last executing test programs: 16.182496876s ago: executing program 4 (id=2790): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x800, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 15.939485376s ago: executing program 4 (id=2793): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xfdffa000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff07000000ae000000b7080000300000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002900)=r5, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, 0xffffffffffffffff, 0x1f4d2000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x6c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2d29c1e6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44090}, 0x891) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x21}}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000003080)={{0xffffffffffffffff, &(0x7f0000000740)='\x00', 0x0, &(0x7f0000000780)={@align=0x2, {0x3, 0x8, 0x1, 0x4}}, 0x5, &(0x7f00000007c0), &(0x7f0000000800)=0xbfe}, 0x3, &(0x7f0000003000)=[{0x2, 0x9, &(0x7f0000000840)='-]&]#\x00', &(0x7f0000000880)="3372ff4d690ba529e3935eb1a6f9cc9fa2676ce834024a0987a2461fd3da60f3cfd465d93b9d4a664e2db6c2c9e4569b380d01b074d94c11f1fbfd438d81c5725f19b7295708093f31c1160f1ffd563d7c50072d7952d021985abee15aeedc679d3c3a668e71b3dd2e475868f3b8fdf7f51804ce600320dc249c1440449cefb09c842406221842235f7213ba71705c6a27cb25db7820ceca2faed69013ee82d041385550c5c98f0f3b5a365ed8e5d6367ed2c3c68102a552703c2a0ac8bc", 0xbe}, {0x1, 0x7, &(0x7f0000000940)='GPL\x00', &(0x7f0000001f00)="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", 0xffc, 0x12}, {0x2, 0x4, &(0x7f0000002f00)='\\\xbc\x00', &(0x7f0000002f40)="c44143813ea3caed19038a287630985d9e62883605eb27611a48764e816d4380a8f7eb911fa4470621fab49c7586839d3323bd7e2592a75f19286ca9ba6910f68d980f6884768aa426e3a1270e6822de0f6a260ca07d45d07d1e391630d54aa1897b94f34b2cbe4054a695d9d7c417c4ba1587eb6285369ad08215f3201fc194aaa05e5cd247acd64ded2a104e88d7f6d4a27b9bcccbf74fc5e757bd", 0x9c, 0xa}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003240)=@bpf_ext={0x1c, 0x8, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@generic={0x7, 0xa, 0x4, 0x8, 0x8000}, @map_fd={0x18, 0x9}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x5}]}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x2, 0x4}, 0x10, 0x6ce2, r11, 0x1, &(0x7f00000031c0), &(0x7f0000003200)=[{0x1, 0x2, 0x2, 0x9}]}, 0x94) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000001c0)=r5) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r12, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="6f0b0024f8245400c7f833"], 0x14}}, 0x0) setsockopt(r1, 0x5, 0xe, &(0x7f0000000100)="98effa7c8c8b2935a4d29239ce92a8275a6e2d651f539c5132e1e9eca26437235509586f293975270c1ec36f6c3eefb08ad6b6b50e46ca8c65318c506828bf3565d368ab4e124e1da3834759f050237109a95ac9795ac66d96658ae311fc2046572911d5c880597509107e5854142326ff23d87447ea0a18567022d8e145a5878b1b0fd2cbb6761fb679", 0x8a) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r0], 0x3c}, 0x1, 0x2, 0x0, 0x40000}, 0x0) 13.191868394s ago: executing program 4 (id=2810): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @random="1d8844a01fdf", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @private2, @broadcast, @mcast1}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001800e7b92cbd7000dddb09251d0103000800050004f9f9071500aeb601000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000028) 13.033577572s ago: executing program 4 (id=2812): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) (async) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r5, 0xef, 0x6}, 0xc) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x85, 0x0, 0x0) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010426bd70000000000018000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) 12.561866925s ago: executing program 4 (id=2816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e2a, 0x3, @private0, 0x407}, 0x1c) listen(r0, 0x39c) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000280)={@mcast2, 0x0}, &(0x7f00000002c0)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x44}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x2000001, 0x8, 0x4, 0x540, r2, 0x64d, '\x00', r3, r4, 0x2, 0x0, 0x4, 0xf}, 0x50) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x35, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="180018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x6}, 0x94) 12.147879514s ago: executing program 4 (id=2820): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r3, 0x6}, &(0x7f0000000340)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@gettaction={0x28, 0x32, 0xe72c5f922f23ccf3, 0x70bd27, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008c4}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @rand_addr=0x64010181}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={r5}, &(0x7f0000000200)=0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x5, 0x0, r7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) 2.415629407s ago: executing program 3 (id=2903): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r3) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf2512000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) (async) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x128, r9, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x108, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5d5e, 0x7f, 0xfffa, 0x6, 0x4, 0xfffc, 0x6, 0x5]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x16, 0x6, 0x9, 0x36, 0x9, 0x60, 0x1b, 0x48, 0x5, 0x18, 0x16, 0x16, 0x3, 0x2, 0x6, 0xb, 0x24, 0x24, 0x16, 0x12]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x4}, {0x5}, {0x0, 0x6}, {0x4, 0x9}, {0x2, 0x3}, {0x3, 0x9}, {0x7, 0x8}, {0x2, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x4}, {0x4, 0x2}, {0x6, 0x2}, {0x6, 0x3}, {0x7}, {0x1, 0x5}, {0x3, 0x6}, {0x5, 0x2}, {0x5}, {0x4, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x9}, {0x7, 0x3}, {0x7, 0x7}, {0x7, 0x5}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0x3}, {}, {0x0, 0x9}, {0x1, 0x8}, {0x3}, {0x2, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x4}, {0x3, 0x8}, {0x5, 0x4}, {0x5, 0x3}, {0x6, 0x6}, {0x2, 0x2}, {0x6, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x5, 0x6}, {0x4, 0x8}, {0x0, 0x1}, {0x5, 0x1}, {0x6, 0x9}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0x7}, {0x6, 0x1}, {0x6, 0x9}, {0x3, 0x9}, {0x5}, {0x0, 0x4}, {0x4, 0x8}, {0x7, 0x2}, {0x7, 0x6}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x4, 0x9}, {0x7, 0x1}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x7}, {0x3, 0x4}, {0x2, 0x6}, {0x1, 0x1}, {0x3, 0x5}, {0x7, 0x7}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0xa}, {0x3, 0x6}, {0x2, 0x1}, {0x5, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x8}, {0x6, 0x8}, {0x3, 0x8}, {0x6, 0x6}, {0x6, 0x3}, {0x3, 0x1e}, {0x1}, {0x1, 0x3}, {0x0, 0xe}, {0x6, 0x8}, {0x2, 0x9}, {0x1, 0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x1}, {0x1, 0x1}, {0x7}, {0x7, 0xa}, {0x1, 0x8}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x4}, {0x7}, {0x0, 0x4}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x3}, {0x2, 0x7}, {0x0, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x5}, {0x2, 0x2}, {0x5, 0x9}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x8}, {0x3, 0x5}, {0x0, 0x4}, {0x7, 0x3}, {0x6, 0x7}, {0x1, 0x4}, {0x1, 0x8}, {0x6, 0x1}, {0x4, 0xa}, {0x4, 0x1}, {0x7, 0x5}, {0x7, 0x9}, {0x6, 0x9}, {0x7}, {0x1, 0x1}, {0x2, 0x2}, {0x6, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x6, 0x7}, {0x4, 0x4}, {0x0, 0x5}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x2}, {0x0, 0x6}, {0x6, 0xa}, {0x7, 0x6}, {0x7, 0x7}, {0x7, 0x2}, {0x0, 0x2}, {0x7, 0x3}]}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) r10 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000180)={r2, r6}) (async) sendmmsg$inet(r10, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) (async) recvmmsg(r10, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7f}], 0x2, 0x0, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbb564cadb1aaaa08004500002400010000002f9063ac1e011414bb320088be0010907802215400800000000000"], 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1, @ANYRES64=0x0], 0x5c}, 0x1, 0x6c, 0x0, 0x80}, 0x0) (async) r11 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0xe, 0x1, 0x0, 0xc, 0x7fffffff}}, {0x4}}]}]}, 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r12, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/376], 0xf4}, 0x1, 0x0, 0x0, 0x240080c1}, 0x40814) (async) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r13, r14, 0x5, 0x1, 0x1}, 0x50) 2.1844534s ago: executing program 0 (id=2906): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x14, r3, 0x1, 0xffffffff}, 0x14}}, 0x20000000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}]}, 0x3c}}, 0x4) 1.911990058s ago: executing program 0 (id=2908): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket(0x10, 0x80805, 0x4d) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}}, 0x0) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x9, 0x0, 0xd}, 0x2f) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 1.550889729s ago: executing program 1 (id=2911): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRESOCT], 0x4c}}, 0x8001) r5 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r1, &(0x7f0000000380)={0x2, 0x8, @multicast1}, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r6, 0x4004743c, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r8}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r10, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYRESHEX=r9], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000400)='veth0_to_batadv\x00') setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x30, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 1.375093727s ago: executing program 2 (id=2912): r0 = socket(0xa, 0x3, 0xff) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r3 = socket$netlink(0x10, 0x3, 0xb) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) (async) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006001700800a000008001800", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000480)}], 0x1, 0x8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r7}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x1000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42, 0x10080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) (async) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000600)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2c8fff9f36ebe7a2d41f5a6ad", 0x28}], 0x2}, 0x20000000) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r9, &(0x7f0000000140)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x2e) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r6) sendmsg$TIPC_NL_BEARER_ADD(r12, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x108, r13, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe0000}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x442c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 1.369113853s ago: executing program 3 (id=2913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 1.319139197s ago: executing program 0 (id=2914): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8000}, 0x4) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x210240, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r4, 0x1, 0xd8, 0x6, @random="004009a06a00"}, 0x14) 1.204061837s ago: executing program 1 (id=2915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0x14, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd295c877c3e17"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) 1.123316577s ago: executing program 0 (id=2916): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001a40)=@newtaction={0x8b4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x8a0, 0x1, [@m_police={0x89c, 0x9, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x5, 0x0, 0x7}, {0x8, 0x0, 0x2, 0x2, 0x0, 0x7}, 0x1, 0x0, 0x3}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000400, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000, 0x1, 0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x6, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0xfffffffe, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x9, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x13, 0x1, 0x200, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0x800e0b2, 0x1, 0x8fc, 0x8, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0xfd, 0xfffffffa, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x80007f, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x12, 0x4, 0x0, 0x1000004, 0x7, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x0, 0xffdffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x1, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x85, 0x8, 0xba, 0x2, 0xc9, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x20000001, 0x2, 0xf, 0x24b9, 0x39, 0xe01, 0x1, 0x6430, 0xb, 0x4, 0x4000, 0x3, 0x7eb6, 0x3, 0x0, 0x203, 0x4, 0x9, 0xff, 0xa, 0x6, 0xf9, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000004, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0x37, 0x7, 0x3, 0xc, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0xfffffffe, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x33, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x20, 0x6, "8b0bfeccbb4f6b65954a900c9cb8cbf5ac48b718d0ac07a249776a83"}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0xc005) sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)='@', 0x1}], 0xef}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}], 0x1}}], 0x2, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000002000010026bd7000fbdbdf250210100009000006"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r3, 0x8100587e, &(0x7f0000000500)) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r8, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x24000001) 1.120800067s ago: executing program 2 (id=2917): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x14, r3, 0x1, 0xffffffff}, 0x14}}, 0x20000000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}]}, 0x3c}}, 0x4) 1.082748725s ago: executing program 3 (id=2918): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4048004}, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0, 0x700}, 0x2600c055) 1.007896912s ago: executing program 1 (id=2919): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000200)="8205639859cb1b0739e74cb26a03d969fe097e41b46f79f9969b2cd506a997b06871a8858838694471bc65c37e41b5828d51fdb21142f19754dbfac78d5d13bf94dc51ba88269eddbd4b9180c94a798cae5e10969a8a8ca8924aa94d4c1b06644a088d84bb1756d52242b4892a4f0d6234aba433003f7e4478768f5e6c925fd2ad9c96456f5119a3e44727f6fa49f521086c6beaba8e7989bd66f54088ae12c72d9d75c2674d0b718bab6b25918bf17623dbb3fd6978acddd6a5e4fbbb5d2eb6c093fb631f5b993f2cb20926393e203f39bfff269c00"/245, &(0x7f0000000100)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 974.242818ms ago: executing program 2 (id=2920): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f6669736829000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000008"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x4008041) 827.90475ms ago: executing program 3 (id=2921): r0 = socket$kcm(0xa, 0x3, 0x87) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x8000}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000ffff25b800e402f720ff076a0000", @ANYRES32=0x0, @ANYBLOB="4200000021200000300012800c0001006d6163766c616e0020000280080003000300"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00 \x00', @ANYRES16=0x0, @ANYRESDEC=0x0], 0x34}, 0x1, 0x0, 0x0, 0x24000015}, 0x80) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r4], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x10000000}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (async, rerun: 64) r10 = socket$inet6(0xa, 0x4, 0x40) (rerun: 64) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000200)=0x67cb, 0x4) (async) setsockopt$inet6_int(r10, 0x29, 0x3, &(0x7f0000000000)=0xb1, 0x4) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[], 0x10) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r8) (async, rerun: 64) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="c8000000", @ANYRES64=r0, @ANYBLOB="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", @ANYRES8=r9, @ANYRESHEX=r1], 0xc8}}, 0x880) (async, rerun: 64) ioctl$TUNSETOWNER(r1, 0x400454cc, r12) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbf9, 0x40000}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="940000001f0000042abd7000fbdbdf252000ff8013334ba8f4e649f5835ef951b1268e320861bb5b3abb2d59877fe70e0800ae0009000000186edeae2690eac429bf67c14bc38bcf0471402f61e9addd76abe9677b8928e427982b3b285adc4f0c294e902466a9e1bd91dc7dea0bd62fb3b7ad39969fdcb785d6629a4858e135b1f69bc8f523a4990c0071800800ae00", @ANYRES32=r11, @ANYBLOB="e5f5b1d2ebd72ab5ebe3af8e92f4dd6ca7f5e7d6c681ecfb72115911cbeb7f3e34dd9d53c746aadfcecd6e4c0b0489eccd97a9cdab3644c0ec7f99fea13e90e60425d9d79eee5ef77fe8292d336476f59c1ddaac9884380a1141e43a4900a5b05b998081fb180c628740dd9e8fcddaa975"], 0x94}, {&(0x7f0000000ec0)=ANY=[@ANYBLOB="d40000001e00100025bd7000ffdbdf2508002d00ffffffff5296259b9285a0df3de94491c0224d308f17e365a1aa566b7c8f64a91d3703c07a2124f1572f4565d4ba7f9f953840a3f22e09e1ae1fd2281ce1376c840948920ea334074b52d9641f258f9a55cae4be8c574990a4e877c6c054229e498b945fcd5aa406544c9e8158d54e500012800800ae00", @ANYRES8=r2, @ANYBLOB="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", @ANYRES16=r3], 0xd4}, {&(0x7f0000000540)=ANY=[@ANYRESDEC=r4], 0xf0}], 0x3, 0x0, 0x0, 0x20024054}, 0x40) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000006d00673c2bbd7000ffdadf2500000000", @ANYRES32=0x0, @ANYBLOB="0110fdff03b90400180034801400350076657468315f746f5f626f6e640000001400030076657468315f746f5f626f6e64"], 0x4c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) (async) sendmmsg$inet6(r7, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 787.501949ms ago: executing program 2 (id=2922): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c000000100001002cbd70000000000000000000", @ANYRES32=r0, @ANYBLOB="a821000000000000140003006e657464657673696d30000000000200140014006e657464657673696d3000000000000034001680300001802c000c8014"], 0x7c}}, 0xc000) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x1c) 624.771573ms ago: executing program 3 (id=2923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x7, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r4, {0xfff3}, {0x3, 0xb}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}, @TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xfd, 0xd0, 0xff, 0x2, 0x7f, 0x5345, 0xa}}, {0x18, 0x2, [0x4, 0xd, 0x40, 0x80, 0x6, 0x8, 0x9, 0x4, 0x90, 0xf5]}}, {{0x1c, 0x1, {0xf6, 0x7, 0x401, 0x0, 0x1, 0x6, 0xf, 0x3}}, {0xa, 0x2, [0x800, 0x6, 0x1]}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8400, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r10, &(0x7f0000000580)={0x2, @long={0x3, 0xffff, {0xc3f162150e0db309}}}, 0x14) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a31000000002c000000020a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000faff00000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31"], 0xc8}}, 0x0) 543.878813ms ago: executing program 1 (id=2924): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4000800) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000140)={@random="6df72590afd3", @empty, @void, {@canfd={0xd, {{0x0, 0x0, 0x1, 0x1}, 0x27, 0x3, 0x0, 0x0, "39b3727ae1b0886638d92e8b7bf4f22a0d2cc99b0fb2b0e3608f15a289a52ac990d1f719eef3eabbdc4cbf435cf87a0b4a9774cf0f2d6b9ca81605963c86617f"}}}}, &(0x7f00000001c0)={0x1, 0x4, [0x4a7, 0x7e1, 0xf5, 0x158]}) r1 = socket(0xa, 0x3, 0x87) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa6286dd604dd31800180600fc010000000000000000000000000000fe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200044a86d4ca7a7800002204d9de"], 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x78, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa, 0x1}, 0x9c) 540.551501ms ago: executing program 2 (id=2925): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@deltaction={0x14, 0x31, 0x8, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000049c000e5ffffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x9}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) (async, rerun: 32) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (rerun: 32) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000280), 0x8) close(r6) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) write$nci(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4d8) (async) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 377.59601ms ago: executing program 1 (id=2926): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00!\x00!'], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52163437412ba8af23dde536a5bfd391eab1cd545458e5da85a7f09fe52eb6ff7ed2517a99beef553019db75adea3dbf33cbcfc50380f6bc37af56dc6b5d982ab29f0f9784f1201b81", 0x52}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x28044854}], 0x1, 0x40891) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/74, 0x4a}], 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00!\x00!'], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52163437412ba8af23dde536a5bfd391eab1cd545458e5da85a7f09fe52eb6ff7ed2517a99beef553019db75adea3dbf33cbcfc50380f6bc37af56dc6b5d982ab29f0f9784f1201b81", 0x52}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x28044854}], 0x1, 0x40891) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/74, 0x4a}], 0x2}, 0x0) (async) 273.46236ms ago: executing program 2 (id=2927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000c31100000001000095"], &(0x7f0000000180)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r8, r5, 0x25, 0x0, @val=@tcx={@void, @value=r8}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000800000000000000500010007000000090002"], 0x5c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@newtaction={0x2a8, 0x30, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{0x294, 0x1, [@m_xt={0x144, 0x20, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xed, 0x6, "c2569306c251321e6ffcce97f096c369693be1357af47ccf26dca17987171401277f07ec327306687b52255d855f5c212eb2a2e5fcfa8380138b305ebf73ec15a5f0f4db89266f2acaea6538e2b5033c2febd0f7d26698a92eed6ec0e2c1825a328ed8cdebaf85b58957e8ec9fba56bc6a36e5f0c54b30f3b8c9e60dc2b2e5cd208c47811463ed5792587c94c9e66fd8d0047bcc1227babc32353ded788678063295c3e4f09a3972f6667c2c86fb7247377ee28ec986601339ffa7c2d7a41df4fc96865d3c45b4284e3eee8397a19c2495939a9cc0da5e17be3b604dc9330b728a8e861c19117556e2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xf4, 0x20, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x64c}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0xa, 0xffffffffffffffff, 0x5aec, 0x9}, 0xc}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x78, 0x6, "e3ce0b7f36183b72664e7ef7ba192ac8e2e7fb3e0f6e2e2f8310159079e26e131b1fd8da55df85516f844fa1039e1c8d54a6047b66c817c5314dc30e74ce9a93b30c5b5572e2fa276c529d4bb9c8d4859d00310a0b38d427b73af639a4d9553045967a5a2783ff0a8eddf8db9a05323e88ea7a80"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x58, 0xc, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x2, 0x8, 0xfffffffc, 0x900}}]}, {0xa, 0x6, "b22b21572241"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x10}, 0x20000015) r11 = socket$kcm(0x2, 0x5, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x25, &(0x7f0000000000), 0x20000010) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfd2fd, {0x0, 0x0, 0x0, r10, {0xc, 0x6}, {0x0, 0x5}, {0x0, 0x1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000008000000000000000800000091110d000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xfffffffffffffd36, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 189.939201ms ago: executing program 3 (id=2928): ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000080)) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0xf, 0x0, 0x1, [@generic="b6aa883c187282c63edaa1b302338fad461472d9973f4b900698029295938e3a20c23a798bb88410e2247554e77adbc729a361e05fb3477db89e064fa08f0bc302dedd15b1829ca499"]}]}, 0x64}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r2, 0xfffff800}, 0x8) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000540)=[{0x0}, {&(0x7f00000008c0)="7d3ed2ea1f2f210c0784b2", 0xb}], 0x2}, 0x2400c0c8) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r3, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}}, 0x4000014) 188.899503ms ago: executing program 1 (id=2929): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x54, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}]}, 0x54}}, 0x20000000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}]}, 0x3c}}, 0x4) 130.17673ms ago: executing program 0 (id=2930): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4048004}, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0, 0x1802}, 0x2600c055) 0s ago: executing program 0 (id=2931): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0x8918, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=r0, @ANYBLOB="7f000040372c7e737f9dfe3eabba249d9f609ef30c52dd06e687d8fdee5759c9acde83439d2501cd2e67519714159850bd17d8fb40d40fb23446576a0f52b218e9ec6dfb1bc568f4ea78fd636745277c7e27753d39d06fe3ee2c99f490d75fefcbc3e87d811ceb958afb84cddfc64a1519524daec48892ced70b18aecb10cc357a32d85d59c06e5d6fab1eb54302ab8239cdf90b69e436e29a9cf22b64298b8b8911b6bcfaa4f184edab710d425966d5bb3fe783f5a9eb2bf9d90db04376f43bc76a1d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) close(r1) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r4], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x40) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = socket$kcm(0x10, 0x5, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0x8918, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=r0, @ANYBLOB="7f000040372c7e737f9dfe3eabba249d9f609ef30c52dd06e687d8fdee5759c9acde83439d2501cd2e67519714159850bd17d8fb40d40fb23446576a0f52b218e9ec6dfb1bc568f4ea78fd636745277c7e27753d39d06fe3ee2c99f490d75fefcbc3e87d811ceb958afb84cddfc64a1519524daec48892ced70b18aecb10cc357a32d85d59c06e5d6fab1eb54302ab8239cdf90b69e436e29a9cf22b64298b8b8911b6bcfaa4f184edab710d425966d5bb3fe783f5a9eb2bf9d90db04376f43bc76a1d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) (async) socket$rds(0x15, 0x5, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) close(r1) (async) accept4(r3, 0x0, 0x0, 0x800) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r4], 0x1c}}, 0x20000080) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x40) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) socket$kcm(0x10, 0x5, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) kernel console output (not intermixed with test programs): rocess `syz.1.1614'. [ 261.695802][T12412] dummy0 (unregistering): left allmulticast mode [ 262.748904][T12436] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 262.891585][T12473] xt_hashlimit: size too large, truncated to 1048576 [ 262.923184][T12472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1629'. [ 262.943495][T12470] netlink: 14008 bytes leftover after parsing attributes in process `syz.1.1628'. [ 263.000198][T12472] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 263.533651][T12491] dvmrp1: entered allmulticast mode [ 263.816533][ T29] audit: type=1800 audit(1781708135.705:6): pid=12497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1635" name="r" dev="tmpfs" ino=1692 res=0 errno=0 [ 264.053601][T12516] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1641'. [ 264.097360][T12522] vlan4: entered allmulticast mode [ 264.106097][T12522] bridge_slave_0: entered allmulticast mode [ 264.113878][T12522] bridge0: port 1(vlan4) entered blocking state [ 264.126849][T12522] bridge0: port 1(vlan4) entered disabled state [ 264.148621][T12522] vlan4: entered promiscuous mode [ 264.155346][T12522] bridge_slave_0: entered promiscuous mode [ 264.166477][T12513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1641'. [ 264.196858][T12513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1641'. [ 264.238933][T12513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1641'. [ 264.276352][T12513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1641'. [ 264.310712][T12513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1641'. [ 264.345665][T12532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1647'. [ 264.367072][T12513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1641'. [ 264.389048][T12513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1641'. [ 264.423993][T12513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1641'. [ 265.222316][T12516] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 265.232242][T12516] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 265.241961][T12516] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 265.331621][ T7082] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.360595][ T7082] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 265.389611][ T7082] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.420217][ T7082] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 265.460956][ T7082] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.507291][ T7082] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 265.531665][ T7082] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.551429][ T7082] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 265.730577][T12577] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.789832][T12577] netdevsim netdevsim1 netdevsim0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 265.818943][T12577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.194473][T12659] xt_hashlimit: size too large, truncated to 1048576 [ 267.366867][T12663] netlink: 'syz.0.1669': attribute type 1 has an invalid length. [ 268.498708][T12660] bond6: option updelay: invalid value (18446744073709518847) [ 268.506297][T12660] bond6: option updelay: allowed values 0 - 2147483647 [ 268.516325][T12660] bond6 (unregistering): Released all slaves [ 269.009949][T12732] SET target dimension over the limit! [ 269.026712][T12731] pim6reg: entered allmulticast mode [ 269.238858][T12742] syzkaller1: entered promiscuous mode [ 269.257966][T12742] syzkaller1: entered allmulticast mode [ 269.368781][T12746] veth0: entered promiscuous mode [ 269.395342][T12745] veth0: left promiscuous mode [ 270.033146][T12778] __nla_validate_parse: 186 callbacks suppressed [ 270.033168][T12778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1698'. [ 270.160722][T12778] bond0: (slave bond_slave_0): Releasing backup interface [ 270.195745][T12788] sctp: [Deprecated]: syz.0.1699 (pid 12788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.195745][T12788] Use struct sctp_sack_info instead [ 270.234685][T12778] bond_slave_0: left promiscuous mode [ 270.272541][T12778] bond_slave_0: left allmulticast mode [ 270.298966][T12778] bond0: (slave bond_slave_1): Releasing backup interface [ 270.313872][T12778] bond_slave_1: left promiscuous mode [ 270.328473][T12778] bond_slave_1: left allmulticast mode [ 270.412181][T12778] team0: Port device team_slave_0 removed [ 270.456251][T12778] team0: Port device team_slave_1 removed [ 270.501508][T12778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.516236][T12778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.532220][T12778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.548689][T12778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.580098][T12778] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 270.619643][T12787] team0: Mode changed to "activebackup" [ 270.737282][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.767323][T12804] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1702'. [ 270.895045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.923876][T12812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1705'. [ 270.934836][T12812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1705'. [ 271.100585][T12819] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1708'. [ 271.121576][ T29] audit: type=1107 audit(1781708143.005:7): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':ó—½€À׶8­qÞ¡Ù>/™·‚ç³ÅÀ£<ÆX†FýãÈ_ú' [ 271.172098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.230009][T12816] bond10: option tlb_dynamic_lb: invalid value (5) [ 271.259219][T12816] bond10 (unregistering): Released all slaves [ 271.337128][T12829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1710'. [ 271.376588][T12829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1710'. [ 271.404704][T12829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1710'. [ 271.532473][ C1] ip6_tunnel: ÿÿÿÿ xmit: Local address not yet configured! [ 271.625952][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.682679][T12836] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1712'. [ 271.793033][T12836] netlink: 'syz.1.1712': attribute type 1 has an invalid length. [ 271.809193][T12844] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1714'. [ 271.845708][T12839] xt_CT: No such helper "snmp_trap" [ 271.857764][T12844] tipc: Invalid UDP bearer configuration [ 271.857823][T12844] tipc: Enabling of bearer rejected, failed to enable media [ 271.873478][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.904912][T12851] netlink: 'syz.1.1712': attribute type 3 has an invalid length. [ 272.084115][T12852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.169505][T12836] 8021q: adding VLAN 0 to HW filter on device bond7 [ 272.185966][T12836] bond6: (slave bond7): making interface the new active one [ 272.194193][T12836] bond6: (slave bond7): Enslaving as an active interface with an up link [ 272.213787][T12845] lo speed is unknown, defaulting to 1000 [ 272.251999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.635349][T12872] netlink: 'syz.0.1720': attribute type 64 has an invalid length. [ 272.698142][T12874] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 272.772182][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.993076][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.033201][T12883] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.050076][T12845] lo speed is unknown, defaulting to 1000 [ 273.584834][T12904] lo speed is unknown, defaulting to 1000 [ 274.115625][T12947] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 274.194488][T12947] 8021q: adding VLAN 0 to HW filter on device bond7 [ 274.312539][T12947] bond7: (slave veth7): Enslaving as an active interface with a down link [ 274.412754][T12949] bond7: (slave veth9): Enslaving as an active interface with a down link [ 274.452563][T12904] lo speed is unknown, defaulting to 1000 [ 274.538887][T12903] lo speed is unknown, defaulting to 1000 [ 274.567227][T12949] bond7: entered allmulticast mode [ 275.081619][T12976] __nla_validate_parse: 6 callbacks suppressed [ 275.081642][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1746'. [ 275.335666][T12981] netlink: 'syz.1.1747': attribute type 4 has an invalid length. [ 275.594341][T12903] lo speed is unknown, defaulting to 1000 [ 275.609124][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 275.644918][T12987] netlink: 'syz.2.1748': attribute type 30 has an invalid length. [ 275.661285][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 275.710089][T12991] netlink: 'syz.2.1748': attribute type 30 has an invalid length. [ 275.897408][ T7084] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.933192][ T7084] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.019667][T13005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1752'. [ 276.085787][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1752'. [ 276.123917][ T7075] net_ratelimit: 5 callbacks suppressed [ 276.123937][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.168496][ T7084] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.193960][ T7084] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.202920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.254541][T13005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1752'. [ 276.335678][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.686339][T13020] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1757'. [ 276.697466][T13018] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1756'. [ 276.788312][T13025] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1758'. [ 277.087003][T13032] tun0: tun_chr_ioctl cmd 1074025675 [ 277.102877][T13032] tun0: persist enabled [ 277.114828][T13032] tun0: tun_chr_ioctl cmd 1074025675 [ 277.133834][T13032] tun0: persist enabled [ 277.147559][T13032] tun0: tun_chr_ioctl cmd 1074025673 [ 277.221917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.262031][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.315000][T13044] netlink: 'syz.2.1761': attribute type 3 has an invalid length. [ 277.346659][T13044] netlink: 'syz.2.1761': attribute type 3 has an invalid length. [ 277.462269][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.599153][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 278.251960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.392446][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.623503][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.853279][T13093] 8021q: adding VLAN 0 to HW filter on device bond10 [ 279.183537][T13098] netlink: 'syz.1.1778': attribute type 1 has an invalid length. [ 279.326457][T13098] bond8: entered promiscuous mode [ 279.340956][T13098] 8021q: adding VLAN 0 to HW filter on device bond8 [ 279.400118][T13105] 8021q: adding VLAN 0 to HW filter on device bond8 [ 279.420629][T13105] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 279.440336][T13105] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 279.459866][T13105] bond8: (slave vti0): making interface the new active one [ 279.468662][T13105] vti0: entered promiscuous mode [ 279.475969][T13105] bond8: (slave vti0): Enslaving as an active interface with an up link [ 279.502185][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.747023][T13124] netlink: 'syz.2.1787': attribute type 1 has an invalid length. [ 279.828993][T13128] netlink: 'syz.4.1786': attribute type 1 has an invalid length. [ 279.848933][T13128] netlink: 'syz.4.1786': attribute type 1 has an invalid length. [ 279.914404][T13130] netlink: 'syz.4.1786': attribute type 21 has an invalid length. [ 279.939825][T13128] netlink: 'syz.4.1786': attribute type 21 has an invalid length. [ 279.969537][T13129] syzkaller1: entered promiscuous mode [ 279.988809][T13130] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.017139][T13128] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.040550][T13129] syzkaller1: entered allmulticast mode [ 280.066451][T13130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.073812][T13130] IPv6: NLM_F_CREATE should be set when creating new route [ 280.081122][T13130] IPv6: NLM_F_CREATE should be set when creating new route [ 280.088426][T13130] IPv6: NLM_F_CREATE should be set when creating new route [ 280.116797][T13128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.334144][T13133] syzkaller0: entered promiscuous mode [ 280.351923][T13133] syzkaller0: entered allmulticast mode [ 280.431450][T13152] syzkaller1: entered promiscuous mode [ 280.437279][T13152] syzkaller1: entered allmulticast mode [ 280.849176][T13168] netlink: 'syz.4.1795': attribute type 10 has an invalid length. [ 280.894544][T13175] sctp: [Deprecated]: syz.3.1796 (pid 13175) Use of int in max_burst socket option. [ 280.894544][T13175] Use struct sctp_assoc_value instead [ 281.070107][T13184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.232859][ C1] net_ratelimit: 6 callbacks suppressed [ 281.232879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.766009][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.984287][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.253068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.874488][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.934629][T13168] bridge0: port 1(team0) entered disabled state [ 282.953524][T13168] bridge0: port 1(team0) entered disabled state [ 282.968254][T13168] gretap1: left promiscuous mode [ 282.982085][T13168] gretap1: left allmulticast mode [ 283.006297][T13168] team0 (unregistering): Port device gretap1 removed [ 283.049689][T12536] lo speed is unknown, defaulting to 1000 [ 283.071391][T13198] __nla_validate_parse: 9 callbacks suppressed [ 283.071411][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'. [ 283.092823][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.273508][T13209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.292062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.022097][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.203059][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.242048][ T7057] net_ratelimit: 2 callbacks suppressed [ 286.242068][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.256475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.271940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.402286][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.291964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.362042][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.502432][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.332050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.472079][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.602522][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.312035][ C1] net_ratelimit: 4 callbacks suppressed [ 291.312059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.812245][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.912215][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.331948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.922254][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.012129][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.371969][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.032232][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.122097][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.132251][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.332151][ T7058] net_ratelimit: 2 callbacks suppressed [ 296.332173][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.351979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.352096][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.371988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.462077][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.411981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.452162][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.562102][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.552148][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.662089][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.392083][ C1] net_ratelimit: 2 callbacks suppressed [ 301.392100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.752078][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.862113][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.412001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.852166][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.962094][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.452012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.952041][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.072115][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.052007][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.124030][T13229] syzkaller1: entered promiscuous mode [ 305.146600][T13229] syzkaller1: entered allmulticast mode [ 305.217541][T13239] netlink: 'syz.4.1811': attribute type 1 has an invalid length. [ 305.225393][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1812'. [ 305.234849][T13239] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1811'. [ 305.278685][T13241] ip6tnl2: entered allmulticast mode [ 305.294636][T13231] lo speed is unknown, defaulting to 1000 [ 305.335163][T13243] netlink: 'syz.4.1811': attribute type 10 has an invalid length. [ 305.427872][T13249] netlink: 'syz.4.1811': attribute type 10 has an invalid length. [ 305.777567][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 305.800120][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.818832][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.830460][T13262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.881573][T13264] bond11 (unregistering): Released all slaves [ 305.958862][T13273] netlink: 'syz.1.1821': attribute type 15 has an invalid length. [ 305.979213][T13231] lo speed is unknown, defaulting to 1000 [ 305.997347][T13273] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1821'. [ 306.081159][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 306.323235][T13287] block nbd2: NBD_DISCONNECT [ 306.354128][T13287] block nbd2: Send disconnect failed -32 [ 306.370457][T13287] block nbd2: shutting down sockets [ 306.438296][ C1] net_ratelimit: 3 callbacks suppressed [ 306.438316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.458074][T13294] erspan0: left promiscuous mode [ 306.535152][T13294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.556049][T13294] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.583257][T13294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.659280][T13294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.683712][T13294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.715311][T13294] hsr0: left promiscuous mode [ 306.764742][T13294] veth1_macvtap: left promiscuous mode [ 306.778439][T13294] veth0_macvtap: left promiscuous mode [ 306.790233][T13294] veth0_macvtap: entered promiscuous mode [ 306.804465][T13294] veth1_macvtap: entered promiscuous mode [ 306.817903][T13294] geneve1: left promiscuous mode [ 306.829061][T13294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.838739][T13294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.850455][T13294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.863621][T13294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.873577][T13294] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 306.997717][ T7058] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.026447][ T7058] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.120816][ T7058] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.160572][ T7058] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.302256][T13314] bond0: (slave bridge0): Releasing backup interface [ 307.314007][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.339479][T13317] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1832'. [ 307.394895][T13318] netlink: 'syz.3.1832': attribute type 3 has an invalid length. [ 307.426684][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.436936][T13318] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1832'. [ 307.456526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.469413][T13314] team0: Port device xfrm0 removed [ 307.514760][T13314] bond2: (slave veth3): Removing an active aggregator [ 307.527807][T13314] bond2: (slave veth3): Releasing backup interface [ 307.547917][T13314] bond4: (slave bridge6): Releasing backup interface [ 307.555593][T13314] bridge6: left promiscuous mode [ 307.560851][T13314] bridge6: left allmulticast mode [ 307.574853][T13314] bond7: (slave veth7): Releasing active interface [ 307.581505][T13314] bond7: (slave veth7): the permanent HWaddr of slave - 3a:4f:2f:45:8c:b8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 307.609539][T13314] bond7: (slave veth9): Releasing active interface [ 307.621604][ T7082] tipc: Resetting bearer [ 308.432096][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.491957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.562012][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.532281][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.662049][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.471936][ C1] net_ratelimit: 2 callbacks suppressed [ 311.471951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.732915][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.862074][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.491976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.833161][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.962057][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.532080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.933432][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.072127][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.052206][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.511949][ C1] net_ratelimit: 3 callbacks suppressed [ 316.511966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.252325][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.402169][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.531985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.352118][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.512324][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.571954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.462087][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.612170][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.562588][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.551987][ C1] net_ratelimit: 2 callbacks suppressed [ 321.552002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.672166][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.852165][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.571953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.772128][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.952195][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.612046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.892134][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.061998][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.992125][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.591967][ C1] net_ratelimit: 3 callbacks suppressed [ 326.591988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.202144][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.362078][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.611935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.936251][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1837'. [ 327.953135][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 327.973369][T13326] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1837'. [ 327.980074][T13336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'. [ 328.006003][T13326] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1837'. [ 328.016443][T13336] netlink: 'syz.1.1835': attribute type 11 has an invalid length. [ 328.171136][T13341] macvtap1: entered allmulticast mode [ 328.199434][T13341] dummy0: entered allmulticast mode [ 328.228088][T13341] dummy0: entered promiscuous mode [ 328.279510][T13341] dummy0: left allmulticast mode [ 328.302557][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.342430][T12545] dummy0: left promiscuous mode [ 328.352636][T13357] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1840'. [ 328.475513][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.651963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.963104][T13377] tipc: Resetting bearer [ 329.049133][T13377] veth1_macvtap: entered promiscuous mode [ 329.060525][T13377] veth1_macvtap: entered allmulticast mode [ 329.083231][T13387] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1852'. [ 329.131531][T13377] ip6gretap0: entered promiscuous mode [ 329.163156][T13377] 8021q: adding VLAN 0 to HW filter on device bond7 [ 329.240625][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 329.249959][ T13] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 329.261131][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 329.269949][ T13] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 329.370701][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 329.411047][ T13] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 329.432480][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.445709][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 329.465885][ T13] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 329.520742][T13399] ip6tnl2: entered allmulticast mode [ 329.565170][T12554] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 329.582588][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.592508][T13409] bridge7: entered promiscuous mode [ 329.619327][T13409] bridge7: entered allmulticast mode [ 329.705667][T13409] team0: Port device bridge7 added [ 329.723685][ T7084] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 329.765482][ T7056] tipc: Resetting bearer [ 329.793989][T13428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1862'. [ 329.811455][T13428] netlink: 'syz.1.1862': attribute type 2 has an invalid length. [ 329.819756][T13425] syzkaller1: entered promiscuous mode [ 329.835485][T13425] syzkaller1: entered allmulticast mode [ 330.021947][T12554] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 330.088904][T13443] netlink: 556 bytes leftover after parsing attributes in process `syz.0.1866'. [ 330.143230][T13447] netlink: 'syz.2.1867': attribute type 3 has an invalid length. [ 330.163124][T13447] netlink: 'syz.2.1867': attribute type 3 has an invalid length. [ 330.171037][T13447] netlink: 'syz.2.1867': attribute type 1 has an invalid length. [ 330.179050][ T5649] Bluetooth: hci4: command 0x0405 tx timeout [ 330.186639][T13447] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1867'. [ 330.196588][T13447] NCSI netlink: No device for ifindex 2147483648 [ 330.218873][T13443] macsec0: entered allmulticast mode [ 330.241009][T13443] bond0: entered allmulticast mode [ 330.258384][T13443] bond_slave_0: entered allmulticast mode [ 330.276879][T13443] bond_slave_1: entered allmulticast mode [ 330.283401][T13443] bond_slave_0: entered promiscuous mode [ 330.290957][T13443] bond_slave_1: entered promiscuous mode [ 330.298370][T13443] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 330.308252][T13443] bond0: left allmulticast mode [ 330.313277][T13443] bond_slave_0: left allmulticast mode [ 330.318855][T13443] bond_slave_1: left allmulticast mode [ 330.341995][T12544] bond_slave_0: left promiscuous mode [ 330.348517][T12544] bond_slave_1: left promiscuous mode [ 330.574022][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.734061][ T7084] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 330.755383][ T7084] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 331.347248][T13506] syzkaller1: entered promiscuous mode [ 331.357061][T13506] syzkaller1: entered allmulticast mode [ 331.535102][T12553] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 331.631980][ C1] net_ratelimit: 5 callbacks suppressed [ 331.631999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.718251][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.766893][T13539] netlink: 'syz.1.1890': attribute type 12 has an invalid length. [ 331.822302][T13539] xt_hashlimit: size too large, truncated to 1048576 [ 331.864078][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.883681][T13549] ip6gre2: entered promiscuous mode [ 331.905333][T13549] ip6gre2: entered allmulticast mode [ 332.652060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.862543][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.982237][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.056046][T13568] tc action pedit offset must be on 32 bit boundaries [ 333.268062][T13581] __nla_validate_parse: 10 callbacks suppressed [ 333.268082][T13581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1899'. [ 333.345808][T13584] netlink: 'syz.1.1901': attribute type 1 has an invalid length. [ 333.417349][T13583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1901'. [ 333.578276][T13597] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1903'. [ 333.692210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.983149][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.039036][T13579] netlink: 'syz.0.1900': attribute type 9 has an invalid length. [ 334.047506][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'. [ 334.133825][T13579] 0ªî{X¹¦: entered promiscuous mode [ 334.150455][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.172383][T13579] macvlan3: entered promiscuous mode [ 334.186425][T13579] macvlan3: entered allmulticast mode [ 334.302090][T13621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.398027][T13621] 8021q: adding VLAN 0 to HW filter on device bond6 [ 334.664366][T12536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.769306][T13621] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 334.812078][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 334.994131][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1912'. [ 335.170796][T13652] netlink: 'syz.0.1916': attribute type 8 has an invalid length. [ 335.193028][T13652] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1916'. [ 335.776790][T13648] IPVS: length: 35 != 24 [ 336.671905][ C1] net_ratelimit: 7 callbacks suppressed [ 336.671919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.342147][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.452785][ C1] ip6_tunnel: ÿÿÿÿ xmit: Local address not yet configured! [ 337.503981][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.691943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.705583][T13657] batman_adv: batadv0: Adding interface: macsec0 [ 337.711999][T13657] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.738205][T13657] batman_adv: batadv0: Interface activated: macsec0 [ 337.751674][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.882821][T13660] lo speed is unknown, defaulting to 1000 [ 337.891350][T13668] tap0: tun_chr_ioctl cmd 2148553947 [ 338.017039][T13682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.049952][T13684] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1923'. [ 338.065291][T13682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.086563][T13682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.347127][T13660] lo speed is unknown, defaulting to 1000 [ 338.385479][T13697] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1925'. [ 338.472302][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.534678][T13704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1928'. [ 338.635185][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.786045][T13710] can: request_module (can-proto-5) failed. [ 338.987731][T13716] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 339.200662][T13727] veth1_to_batadv: entered promiscuous mode [ 340.173882][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1943'. [ 340.219077][T13754] netlink: 'syz.1.1941': attribute type 4 has an invalid length. [ 340.332157][ T5636] block nbd3: Receive control failed (result -32) [ 340.568278][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1950'. [ 340.921688][T13797] netlink: 'syz.3.1954': attribute type 1 has an invalid length. [ 340.959595][T13797] 8021q: adding VLAN 0 to HW filter on device bond8 [ 340.992153][T13797] bond8: (slave gretap1): making interface the new active one [ 341.019306][T13797] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 341.020642][T13800] netlink: 'syz.0.1955': attribute type 2 has an invalid length. [ 341.276668][T13815] netlink: 'syz.2.1959': attribute type 4 has an invalid length. [ 341.623503][T13826] tipc: Enabled bearer , priority 0 [ 341.632489][ T5636] block nbd5: Receive control failed (result -32) [ 341.658755][T13826] syzkaller0: entered promiscuous mode [ 341.678062][T13826] syzkaller0: entered allmulticast mode [ 341.712021][ C1] net_ratelimit: 13 callbacks suppressed [ 341.712039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.737935][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'. [ 341.763491][T13835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1964'. [ 341.809526][T13835] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1964'. [ 341.832045][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.907368][T13824] tipc: Resetting bearer [ 341.970667][T13824] tipc: Disabling bearer [ 341.984203][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.182195][T13845] netlink: 'syz.1.1967': attribute type 3 has an invalid length. [ 342.216806][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1968'. [ 342.251402][T13852] syzkaller0: entered promiscuous mode [ 342.261580][T13852] syzkaller0: entered allmulticast mode [ 342.341144][T13853] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.351388][T13853] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.405139][T13859] openvswitch: netlink: Flow actions attr not present in new flow. [ 342.492486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.616119][T13866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1971'. [ 342.732018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.837006][ T5636] block nbd6: Receive control failed (result -32) [ 342.914606][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1975'. [ 342.951936][T13880] netlink: 'syz.1.1975': attribute type 8 has an invalid length. [ 342.975947][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.013903][T13880] geneve4: entered promiscuous mode [ 343.019227][T13880] geneve4: entered allmulticast mode [ 343.134283][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.212435][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 343.773409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.896703][T13935] __nla_validate_parse: 1 callbacks suppressed [ 343.896722][T13935] netlink: 1104 bytes leftover after parsing attributes in process `syz.1.1987'. [ 343.963034][T13935] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1987'. [ 344.032458][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.102750][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.130581][ T5636] block nbd7: Receive control failed (result -32) [ 344.422618][T13956] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1991'. [ 344.467201][T13958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.685280][T13974] bridge0: entered allmulticast mode [ 344.915689][T13962] syzkaller0: entered promiscuous mode [ 344.931976][T13962] syzkaller0: entered allmulticast mode [ 345.129840][ T5636] block nbd8: Receive control failed (result -32) [ 345.216868][T13999] netlink: 'syz.1.2002': attribute type 1 has an invalid length. [ 345.269474][T14003] xt_hashlimit: size too large, truncated to 1048576 [ 345.431339][T13999] 8021q: adding VLAN 0 to HW filter on device bond9 [ 345.598830][T14018] macvtap1: entered promiscuous mode [ 345.622513][T14018] bridge0: entered promiscuous mode [ 345.911827][T14039] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2012'. [ 345.958811][T14039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2012'. [ 345.971959][T14039] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2012'. [ 346.751872][ C1] net_ratelimit: 5 callbacks suppressed [ 346.751892][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.488097][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.603289][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.771897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.037697][ T5636] block nbd10: Receive control failed (result -32) [ 348.495691][T14080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2021'. [ 348.755956][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.812158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.872734][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.903444][T14084] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 348.951485][T14084] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2022'. [ 348.974049][T14084] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 349.079378][T14086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2023'. [ 349.140045][T14094] netlink: 'syz.1.2026': attribute type 1 has an invalid length. [ 349.304237][T14101] bond10: entered promiscuous mode [ 349.316183][T14100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2027'. [ 349.390086][T14105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2028'. [ 349.820985][T14094] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 349.837806][T14115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2031'. [ 349.838616][T14096] tunl0: Caught tx_queue_len zero misconfig [ 349.915642][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.923871][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.938756][T14105] bond_slave_0: entered promiscuous mode [ 349.951012][T14105] bond_slave_0: entered allmulticast mode [ 350.013271][T14093] bond10: left promiscuous mode [ 350.206659][T14125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2034'. [ 350.229197][T14122] tipc: Enabling of bearer rejected, already enabled [ 350.278300][T14130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2036'. [ 350.321058][T14125] ip6gre2: entered promiscuous mode [ 350.342509][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2036'. [ 350.372306][T14125] ip6gre2: entered allmulticast mode [ 350.611321][T14153] netlink: 'syz.1.2039': attribute type 1 has an invalid length. [ 350.665262][ T5730] lo speed is unknown, defaulting to 1000 [ 350.699230][ T5730] syz2: Port: 1 Link DOWN [ 350.745858][T14153] bond11: entered promiscuous mode [ 350.745906][T14164] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2040'. [ 350.757142][T14153] 8021q: adding VLAN 0 to HW filter on device bond11 [ 350.841931][T14158] 8021q: adding VLAN 0 to HW filter on device bond12 [ 350.868645][T14158] bond11: (slave bond12): making interface the new active one [ 350.897016][T14158] bond12: entered promiscuous mode [ 350.920274][T14158] bond11: (slave bond12): Enslaving as an active interface with an up link [ 350.971549][T14169] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 351.058435][T14179] syzkaller0: entered promiscuous mode [ 351.078740][T14179] syzkaller0: entered allmulticast mode [ 351.260553][T14177] netlink: 'syz.0.2042': attribute type 30 has an invalid length. [ 351.660119][T14199] pim6reg1: entered promiscuous mode [ 351.670604][T14199] pim6reg1: entered allmulticast mode [ 351.792384][ C1] net_ratelimit: 8 callbacks suppressed [ 351.793940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.807850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.988040][T14221] SET target dimension over the limit! [ 352.048794][T14221] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2053'. [ 352.163019][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.171321][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.292977][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.301247][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.812418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.821983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.832410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.840685][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.517859][T14241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.927517][T14303] veth1_vlan: entered allmulticast mode [ 354.077871][ T5636] block nbd11: Receive control failed (result -32) [ 354.380775][T14335] __nla_validate_parse: 4 callbacks suppressed [ 354.380818][T14335] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2075'. [ 354.422193][ T5730] lo speed is unknown, defaulting to 1000 [ 354.431238][ T5730] syz2: Port: 1 Link ACTIVE [ 354.980046][T14359] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 355.074779][T14359] netlink: 'syz.3.2081': attribute type 1 has an invalid length. [ 355.275510][T14361] gretap2: entered promiscuous mode [ 355.408865][ T5636] block nbd12: Receive control failed (result -32) [ 355.747330][T14392] netlink: 'syz.1.2089': attribute type 4 has an invalid length. [ 355.909790][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 356.145087][T14407] vlan4: entered promiscuous mode [ 356.196556][T14407] hsr0: entered promiscuous mode [ 356.213297][T14407] vlan4: entered allmulticast mode [ 356.242255][T14407] hsr0: entered allmulticast mode [ 356.261823][T14407] hsr_slave_0: entered allmulticast mode [ 356.267556][T14407] hsr_slave_1: entered allmulticast mode [ 356.300508][T14407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 356.348905][T14407] hsr_slave_0: left promiscuous mode [ 356.435493][T14407] hsr_slave_1: left promiscuous mode [ 356.697102][T14417] netlink: 'syz.2.2094': attribute type 21 has an invalid length. [ 356.705417][T14417] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2094'. [ 356.831997][ C1] net_ratelimit: 18 callbacks suppressed [ 356.832021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.846033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.909334][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2097'. [ 357.467717][T14460] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2104'. [ 357.485485][T14449] bridge8: entered promiscuous mode [ 357.490745][T14449] bridge8: entered allmulticast mode [ 357.842399][ T29] audit: type=1107 audit(1781708229.735:8): pid=14474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 357.854964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.863240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.879328][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.887564][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.899346][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.907586][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.935189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.945224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.976087][T14476] bond11: option packets_per_slave: invalid value (1048582) [ 357.984218][T14476] bond11: option packets_per_slave: allowed values 0 - 65535 [ 358.003962][T14476] bond11 (unregistering): Released all slaves [ 358.497553][T14497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2115'. [ 358.557120][T14496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2116'. [ 358.584895][T14496] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2116'. [ 358.995251][T14524] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 359.201626][T14532] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 359.211959][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 359.531406][T14548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2129'. [ 359.577144][T14548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2129'. [ 359.649994][T14552] netlink: 'syz.4.2131': attribute type 2 has an invalid length. [ 359.669060][T14552] tipc: Cannot configure node identity twice [ 359.684473][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2129'. [ 359.705185][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2129'. [ 359.864624][T14566] netlink: 'syz.3.2134': attribute type 10 has an invalid length. [ 359.962717][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2134'. [ 360.041226][ T5636] block nbd13: Receive control failed (result -32) [ 360.125627][T14579] netlink: 'syz.3.2140': attribute type 50 has an invalid length. [ 360.205036][T14583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2139'. [ 360.726487][T14609] tipc: Enabled bearer , priority 0 [ 360.737043][T14609] syzkaller0: entered promiscuous mode [ 360.746948][T14609] syzkaller0: entered allmulticast mode [ 360.767027][T14611] netlink: 'syz.0.2149': attribute type 1 has an invalid length. [ 360.812620][T14609] tipc: Resetting bearer [ 360.892192][T14608] tipc: Resetting bearer [ 360.940141][T14608] tipc: Disabling bearer [ 360.956631][T14619] bond0: (slave ip6tnl0): refused to change device type [ 361.007462][T14619] ip6erspan0: entered allmulticast mode [ 361.054499][T14621] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 361.336859][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2156'. [ 361.379336][T14632] hsr_slave_0: left promiscuous mode [ 361.406649][T14632] hsr_slave_1: left promiscuous mode [ 361.547273][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 361.628700][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 361.661143][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'. [ 361.729624][T14643] netlink: 'syz.2.2158': attribute type 3 has an invalid length. [ 361.872035][ C1] net_ratelimit: 17 callbacks suppressed [ 361.872055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.886058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.408285][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.416550][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.426336][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.434568][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.474373][T14677] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 362.702928][T14687] tipc: Resetting bearer [ 362.826039][ T5730] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 362.845937][T14687] team0: Port device bridge7 removed [ 362.864495][T14687] bond8: (slave gretap1): Releasing active interface [ 362.892299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.900571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.915656][T14694] team0: Failed to send options change via netlink (err -105) [ 362.936684][T14694] team0: Mode changed to "activebackup" [ 362.973703][T14697] geneve1: entered promiscuous mode [ 363.465076][T14715] team_slave_0: left promiscuous mode [ 363.481654][T14715] team_slave_1: left promiscuous mode [ 363.563811][T14715] team0 (unregistering): Port device team_slave_0 removed [ 363.592599][T14715] team0 (unregistering): Port device team_slave_1 removed [ 363.613731][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.658027][T14717] tap0: tun_chr_ioctl cmd 1074025677 [ 363.671453][T14717] tap0: linktype set to 823 [ 363.702035][T14717] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 363.704467][ T5365] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 363.721252][T14717] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 363.737321][T14717] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 364.678054][T14776] __nla_validate_parse: 11 callbacks suppressed [ 364.678075][T14776] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2191'. [ 364.766557][T14781] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 364.795326][T14781] bond11: (slave lo): Enslaving as an active interface with an up link [ 364.943683][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2192'. [ 365.304886][T14797] sctp: [Deprecated]: syz.3.2195 (pid 14797) Use of int in max_burst socket option. [ 365.304886][T14797] Use struct sctp_assoc_value instead [ 365.468270][T14807] netlink: 'syz.4.2198': attribute type 4 has an invalid length. [ 365.706971][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'. [ 365.723467][T14819] netlink: 'syz.1.2200': attribute type 26 has an invalid length. [ 365.757739][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'. [ 365.782030][T14824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2202'. [ 365.792089][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2200'. [ 365.815769][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'. [ 365.848283][T14819] netlink: 'syz.1.2200': attribute type 26 has an invalid length. [ 365.891555][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2200'. [ 366.164010][T14837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2206'. [ 366.444137][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2212'. [ 366.529367][T14864] bond12: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 366.543076][T14864] bond12 (unregistering): Released all slaves [ 366.912003][ C1] net_ratelimit: 20 callbacks suppressed [ 366.912022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.926010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.968192][T14884] bridge3: entered promiscuous mode [ 366.984414][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.992654][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.003134][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.011330][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.012836][T14884] bridge3: entered allmulticast mode [ 367.118443][T14884] team0: Port device bridge3 added [ 367.200010][T14876] bridge4: entered promiscuous mode [ 367.236476][T14876] bridge4: entered allmulticast mode [ 367.278217][T14876] team0: Port device bridge4 added [ 367.310969][T14859] infiniband syz0: set down [ 367.321902][T14859] infiniband syz0: added ipvlan0 [ 367.329984][T14859] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 367.335347][T14859] infiniband syz0: Couldn't open port 1 [ 367.352040][T14859] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 367.368500][T14859] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 367.413943][T14859] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 367.577940][ T5636] block nbd15: Receive control failed (result -32) [ 367.674438][T14859] RDS/IB: syz0: added [ 367.687457][T14859] smc: adding ib device syz0 with port count 1 [ 367.711508][T14859] smc: ib device syz0 port 1 has no pnetid [ 367.931951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.940221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.185144][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.193330][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.183214][T14994] netlink: 'syz.4.2238': attribute type 4 has an invalid length. [ 370.209205][T14994] __nla_validate_parse: 2 callbacks suppressed [ 370.209225][T14994] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2238'. [ 370.330095][T15004] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 370.404203][T15007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2240'. [ 371.857743][T15030] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 371.951908][ C1] net_ratelimit: 17 callbacks suppressed [ 371.951926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.965900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.981309][T15061] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2251'. [ 372.051046][T15066] openvswitch: netlink: IP tunnel dst address not specified [ 372.060183][T15063] sock: sock_timestamping_bind_phc: sock not bind to device [ 372.637764][T15095] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2260'. [ 372.742338][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.750581][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.759838][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.768041][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.793880][T15097] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 372.803670][T15097] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 372.812406][T15097] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 372.971978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.980256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.187936][T15101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2261'. [ 373.286260][T15104] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.736342][T15028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.927089][T15114] ipt_ECN: cannot use operation on non-tcp rule [ 373.947193][T15114] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.2265'. [ 373.975722][T15114] netlink: 'syz.4.2265': attribute type 1 has an invalid length. [ 374.168242][T15114] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2265'. [ 374.184798][T15128] bond12 (unregistering): Released all slaves [ 374.315609][T15131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2269'. [ 374.341118][T15131] tipc: Invalid UDP bearer configuration [ 374.341175][T15131] tipc: Enabling of bearer rejected, failed to enable media [ 374.542217][T15147] netlink: 'syz.2.2273': attribute type 10 has an invalid length. [ 374.579621][T15147] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 374.606077][T15147] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2273'. [ 374.823740][T15157] syzkaller0: entered promiscuous mode [ 374.833661][T15157] syzkaller0: entered allmulticast mode [ 375.394062][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 375.416321][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 375.450751][T15189] ip6gre0: Caught tx_queue_len zero misconfig [ 375.544734][ T5649] block nbd4: Receive control failed (result -32) [ 375.641521][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2285'. [ 375.695455][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2285'. [ 375.837471][T15198] tipc: Enabling of bearer rejected, already enabled [ 376.239575][T15219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2294'. [ 376.378383][T15222] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 376.415771][T15222] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2296'. [ 376.495468][T15230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2298'. [ 376.571106][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 376.600973][T15240] netlink: 'syz.4.2299': attribute type 1 has an invalid length. [ 376.609055][T15240] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2299'. [ 376.638658][ T5649] block nbd9: Receive control failed (result -32) [ 376.695551][T15230] bond9: entered promiscuous mode [ 376.734135][T15230] 8021q: adding VLAN 0 to HW filter on device bond9 [ 376.823558][T15237] 8021q: adding VLAN 0 to HW filter on device bond9 [ 376.836147][T15237] bond9: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 376.885232][T15237] bond9: (slave ip6gre3): Error -95 calling set_mac_address [ 376.961411][T15226] lo speed is unknown, defaulting to 1000 [ 376.992137][ C1] net_ratelimit: 22 callbacks suppressed [ 376.992155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.006160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.067979][T15263] netlink: 'syz.0.2305': attribute type 6 has an invalid length. [ 377.087645][T15263] netlink: 'syz.0.2305': attribute type 7 has an invalid length. [ 377.113931][T15263] netlink: 'syz.0.2305': attribute type 8 has an invalid length. [ 377.136213][T15263] netlink: 'syz.0.2305': attribute type 15 has an invalid length. [ 377.214166][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.222452][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.252384][ T7079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.260757][ T7079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.309402][T15266] bond11: ARP target 9.0.0.0 is already present [ 377.326337][T15266] bond11: option arp_ip_target: invalid value (9) [ 377.348978][T15266] bond11 (unregistering): Released all slaves [ 377.436099][T15272] tipc: New replicast peer: 255.255.255.255 [ 377.463627][T15272] tipc: Enabled bearer , priority 10 [ 377.906281][T15226] lo speed is unknown, defaulting to 1000 [ 377.908877][T15294] netlink: 'syz.2.2313': attribute type 1 has an invalid length. [ 378.011965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.021926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.220162][T15305] netlink: 'syz.1.2316': attribute type 29 has an invalid length. [ 378.256838][ T5649] block nbd14: Receive control failed (result -32) [ 378.322920][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.331201][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.397888][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 378.683714][T15336] FAULT_INJECTION: forcing a failure. [ 378.683714][T15336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.702396][T15336] CPU: 1 UID: 0 PID: 15336 Comm: syz.4.2321 Not tainted syzkaller #0 PREEMPT(full) [ 378.702426][T15336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.702447][T15336] Call Trace: [ 378.702518][T15336] [ 378.702568][T15336] dump_stack_lvl+0xe8/0x150 [ 378.702675][T15336] should_fail_ex+0x40c/0x560 [ 378.702774][T15336] _copy_to_user+0x31/0xb0 [ 378.702819][T15336] simple_read_from_buffer+0xe1/0x170 [ 378.702871][T15336] proc_fail_nth_read+0x1bb/0x230 [ 378.702913][T15336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.702961][T15336] ? rw_verify_area+0x24a/0x4c0 [ 378.702992][T15336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.703014][T15336] vfs_read+0x213/0xa80 [ 378.703044][T15336] ? __pfx___mutex_lock+0x10/0x10 [ 378.703117][T15336] ? __pfx_vfs_read+0x10/0x10 [ 378.703144][T15336] ? __fget_files+0x2a/0x420 [ 378.703170][T15336] ? __fget_files+0x3a2/0x420 [ 378.703191][T15336] ? __fget_files+0x2a/0x420 [ 378.703223][T15336] ksys_read+0x150/0x270 [ 378.703250][T15336] ? __pfx_ksys_read+0x10/0x10 [ 378.703283][T15336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.703315][T15336] do_syscall_64+0x174/0x580 [ 378.703350][T15336] ? trace_irq_disable+0x3b/0x140 [ 378.703395][T15336] ? clear_bhb_loop+0x40/0x90 [ 378.703417][T15336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.703435][T15336] RIP: 0033:0x7feb1b15d68e [ 378.703489][T15336] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.703525][T15336] RSP: 002b:00007feb1c072fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.703562][T15336] RAX: ffffffffffffffda RBX: 00007feb1c0736c0 RCX: 00007feb1b15d68e [ 378.703575][T15336] RDX: 000000000000000f RSI: 00007feb1c0730a0 RDI: 0000000000000008 [ 378.703585][T15336] RBP: 00007feb1c073090 R08: 0000000000000000 R09: 0000000000000000 [ 378.703595][T15336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.703606][T15336] R13: 00007feb1b416128 R14: 00007feb1b416090 R15: 00007ffc751519e8 [ 378.703632][T15336] [ 379.950790][T15370] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2330'. [ 380.009725][T15370] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2330'. [ 380.171316][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 380.209523][ T5649] block nbd16: Receive control failed (result -32) [ 380.239748][T15384] netlink: 'syz.0.2332': attribute type 10 has an invalid length. [ 380.355210][ T5649] block nbd2: Receive control failed (result -32) [ 380.829937][T15407] syzkaller0: entered promiscuous mode [ 380.837159][T15407] syzkaller0: entered allmulticast mode [ 381.053228][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 381.076558][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 381.110165][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 381.125654][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd17, 10) failed: No such file or directory [ 381.149192][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 381.166323][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 381.177542][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 381.187278][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 381.212217][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 381.250670][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 381.271177][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 381.300544][ T5649] block nbd18: Receive control failed (result -32) [ 382.014373][ T7075] net_ratelimit: 14 callbacks suppressed [ 382.014389][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.028429][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.036576][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.044715][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.056260][ T7079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.065406][ T7079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.055584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.063830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.195299][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.203552][ T7057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.250993][T15421] gretap0: entered promiscuous mode [ 383.263211][T15421] vlan4: entered promiscuous mode [ 384.005945][T15478] netlink: 'syz.3.2355': attribute type 21 has an invalid length. [ 384.043534][T15477] syzkaller0: entered promiscuous mode [ 384.060009][T15477] syzkaller0: entered allmulticast mode [ 384.207604][T15491] netlink: 'syz.4.2361': attribute type 1 has an invalid length. [ 384.275530][T15491] 8021q: adding VLAN 0 to HW filter on device bond9 [ 384.316313][T15497] 8021q: adding VLAN 0 to HW filter on device bond9 [ 384.351685][T15497] bond9: (slave gre1): The slave device specified does not support setting the MAC address [ 384.365544][T15497] bond9: (slave gre1): Error -95 calling set_mac_address [ 384.415555][T15501] sctp: [Deprecated]: syz.0.2363 (pid 15501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.415555][T15501] Use struct sctp_sack_info instead [ 384.437497][T15504] netlink: 'syz.2.2364': attribute type 10 has an invalid length. [ 384.476272][T15491] gretap5: entered promiscuous mode [ 384.513721][T15491] bond9: (slave gretap5): making interface the new active one [ 384.531651][T15491] bond9: (slave gretap5): Enslaving as an active interface with an up link [ 384.567451][T15507] macvlan6: entered promiscuous mode [ 384.573070][T15507] macvlan6: entered allmulticast mode [ 384.579464][T15507] bond9: entered promiscuous mode [ 384.585752][T15507] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 384.602021][T15507] bond9: (slave macvlan6): the slave hw address is in use by the bond; giving it the hw address of gretap5 [ 384.618432][T15507] bond9: left promiscuous mode [ 385.029611][T15533] netlink: 'syz.4.2369': attribute type 21 has an invalid length. [ 385.078191][T15533] netlink: 'syz.4.2369': attribute type 21 has an invalid length. [ 385.115407][T14918] udevd[14918]: inotify_add_watch(7, /dev/nbd17, 10) failed: No such file or directory [ 385.140492][T15533] netlink: 'syz.4.2369': attribute type 21 has an invalid length. [ 385.152710][T15533] netlink: 'syz.4.2369': attribute type 21 has an invalid length. [ 385.161242][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd17, 10) failed: No such file or directory [ 385.184200][ T5649] block nbd19: Receive control failed (result -32) [ 385.373370][T15547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.844669][T15579] syzkaller1: entered promiscuous mode [ 385.864333][T15579] syzkaller1: entered allmulticast mode [ 386.139139][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd17, 10) failed: No such file or directory [ 386.161539][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd17, 10) failed: No such file or directory [ 386.280377][T15579] bridge_slave_1: left allmulticast mode [ 386.287416][T15604] netlink: 'syz.1.2390': attribute type 1 has an invalid length. [ 386.315497][T15579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.328560][T15579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.410524][T15579] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 386.435389][T15579] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 386.442329][T15579] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 386.540721][T15579] bond5: left promiscuous mode [ 386.605434][T15579] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 386.616447][T15579] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 386.652672][T15579] 0ªî{X¹¦: left allmulticast mode [ 386.658081][T15579] macvlan3: left promiscuous mode [ 386.665371][T15579] macvlan3: left allmulticast mode [ 386.672268][T15579] batman_adv: batadv0: Interface deactivated: macsec0 [ 386.687453][T15579] syzkaller1: left promiscuous mode [ 386.692990][T15579] syzkaller1: left allmulticast mode [ 386.699804][T15591] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 386.843418][T15606] 8021q: adding VLAN 0 to HW filter on device bond14 [ 386.867145][T15606] bond13: (slave bond14): making interface the new active one [ 386.884311][T15606] bond13: (slave bond14): Enslaving as an active interface with an up link [ 386.933351][T15609] bond13: (slave gretap3): Enslaving as a backup interface with an up link [ 386.955550][ T7084] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.977136][T15622] __nla_validate_parse: 18 callbacks suppressed [ 386.977155][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2394'. [ 386.981392][ T7084] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.037870][T15612] 8021q: adding VLAN 0 to HW filter on device bond13 [ 387.072060][ C1] net_ratelimit: 50 callbacks suppressed [ 387.072079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.086155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.189488][T15634] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2396'. [ 387.209900][ T7084] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.220466][ T7084] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.232760][ T7084] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.244494][ T7084] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.315166][ T7084] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.338410][ T7084] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.575309][T15649] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.2401'. [ 387.673539][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.681798][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.692380][ T7079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.700653][ T7079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.837937][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2406'. [ 387.882598][T15662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2408'. [ 387.888474][T15658] netlink: 'syz.4.2406': attribute type 5 has an invalid length. [ 388.091967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.100240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.565946][T15702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.574576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.013817][T15733] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2429'. [ 389.344766][T15747] xt_hl: Unknown Hop Limit match mode: 206 [ 389.496573][T15756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2437'. [ 389.730718][T15768] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 389.738536][T15768] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 389.747878][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2440'. [ 389.772935][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2440'. [ 390.046490][T15777] netlink: 'syz.1.2445': attribute type 49 has an invalid length. [ 390.260957][T15788] syzkaller0: entered promiscuous mode [ 390.266999][T15788] syzkaller0: entered allmulticast mode [ 390.300521][T15786] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2448'. [ 390.370326][T15791] batadv_slave_1: entered promiscuous mode [ 390.455924][T15796] netlink: 'syz.3.2450': attribute type 1 has an invalid length. [ 390.593932][T15798] netlink: 'syz.1.2451': attribute type 12 has an invalid length. [ 390.804367][T15811] tipc: Failed to remove unknown binding: 66,0,0/0:1431248319/1431248321 [ 390.815046][T15811] tipc: Failed to remove unknown binding: 66,0,0/0:1431248319/1431248320 [ 390.824457][T15811] tipc: Failed to remove unknown binding: 66,0,0/0:1431248319/1431248321 [ 390.838307][T15811] tipc: Failed to remove unknown binding: 66,0,0/0:1431248319/1431248320 [ 391.211962][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 391.413115][T15819] lo speed is unknown, defaulting to 1000 [ 392.015920][T15860] x_tables: duplicate underflow at hook 1 [ 392.031455][T15860] netlink: 'syz.4.2470': attribute type 27 has an invalid length. [ 392.112103][ C1] net_ratelimit: 19 callbacks suppressed [ 392.112121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.126112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.152995][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.161344][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.171329][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.179572][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.188977][T15819] lo speed is unknown, defaulting to 1000 [ 392.196813][T15865] __nla_validate_parse: 5 callbacks suppressed [ 392.196829][T15865] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2472'. [ 392.492918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.502747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.550943][T15873] netlink: 'syz.2.2474': attribute type 4 has an invalid length. [ 392.602633][T15873] openvswitch: netlink: IP tunnel dst address not specified [ 392.677138][T15885] netlink: 'syz.4.2478': attribute type 50 has an invalid length. [ 393.132330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.274927][T15913] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2483'. [ 393.476493][T15918] netlink: 'syz.2.2485': attribute type 1 has an invalid length. [ 393.494731][T15918] netlink: 'syz.2.2485': attribute type 2 has an invalid length. [ 393.525497][T15918] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2485'. [ 393.543749][T15920] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.836166][T15931] netlink: 'syz.2.2488': attribute type 13 has an invalid length. [ 394.199280][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2489'. [ 394.236274][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2489'. [ 394.354928][T15944] tipc: Enabled bearer , priority 0 [ 394.440489][T15949] syzkaller0: entered promiscuous mode [ 394.477749][T15949] syzkaller0: entered allmulticast mode [ 394.576349][T15940] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 394.908743][T15939] tipc: Resetting bearer [ 394.967116][T15939] tipc: Disabling bearer [ 395.267246][T15981] bridge0: entered allmulticast mode [ 395.291064][T15984] syzkaller0: entered promiscuous mode [ 395.309723][T15984] syzkaller0: entered allmulticast mode [ 395.508908][T15995] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2507'. [ 395.625289][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2508'. [ 395.634943][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2508'. [ 395.644288][T15997] veth0_to_bond: entered allmulticast mode [ 395.940325][T16012] FAULT_INJECTION: forcing a failure. [ 395.940325][T16012] name failslab, interval 1, probability 0, space 0, times 0 [ 395.954702][T16012] CPU: 1 UID: 0 PID: 16012 Comm: syz.3.2512 Not tainted syzkaller #0 PREEMPT(full) [ 395.954731][T16012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 395.954744][T16012] Call Trace: [ 395.954752][T16012] [ 395.954761][T16012] dump_stack_lvl+0xe8/0x150 [ 395.954792][T16012] should_fail_ex+0x40c/0x560 [ 395.954833][T16012] should_failslab+0xa8/0x100 [ 395.954910][T16012] ? skb_clone+0x212/0x3a0 [ 395.955039][T16012] kmem_cache_alloc_noprof+0x87/0x650 [ 395.955083][T16012] skb_clone+0x212/0x3a0 [ 395.955110][T16012] __netlink_deliver_tap+0x413/0x860 [ 395.955197][T16012] ? netlink_deliver_tap+0x2e/0x1b0 [ 395.955222][T16012] netlink_deliver_tap+0x19c/0x1b0 [ 395.955247][T16012] netlink_unicast+0x77f/0x940 [ 395.955293][T16012] netlink_sendmsg+0x813/0xb40 [ 395.955327][T16012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.955355][T16012] ? aa_sock_msg_perm+0xf1/0x1b0 [ 395.955430][T16012] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 395.955471][T16012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.955501][T16012] ____sys_sendmsg+0x9b9/0xa20 [ 395.955564][T16012] ? __might_fault+0xaf/0x130 [ 395.955603][T16012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.955637][T16012] ? import_iovec+0x73/0xa0 [ 395.955692][T16012] ___sys_sendmsg+0x2a5/0x360 [ 395.955713][T16012] ? __lock_acquire+0x683/0x2cd0 [ 395.955759][T16012] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.955822][T16012] ? __fget_files+0x2a/0x420 [ 395.955849][T16012] ? __fget_files+0x3a2/0x420 [ 395.955886][T16012] __x64_sys_sendmsg+0x1bd/0x2a0 [ 395.955931][T16012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.955966][T16012] ? __pfx_ksys_write+0x10/0x10 [ 395.956008][T16012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.956047][T16012] do_syscall_64+0x174/0x580 [ 395.956067][T16012] ? trace_irq_disable+0x3b/0x140 [ 395.956098][T16012] ? clear_bhb_loop+0x40/0x90 [ 395.956125][T16012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.956146][T16012] RIP: 0033:0x7fb157b9ce59 [ 395.956166][T16012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.956183][T16012] RSP: 002b:00007fb1589a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.956206][T16012] RAX: ffffffffffffffda RBX: 00007fb157e15fa0 RCX: 00007fb157b9ce59 [ 395.956221][T16012] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 395.956235][T16012] RBP: 00007fb1589a9090 R08: 0000000000000000 R09: 0000000000000000 [ 395.956248][T16012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.956261][T16012] R13: 00007fb157e16038 R14: 00007fb157e15fa0 R15: 00007ffdcee54768 [ 395.956297][T16012] [ 395.956417][T16012] netlink: 'syz.3.2512': attribute type 50 has an invalid length. [ 396.248979][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2511'. [ 396.264265][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2511'. [ 396.603677][T16025] ip6tnl0: Caught tx_queue_len zero misconfig [ 396.635457][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd17, 10) failed: No such file or directory [ 397.034745][T16045] bond11: (slave lo): Releasing backup interface [ 397.063987][T16045] bond11: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 397.129134][T16045] net_ratelimit: 22 callbacks suppressed [ 397.129153][T16045] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 397.172727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.180992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.418933][T16056] FAULT_INJECTION: forcing a failure. [ 397.418933][T16056] name failslab, interval 1, probability 0, space 0, times 0 [ 397.464189][T16056] CPU: 1 UID: 0 PID: 16056 Comm: syz.3.2524 Not tainted syzkaller #0 PREEMPT(full) [ 397.464219][T16056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 397.464233][T16056] Call Trace: [ 397.464242][T16056] [ 397.464250][T16056] dump_stack_lvl+0xe8/0x150 [ 397.464280][T16056] should_fail_ex+0x40c/0x560 [ 397.464322][T16056] should_failslab+0xa8/0x100 [ 397.464357][T16056] ? skb_clone+0x212/0x3a0 [ 397.464380][T16056] kmem_cache_alloc_noprof+0x87/0x650 [ 397.464418][T16056] skb_clone+0x212/0x3a0 [ 397.464446][T16056] __netlink_deliver_tap+0x413/0x860 [ 397.464484][T16056] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.464508][T16056] netlink_deliver_tap+0x19c/0x1b0 [ 397.464534][T16056] netlink_unicast+0x77f/0x940 [ 397.464579][T16056] netlink_sendmsg+0x813/0xb40 [ 397.464613][T16056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.464642][T16056] ? aa_sock_msg_perm+0xf1/0x1b0 [ 397.464676][T16056] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.464704][T16056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.464730][T16056] ____sys_sendmsg+0x9b9/0xa20 [ 397.464753][T16056] ? __might_fault+0xaf/0x130 [ 397.464789][T16056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.464822][T16056] ? import_iovec+0x73/0xa0 [ 397.464851][T16056] ___sys_sendmsg+0x2a5/0x360 [ 397.464873][T16056] ? __lock_acquire+0x683/0x2cd0 [ 397.464901][T16056] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.464964][T16056] ? __fget_files+0x2a/0x420 [ 397.464994][T16056] ? __fget_files+0x3a2/0x420 [ 397.465041][T16056] __x64_sys_sendmsg+0x1bd/0x2a0 [ 397.465067][T16056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.465102][T16056] ? __pfx_ksys_write+0x10/0x10 [ 397.465144][T16056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.465168][T16056] do_syscall_64+0x174/0x580 [ 397.465189][T16056] ? trace_irq_disable+0x3b/0x140 [ 397.465221][T16056] ? clear_bhb_loop+0x40/0x90 [ 397.465247][T16056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.465269][T16056] RIP: 0033:0x7fb157b9ce59 [ 397.465290][T16056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.465308][T16056] RSP: 002b:00007fb1589a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.465329][T16056] RAX: ffffffffffffffda RBX: 00007fb157e15fa0 RCX: 00007fb157b9ce59 [ 397.465344][T16056] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 397.465357][T16056] RBP: 00007fb1589a9090 R08: 0000000000000000 R09: 0000000000000000 [ 397.465369][T16056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.465380][T16056] R13: 00007fb157e16038 R14: 00007fb157e15fa0 R15: 00007ffdcee54768 [ 397.465412][T16056] [ 397.467735][T16056] netlink: 'syz.3.2524': attribute type 50 has an invalid length. [ 397.885141][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.893390][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.902825][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.911038][ T7084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.251988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.260274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.480801][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd17, 10) failed: No such file or directory [ 398.706537][T16093] netlink: 'syz.2.2533': attribute type 58 has an invalid length. [ 398.923573][T16100] __nla_validate_parse: 1 callbacks suppressed [ 398.923593][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 399.052357][ T7079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.639713][T16136] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2544'. [ 399.733706][T16136] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2544'. [ 399.802995][T16136] bond0: left promiscuous mode [ 399.828686][T16136] bond0: left allmulticast mode [ 399.860175][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd17, 10) failed: No such file or directory [ 399.946829][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2547'. [ 399.996007][T16149] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2546'. [ 400.090298][T16153] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 400.118094][T16153] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 400.513347][T16163] SET target dimension over the limit! [ 400.590971][T16168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2553'. [ 401.282988][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd17, 10) failed: No such file or directory [ 401.307998][T16175] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 401.326242][T16175] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 401.605262][T16175] ip6gre1: left promiscuous mode [ 401.621396][T16175] ip6gre1: left allmulticast mode [ 401.646824][T16175] gretap1: left promiscuous mode [ 401.654774][T16175] gretap2: left allmulticast mode [ 401.680418][T16175] geneve3: left promiscuous mode [ 401.767419][T16175] bond8: left promiscuous mode [ 401.773638][T16175] vti0: left promiscuous mode [ 401.787632][T16175] geneve4: left promiscuous mode [ 401.794112][T16175] geneve4: left allmulticast mode [ 401.808569][T16175] ip6gre2: left promiscuous mode [ 401.814556][T16175] ip6gre2: left allmulticast mode [ 401.829339][T16175] bond11: left promiscuous mode [ 401.837934][T16175] bond12: left promiscuous mode [ 401.856246][T16175] bridge3: left promiscuous mode [ 401.862992][T16175] bridge3: left allmulticast mode [ 401.885700][T16175] bridge4: left promiscuous mode [ 401.899039][T16175] bridge4: left allmulticast mode [ 402.028650][ T7082] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.058625][ T7082] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.084694][ T7082] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.192001][ C1] net_ratelimit: 13 callbacks suppressed [ 402.192023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.206040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.382929][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.391755][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.412198][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.420533][ T7056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.587168][T16246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2572'. [ 402.660271][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2572'. [ 402.690925][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2572'. [ 402.718707][T13352] udevd[13352]: inotify_add_watch(7, /dev/nbd17, 10) failed: No such file or directory [ 402.739583][T16246] netlink: 58 bytes leftover after parsing attributes in process `syz.0.2572'. [ 402.765259][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd17, 10) failed: No such file or directory [ 402.955714][T16262] openvswitch: netlink: Invalid VLAN frame [ 403.021480][T16262] syzkaller0: entered promiscuous mode [ 403.027925][T16262] syzkaller0: entered allmulticast mode [ 403.212086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.220433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.319668][T16272] sctp: [Deprecated]: syz.2.2578 (pid 16272) Use of int in max_burst socket option. [ 403.319668][T16272] Use struct sctp_assoc_value instead [ 403.337448][T16243] IPVS: length: 35 != 24 [ 403.562658][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.683852][T16291] netlink: 'syz.2.2578': attribute type 4 has an invalid length. [ 404.611202][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd17, 10) failed: No such file or directory [ 404.683472][T13345] udevd[13345]: inotify_add_watch(7, /dev/nbd17, 10) failed: No such file or directory [ 404.730321][T16341] xt_hashlimit: size too large, truncated to 1048576 [ 404.856942][T16347] netlink: 'syz.1.2591': attribute type 11 has an invalid length. [ 405.384015][T16363] netlink: 'syz.3.2595': attribute type 21 has an invalid length. [ 405.435356][T16358] netlink: 'syz.3.2595': attribute type 32 has an invalid length. [ 405.466819][T16358] __nla_validate_parse: 1 callbacks suppressed [ 405.466839][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2595'. [ 405.807981][T16380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2597'. [ 407.232544][ C1] net_ratelimit: 17 callbacks suppressed [ 407.232566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.246563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.329223][T16363] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2595'. [ 407.365732][T16358] bond10: option coupled_control: invalid value (12) [ 407.375999][T16358] bond10 (unregistering): Released all slaves [ 407.433307][T16380] hsr_slave_0: left promiscuous mode [ 407.456630][T16380] hsr_slave_1: left promiscuous mode [ 407.620835][T16391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2599'. [ 407.738848][T16396] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 407.796211][T16397] syzkaller1: entered promiscuous mode [ 407.809087][T16397] syzkaller1: entered allmulticast mode [ 407.836735][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2602'. [ 407.861194][T16397] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 407.913711][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 407.930414][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 408.023291][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.031532][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.041250][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.051072][ T7082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.251974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.260285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.336843][T16419] sctp: [Deprecated]: syz.0.2609 (pid 16419) Use of int in maxseg socket option. [ 408.336843][T16419] Use struct sctp_assoc_value instead [ 408.391178][T16419] sctp: [Deprecated]: syz.0.2609 (pid 16419) Use of int in max_burst socket option deprecated. [ 408.391178][T16419] Use struct sctp_assoc_value instead [ 408.767936][T16432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.779297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.954331][T16448] netlink: 203340 bytes leftover after parsing attributes in process `syz.0.2618'. [ 409.321370][T16469] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2623'. [ 409.689291][T16485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2627'. [ 410.193454][T16509] syzkaller0: entered promiscuous mode [ 410.214881][T16509] syzkaller0: entered allmulticast mode [ 410.586223][T16527] __nla_validate_parse: 1 callbacks suppressed [ 410.586246][T16527] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2640'. [ 410.768981][T16535] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2641'. [ 412.272606][ C1] net_ratelimit: 14 callbacks suppressed [ 412.272627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.286676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.514847][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.523094][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.542651][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.550988][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.295185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.303452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.645527][T16530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.655279][ T7070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.663540][ T7070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.694519][T16544] netlink: 'syz.1.2643': attribute type 6 has an invalid length. [ 413.725632][T16544] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2643'. [ 413.762743][T16544] workqueue: Failed to create a rescuer kthread for wq "nbd17-recv": -EINTR [ 413.762875][T16544] block (null): Could not allocate knbd recv work queue. [ 413.821650][T16544] nbd: failed to add new device [ 413.834504][T16545] netlink: 5252 bytes leftover after parsing attributes in process `syz.1.2643'. [ 413.884561][T16545] workqueue: Failed to create a rescuer kthread for wq "nbd17-recv": -EINTR [ 413.887629][T16545] block (null): Could not allocate knbd recv work queue. [ 413.976902][T16545] nbd: failed to add new device [ 414.249398][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 414.635727][T16570] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2650'. [ 415.032515][T16583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2657'. [ 415.037389][T16611] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2664'. [ 415.043054][T16583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2657'. [ 415.319863][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'. [ 415.394741][T16618] gretap2: entered allmulticast mode [ 415.726682][T16632] netlink: 'syz.1.2672': attribute type 235 has an invalid length. [ 415.744766][T16634] netlink: 'syz.3.2669': attribute type 4 has an invalid length. [ 415.761772][T16634] __nla_validate_parse: 2 callbacks suppressed [ 415.761793][T16634] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2669'. [ 415.874214][T16632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.983749][T16632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.341488][T16652] tipc: Enabled bearer , priority 0 [ 416.367578][T16652] syzkaller0: entered promiscuous mode [ 416.383851][T16652] syzkaller0: entered allmulticast mode [ 416.406281][T16654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2677'. [ 416.490116][T16652] tipc: Resetting bearer [ 416.525720][T16650] tipc: Resetting bearer [ 416.619141][T16650] tipc: Disabling bearer [ 416.659754][T16662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2680'. [ 416.888481][T16670] macvtap2: entered allmulticast mode [ 416.903675][T16670] dummy0: entered allmulticast mode [ 416.911216][T16670] dummy0: entered promiscuous mode [ 416.921416][T16670] dummy0: left allmulticast mode [ 416.973546][T12545] dummy0: left promiscuous mode [ 417.311948][ C1] net_ratelimit: 16 callbacks suppressed [ 417.311970][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.325967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.631168][T16692] netlink: 'syz.0.2690': attribute type 1 has an invalid length. [ 417.753152][T16692] 8021q: adding VLAN 0 to HW filter on device bond11 [ 417.951302][T16699] syzkaller0: entered promiscuous mode [ 417.967747][T16699] syzkaller0: entered allmulticast mode [ 418.113009][ T7065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.121287][ T7065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.132825][ T7085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.141188][ T7085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.332055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.340461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.500967][T16726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2698'. [ 418.715272][T16736] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2699'. [ 419.292217][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.300445][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.468396][T16761] netlink: 'syz.3.2706': attribute type 10 has an invalid length. [ 419.514965][T16761] netlink: 'syz.3.2706': attribute type 10 has an invalid length. [ 420.700496][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2721'. [ 420.721969][T16833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2721'. [ 420.757924][T16833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2721'. [ 422.353946][ C1] net_ratelimit: 12 callbacks suppressed [ 422.353964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.368085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.633154][ T7085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.641517][ T7085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.674288][ T7085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.682518][ T7085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.372810][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.381007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.782485][ T7065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.790806][ T7065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.809256][T16865] tipc: New replicast peer: 255.255.255.255 [ 423.817058][T16865] tipc: Enabled bearer , priority 10 [ 423.826950][T16878] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 423.828291][T16889] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 423.845505][T16866] netlink: 'syz.4.2728': attribute type 1 has an invalid length. [ 423.856633][T16880] netlink: 'syz.0.2731': attribute type 3 has an invalid length. [ 423.889318][T16880] netlink: 'syz.0.2731': attribute type 1 has an invalid length. [ 423.902527][T16880] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2731'. [ 424.233009][T16906] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 424.415340][T16910] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2737'. [ 425.286941][T16933] netlink: 'syz.3.2745': attribute type 1 has an invalid length. [ 425.411899][T16933] bond10: entered promiscuous mode [ 425.425348][T16933] bond10: entered allmulticast mode [ 425.445191][T16933] 8021q: adding VLAN 0 to HW filter on device bond10 [ 425.620243][T16941] xt_hashlimit: max too large, truncated to 1048576 [ 425.645170][T16955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2750'. [ 425.856801][T16955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2750'. [ 426.003333][T16968] tc_dump_action: action bad kind [ 426.010846][T16970] netlink: 'syz.4.2753': attribute type 1 has an invalid length. [ 426.066191][T16970] 8021q: adding VLAN 0 to HW filter on device bond10 [ 426.077176][T16968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2752'. [ 426.227562][T16985] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20003 [ 426.270869][T16970] bond10: (slave syz_tun): Enslaving as a backup interface with an up link [ 426.427831][T16970] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2753'. [ 426.456641][T16970] netlink: 'syz.4.2753': attribute type 1 has an invalid length. [ 426.521473][T16970] netlink: 'syz.4.2753': attribute type 2 has an invalid length. [ 426.581070][T16970] netlink: 'syz.4.2753': attribute type 2 has an invalid length. [ 426.670278][T17002] vti0: entered promiscuous mode [ 427.011022][T17021] tipc: Resetting bearer [ 427.026136][T17027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2766'. [ 427.109599][T17030] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 427.152471][ T5365] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 427.163749][T17033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2767'. [ 427.319662][T17037] netlink: 'syz.3.2770': attribute type 1 has an invalid length. [ 427.392027][ C1] net_ratelimit: 16 callbacks suppressed [ 427.392049][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.396184][T17037] 8021q: adding VLAN 0 to HW filter on device bond11 [ 427.398095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.452190][ T5730] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 427.501667][T17036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2769'. [ 427.505691][T17015] netdevsim0: mtu less than device minimum [ 427.524095][T17036] netlink: 41 bytes leftover after parsing attributes in process `syz.2.2769'. [ 427.738390][T17057] : entered promiscuous mode [ 427.952228][T17066] lo speed is unknown, defaulting to 1000 [ 428.218584][T17080] veth1_macvtap: left allmulticast mode [ 428.234677][T17080] veth1_macvtap: left promiscuous mode [ 428.264740][ T7065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.273046][ T7065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.282508][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.290709][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.313523][T17082] netlink: 'syz.0.2781': attribute type 50 has an invalid length. [ 428.408591][T17080] veth1_macvtap: entered promiscuous mode [ 428.414868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.423192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.451002][T17080] veth1_macvtap: entered allmulticast mode [ 428.552443][T17083] 8021q: adding VLAN 0 to HW filter on device bond12 [ 428.990348][T17124] tipc: Enabling of bearer rejected, failed to enable media [ 429.061360][T17066] lo speed is unknown, defaulting to 1000 [ 429.089392][T17129] __nla_validate_parse: 7 callbacks suppressed [ 429.089413][T17129] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2791'. [ 429.175365][T17132] netlink: 'syz.1.2791': attribute type 17 has an invalid length. [ 429.189724][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2792'. [ 429.234294][T17131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2792'. [ 429.369183][T17131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2792'. [ 429.397991][T17134] lo speed is unknown, defaulting to 1000 [ 429.442463][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.725300][T17145] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 430.097679][T17153] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 430.174847][T17158] netlink: 296 bytes leftover after parsing attributes in process `syz.1.2798'. [ 430.357756][T17136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2793'. [ 430.414090][T17136] netlink: 'syz.4.2793': attribute type 1 has an invalid length. [ 430.563829][T17136] 8021q: adding VLAN 0 to HW filter on device bond11 [ 430.655451][T17173] netlink: 840 bytes leftover after parsing attributes in process `syz.1.2800'. [ 430.684403][T17134] lo speed is unknown, defaulting to 1000 [ 431.105870][T17192] netlink: 'syz.0.2804': attribute type 1 has an invalid length. [ 431.184890][T17192] 8021q: adding VLAN 0 to HW filter on device bond12 [ 431.260894][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2804'. [ 431.300760][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2804'. [ 431.596426][T17207] netlink: 296 bytes leftover after parsing attributes in process `syz.3.2806'. [ 431.813249][T17216] netlink: 'syz.3.2806': attribute type 3 has an invalid length. [ 431.859173][T17216] netlink: 'syz.3.2806': attribute type 2 has an invalid length. [ 431.905691][T17216] netlink: 'syz.3.2806': attribute type 2 has an invalid length. [ 432.087643][T17212] netlink: 'syz.1.2808': attribute type 5 has an invalid length. [ 432.432091][ C1] net_ratelimit: 14 callbacks suppressed [ 432.432111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.446106][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.748065][T17253] netlink: 'syz.4.2816': attribute type 1 has an invalid length. [ 432.780511][T17253] netlink: 'syz.4.2816': attribute type 3 has an invalid length. [ 432.790624][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.798820][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.806967][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.815167][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.899267][T17269] bridge5: entered allmulticast mode [ 433.433214][T17286] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 433.452062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.460364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.710639][T17303] netlink: 'syz.0.2826': attribute type 2 has an invalid length. [ 433.956745][ T6313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.965009][ T6313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.176436][T17320] netlink: 'syz.3.2831': attribute type 1 has an invalid length. [ 434.298825][T17320] 8021q: adding VLAN 0 to HW filter on device bond13 [ 434.326658][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 434.346421][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 434.354681][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 434.361264][T17332] __nla_validate_parse: 7 callbacks suppressed [ 434.361317][T17332] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2833'. [ 434.388374][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 434.404017][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 434.420619][T17320] bond13: (slave ip6gretap3): making interface the new active one [ 434.478543][T17320] bond13: (slave ip6gretap3): Enslaving as an active interface with an up link [ 434.542538][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2831'. [ 434.662874][T17324] macvlan6: entered promiscuous mode [ 434.680941][T17324] macvlan6: entered allmulticast mode [ 434.701255][T17324] bond13: entered allmulticast mode [ 434.715238][T17324] ip6gretap3: entered allmulticast mode [ 434.730295][T17324] ip6gretap3: entered promiscuous mode [ 434.754049][T17324] bond13: entered promiscuous mode [ 434.769718][T17324] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 434.797021][T17324] team0: Port device macvlan6 added [ 434.843819][T17347] bond0: (slave bond_slave_0): Releasing backup interface [ 434.936399][T17347] bond0: (slave bond_slave_1): Releasing backup interface [ 435.031406][T17347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.083848][T17347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.139032][T17347] bond4: (slave bridge3): Releasing backup interface [ 435.158621][T17347] batman_adv: batadv0: Removing interface: macsec0 [ 435.267643][ T5633] bond10: (slave syz_tun): Removing an active aggregator [ 435.284301][ T5633] bond10: (slave syz_tun): Releasing backup interface [ 435.506298][T17366] team0: Device xfrm0 is of different type [ 435.660672][T17376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2841'. [ 435.833846][T17380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2842'. [ 435.917301][T17328] lo speed is unknown, defaulting to 1000 [ 436.016565][T17389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2846'. [ 436.069725][T17394] netlink: 'syz.1.2846': attribute type 1 has an invalid length. [ 436.188537][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'. [ 436.201311][T17399] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2846'. [ 436.228895][T17394] 8021q: adding VLAN 0 to HW filter on device bond16 [ 436.494512][ T5636] Bluetooth: hci5: command tx timeout [ 436.566938][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2852'. [ 436.616716][T17414] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2851'. [ 436.660104][T17328] lo speed is unknown, defaulting to 1000 [ 437.472128][ C1] net_ratelimit: 16 callbacks suppressed [ 437.472151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.486220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.809663][T17456] netlink: 'syz.1.2864': attribute type 1 has an invalid length. [ 437.864610][T17456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.904981][T17464] netlink: 'syz.0.2865': attribute type 5 has an invalid length. [ 438.433630][ T7065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.441911][ T7065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.451065][ T6313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.459341][ T6313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.491927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.500244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.515319][T17328] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.543373][T17328] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.561047][T17328] bridge_slave_0: entered allmulticast mode [ 438.572187][ T5636] Bluetooth: hci5: command tx timeout [ 438.584729][T17500] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2871'. [ 438.594858][T17328] bridge_slave_0: entered promiscuous mode [ 438.610385][T17328] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.618368][T17328] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.628075][T17328] bridge_slave_1: entered allmulticast mode [ 438.644633][T17328] bridge_slave_1: entered promiscuous mode [ 438.807131][T17328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.824348][T17328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.834724][T17507] veth0_macvtap: entered allmulticast mode [ 438.977279][T17328] team0: Port device team_slave_0 added [ 438.998543][T17328] team0: Port device team_slave_1 added [ 439.126016][T17328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.133337][T17328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.186093][T17328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.277184][T17328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.297152][T17328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.336785][T17328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.346924][T17524] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 439.531986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.577239][T17328] hsr_slave_0: entered promiscuous mode [ 439.594421][T17328] hsr_slave_1: entered promiscuous mode [ 439.692097][ T3377] wlan1: Trigger new scan to find an IBSS to join [ 439.915221][T17558] xt_hashlimit: size too large, truncated to 1048576 [ 440.223000][T17328] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.250589][T17328] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.288817][T17328] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 440.462665][T17575] netlink: 'syz.2.2886': attribute type 1 has an invalid length. [ 440.501391][T17575] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2886'. [ 440.578978][T17328] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.598349][T17580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2887'. [ 440.606387][T17328] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.622792][T17328] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 440.654312][ T5649] Bluetooth: hci5: command tx timeout [ 440.811144][T17328] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.826934][T17328] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.839993][T17328] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 440.971288][T17328] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.009762][T17328] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.041912][T17328] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 441.443986][T17609] macvlan10: entered allmulticast mode [ 441.706628][T17328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 441.752691][T17328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.785968][T17328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 441.819862][T17622] nbd: must specify at least one socket [ 441.850567][T17328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.883918][T17328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 441.932550][T17328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.959884][T17328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 442.010476][T17328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.136441][T17626] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.2896'. [ 442.347473][T17328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.417320][T17328] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.451139][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.458393][ T7085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.511971][ C1] net_ratelimit: 13 callbacks suppressed [ 442.511991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.526039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.560940][ T3377] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.568742][ T3377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.656531][ T6313] wlan1: Trigger new scan to find an IBSS to join [ 442.733761][ T5649] Bluetooth: hci5: command 0x0419 tx timeout [ 442.804005][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'. [ 442.973800][ T6311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.982104][ T6311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.001364][ T7085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.009652][ T7085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.036132][T17681] nbd: must specify at least one socket [ 443.111552][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'. [ 443.123718][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'. [ 443.218449][T17688] gretap0: entered allmulticast mode [ 443.254674][T17690] block nbd0: reconnected socket [ 443.260064][ T5636] block nbd0: Receive control failed (result -107) [ 443.485798][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2908'. [ 443.531969][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.540228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.624853][T17700] syz.1.2911 (17700) used obsolete PPPIOCDETACH ioctl [ 443.757275][T17703] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 443.783199][T17703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2912'. [ 443.815137][T17703] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2912'. [ 443.824987][T17703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2912'. [ 443.836347][T17708] netlink: 'syz.3.2913': attribute type 21 has an invalid length. [ 443.911598][T17328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.013663][T17717] nbd: must specify at least one socket [ 444.122270][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.180345][T17726] netlink: 'syz.1.2919': attribute type 39 has an invalid length. [ 444.622612][T17746] syzkaller0: entered promiscuous mode [ 444.641020][T17746] syzkaller0: entered allmulticast mode [ 444.793322][T17328] veth0_vlan: entered promiscuous mode [ 444.810502][T17328] veth1_vlan: entered promiscuous mode [ 444.816917][ T5636] Bluetooth: hci5: command 0x0419 tx timeout [ 444.869365][T17328] veth0_macvtap: entered promiscuous mode [ 444.881078][T17328] veth1_macvtap: entered promiscuous mode [ 444.907696][T17328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.939916][T17328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.029167][ T7085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.067151][ T6311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.080794][ T6311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.101409][T17770] [ 445.103800][T17770] ====================================================== [ 445.110920][T17770] WARNING: possible circular locking dependency detected [ 445.118041][T17770] syzkaller #0 Not tainted [ 445.122539][T17770] ------------------------------------------------------ [ 445.129668][T17770] syz.1.2929/17770 is trying to acquire lock: [ 445.135766][T17770] ffff888074ca2318 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 445.144918][T17770] [ 445.144918][T17770] but task is already holding lock: [ 445.152300][T17770] ffff888028621828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 445.161843][T17770] [ 445.161843][T17770] which lock already depends on the new lock. [ 445.161843][T17770] [ 445.172266][T17770] [ 445.172266][T17770] the existing dependency chain (in reverse order) is: [ 445.181303][T17770] [ 445.181303][T17770] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 445.189572][T17770] __mutex_lock+0x19d/0x1590 [ 445.194807][T17770] elevator_change+0x1af/0x480 [ 445.200115][T17770] elevator_set_none+0xb5/0x140 [ 445.205512][T17770] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 445.211961][T17770] nbd_start_device+0x189/0xb30 [ 445.217431][T17770] nbd_genl_connect+0x1597/0x1c10 [ 445.222998][T17770] genl_family_rcv_msg_doit+0x233/0x340 [ 445.229117][T17770] genl_rcv_msg+0x614/0x7a0 [ 445.234169][T17770] netlink_rcv_skb+0x226/0x4a0 [ 445.239564][T17770] genl_rcv+0x28/0x40 [ 445.244111][T17770] netlink_unicast+0x7bb/0x940 [ 445.249422][T17770] netlink_sendmsg+0x813/0xb40 [ 445.254727][T17770] ____sys_sendmsg+0x9b9/0xa20 [ 445.260029][T17770] ___sys_sendmsg+0x2a5/0x360 [ 445.265246][T17770] __x64_sys_sendmsg+0x1bd/0x2a0 [ 445.270721][T17770] do_syscall_64+0x174/0x580 [ 445.275848][T17770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.282277][T17770] [ 445.282277][T17770] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 445.290912][T17770] blk_alloc_queue+0x544/0x690 [ 445.296279][T17770] __blk_mq_alloc_disk+0x194/0x390 [ 445.301946][T17770] nbd_dev_add+0x494/0xb60 [ 445.306924][T17770] nbd_init+0x15f/0x1e0 [ 445.311738][T17770] do_one_initcall+0x250/0x870 [ 445.317146][T17770] do_initcall_level+0x10a/0x1a0 [ 445.322716][T17770] do_initcalls+0x59/0xa0 [ 445.327597][T17770] kernel_init_freeable+0x29d/0x3e0 [ 445.333343][T17770] kernel_init+0x1d/0x1d0 [ 445.338272][T17770] ret_from_fork+0x514/0xb70 [ 445.343418][T17770] ret_from_fork_asm+0x1a/0x30 [ 445.349020][T17770] [ 445.349020][T17770] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 445.356456][T17770] fs_reclaim_acquire+0x71/0x100 [ 445.361956][T17770] __kmalloc_cache_node_noprof+0x48/0x690 [ 445.368224][T17770] create_worker+0x112/0x7b0 [ 445.373384][T17770] workqueue_prepare_cpu+0xe4/0x170 [ 445.379129][T17770] cpuhp_invoke_callback+0x448/0x860 [ 445.384969][T17770] _cpu_up+0x2ce/0x5b0 [ 445.389579][T17770] cpu_up+0x1d2/0x220 [ 445.394094][T17770] cpuhp_bringup_mask+0xb2/0x1a0 [ 445.399639][T17770] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 445.406022][T17770] bringup_nonboot_cpus+0x17/0x30 [ 445.411593][T17770] smp_init+0x32/0x110 [ 445.416345][T17770] kernel_init_freeable+0x27f/0x3e0 [ 445.422093][T17770] kernel_init+0x1d/0x1d0 [ 445.426980][T17770] ret_from_fork+0x514/0xb70 [ 445.432128][T17770] ret_from_fork_asm+0x1a/0x30 [ 445.437444][T17770] [ 445.437444][T17770] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 445.445206][T17770] cpus_read_lock+0x42/0x160 [ 445.450356][T17770] static_key_slow_inc+0x12/0x30 [ 445.455854][T17770] nbd_genl_reconfigure+0x1301/0x1e80 [ 445.461773][T17770] genl_family_rcv_msg_doit+0x233/0x340 [ 445.467864][T17770] genl_rcv_msg+0x614/0x7a0 [ 445.472911][T17770] netlink_rcv_skb+0x226/0x4a0 [ 445.478207][T17770] genl_rcv+0x28/0x40 [ 445.482778][T17770] netlink_unicast+0x7bb/0x940 [ 445.488211][T17770] netlink_sendmsg+0x813/0xb40 [ 445.493517][T17770] ____sys_sendmsg+0x9b9/0xa20 [ 445.498829][T17770] ___sys_sendmsg+0x2a5/0x360 [ 445.504045][T17770] __x64_sys_sendmsg+0x1bd/0x2a0 [ 445.509546][T17770] do_syscall_64+0x174/0x580 [ 445.515333][T17770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.521822][T17770] [ 445.521822][T17770] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 445.529504][T17770] __mutex_lock+0x19d/0x1590 [ 445.534729][T17770] nbd_queue_rq+0x373/0x1150 [ 445.539872][T17770] blk_mq_dispatch_rq_list+0x499/0x1990 [ 445.545961][T17770] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 445.552903][T17770] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 445.559516][T17770] blk_mq_run_hw_queue+0x348/0x4f0 [ 445.565197][T17770] blk_mq_dispatch_list+0xd11/0xe10 [ 445.570958][T17770] blk_mq_flush_plug_list+0x45f/0x540 [ 445.576891][T17770] __blk_flush_plug+0x3ed/0x4d0 [ 445.582297][T17770] __submit_bio+0x465/0x560 [ 445.587353][T17770] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 445.593562][T17770] block_read_full_folio+0x599/0x830 [ 445.599424][T17770] filemap_read_folio+0x12c/0x3a0 [ 445.605439][T17770] do_read_cache_folio+0x354/0x590 [ 445.611111][T17770] read_part_sector+0xb6/0x2b0 [ 445.616498][T17770] adfspart_check_ICS+0xb1/0x960 [ 445.621985][T17770] bdev_disk_changed+0x82b/0x1780 [ 445.627560][T17770] blkdev_get_whole+0x372/0x510 [ 445.633005][T17770] bdev_open+0x324/0xd70 [ 445.637803][T17770] blkdev_open+0x461/0x600 [ 445.642769][T17770] do_dentry_open+0x816/0x1380 [ 445.648176][T17770] vfs_open+0x3b/0x340 [ 445.652804][T17770] path_openat+0x2e3b/0x3890 [ 445.657955][T17770] do_file_open+0x23e/0x4a0 [ 445.663015][T17770] do_sys_openat2+0x113/0x200 [ 445.668247][T17770] __x64_sys_openat+0x138/0x170 [ 445.673663][T17770] do_syscall_64+0x174/0x580 [ 445.678895][T17770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.685349][T17770] [ 445.685349][T17770] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 445.692592][T17770] __mutex_lock+0x19d/0x1590 [ 445.697758][T17770] nbd_queue_rq+0xc1/0x1150 [ 445.702826][T17770] blk_mq_dispatch_rq_list+0x499/0x1990 [ 445.708927][T17770] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 445.715815][T17770] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 445.722353][T17770] blk_mq_run_hw_queue+0x348/0x4f0 [ 445.728013][T17770] blk_mq_dispatch_list+0xd11/0xe10 [ 445.733764][T17770] blk_mq_flush_plug_list+0x45f/0x540 [ 445.739685][T17770] __blk_flush_plug+0x3ed/0x4d0 [ 445.745183][T17770] __submit_bio+0x465/0x560 [ 445.750248][T17770] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 445.756446][T17770] block_read_full_folio+0x599/0x830 [ 445.762290][T17770] filemap_read_folio+0x12c/0x3a0 [ 445.767876][T17770] do_read_cache_folio+0x354/0x590 [ 445.773899][T17770] read_part_sector+0xb6/0x2b0 [ 445.779231][T17770] adfspart_check_ICS+0xb1/0x960 [ 445.784837][T17770] bdev_disk_changed+0x82b/0x1780 [ 445.790432][T17770] blkdev_get_whole+0x372/0x510 [ 445.795865][T17770] bdev_open+0x324/0xd70 [ 445.800667][T17770] blkdev_open+0x461/0x600 [ 445.805634][T17770] do_dentry_open+0x816/0x1380 [ 445.810949][T17770] vfs_open+0x3b/0x340 [ 445.815557][T17770] path_openat+0x2e3b/0x3890 [ 445.821377][T17770] do_file_open+0x23e/0x4a0 [ 445.826784][T17770] do_sys_openat2+0x113/0x200 [ 445.832024][T17770] __x64_sys_openat+0x138/0x170 [ 445.837430][T17770] do_syscall_64+0x174/0x580 [ 445.842569][T17770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.849011][T17770] [ 445.849011][T17770] -> #0 (set->srcu){.+.+}-{0:0}: [ 445.856174][T17770] __lock_acquire+0x1520/0x2cd0 [ 445.861566][T17770] lock_sync+0x9d/0x120 [ 445.866264][T17770] __synchronize_srcu+0xc9/0x2f0 [ 445.871752][T17770] elevator_switch+0x1e8/0x7b0 [ 445.877290][T17770] elevator_change+0x2fa/0x480 [ 445.882600][T17770] elevator_set_default+0x375/0x440 [ 445.888342][T17770] blk_register_queue+0x3f3/0x4e0 [ 445.893916][T17770] __add_disk+0x6cb/0xe30 [ 445.898791][T17770] add_disk_fwnode+0xfb/0x4b0 [ 445.904043][T17770] nbd_dev_add+0x733/0xb60 [ 445.909004][T17770] nbd_genl_connect+0x992/0x1c10 [ 445.914489][T17770] genl_family_rcv_msg_doit+0x233/0x340 [ 445.920585][T17770] genl_rcv_msg+0x614/0x7a0 [ 445.925632][T17770] netlink_rcv_skb+0x226/0x4a0 [ 445.930937][T17770] genl_rcv+0x28/0x40 [ 445.935470][T17770] netlink_unicast+0x7bb/0x940 [ 445.940779][T17770] netlink_sendmsg+0x813/0xb40 [ 445.946081][T17770] ____sys_sendmsg+0x9b9/0xa20 [ 445.951402][T17770] ___sys_sendmsg+0x2a5/0x360 [ 445.956650][T17770] __x64_sys_sendmsg+0x1bd/0x2a0 [ 445.962134][T17770] do_syscall_64+0x174/0x580 [ 445.967316][T17770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.973752][T17770] [ 445.973752][T17770] other info that might help us debug this: [ 445.973752][T17770] [ 445.983997][T17770] Chain exists of: [ 445.983997][T17770] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 445.983997][T17770] [ 445.997686][T17770] Possible unsafe locking scenario: [ 445.997686][T17770] [ 446.005181][T17770] CPU0 CPU1 [ 446.010644][T17770] ---- ---- [ 446.016091][T17770] lock(&q->elevator_lock); [ 446.020709][T17770] lock(&q->q_usage_counter(io)#49); [ 446.028630][T17770] lock(&q->elevator_lock); [ 446.035778][T17770] sync(set->srcu); [ 446.039698][T17770] [ 446.039698][T17770] *** DEADLOCK *** [ 446.039698][T17770] [ 446.047863][T17770] 6 locks held by syz.1.2929/17770: [ 446.053171][T17770] #0: ffffffff8fe2d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 446.061560][T17770] #1: ffffffff8fe2d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 446.070567][T17770] #2: ffff8880566371c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x4b0 [ 446.080972][T17770] #3: ffff8880286218b0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 446.090860][T17770] #4: ffff888028621338 (&q->q_usage_counter(queue)#68){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 446.101779][T17770] #5: ffff888028621828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 446.111650][T17770] [ 446.111650][T17770] stack backtrace: [ 446.117555][T17770] CPU: 1 UID: 0 PID: 17770 Comm: syz.1.2929 Not tainted syzkaller #0 PREEMPT(full) [ 446.117584][T17770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 446.117596][T17770] Call Trace: [ 446.117604][T17770] [ 446.117614][T17770] dump_stack_lvl+0xe8/0x150 [ 446.117636][T17770] print_circular_bug+0x2e1/0x300 [ 446.117663][T17770] check_noncircular+0x12e/0x150 [ 446.117688][T17770] __lock_acquire+0x1520/0x2cd0 [ 446.117707][T17770] ? check_noncircular+0xda/0x150 [ 446.117732][T17770] ? lockdep_unlock+0x5d/0xd0 [ 446.117747][T17770] ? __lock_acquire+0x13e8/0x2cd0 [ 446.117766][T17770] ? __lock_acquire+0x13e8/0x2cd0 [ 446.117788][T17770] ? __synchronize_srcu+0xb5/0x2f0 [ 446.117805][T17770] lock_sync+0x9d/0x120 [ 446.117821][T17770] ? __synchronize_srcu+0xb5/0x2f0 [ 446.117840][T17770] __synchronize_srcu+0xc9/0x2f0 [ 446.117858][T17770] ? __pfx___synchronize_srcu+0x10/0x10 [ 446.117874][T17770] ? do_raw_spin_lock+0x12b/0x2f0 [ 446.117904][T17770] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 446.117988][T17770] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 446.118024][T17770] ? synchronize_srcu+0x20a/0x260 [ 446.118042][T17770] elevator_switch+0x1e8/0x7b0 [ 446.118061][T17770] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 446.118088][T17770] elevator_change+0x2fa/0x480 [ 446.118107][T17770] ? do_raw_spin_unlock+0xf5/0x210 [ 446.118134][T17770] elevator_set_default+0x375/0x440 [ 446.118155][T17770] ? __pfx_elevator_set_default+0x10/0x10 [ 446.118180][T17770] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 446.118210][T17770] ? blk_crypto_sysfs_register+0x11c/0x170 [ 446.118260][T17770] blk_register_queue+0x3f3/0x4e0 [ 446.118286][T17770] __add_disk+0x6cb/0xe30 [ 446.118315][T17770] add_disk_fwnode+0xfb/0x4b0 [ 446.118342][T17770] nbd_dev_add+0x733/0xb60 [ 446.118370][T17770] ? __pfx_nbd_dev_add+0x10/0x10 [ 446.118404][T17770] ? bpf_lsm_capable+0x9/0x20 [ 446.118421][T17770] ? security_capable+0x7e/0x2c0 [ 446.118503][T17770] nbd_genl_connect+0x992/0x1c10 [ 446.118533][T17770] ? __pfx_nbd_genl_connect+0x10/0x10 [ 446.118560][T17770] ? rcu_is_watching+0x15/0xb0 [ 446.118593][T17770] ? trace_kmalloc+0x2a/0xf0 [ 446.118622][T17770] ? __nla_parse+0x40/0x60 [ 446.118666][T17770] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 446.118694][T17770] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 446.118724][T17770] genl_family_rcv_msg_doit+0x233/0x340 [ 446.118753][T17770] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 446.118783][T17770] ? __lock_acquire+0x683/0x2cd0 [ 446.118806][T17770] genl_rcv_msg+0x614/0x7a0 [ 446.118833][T17770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.118857][T17770] ? __pfx_nbd_genl_connect+0x10/0x10 [ 446.118887][T17770] netlink_rcv_skb+0x226/0x4a0 [ 446.118906][T17770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.118931][T17770] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.118956][T17770] ? down_read+0x270/0x2e0 [ 446.118974][T17770] ? genl_rcv+0xd/0x40 [ 446.118997][T17770] genl_rcv+0x28/0x40 [ 446.119019][T17770] netlink_unicast+0x7bb/0x940 [ 446.119053][T17770] netlink_sendmsg+0x813/0xb40 [ 446.119077][T17770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.119098][T17770] ? aa_sock_msg_perm+0xf1/0x1b0 [ 446.119125][T17770] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 446.119148][T17770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.119173][T17770] ____sys_sendmsg+0x9b9/0xa20 [ 446.119192][T17770] ? __might_fault+0xaf/0x130 [ 446.119218][T17770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.119240][T17770] ? import_iovec+0x73/0xa0 [ 446.119262][T17770] ___sys_sendmsg+0x2a5/0x360 [ 446.119279][T17770] ? __lock_acquire+0x683/0x2cd0 [ 446.119298][T17770] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.119319][T17770] ? futex_wait+0x2a2/0x390 [ 446.119363][T17770] ? __fget_files+0x2a/0x420 [ 446.119384][T17770] ? __fget_files+0x3a2/0x420 [ 446.119410][T17770] __x64_sys_sendmsg+0x1bd/0x2a0 [ 446.119430][T17770] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.119453][T17770] ? rcu_is_watching+0x15/0xb0 [ 446.119477][T17770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.119495][T17770] do_syscall_64+0x174/0x580 [ 446.119512][T17770] ? trace_irq_disable+0x3b/0x140 [ 446.119538][T17770] ? clear_bhb_loop+0x40/0x90 [ 446.119559][T17770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.119583][T17770] RIP: 0033:0x7fa85a59ce59 [ 446.119600][T17770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.119616][T17770] RSP: 002b:00007fa8587f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.119636][T17770] RAX: ffffffffffffffda RBX: 00007fa85a815fa0 RCX: 00007fa85a59ce59 [ 446.119649][T17770] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 0000000000000004 [ 446.119661][T17770] RBP: 00007fa85a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 446.119673][T17770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.119684][T17770] R13: 00007fa85a816038 R14: 00007fa85a815fa0 R15: 00007ffcdb5e1158 [ 446.119706][T17770] [ 446.604866][ T13] wlan1: Trigger new scan to find an IBSS to join SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 446.812866][ T6311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.436560][ T7072] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.508518][ T7072] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.551857][ C1] net_ratelimit: 11 callbacks suppressed [ 447.551878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.565782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.574167][ T6311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.614234][ T7072] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.660906][ T7072] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.715844][ T6305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.724320][ T6305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.813707][ T6305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.821937][ T6305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.322489][ T7072] bridge_slave_1: left allmulticast mode [ 448.328216][ T7072] bridge_slave_1: left promiscuous mode [ 448.336319][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.345146][ T7072] bridge_slave_0: left allmulticast mode [ 448.350804][ T7072] bridge_slave_0: left promiscuous mode [ 448.357058][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.429240][ T7072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.439986][ T7072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.450055][ T7072] bond0 (unregistering): Released all slaves [ 448.571931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.580176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.768251][ T7072] hsr_slave_0: left promiscuous mode [ 448.774383][ T7072] hsr_slave_1: left promiscuous mode [ 448.780401][ T7072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.798631][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.808002][ T7072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.820034][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.835764][ T7072] veth1_macvtap: left promiscuous mode [ 448.842824][ T7085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.844332][ T7072] veth0_macvtap: left promiscuous mode [ 448.851145][ T7085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.858615][ T7072] veth1_vlan: left promiscuous mode [ 448.869924][ T7072] veth0_vlan: left promiscuous mode [ 449.026089][ T7072] team0 (unregistering): Port device team_slave_1 removed [ 449.038056][ T7072] team0 (unregistering): Port device team_slave_0 removed [ 449.097801][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 449.388256][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 449.667051][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 449.936281][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 452.591892][ C1] net_ratelimit: 16 callbacks suppressed [ 452.591908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.605780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.282105][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.290284][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.352344][ T7085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.360522][ T7085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.611906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.620082][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.392116][ T6311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.400297][ T6311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog