T12050] netlink: 'syz.4.1738': attribute type 1 has an invalid length. [ 285.167872][T12050] netlink: 'syz.4.1738': attribute type 1 has an invalid length. [ 285.187328][T12050] netlink: 'syz.4.1738': attribute type 2 has an invalid length. [ 285.476079][T12067] netlink: 'syz.4.1741': attribute type 10 has an invalid length. [ 285.496693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.977743][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.631743][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.644513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.015036][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.532538][T12067] bond0: (slave dummy0): Releasing backup interface [ 287.737271][T12073] macvlan0: entered promiscuous mode [ 287.785440][T12084] __nla_validate_parse: 9 callbacks suppressed [ 287.785460][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1746'. [ 288.057102][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.122374][T12103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1752'. [ 288.370131][T12116] syzkaller0: entered promiscuous mode [ 288.379278][T12116] syzkaller0: entered allmulticast mode [ 288.736806][T12125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1759'. [ 288.764382][T12125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1759'. [ 288.785502][T12125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1759'. [ 288.799299][T12125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1759'. [ 288.809224][T12125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1759'. [ 288.852236][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1760'. [ 288.905619][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1760'. [ 288.925989][T12134] validate_nla: 2 callbacks suppressed [ 288.926011][T12134] netlink: 'syz.1.1761': attribute type 3 has an invalid length. [ 288.930850][T12129] sctp: [Deprecated]: syz.4.1760 (pid 12129) Use of int in max_burst socket option deprecated. [ 288.930850][T12129] Use struct sctp_assoc_value instead [ 289.096687][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.409559][T12157] netlink: 'syz.3.1768': attribute type 1 has an invalid length. [ 289.440018][T12155] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1767'. [ 289.497710][T12157] bond3: entered promiscuous mode [ 289.503633][T12157] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.523099][T12164] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 289.536678][T12164] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 289.548362][T12164] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 289.670778][T12168] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 289.707995][T12168] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 290.135589][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.152470][T12183] syzkaller0: entered promiscuous mode [ 290.168896][T12183] syzkaller0: entered allmulticast mode [ 291.179666][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.220552][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.377512][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.388066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.623401][T12204] netlink: 'syz.4.1781': attribute type 12 has an invalid length. [ 292.652085][T12203] netlink: 'syz.4.1781': attribute type 12 has an invalid length. [ 292.977691][T12222] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.011906][ T30] audit: type=1800 audit(1782464510.899:5): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1787" name="memory.events" dev="tmpfs" ino=1819 res=0 errno=0 [ 293.052718][ T30] audit: type=1804 audit(1782464510.899:6): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1787" name="/newroot/353/memory.events" dev="tmpfs" ino=1819 res=1 errno=0 [ 293.255303][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.367086][T12244] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 293.384781][T12244] bond4 (unregistering): Released all slaves [ 293.509323][T12253] syzkaller0: entered promiscuous mode [ 293.524883][T12253] syzkaller0: entered allmulticast mode [ 293.650065][T12256] tipc: Enabled bearer , priority 0 [ 293.750318][T12258] __nla_validate_parse: 2 callbacks suppressed [ 293.750339][T12258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1796'. [ 293.777038][T12255] syzkaller0: entered promiscuous mode [ 293.783734][T12255] syzkaller0: entered allmulticast mode [ 293.794296][T12255] tipc: Resetting bearer [ 293.807626][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 293.832397][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 293.855251][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 293.888810][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 293.910984][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 293.929174][ T9095] tipc: Resetting bearer [ 293.937079][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 293.950132][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 293.960332][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 293.969568][T12254] tipc: Resetting bearer [ 293.976449][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 294.032617][T12271] netlink: 'syz.0.1800': attribute type 1 has an invalid length. [ 294.053507][T12271] netlink: 'syz.0.1800': attribute type 1 has an invalid length. [ 294.063657][T12271] netlink: 'syz.0.1800': attribute type 2 has an invalid length. [ 294.108438][T12273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.302498][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.340536][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.339471][T12254] tipc: Disabling bearer [ 296.357465][T12271] erspan0: entered promiscuous mode [ 296.371716][T12284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.383090][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.403374][ T7146] tipc: Node number set to 290768093 [ 296.775182][T12299] syzkaller0: entered promiscuous mode [ 296.795452][T12299] syzkaller0: entered allmulticast mode [ 296.857153][ T25] block nbd3: Possible stuck request ffff888026b07000: control (read@0,1024B). Runtime 30 seconds [ 296.869392][ T25] block nbd3: Possible stuck request ffff888026b071c0: control (read@1024,1024B). Runtime 30 seconds [ 296.881155][ T25] block nbd3: Possible stuck request ffff888026b07380: control (read@2048,1024B). Runtime 30 seconds [ 296.895181][ T25] block nbd3: Possible stuck request ffff888026b07540: control (read@3072,1024B). Runtime 30 seconds [ 297.200163][T12329] netlink: 'syz.3.1820': attribute type 1 has an invalid length. [ 297.249030][T12336] IPVS: length: 8 != 1152 [ 297.416189][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.445030][ T30] audit: type=1107 audit(1782464515.329:7): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='09ëÛ"ÿæ«5Éé…È º[Œ#Ÿ„%pˆ 3z¯çתñ,' [ 297.482517][T12346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.666912][T12357] x_tables: duplicate underflow at hook 2 [ 297.731894][T12361] syzkaller0: entered promiscuous mode [ 297.744424][T12361] syzkaller0: entered allmulticast mode [ 297.840939][T12363] netlink: 'syz.2.1831': attribute type 21 has an invalid length. [ 297.929412][T12371] netlink: 'syz.1.1832': attribute type 1 has an invalid length. [ 298.085502][T12363] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 298.096993][T12363] bond8 (unregistering): Released all slaves [ 298.134912][ T9140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.144908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.157054][T12371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.456467][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.519846][T12403] netlink: 'syz.2.1842': attribute type 21 has an invalid length. [ 298.689327][T12410] netlink: 'syz.2.1845': attribute type 10 has an invalid length. [ 298.901106][T12420] syzkaller0: entered promiscuous mode [ 298.913587][T12420] syzkaller0: entered allmulticast mode [ 299.051255][T12440] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 299.204547][T12448] __nla_validate_parse: 136 callbacks suppressed [ 299.204569][T12448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1855'. [ 299.393555][T12452] netlink: 'syz.3.1856': attribute type 10 has an invalid length. [ 299.448084][T12452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.462077][T12452] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 299.494257][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.624430][T12460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.656456][T12460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.677043][T12460] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 299.703642][T12460] bond0 (unregistering): Released all slaves [ 299.738730][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 300.044667][T12478] block nbd5: Unsupported socket: should be TCP or UNIX. [ 300.250861][T12484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1868'. [ 300.535879][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.559787][T12503] Cannot find add_set index 2 as target [ 300.588086][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 300.641159][ T9098] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.663051][ T9098] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.675682][ T9098] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.685380][ T9098] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.741885][T12519] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 300.805735][T12523] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 301.578048][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.621813][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.264558][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.275241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.295676][T12490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.585152][T12534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1883'. [ 303.659366][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.756518][T12545] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1884'. [ 303.825100][T12549] netlink: 'syz.3.1885': attribute type 1 has an invalid length. [ 303.872584][T12553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1886'. [ 303.906777][T12549] bond0: entered promiscuous mode [ 303.913220][T12549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.956053][T12553] bond0: entered promiscuous mode [ 303.980824][T12553] bond_slave_1: entered promiscuous mode [ 304.012067][T12553] bond0: left promiscuous mode [ 304.036543][T12553] bond_slave_1: left promiscuous mode [ 304.600676][ T5624] block nbd6: Receive control failed (result -32) [ 304.601459][ T50] block nbd5: Receive control failed (result -32) [ 304.667583][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 304.706214][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.059887][T12603] xt_TPROXY: Can be used only with -p tcp or -p udp [ 305.271630][T12603] netlink: 'syz.4.1901': attribute type 1 has an invalid length. [ 305.475171][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1907'. [ 305.497803][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1907'. [ 305.586316][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 305.734727][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.122472][T12667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1921'. [ 306.167897][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1924'. [ 306.190795][T12670] netlink: 'syz.4.1924': attribute type 6 has an invalid length. [ 306.222868][T12670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 306.405712][T12680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1926'. [ 306.675974][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1930'. [ 306.751405][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.774775][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.786348][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.813793][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.868929][T12696] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1932'. [ 307.437292][T12726] xt_TPROXY: Can be used only with -p tcp or -p udp [ 307.814164][ T7183] net_ratelimit: 4 callbacks suppressed [ 307.814184][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.253317][T12772] netlink: 'syz.0.1954': attribute type 11 has an invalid length. [ 308.437824][T12771] bond4: entered promiscuous mode [ 308.454371][T12771] bond4: entered allmulticast mode [ 308.465837][T12771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.811107][T12809] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 308.860934][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.016405][ T9129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.027557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.117945][T12816] x_tables: unsorted underflow at hook 4 [ 309.292238][T12821] netlink: 'syz.4.1966': attribute type 1 has an invalid length. [ 309.586939][T12836] bond4: Removing last ns target with arp_interval on [ 309.629247][T12837] syzkaller0: entered promiscuous mode [ 309.663388][T12837] syzkaller0: entered allmulticast mode [ 309.729495][T12850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.906705][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.950432][T12858] xt_hashlimit: size too large, truncated to 1048576 [ 310.964947][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.190878][T12898] Bluetooth: MGMT ver 1.23 [ 311.213252][T12904] x_tables: duplicate entry at hook 3 [ 311.228902][T12898] __nla_validate_parse: 11 callbacks suppressed [ 311.228922][T12898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1988'. [ 311.341363][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1991'. [ 311.489914][T12912] team0: entered promiscuous mode [ 311.511581][T12912] team0: entered allmulticast mode [ 311.641023][T12914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1993'. [ 311.651848][T12925] syzkaller0: entered promiscuous mode [ 311.665952][T12925] syzkaller0: entered allmulticast mode [ 311.916601][T12935] IPVS: rr: FWM 3 0x00000003 - no destination available [ 311.974554][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.047695][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2000'. [ 312.115615][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2001'. [ 312.176699][T12952] xt_hashlimit: size too large, truncated to 1048576 [ 312.178404][T12953] siw: device registration error -23 [ 312.233730][T12953] ±ÿª¨úrBº“: renamed from lo [ 313.016112][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.217614][T12997] pimreg3: entered allmulticast mode [ 313.312506][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2005'. [ 313.791694][ T50] Bluetooth: hci4: link tx timeout [ 313.804476][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.055296][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.101002][ T50] Bluetooth: hci4: link tx timeout [ 314.108289][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.157554][ T50] Bluetooth: hci4: link tx timeout [ 314.165601][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.471848][T13031] syzkaller0: entered promiscuous mode [ 314.493680][T13031] syzkaller0: entered allmulticast mode [ 314.532625][ T50] Bluetooth: hci4: link tx timeout [ 314.538509][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.788297][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.797187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.808378][T13065] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2032'. [ 315.104353][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.110488][ T50] Bluetooth: hci4: link tx timeout [ 315.120419][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 315.262434][T13075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.912074][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 316.139167][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.179466][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.349214][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.357876][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.694580][T13083] netlink: 'syz.4.2036': attribute type 11 has an invalid length. [ 317.725780][T13083] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2036'. [ 317.888838][T13093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2038'. [ 318.046304][T13105] xt_cluster: node mask cannot exceed total number of nodes [ 318.207759][T13107] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2042'. [ 318.232906][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.308296][T13119] ip6gre0: Master is either lo or non-ether device [ 318.321874][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2046'. [ 318.423120][T13123] netlink: 'syz.1.2048': attribute type 29 has an invalid length. [ 318.624356][T13131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2050'. [ 318.985622][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'. [ 318.997353][T13153] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 319.008702][T13153] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 319.167063][T13151] macvtap1: entered promiscuous mode [ 319.185308][T13151] vlan0: entered promiscuous mode [ 319.191792][T13151] macvtap1: entered allmulticast mode [ 319.198555][T13151] vlan0: entered allmulticast mode [ 319.232531][T13167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2060'. [ 319.242978][T13167] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2060'. [ 319.255584][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.330234][T13170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2062'. [ 319.350694][T13170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2062'. [ 319.896414][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.910860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.294883][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.976358][T13253] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 321.023232][T13253] 0ªX¹¦Dö»: entered allmulticast mode [ 321.335227][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.950386][T13290] 8021q: VLANs not supported on vcan0 [ 322.055295][ T9124] wlan0: Trigger new scan to find an IBSS to join [ 322.398562][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.183373][T13324] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 323.215530][T13336] netlink: 'syz.0.2109': attribute type 4 has an invalid length. [ 323.248759][T13324] bond5 (unregistering): Released all slaves [ 323.272466][T13340] netlink: 'syz.0.2109': attribute type 4 has an invalid length. [ 323.318192][T13330] vlan5: entered allmulticast mode [ 323.431987][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.858085][T13365] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 324.334442][T13385] geneve0: entered promiscuous mode [ 324.340622][T13385] geneve0: entered allmulticast mode [ 324.351649][T13385] __nla_validate_parse: 10 callbacks suppressed [ 324.351670][T13385] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2126'. [ 324.454374][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.827096][T13411] bond0: Device is already in use. [ 324.935469][T13413] sock: sock_set_timeout: `syz.0.2138' (pid 13413) tries to set negative timeout [ 324.982377][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2137'. [ 325.109611][ T9140] wlan0: Trigger new scan to find an IBSS to join [ 325.390123][T13435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2147'. [ 325.497106][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.582851][T13443] syzkaller0: entered promiscuous mode [ 325.605161][T13443] syzkaller0: entered allmulticast mode [ 325.656207][ T9129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.665031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.779234][T13446] bond5: Unable to set down delay as MII monitoring is disabled [ 325.837548][T13446] bond5 (unregistering): Released all slaves [ 326.055838][T13464] netlink: 'syz.2.2156': attribute type 1 has an invalid length. [ 326.162957][T13464] 8021q: adding VLAN 0 to HW filter on device bond8 [ 326.239391][T13471] tipc: Started in network mode [ 326.247293][T13471] tipc: Node identity e0000001, cluster identity 5 [ 326.257742][T13471] tipc: Enabling of bearer rejected, failed to enable media [ 326.503186][T13483] netlink: 'syz.4.2162': attribute type 1 has an invalid length. [ 326.512755][T13483] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2162'. [ 326.529606][T13483] tipc: Trying to set illegal importance in message [ 326.534183][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.595768][T13483] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2162'. [ 326.938075][ T25] block nbd3: Possible stuck request ffff888026b07000: control (read@0,1024B). Runtime 60 seconds [ 326.949544][ T25] block nbd3: Possible stuck request ffff888026b071c0: control (read@1024,1024B). Runtime 60 seconds [ 326.961260][ T25] block nbd3: Possible stuck request ffff888026b07380: control (read@2048,1024B). Runtime 60 seconds [ 326.974527][ T25] block nbd3: Possible stuck request ffff888026b07540: control (read@3072,1024B). Runtime 60 seconds [ 327.091147][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2167'. [ 327.575945][T13534] syzkaller0: entered promiscuous mode [ 327.583225][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.607116][T13534] syzkaller0: entered allmulticast mode [ 327.849439][T13552] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2180'. [ 327.883697][T13552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2180'. [ 327.915329][T13552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2180'. [ 328.056033][ T9126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.260275][T13573] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2187'. [ 328.542373][T13587] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 328.616224][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.292654][T13637] macvlan4: entered promiscuous mode [ 329.308697][T13637] macvlan4: entered allmulticast mode [ 329.664144][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.733338][ T30] audit: type=1804 audit(1782464547.619:8): pid=13656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2206" name="/newroot/485/cgroup.controllers" dev="tmpfs" ino=2490 res=1 errno=0 [ 329.784453][T13662] netlink: 'syz.4.2207': attribute type 21 has an invalid length. [ 329.833255][ T30] audit: type=1800 audit(1782464547.619:9): pid=13656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2206" name="cgroup.controllers" dev="tmpfs" ino=2490 res=0 errno=0 [ 329.842406][T13662] __nla_validate_parse: 1 callbacks suppressed [ 329.842426][T13662] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2207'. [ 329.857769][T13663] netlink: 'syz.4.2207': attribute type 21 has an invalid length. [ 329.935162][T13662] netlink: 'syz.4.2207': attribute type 4 has an invalid length. [ 329.971168][T13663] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2207'. [ 329.996251][T13662] netlink: 'syz.4.2207': attribute type 5 has an invalid length. [ 330.006160][T13662] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2207'. [ 330.036830][T13663] netlink: 'syz.4.2207': attribute type 4 has an invalid length. [ 330.048398][T13663] netlink: 'syz.4.2207': attribute type 5 has an invalid length. [ 330.060706][T13663] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2207'. [ 330.298403][T13689] tipc: Enabling of bearer rejected, already enabled [ 330.556361][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2217'. [ 330.695312][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.771013][T13711] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2219'. [ 330.820530][T13711] openvswitch: netlink: Message has 4 unknown bytes. [ 330.906238][T13711] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2219'. [ 331.102749][T13724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2223'. [ 331.192537][T13729] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2225'. [ 331.348934][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 331.375587][T13731] netlink: 'syz.0.2226': attribute type 1 has an invalid length. [ 331.760978][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.099242][T13775] netlink: 'syz.1.2240': attribute type 2 has an invalid length. [ 332.110344][T13771] bond5 (unregistering): Released all slaves [ 332.223657][T13784] team0: Device gtp2 is up. Set it down before adding it as a team port [ 332.624872][T13805] netlink: 'syz.3.2247': attribute type 1 has an invalid length. [ 332.705171][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.714402][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.781085][ T7184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.861528][T13805] bond4: entered promiscuous mode [ 332.869682][T13805] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.208794][T13821] syzkaller0: entered promiscuous mode [ 333.232075][T13821] syzkaller0: entered allmulticast mode [ 333.833703][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.883078][T13867] netlink: 'syz.3.2261': attribute type 1 has an invalid length. [ 333.916399][T13867] netlink: 'syz.3.2261': attribute type 2 has an invalid length. [ 333.946026][T13869] IPv6: NLM_F_CREATE should be specified when creating new route [ 333.972968][T13871] netlink: 'syz.3.2261': attribute type 1 has an invalid length. [ 333.984517][T13871] netlink: 'syz.3.2261': attribute type 2 has an invalid length. [ 334.857517][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.902667][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.566741][T13883] netlink: 'syz.3.2265': attribute type 2 has an invalid length. [ 336.599434][T13890] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 336.625735][T13892] netlink: 'syz.2.2268': attribute type 32 has an invalid length. [ 336.646191][T13892] __nla_validate_parse: 7 callbacks suppressed [ 336.646211][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 336.754373][T13890] bond5: entered promiscuous mode [ 336.774325][T13890] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.846416][T13892] bond9: option coupled_control: invalid value (192) [ 336.866030][T13892] bond9 (unregistering): Released all slaves [ 336.942097][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.161346][T13910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.175586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.207132][T13912] macvtap1: entered promiscuous mode [ 337.236660][T13912] team0: Device macvtap1 failed to register rx_handler [ 337.284531][T13922] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20004 [ 337.329389][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'. [ 337.385207][T13922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2274'. [ 337.448652][T13918] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2276'. [ 337.474785][T13918] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2276'. [ 337.480914][T13921] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2276'. [ 337.615704][T13928] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2278'. [ 337.820496][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.831199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.974310][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.210632][T13945] smbdirect: ib_dev[syz1] removed [ 338.886040][T13975] syzkaller1: entered promiscuous mode [ 338.908530][T13975] syzkaller1: entered allmulticast mode [ 338.999820][ T9] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 7/8 [ 339.015523][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.049465][ T9] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 339.064299][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2299'. [ 339.281297][T13989] bond5 (unregistering): Released all slaves [ 339.737635][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2307'. [ 339.749180][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2307'. [ 339.867851][T14031] tipc: Invalid UDP bearer configuration [ 339.867913][T14031] tipc: Enabling of bearer rejected, failed to enable media [ 340.022002][T14038] netlink: 'syz.3.2312': attribute type 1 has an invalid length. [ 340.116690][T14038] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.232767][T14047] xt_CT: No such helper "snmp_trap" [ 340.370307][T14056] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 [ 340.584535][T14070] netlink: 'syz.2.2321': attribute type 4 has an invalid length. [ 340.640536][T14070] netlink: 'syz.2.2321': attribute type 4 has an invalid length. [ 340.955657][T14095] netlink: 'syz.3.2328': attribute type 14 has an invalid length. [ 340.978265][T14095] netlink: 'syz.3.2328': attribute type 13 has an invalid length. [ 341.105937][T14099] x_tables: duplicate underflow at hook 3 [ 341.495866][T14123] bridge0: port 1(syz_tun) entered blocking state [ 341.511537][T14123] bridge0: port 1(syz_tun) entered disabled state [ 341.522947][T14123] syz_tun: entered allmulticast mode [ 341.535926][T14123] syz_tun: entered promiscuous mode [ 341.554089][T14123] bridge0: port 1(syz_tun) entered blocking state [ 341.562736][T14123] bridge0: port 1(syz_tun) entered forwarding state [ 341.796450][T14138] __nla_validate_parse: 4 callbacks suppressed [ 341.796474][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 341.833005][T14138] netlink: 'syz.3.2341': attribute type 1 has an invalid length. [ 341.863097][T14138] netlink: 'syz.3.2341': attribute type 2 has an invalid length. [ 341.870155][T14140] netlink: 'syz.1.2342': attribute type 1 has an invalid length. [ 341.902315][T14143] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 341.922932][T14138] netlink: 'syz.3.2341': attribute type 10 has an invalid length. [ 341.932422][T14143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2343'. [ 341.966954][T14138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.982302][T14138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.016567][T14138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.035864][T14138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.169758][T14158] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2347'. [ 342.213334][T14157] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2347'. [ 342.224893][T14159] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2347'. [ 342.486923][T14170] netlink: 'syz.1.2352': attribute type 1 has an invalid length. [ 342.555811][T14170] 8021q: adding VLAN 0 to HW filter on device bond5 [ 342.565753][T14172] : renamed from dummy0 [ 342.839401][T14190] syz_tun: left allmulticast mode [ 342.845717][T14190] syz_tun: left promiscuous mode [ 342.851941][T14190] bridge0: port 1(syz_tun) entered disabled state [ 342.870366][T14190] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.899849][T14190] team0: Port device dummy0 removed [ 342.943258][T14190] team0: Port device team_slave_0 removed [ 342.971077][T14190] team0: Port device team_slave_1 removed [ 342.988358][T14190] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 343.766400][T14231] syzkaller0: entered promiscuous mode [ 343.772396][T14231] syzkaller0: entered allmulticast mode [ 343.896628][T14236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.363296][T14265] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2378'. [ 344.785777][T14292] netlink: 'syz.2.2387': attribute type 2 has an invalid length. [ 344.816208][T14292] netlink: 'syz.2.2387': attribute type 2 has an invalid length. [ 344.852601][T14292] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.2387'. [ 345.002476][T14302] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 345.329030][T14319] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2396'. [ 345.354481][T14319] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2396'. [ 345.477021][T14325] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 346.018692][T14348] xt_CT: No such helper "snmp_trap" [ 346.158208][ T30] audit: type=1800 audit(1782464564.059:10): pid=14357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2404" name="memory.events" dev="tmpfs" ino=2309 res=0 errno=0 [ 346.216998][ T30] audit: type=1804 audit(1782464564.099:11): pid=14358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2404" name="/newroot/450/memory.events" dev="tmpfs" ino=2309 res=1 errno=0 [ 346.842897][T14395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2412'. [ 346.901134][T14397] netlink: 'syz.2.2414': attribute type 4 has an invalid length. [ 346.923635][T14400] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 346.966338][T14400] xt_hashlimit: size too large, truncated to 1048576 [ 347.196584][T14402] bond6: Unable to set up delay as MII monitoring is disabled [ 347.278301][T14402] bond6 (unregistering): Released all slaves [ 347.556711][T14426] netlink: 'syz.2.2422': attribute type 1 has an invalid length. [ 347.676535][T14431] netlink: 768 bytes leftover after parsing attributes in process `syz.4.2424'. [ 347.700309][T14435] gretap0: entered promiscuous mode [ 347.713618][T14435] vlan1: entered promiscuous mode [ 347.725419][T14433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2425'. [ 347.798305][T14442] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 347.861096][T14431] syzkaller0: entered promiscuous mode [ 347.885626][T14431] syzkaller0: entered allmulticast mode [ 348.148694][T14463] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 348.260549][T14463] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2432'. [ 348.313573][T14478] tipc: Enabling of bearer rejected, failed to enable media [ 348.833635][T14511] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2446'. [ 348.850079][T14511] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2446'. [ 348.879172][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2445'. [ 348.890301][T14511] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2446'. [ 349.104831][T14519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2448'. [ 349.137460][T14519] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2448'. [ 349.368869][ T30] audit: type=1804 audit(1782464567.249:12): pid=14531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2454" name="/newroot/543/cgroup.controllers" dev="tmpfs" ino=2786 res=1 errno=0 [ 349.450554][ T30] audit: type=1800 audit(1782464567.279:13): pid=14531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2454" name="cgroup.controllers" dev="tmpfs" ino=2786 res=0 errno=0 [ 349.642675][T14552] h: entered promiscuous mode [ 349.726867][T14560] xt_hl: Unknown TTL match mode: 255 [ 349.799394][T14566] netlink: 'syz.0.2465': attribute type 3 has an invalid length. [ 349.809188][T14564] syzkaller0: entered promiscuous mode [ 349.817103][T14564] syzkaller0: entered allmulticast mode [ 350.287403][T14578] syzkaller0: entered promiscuous mode [ 350.300589][T14578] syzkaller0: entered allmulticast mode [ 350.317099][T14583] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 351.560117][T14649] IPv6: addrconf: prefix option has invalid lifetime [ 352.449874][T14682] __nla_validate_parse: 6 callbacks suppressed [ 352.449921][T14682] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2495'. [ 352.472124][T14643] infiniband syz0: set down [ 352.488459][T14643] infiniband syz0: added veth0_vlan [ 352.494523][T14682] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2495'. [ 352.532419][T14643] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 352.571816][T14643] infiniband syz0: Couldn't open port 1 [ 352.617524][T14643] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 352.670435][T14643] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 352.727253][T14643] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 352.745099][T14682] bond6 (unregistering): Released all slaves [ 352.986220][T14643] RDS/IB: syz0: added [ 352.996781][T14707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2501'. [ 353.036358][T14643] smc: adding ib device syz0 with port count 1 [ 353.077285][T14643] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 353.111272][T14710] xt_hashlimit: size too large, truncated to 1048576 [ 353.210504][T14718] lo: left promiscuous mode [ 353.235569][T14718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.304560][T14714] syzkaller0: entered promiscuous mode [ 353.325215][T14714] syzkaller0: entered allmulticast mode [ 353.457095][T14729] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2507'. [ 353.573406][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2506'. [ 354.100217][T14744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2510'. [ 354.273394][T14758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2514'. [ 354.651396][T14770] syzkaller0: entered promiscuous mode [ 354.659092][T14770] syzkaller0: entered allmulticast mode [ 354.697013][T14773] netlink: 'syz.3.2518': attribute type 3 has an invalid length. [ 354.782731][T14775] xt_connbytes: Forcing CT accounting to be enabled [ 354.809048][T14775] xt_bpf: check failed: parse error [ 354.822529][T14773] can: request_module (can-proto-0) failed. [ 355.381765][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2525'. [ 355.425425][T14792] sctp: [Deprecated]: syz.0.2526 (pid 14792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.425425][T14792] Use struct sctp_sack_info instead [ 355.494516][T14792] sctp: [Deprecated]: syz.0.2526 (pid 14792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.494516][T14792] Use struct sctp_sack_info instead [ 355.602154][T14792] sctp: [Deprecated]: syz.0.2526 (pid 14792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.602154][T14792] Use struct sctp_sack_info instead [ 355.679007][T14792] sctp: [Deprecated]: syz.0.2526 (pid 14792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.679007][T14792] Use struct sctp_sack_info instead [ 355.705834][T14802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2527'. [ 355.757051][T14792] sctp: [Deprecated]: syz.0.2526 (pid 14792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.757051][T14792] Use struct sctp_sack_info instead [ 355.789361][T14792] sctp: [Deprecated]: syz.0.2526 (pid 14792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.789361][T14792] Use struct sctp_sack_info instead [ 355.846569][T14792] sctp: [Deprecated]: syz.0.2526 (pid 14792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.846569][T14792] Use struct sctp_sack_info instead [ 355.869746][T14804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.877304][T14804] IPv6: NLM_F_CREATE should be set when creating new route [ 355.884010][T14792] sctp: [Deprecated]: syz.0.2526 (pid 14792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.884010][T14792] Use struct sctp_sack_info instead [ 355.914216][T14792] sctp: [Deprecated]: syz.0.2526 (pid 14792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.914216][T14792] Use struct sctp_sack_info instead [ 355.988028][T14792] sctp: [Deprecated]: syz.0.2526 (pid 14792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.988028][T14792] Use struct sctp_sack_info instead [ 356.294866][T14813] netlink: 516 bytes leftover after parsing attributes in process `syz.3.2532'. [ 356.304837][T14815] syzkaller0: entered promiscuous mode [ 356.317682][T14815] syzkaller0: entered allmulticast mode [ 356.419787][T14821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.431802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.009015][T14838] bond6: entered promiscuous mode [ 357.020581][ T25] block nbd3: Possible stuck request ffff888026b07000: control (read@0,1024B). Runtime 90 seconds [ 357.032364][ T25] block nbd3: Possible stuck request ffff888026b071c0: control (read@1024,1024B). Runtime 90 seconds [ 357.046929][T14838] 8021q: adding VLAN 0 to HW filter on device bond6 [ 357.048092][ T25] block nbd3: Possible stuck request ffff888026b07380: control (read@2048,1024B). Runtime 90 seconds [ 357.068339][ T25] block nbd3: Possible stuck request ffff888026b07540: control (read@3072,1024B). Runtime 90 seconds [ 357.477121][T14873] syzkaller0: entered promiscuous mode [ 357.501921][T14873] syzkaller0: entered allmulticast mode [ 357.530100][T14868] __nla_validate_parse: 7 callbacks suppressed [ 357.530119][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'. [ 357.626503][T14889] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2555'. [ 357.797932][T14895] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000 [ 358.029155][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2560'. [ 358.063242][T14913] netlink: 'syz.1.2561': attribute type 3 has an invalid length. [ 358.117676][T14900] dvmrp0: left allmulticast mode [ 358.203009][T14915] syzkaller0: entered promiscuous mode [ 358.212299][T14915] syzkaller0: entered allmulticast mode [ 358.294104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.307887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.653318][T14934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2568'. [ 358.784922][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2569'. [ 358.862036][T14945] syzkaller0: entered promiscuous mode [ 358.878246][T14945] syzkaller0: entered allmulticast mode [ 359.432549][T14974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2578'. [ 360.197609][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2594'. [ 360.216841][ T9140] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 360.517908][T15024] erspan0: left promiscuous mode [ 360.530255][T15024] erspan0: left allmulticast mode [ 360.836295][T15024] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 360.864117][ T9] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 360.884660][ T9] syú2: Port: 1 Link DOWN [ 361.429229][T15067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2609'. [ 361.444201][T15069] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2606'. [ 361.736387][T15081] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 361.788742][T15081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2612'. [ 361.866143][T15081] bridge0: port 3(vlan1) entered blocking state [ 361.911110][T15081] bridge0: port 3(vlan1) entered disabled state [ 361.923469][T15081] vlan1: entered allmulticast mode [ 361.937579][T15081] vlan1: entered promiscuous mode [ 362.021095][T15091] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.063247][T15091] bridge_slave_1: left promiscuous mode [ 362.094379][T15091] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.126988][T15091] bond0: (slave bond_slave_0): Releasing backup interface [ 362.150480][T15091] bond0: (slave bond_slave_1): Releasing backup interface [ 362.204802][T15091] team0: Port device team_slave_0 removed [ 362.239363][T15091] team0: Port device team_slave_1 removed [ 362.255577][T15091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.263316][T15091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.272756][T15091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.280653][T15091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.290019][T15091] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 362.576486][T15120] tipc: Enabling of bearer rejected, failed to enable media [ 362.615914][T15124] xt_cgroup: xt_cgroup: no path or classid specified [ 362.681911][T15124] netlink: 'syz.2.2622': attribute type 1 has an invalid length. [ 362.689248][T15118] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 363.028943][T15148] netlink: 'syz.2.2622': attribute type 16 has an invalid length. [ 363.054164][T15148] netlink: 'syz.2.2622': attribute type 17 has an invalid length. [ 363.103684][T15124] bond9: entered promiscuous mode [ 363.122605][T15124] 8021q: adding VLAN 0 to HW filter on device bond9 [ 363.143709][T15155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2630'. [ 363.159236][T15156] FAULT_INJECTION: forcing a failure. [ 363.159236][T15156] name failslab, interval 1, probability 0, space 0, times 0 [ 363.191023][T15156] CPU: 0 UID: 0 PID: 15156 Comm: syz.3.2629 Not tainted syzkaller #0 PREEMPT(full) [ 363.191057][T15156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 363.191068][T15156] Call Trace: [ 363.191143][T15156] [ 363.191203][T15156] dump_stack_lvl+0xe8/0x150 [ 363.191494][T15156] should_fail_ex+0x40c/0x560 [ 363.191633][T15156] should_failslab+0xa8/0x100 [ 363.191689][T15156] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 363.191731][T15156] ? skb_clone+0x212/0x3a0 [ 363.191909][T15156] ? skb_clone+0x212/0x3a0 [ 363.191937][T15156] skb_clone+0x212/0x3a0 [ 363.191964][T15156] __netlink_deliver_tap+0x413/0x860 [ 363.192036][T15156] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.192061][T15156] netlink_deliver_tap+0x19c/0x1b0 [ 363.192084][T15156] netlink_unicast+0x77f/0x940 [ 363.192119][T15156] netlink_sendmsg+0x813/0xb40 [ 363.192177][T15156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.192205][T15156] ? aa_sock_msg_perm+0xf1/0x1b0 [ 363.192301][T15156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.192321][T15156] sock_sendmsg_nosec+0x13a/0x180 [ 363.192403][T15156] ____sys_sendmsg+0x54e/0x850 [ 363.192431][T15156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.192464][T15156] ? import_iovec+0x73/0xa0 [ 363.192520][T15156] ___sys_sendmsg+0x2a5/0x360 [ 363.192541][T15156] ? __lock_acquire+0x683/0x2cf0 [ 363.192592][T15156] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.192655][T15156] ? __fget_files+0x2a/0x420 [ 363.192686][T15156] ? __fget_files+0x3a2/0x420 [ 363.192718][T15156] __x64_sys_sendmsg+0x1b1/0x290 [ 363.192743][T15156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.192853][T15156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.192918][T15156] do_syscall_64+0x174/0x580 [ 363.193020][T15156] ? trace_irq_disable+0x3b/0x140 [ 363.193060][T15156] ? clear_bhb_loop+0x40/0x90 [ 363.193086][T15156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.193106][T15156] RIP: 0033:0x7f383859ce59 [ 363.193135][T15156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.193177][T15156] RSP: 002b:00007f38394c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.193227][T15156] RAX: ffffffffffffffda RBX: 00007f3838816180 RCX: 00007f383859ce59 [ 363.193242][T15156] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000003 [ 363.193255][T15156] RBP: 00007f38394c3090 R08: 0000000000000000 R09: 0000000000000000 [ 363.193267][T15156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.193360][T15156] R13: 00007f3838816218 R14: 00007f3838816180 R15: 00007ffc12e29ac8 [ 363.193396][T15156] [ 363.489031][T15130] 8021q: adding VLAN 0 to HW filter on device bond9 [ 363.498716][T15130] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 363.509809][T15130] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 363.525234][T15130] bond9: (slave ip6gre2): making interface the new active one [ 363.533700][T15130] ip6gre2: entered promiscuous mode [ 363.544241][T15130] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 363.656841][T15148] bond0: left promiscuous mode [ 363.662882][T15148] bond_slave_0: left promiscuous mode [ 363.669551][T15148] bond_slave_1: left promiscuous mode [ 363.677392][T15148] dummy0: left promiscuous mode [ 363.686976][T15148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.700953][T15148] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.713670][T15148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.788468][T15148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.801308][T15148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.818016][T15148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.829062][T15148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.849840][T15148] veth1_vlan: left promiscuous mode [ 363.861069][T15148] veth0_vlan: left promiscuous mode [ 363.873309][T15148] veth0_vlan: entered promiscuous mode [ 363.885574][T15148] veth1_vlan: entered promiscuous mode [ 363.902973][T15148] veth1_macvtap: left promiscuous mode [ 363.910428][T15148] veth0_macvtap: left promiscuous mode [ 363.919942][T15148] veth0_macvtap: entered promiscuous mode [ 363.928198][T15148] veth1_macvtap: entered promiscuous mode [ 363.947771][T15148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.958021][T15148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.968848][T15148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.981614][T15148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.997275][T15148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.008658][T15148] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 364.020425][T15148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.031171][T15148] 8021q: adding VLAN 0 to HW filter on device bond3 [ 364.043155][T15148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 364.053193][T15148] 8021q: adding VLAN 0 to HW filter on device bond5 [ 364.069362][T15148] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 364.080378][T15148] 8021q: adding VLAN 0 to HW filter on device bond6 [ 364.093507][T15148] vlan3: left promiscuous mode [ 364.099455][T15148] geneve1: left promiscuous mode [ 364.105518][T15148] vlan3: left allmulticast mode [ 364.110633][T15148] geneve1: left allmulticast mode [ 364.132201][T15148] batadv0: entered promiscuous mode [ 364.140531][T15148] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 364.177708][T15148] bond9: left promiscuous mode [ 364.186170][T15148] ip6gre2: left promiscuous mode [ 364.199684][ T9] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 364.260018][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.267504][ T9126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.319603][ T9126] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.327696][ T9126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.458988][ T7166] syz0: Port: 1 Link ACTIVE [ 364.491603][T15178] x_tables: duplicate underflow at hook 2 [ 364.620640][ T9129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.650638][ T7166] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.667894][ T9129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.791840][T15188] netlink: 'syz.0.2637': attribute type 20 has an invalid length. [ 364.841525][T15188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2637'. [ 364.886266][T15190] netlink: 'syz.0.2637': attribute type 30 has an invalid length. [ 364.900845][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2637'. [ 364.936055][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 364.955632][ T9140] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 364.991383][ T9140] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 365.000307][ T7146] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 365.007994][T15193] netlink: 'syz.3.2640': attribute type 18 has an invalid length. [ 365.045625][T15193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2640'. [ 365.248159][T15203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2644'. [ 365.335610][ T7184] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.415325][ T7184] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.437673][T15210] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 365.505019][ T5765] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 365.630200][ T5765] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 365.714933][T15222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2650'. [ 365.731258][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2651'. [ 366.102545][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2653'. [ 366.216210][T15234] 0ªX¹¦Dö»: left allmulticast mode [ 366.232281][T15244] netlink: 'syz.0.2657': attribute type 1 has an invalid length. [ 366.452053][T15234] veth0_macvtap: left allmulticast mode [ 366.473625][T15234] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 366.521942][T15256] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2659'. [ 366.546336][T15234] bond2: left promiscuous mode [ 366.579347][T15234] bond3: left promiscuous mode [ 366.589104][T15234] bond0: left promiscuous mode [ 366.595773][T15234] bond4: left promiscuous mode [ 366.606864][T15234] h: left promiscuous mode [ 366.612692][T15234] bond6: left promiscuous mode [ 366.659842][T15237] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 366.676737][T15237] bond8 (unregistering): Released all slaves [ 366.695931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.709392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.742875][T15244] 8021q: adding VLAN 0 to HW filter on device bond6 [ 366.827479][T15251] bond6: (slave ip6gretap1): making interface the new active one [ 366.907199][T15251] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 367.009893][ T9129] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.029302][ T9129] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.063270][T15267] FAULT_INJECTION: forcing a failure. [ 367.063270][T15267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.065545][ T9129] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.111038][ T9129] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.239167][T15267] CPU: 0 UID: 0 PID: 15267 Comm: syz.3.2662 Not tainted syzkaller #0 PREEMPT(full) [ 367.239199][T15267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 367.239211][T15267] Call Trace: [ 367.239220][T15267] [ 367.239229][T15267] dump_stack_lvl+0xe8/0x150 [ 367.239273][T15267] should_fail_ex+0x40c/0x560 [ 367.239306][T15267] _copy_from_user+0x2d/0xb0 [ 367.239388][T15267] kstrtouint_from_user+0xd6/0x180 [ 367.239421][T15267] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 367.239474][T15267] proc_fail_nth_write+0x8e/0x210 [ 367.239523][T15267] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 367.239554][T15267] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 367.239575][T15267] vfs_write+0x296/0xba0 [ 367.239616][T15267] ? __pfx_vfs_write+0x10/0x10 [ 367.239643][T15267] ? __fget_files+0x2a/0x420 [ 367.239668][T15267] ? __fget_files+0x3a2/0x420 [ 367.239686][T15267] ? __fget_files+0x2a/0x420 [ 367.239715][T15267] ksys_write+0x150/0x270 [ 367.239742][T15267] ? __pfx_ksys_write+0x10/0x10 [ 367.239775][T15267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.239799][T15267] do_syscall_64+0x174/0x580 [ 367.239818][T15267] ? trace_irq_disable+0x3b/0x140 [ 367.239838][T15267] ? clear_bhb_loop+0x40/0x90 [ 367.239864][T15267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.239884][T15267] RIP: 0033:0x7f383855d68e [ 367.239903][T15267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 367.239919][T15267] RSP: 002b:00007f38394c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 367.239941][T15267] RAX: ffffffffffffffda RBX: 00007f38394c36c0 RCX: 00007f383855d68e [ 367.239956][T15267] RDX: 0000000000000001 RSI: 00007f38394c30a0 RDI: 0000000000000004 [ 367.239966][T15267] RBP: 00007f38394c3090 R08: 0000000000000000 R09: 0000000000000000 [ 367.239977][T15267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.239988][T15267] R13: 00007f3838816218 R14: 00007f3838816180 R15: 00007ffc12e29ac8 [ 367.240022][T15267] [ 367.526340][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.712090][T15283] netlink: 'syz.3.2669': attribute type 2 has an invalid length. [ 368.149517][T15313] __nla_validate_parse: 3 callbacks suppressed [ 368.149540][T15313] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2675'. [ 368.193161][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2674'. [ 368.218657][T15322] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2677'. [ 368.275623][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2674'. [ 368.738968][T15347] netlink: 'syz.1.2685': attribute type 9 has an invalid length. [ 368.836157][T15342] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 368.943930][T15340] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 368.955900][T15350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2686'. [ 369.229930][T15353] --map-set only usable from mangle table [ 369.408516][T15343] dvmrp0: entered allmulticast mode [ 369.553208][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.556338][T15364] tipc: New replicast peer: 255.255.255.255 [ 369.571053][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.586932][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.598362][T15364] tipc: Enabled bearer , priority 10 [ 369.609340][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.620373][T15364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.630908][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.830590][T15372] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2693'. [ 369.957406][T15378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 370.601500][ T9129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 370.640259][ T9129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 370.780471][ T7166] tipc: Node number set to 1 [ 371.012488][T15402] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 371.041097][T15402] bond8 (unregistering): Released all slaves [ 371.159955][ T9129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 371.179456][ T9129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 371.403364][T15363] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 371.437688][ T9129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 371.451195][ T9129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 371.552767][ T9129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 371.565469][ T9129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 371.624248][T15416] ±ÿª¨úrBº“: renamed from lo (while UP) [ 371.735814][ T5624] Bluetooth: hci5: command tx timeout [ 371.782020][T15421] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2706'. [ 371.888815][T15415] siw: device registration error -23 [ 372.276512][T15431] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 372.340460][T15429] syzkaller1: entered promiscuous mode [ 372.347009][T15429] syzkaller1: entered allmulticast mode [ 372.692255][ T9129] bridge_slave_1: left promiscuous mode [ 372.708975][ T9129] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.781842][ T9129] pim6reg527: left allmulticast mode [ 372.790596][ T9129] vlan1: left allmulticast mode [ 372.797741][ T9129] pimreg3: left allmulticast mode [ 373.410562][ T9129] bond2 (unregistering): (slave geneve2): Releasing active interface [ 373.557389][ T9129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.586261][ T9129] bond0 (unregistering): Released all slaves [ 373.600713][ T9129] bond1 (unregistering): Released all slaves [ 373.617316][ T9129] bond2 (unregistering): Released all slaves [ 373.634710][ T9129] bond3 (unregistering): Released all slaves [ 373.665497][ T9129] bond4 (unregistering): Released all slaves [ 373.681491][ T9129] bond5 (unregistering): Released all slaves [ 373.702351][ T9129] bond6 (unregistering): Released all slaves [ 373.818549][ T5624] Bluetooth: hci5: command tx timeout [ 373.949977][T15446] syzkaller0: entered promiscuous mode [ 373.964302][T15446] syzkaller0: entered allmulticast mode [ 373.987356][T15467] syzkaller0: entered promiscuous mode [ 374.013989][T15467] syzkaller0: entered allmulticast mode [ 374.134742][T15476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2719'. [ 374.169172][T15477] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2719'. [ 374.169172][T15476] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2719'. [ 375.903608][ T5624] Bluetooth: hci5: command tx timeout [ 376.863773][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 376.863812][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 377.158830][ T9129] tipc: Left network mode [ 377.351306][T15506] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2722'. [ 377.580696][T15510] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 377.708494][T15514] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2724'. [ 377.856291][T15520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2726'. [ 377.988023][ T5624] Bluetooth: hci5: command tx timeout [ 378.043425][T15514] ip6gre0: entered promiscuous mode [ 378.138985][ T5624] block nbd7: Receive control failed (result -1) [ 378.160395][ T5624] [ 378.163163][ T5624] ====================================================== [ 378.171652][ T5624] WARNING: possible circular locking dependency detected [ 378.181252][ T5624] syzkaller #0 Not tainted [ 378.186168][ T5624] ------------------------------------------------------ [ 378.194827][ T5624] kworker/u9:2/5624 is trying to acquire lock: [ 378.205049][ T5624] ffff88807d800260 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 378.221263][ T5624] [ 378.221263][ T5624] but task is already holding lock: [ 378.232541][ T5624] ffff888077ec8668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 378.243031][ T5624] [ 378.243031][ T5624] which lock already depends on the new lock. [ 378.243031][ T5624] [ 378.257464][ T5624] [ 378.257464][ T5624] the existing dependency chain (in reverse order) is: [ 378.268686][ T5624] [ 378.268686][ T5624] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 378.277088][ T5624] __mutex_lock+0x19d/0x1550 [ 378.282516][ T5624] nbd_queue_rq+0x373/0x1150 [ 378.288194][ T5624] blk_mq_dispatch_rq_list+0x499/0x1990 [ 378.294501][ T5624] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 378.301713][ T5624] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 378.309159][ T5624] blk_mq_run_work_fn+0x16c/0x300 [ 378.316077][ T5624] process_scheduled_works+0xa8e/0x14e0 [ 378.322515][ T5624] worker_thread+0xa47/0xfb0 [ 378.327863][ T5624] kthread+0x388/0x470 [ 378.333208][ T5624] ret_from_fork+0x514/0xb70 [ 378.338406][ T5624] ret_from_fork_asm+0x1a/0x30 [ 378.344591][ T5624] [ 378.344591][ T5624] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 378.352331][ T5624] __mutex_lock+0x19d/0x1550 [ 378.357759][ T5624] nbd_queue_rq+0xc1/0x1150 [ 378.363231][ T5624] blk_mq_dispatch_rq_list+0x499/0x1990 [ 378.369878][ T5624] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 378.376944][ T5624] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 378.383906][ T5624] blk_mq_run_work_fn+0x16c/0x300 [ 378.389737][ T5624] process_scheduled_works+0xa8e/0x14e0 [ 378.397302][ T5624] worker_thread+0xa47/0xfb0 [ 378.403076][ T5624] kthread+0x388/0x470 [ 378.408618][ T5624] ret_from_fork+0x514/0xb70 [ 378.415253][ T5624] ret_from_fork_asm+0x1a/0x30 [ 378.420626][ T5624] [ 378.420626][ T5624] -> #4 (set->srcu){.+.+}-{0:0}: [ 378.427788][ T5624] __synchronize_srcu+0xc9/0x2f0 [ 378.433416][ T5624] elevator_switch+0x1e8/0x7b0 [ 378.439387][ T5624] elevator_change+0x2fa/0x480 [ 378.446727][ T5624] elevator_set_default+0x375/0x440 [ 378.453102][ T5624] blk_register_queue+0x3f3/0x4e0 [ 378.462156][ T5624] __add_disk+0x6cb/0xe30 [ 378.467881][ T5624] add_disk_fwnode+0xfb/0x4b0 [ 378.475181][ T5624] nbd_dev_add+0x733/0xb60 [ 378.481165][ T5624] nbd_init+0x15f/0x1e0 [ 378.488905][ T5624] do_one_initcall+0x250/0x870 [ 378.495208][ T5624] do_initcall_level+0x10a/0x1a0 [ 378.502631][ T5624] do_initcalls+0x59/0xa0 [ 378.508207][ T5624] kernel_init_freeable+0x29d/0x3e0 [ 378.515097][ T5624] kernel_init+0x1d/0x1d0 [ 378.520043][ T5624] ret_from_fork+0x514/0xb70 [ 378.525251][ T5624] ret_from_fork_asm+0x1a/0x30 [ 378.530806][ T5624] [ 378.530806][ T5624] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 378.538729][ T5624] __mutex_lock+0x19d/0x1550 [ 378.543853][ T5624] elevator_change+0x1af/0x480 [ 378.549361][ T5624] elevator_set_none+0xb5/0x140 [ 378.554860][ T5624] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 378.561216][ T5624] nbd_start_device+0x189/0xb30 [ 378.566767][ T5624] nbd_genl_connect+0x1597/0x1c10 [ 378.572506][ T5624] genl_family_rcv_msg_doit+0x233/0x340 [ 378.578980][ T5624] genl_rcv_msg+0x614/0x7a0 [ 378.584244][ T5624] netlink_rcv_skb+0x226/0x4a0 [ 378.589831][ T5624] genl_rcv+0x28/0x40 [ 378.594345][ T5624] netlink_unicast+0x7bb/0x940 [ 378.599733][ T5624] netlink_sendmsg+0x813/0xb40 [ 378.605029][ T5624] sock_sendmsg_nosec+0x13a/0x180 [ 378.610607][ T5624] ____sys_sendmsg+0x54e/0x850 [ 378.615893][ T5624] ___sys_sendmsg+0x2a5/0x360 [ 378.621097][ T5624] __x64_sys_sendmsg+0x1b1/0x290 [ 378.626576][ T5624] do_syscall_64+0x174/0x580 [ 378.631798][ T5624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.638327][ T5624] [ 378.638327][ T5624] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 378.648037][ T5624] blk_alloc_queue+0x544/0x690 [ 378.654343][ T5624] __blk_mq_alloc_disk+0x194/0x390 [ 378.661506][ T5624] nbd_dev_add+0x494/0xb60 [ 378.666827][ T5624] nbd_init+0x15f/0x1e0 [ 378.672070][ T5624] do_one_initcall+0x250/0x870 [ 378.677561][ T5624] do_initcall_level+0x10a/0x1a0 [ 378.683133][ T5624] do_initcalls+0x59/0xa0 [ 378.688267][ T5624] kernel_init_freeable+0x29d/0x3e0 [ 378.694168][ T5624] kernel_init+0x1d/0x1d0 [ 378.699113][ T5624] ret_from_fork+0x514/0xb70 [ 378.706153][ T5624] ret_from_fork_asm+0x1a/0x30 [ 378.711868][ T5624] [ 378.711868][ T5624] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 378.719754][ T5624] fs_reclaim_acquire+0x71/0x100 [ 378.725378][ T5624] __kmalloc_noprof+0xbc/0x720 [ 378.731029][ T5624] tls_sw_sendmsg+0x599/0x2860 [ 378.736722][ T5624] sock_sendmsg_nosec+0x90/0x180 [ 378.742881][ T5624] sock_sendmsg+0x1ca/0x2d0 [ 378.748182][ T5624] splice_to_socket+0xb5e/0x12a0 [ 378.753704][ T5624] direct_splice_actor+0x101/0x160 [ 378.759439][ T5624] splice_direct_to_actor+0x57b/0xcb0 [ 378.765338][ T5624] do_splice_direct+0x195/0x290 [ 378.770901][ T5624] do_sendfile+0x52e/0x7c0 [ 378.776325][ T5624] __se_sys_sendfile64+0x144/0x1a0 [ 378.782000][ T5624] do_syscall_64+0x174/0x580 [ 378.787127][ T5624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.793568][ T5624] [ 378.793568][ T5624] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 378.801653][ T5624] __lock_acquire+0x1520/0x2cf0 [ 378.807040][ T5624] lock_acquire+0x106/0x350 [ 378.812086][ T5624] lock_sock_nested+0x41/0x100 [ 378.817481][ T5624] inet_shutdown+0x6a/0x390 [ 378.822719][ T5624] nbd_mark_nsock_dead+0x2cb/0x550 [ 378.828895][ T5624] recv_work+0x1cee/0x1e10 [ 378.834045][ T5624] process_scheduled_works+0xa8e/0x14e0 [ 378.840410][ T5624] worker_thread+0xa47/0xfb0 [ 378.845532][ T5624] kthread+0x388/0x470 [ 378.850128][ T5624] ret_from_fork+0x514/0xb70 [ 378.855358][ T5624] ret_from_fork_asm+0x1a/0x30 [ 378.860761][ T5624] [ 378.860761][ T5624] other info that might help us debug this: [ 378.860761][ T5624] [ 378.871427][ T5624] Chain exists of: [ 378.871427][ T5624] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 378.871427][ T5624] [ 378.885953][ T5624] Possible unsafe locking scenario: [ 378.885953][ T5624] [ 378.893457][ T5624] CPU0 CPU1 [ 378.900800][ T5624] ---- ---- [ 378.907204][ T5624] lock(&nsock->tx_lock); [ 378.912270][ T5624] lock(&cmd->lock); [ 378.919407][ T5624] lock(&nsock->tx_lock); [ 378.926364][ T5624] lock(sk_lock-AF_INET6-NBD); [ 378.931219][ T5624] [ 378.931219][ T5624] *** DEADLOCK *** [ 378.931219][ T5624] [ 378.940677][ T5624] 3 locks held by kworker/u9:2/5624: [ 378.946127][ T5624] #0: ffff888020347940 ((wq_completion)nbd7-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.957845][ T5624] #1: ffffc90003957c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.969623][ T5624] #2: ffff888077ec8668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 378.979360][ T5624] [ 378.979360][ T5624] stack backtrace: [ 378.985261][ T5624] CPU: 0 UID: 0 PID: 5624 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 378.985280][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.985291][ T5624] Workqueue: nbd7-recv recv_work [ 378.985311][ T5624] Call Trace: [ 378.985318][ T5624] [ 378.985325][ T5624] dump_stack_lvl+0xe8/0x150 [ 378.985345][ T5624] print_circular_bug+0x2e1/0x300 [ 378.985366][ T5624] check_noncircular+0x12e/0x150 [ 378.985386][ T5624] __lock_acquire+0x1520/0x2cf0 [ 378.985407][ T5624] ? irqentry_exit+0x218/0x8f0 [ 378.985431][ T5624] ? lockdep_hardirqs_on+0x7a/0x110 [ 378.985453][ T5624] ? inet_shutdown+0x6a/0x390 [ 378.985475][ T5624] lock_acquire+0x106/0x350 [ 378.985489][ T5624] ? inet_shutdown+0x6a/0x390 [ 378.985515][ T5624] lock_sock_nested+0x41/0x100 [ 378.985535][ T5624] ? inet_shutdown+0x6a/0x390 [ 378.985557][ T5624] inet_shutdown+0x6a/0x390 [ 378.985579][ T5624] nbd_mark_nsock_dead+0x2cb/0x550 [ 378.985598][ T5624] recv_work+0x1cee/0x1e10 [ 378.985621][ T5624] ? lockdep_unlock+0x5d/0xd0 [ 378.985633][ T5624] ? __lock_acquire+0x13e8/0x2cf0 [ 378.985651][ T5624] ? __pfx_recv_work+0x10/0x10 [ 378.985677][ T5624] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 378.985699][ T5624] ? process_scheduled_works+0xa20/0x14e0 [ 378.985723][ T5624] ? rcu_is_watching+0x15/0xb0 [ 378.985741][ T5624] ? process_scheduled_works+0xa20/0x14e0 [ 378.985761][ T5624] process_scheduled_works+0xa8e/0x14e0 [ 378.985790][ T5624] ? __pfx_process_scheduled_works+0x10/0x10 [ 378.985813][ T5624] ? assign_work+0x3cf/0x5d0 [ 378.985834][ T5624] worker_thread+0xa47/0xfb0 [ 378.985860][ T5624] ? __kthread_parkme+0x71/0x1f0 [ 378.985885][ T5624] kthread+0x388/0x470 [ 378.985901][ T5624] ? __pfx_worker_thread+0x10/0x10 [ 378.985920][ T5624] ? __pfx_kthread+0x10/0x10 [ 378.985936][ T5624] ret_from_fork+0x514/0xb70 [ 378.985953][ T5624] ? __pfx_ret_from_fork+0x10/0x10 [ 378.985969][ T5624] ? __switch_to+0xc89/0x1420 [ 378.985991][ T5624] ? __pfx_kthread+0x10/0x10 [ 378.986006][ T5624] ret_from_fork_asm+0x1a/0x30 [ 378.986029][ T5624] [ 379.206692][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 379.226653][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.233519][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.273321][T15534] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 379.330934][T15363] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.356954][T15363] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.366101][T15363] bridge_slave_0: entered allmulticast mode [ 379.376087][T15363] bridge_slave_0: entered promiscuous mode [ 379.400983][T15363] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.410336][T15363] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.426756][T15363] bridge_slave_1: entered allmulticast mode [ 379.452812][T15363] bridge_slave_1: entered promiscuous mode [ 379.509790][ T9129] hsr_slave_0: left promiscuous mode [ 379.516927][ T9129] hsr_slave_1: left promiscuous mode [ 379.522847][ T9129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.535053][ T9129] vlan0: left allmulticast mode [ 379.540190][ T9129] veth0_vlan: left allmulticast mode [ 379.547535][ T9129] vlan0: left promiscuous mode [ 380.471347][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 380.500148][T15363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.515561][ T5624] Bluetooth: hci4: link tx timeout [ 380.522561][ T5624] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 380.537862][T15363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.613170][T15363] team0: Port device team_slave_0 added [ 380.636861][T15363] team0: Port device team_slave_1 added [ 380.664983][T15363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.674177][T15363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.708145][T15363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.726010][T15363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.733406][T15363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.762210][T15363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.808742][T15363] hsr_slave_0: entered promiscuous mode [ 380.816815][T15363] hsr_slave_1: entered promiscuous mode [ 380.826415][T15363] debugfs: 'hsr0' already exists in 'hsr' [ 380.832980][T15363] Cannot create hsr debugfs directory [ 380.967615][ T9129] IPVS: stop unused estimator thread 0... [ 381.107978][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 381.243338][T15363] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 381.268881][T15363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.278810][T15363] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 381.290563][T15363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.299068][T15363] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 381.312826][T15363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 381.326418][T15363] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 381.337365][T15363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.437301][T15363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.461413][T15363] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.477487][ T9129] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.484902][ T9129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.500905][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.508654][ T9123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.567789][T15363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.949918][T15363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.999877][T15363] veth0_vlan: entered promiscuous mode [ 382.012124][T15363] veth1_vlan: entered promiscuous mode [ 382.048035][T15363] veth0_macvtap: entered promiscuous mode [ 382.058870][T15363] veth1_macvtap: entered promiscuous mode [ 382.083413][T15363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.102328][T15363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.119476][ T9123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.140964][ T9123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.159406][ T9123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.187913][ T9123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.208392][T15363] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 382.236765][ T9123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.247808][T15363] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 382.260565][ T9123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.291585][ T9123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.301734][ T9123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.538039][ T5624] Bluetooth: hci4: command 0x0405 tx timeout [ 385.564739][ T4992] udevd[4992]: worker [9738] /devices/virtual/block/nbd3 is taking a long time [ 387.095750][ T25] block nbd3: Possible stuck request ffff888026b07000: control (read@0,1024B). Runtime 120 seconds [ 387.109189][ T25] block nbd3: Possible stuck request ffff888026b071c0: control (read@1024,1024B). Runtime 120 seconds [ 387.123546][ T25] block nbd3: Possible stuck request ffff888026b07380: control (read@2048,1024B). Runtime 120 seconds [ 387.139015][ T25] block nbd3: Possible stuck request ffff888026b07540: control (read@3072,1024B). Runtime 120 seconds