last executing test programs: 16.453212268s ago: executing program 0 (id=4853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) close(r4) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c0006800800040000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008060}, 0x4000800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="080032427e15a330", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-ssse3)\x00'}, 0x58) close(0x3) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e030c000d628636288563"], 0xffdd) close(r2) close(0x4) 9.363999909s ago: executing program 0 (id=4866): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) (async, rerun: 32) sendmmsg$sock(r1, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x31fd}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xb37}}], 0x60}}], 0x2, 0x0) (async, rerun: 32) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000040)='\x00', 0x40, &(0x7f00000000c0)={@_ha_fsid={[0x648a, 0x3]}, {0x9, 0x4, 0x5, 0x115}}, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x5}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}}, 0x40) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) (async) unshare(0xa020480) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x7}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES16=r3], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x8010) 9.185587936s ago: executing program 0 (id=4868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20040810}, 0x44094) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b"], 0x60}, 0x1, 0x0, 0x0, 0x2002d0c4}, 0x24004090) 8.948860392s ago: executing program 0 (id=4871): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0x3, 0x8}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x70bd2c, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x3c, 0xfffffffffff7fffd, 0x50}, {0x5, 0x0, 0x100000001, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getlink={0x3c, 0x12, 0x1, 0x70bd25, 0x0, {0x7}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16, @ANYBLOB="01012abd7000000000002b34000202020202020000080026"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 8.673077401s ago: executing program 0 (id=4872): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000000000000000000000850000007a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000001900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000008480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000088c0)={0x0, 0x0, &(0x7f0000008880)={&(0x7f00000084c0)={0x2c, r5, 0x3, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r7, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000001600)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf25070000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="00fc1d200000000057b0b6a2d252e9891ee40f61d769e8045e32ea552806f147650b75b1e3cd9ad32179b0bd2c316b219819f9aa5fc634071bdc5932eba5c0c5181810e4be0026a11c4eed9b22c7b21874688369902607d00fcb", @ANYRES32=r7, @ANYBLOB="1400020076657468315f746f5f68737200000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776731000000000000000000000000000800030000000000"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x20000044) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2a000200010078", 0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000060a030400000000000000000a0000010900010073797a31000000001800048014000102800900020073797a320000000005000740620000001400000011000100000000ddffffff000a00000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000005e80)={0xa, 0x4e24, 0x80, @remote, 0x7ed}, 0x1c) bind$inet6(r9, &(0x7f0000005f00)={0xa, 0x4e22, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r10, @ANYBLOB='.\x00\x00\x00'], 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r12, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="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", 0x108}, {&(0x7f00000007c0)="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", 0xffffff50}], 0x4}}], 0x1, 0x4044805) splice(r11, 0x0, r12, 0x0, 0x8000000000025a5, 0x0) write$ppp(r11, &(0x7f00000003c0)="d0c5f129d3d204db7c5fc2cffa93a65bc1f749a655bb5e675b52b539cdfec39a213d3c99c87a05b2b47d653ac40c23e563ec1d4ace2982a927f6a80d05724e78fdae4e71271abb54499a96223b08cf4d", 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 7.622998059s ago: executing program 0 (id=4876): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x103, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x704) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc00", 0x2) splice(r5, 0x0, r4, 0x0, 0x1, 0xb) socket(0x29, 0x4, 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0xf}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r7, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 5.899882413s ago: executing program 2 (id=4887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0xffff, 0x7, 0x0, 0x2, {0xa, 0x4e20, 0x0, @loopback, 0x2}}}, 0x80, 0x0}, 0x24044051) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x5, 0x1}]}]}, {0x0, [0x61, 0x0, 0x30, 0x5f]}}, &(0x7f0000000f40)=""/4079, 0x36, 0xfef, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)=@ipv6_newrule={0x30, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}]}, 0x30}}, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000080)={0x41}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r7) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)={0x44, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)={0x44, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x184, r9, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x800) unshare(0x8040480) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r10, 0x10f, 0x80, 0x0, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r10, 0x10f, 0x80, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) (async) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) 5.546263691s ago: executing program 3 (id=4889): socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x4, "14655b50"}, &(0x7f0000000180)=0x2c) 5.223583939s ago: executing program 2 (id=4890): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private1, 0x1}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x1000) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x11, &(0x7f0000000340)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x100}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10f8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x8}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x5}], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x34, &(0x7f0000000480)=""/52, 0x41100, 0x40, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xa, 0x8, 0x304e}, 0x10, 0x2680, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000540)=[{0x1, 0x1, 0x6, 0xc}, {0x4, 0x1, 0x8, 0x4}, {0x2, 0x3, 0x10, 0x5}, {0x2, 0x3, 0x9, 0xb}, {0x1, 0x5, 0x3, 0x9}, {0x5, 0x3, 0x4, 0x7}, {0x0, 0x3, 0x2, 0x7}, {0x4, 0x4, 0x5, 0xc}, {0x5, 0x4, 0x9, 0xc}], 0x10, 0x2404}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1d, 0x3, &(0x7f0000001fd8)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x4000010, r7, 0x26c9b000) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003704feffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="c13c06001b14bf262000128008000100736974001400028008000100e000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 4.808880719s ago: executing program 2 (id=4895): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000280), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x50) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r3}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="9feb01001800000000000019e85a50bcb02af60089000089000000040000000e0000000200000f01000000070000009be0e578070000000500000002000000010000804b050000000000000e0300000002000000000000000000000b00000000000000000000000300000000030000000100000000f4000000000000010000048200000005000000010000008100000000000000000000030000000002000000050000000200000000000000002e0000"], &(0x7f0000000d40)=""/214, 0xa8, 0xd6, 0x0, 0x4, 0x10000, @value=r3}, 0x28) r7 = socket$kcm(0x29, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000200)={r7}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@bridge_dellink={0x20, 0x13, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r1, 0x13200}}, 0x20}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0a00fe14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a604feff001000006a0a58fe39000f00850000005b000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a140e1e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b619a82c4706531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc80a7a56eeb25ed0adfb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x2b}, 0x24) 4.192767465s ago: executing program 4 (id=4897): r0 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x24}, 0x94) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) 3.955429298s ago: executing program 3 (id=4898): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004010000000000007f"], 0x50) socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffd, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{r3}, &(0x7f0000001b40), &(0x7f0000001b80)=r1}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x2004c0c0) 3.715056488s ago: executing program 2 (id=4899): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[], 0x14}}, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4084) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x800, 0x8, 0x4, 0x90, 0x38, 0x1}, &(0x7f0000000440)=0x9c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000004c0)={r9, @in6={{0xa, 0x4e22, 0x3, @private0, 0x8}}}, &(0x7f0000000580)=0x84) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000004240)={{r3}, "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"}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000cc0)={'syztnl0\x00', r5, 0x7800, 0x8, 0x9, 0x2, {{0x20, 0x4, 0x2, 0x0, 0x80, 0x68, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x98, 0x0, 0x3, [0x34]}, @ssrr={0x89, 0x17, 0x8d, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1, @local]}, @end, @cipso={0x86, 0x20, 0x3, [{0x1, 0x3, ']'}, {0x6, 0x5, 'y6.'}, {0x0, 0x12, "52aae560f8ef610e93d352bdff17ce31"}]}, @timestamp_addr={0x44, 0x24, 0x2f, 0x1, 0x7, [{@multicast2}, {@rand_addr=0x64010100, 0x80}, {@empty, 0x69}, {@remote, 0x101}]}, @rr={0x7, 0x3, 0x1b}]}}}}}) r10 = socket$netlink(0x10, 0x3, 0x15) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) readv(r10, &(0x7f00000024c0)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg1\x00'}) sendmsg$inet6(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)="c1dadb3731cc49dbe109e58e61f8500eec156b08f3843febd2c41b01521c84d9a8d95e7341e88545892977b9ac1310a8e80b317e9640cef678ba5bfea1655df23bbb706d7851de94960ebb0a4650d4a71dc40835f070f8f21851ecb274ff909641d2ea6a8f8ee443558654b18b115318e00af0efce6a31e0b24ea6f0b4fbae7db99f7d339fd3430375a7320d", 0x8c}, {&(0x7f0000000800)="4424e68edc96721c85fbd24fccbcb32ade33135b73243ad72024929d04676af23ae37170b7b06243cb28d411dd895a268b363743f3d81e7cb624ae51cd96ded9b8e0702dc3c89356cd06dd43f20e0d670f0949fa68290838eb8c32d6df380082ece7f34422578136b1f4549546a569e16f9b7ed9ce3ce7e7a2713e2adfa03b7b87df32604170c4b53e7c5c4b148e7b0cc8c5e1906124", 0x96}, {&(0x7f00000008c0)="6685a525cfbc7c0ac3c43d4aa07262f2fb77ebc9a9fb19172ffcd5ba6b030399c4028adfd41a75616fcbc054", 0x2c}, {&(0x7f0000000900)="b71aaaea2851c82e2995e03f22066757de07f30f91ab3bf6e406134bc975b68d303e206d807c2ec5ad18faa55f8ede93f32080504771c3e5ff1e525e0543beb977f045d39743d4f4f0353c721d4e03640b2cdd5db954f1e2359b386ea7143ec31dea9ff065b8cdc0fa52e615ead3bd19a18850c5e03545853d1a3973f5207f4a5ef3fac68fa11ed33b1603c26a794c6d3a1a18b4ca3e2784af11117631445332777d67aed0b92722a0a8dde834077c69d6f422fd3503c632d38d254956458f9a87b430d414cd6528fc00d706cdef64805dc31821448b7d37ed6dc505574b5c98b02595a165e8044f", 0xe8}], 0x4, &(0x7f0000000a40)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r5}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1b}, r5}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hopopts={{0x178, 0x29, 0x36, {0x3a, 0x2b, '\x00', [@generic={0x8, 0xf4, "62ad30149ebd64878cb1fafc1759b6d91a938dd7adb949783c9f5dd50cae7b7ef1accfb621bb8fbfd75621525086ac4f1ae7187c11b43d71638e47f57c5d1990d1b9e487230786a2fd35f98219a33e517c760be5a00442d6e354049eccf02e417adce3c23fdc976c13c86382bf052508d4e93763f722a4e058dc96d1690c69e4717e6806b7c36d859a6c1c7356091a6b153bab620612199499974a4892ab06ff868f2951680bd0182174c145be3606fd6af3a61d096d2e9acf614632863b060b3052f38c4036672e2f5f834724e3fb74da656af0378053d80d181d96a855976d4f26a882aed0171890e337e0a9e086947736ad1f"}, @calipso={0x7, 0x48, {0x3, 0x10, 0x37, 0x6, [0x80000001, 0x1, 0x400, 0x0, 0x0, 0x4, 0xb, 0x5]}}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x1e0}, 0x40040c0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x8, 0x6, {{0x10, 0x4, 0x0, 0x26, 0x40, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@cipso={0x86, 0x14, 0xffffffffffffffff, [{0x5, 0xe, "4184a0b9c27e49b737c01b42"}]}, @lsrr={0x83, 0x17, 0x47, [@empty, @rand_addr=0x64010102, @private=0xa010102, @local, @empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000004200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000041c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="4958d7a39e51ac99738292fac58b91cc2d0199146987df8a81f38bcb53cc7115597b0fd41a6d5d207dbf94d9b49b61dc5fa91f5c71697cd83633767d48519f44fe19d7610227ad6abad1984e51ad31c86eb7488d1892950cb316ef1e3903469529fee250ff8b53207744534ee5348debb25a6d71ef6e055fcc099b6c33bcf443", @ANYRES16=r4, @ANYBLOB="00002bbd7000ffdbdf250c000000"], 0x2880}, 0x1, 0x0, 0x0, 0x20040840}, 0x4004) 3.528956381s ago: executing program 3 (id=4901): r0 = epoll_create1(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2b, 0x25dfd3fe}, 0x14}, 0x1, 0x0, 0x0, 0x20048855}, 0x200408c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10040000}, 0x40) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x400}, 0x28) r6 = epoll_create1(0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0xb, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r8}, &(0x7f0000000780)=0x40000000, 0x0, 0x2}, 0x20) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) r9 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x280008c1}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000140)={0x4}) 3.42308077s ago: executing program 2 (id=4903): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x61, 0x30, 0x0, 0x30]}}, 0x0, 0x3e, 0x0, 0x1, 0x7}, 0x28) 3.302624184s ago: executing program 1 (id=4904): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010340)=ANY=[@ANYBLOB="580000000206010200000000000000000000000013000300686173683a6e65742c696661636500000900020073797a31000000000c00078008001200000000fc050005000a00000005000400000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) (async) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x48, r5, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) writev(r2, &(0x7f0000001a40)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="f792148d9d949a7bc3967ac28fd368ab47e6d91c79a0def33a6f181e90472a793e4c03328b906824c0d5490df64d543988a4368ca5530747070e1e97db8ed2abebc83db507e86289cbf5e3fed8deed8a93708a3843e1b647c92716", 0x5b}, {&(0x7f0000001880)="05fda9f11e0f65c1ed7401d4135ee03f398145ec0087bd114c3a59e9931d3a88b7d693d71c6c263f5566b9da7d6e93a772bccb4b587dd43226a2497eea456c514e116cfa087ca5b4671d4432902ac96627f6fd194d206f87b0f8933247164c5baaeef467f071806dfb37640fba2a6ee8b1f6b03a5daba12bf6e87ecc1e697fa3df62a8c99d7408c1f363687678b03219d7eb3ae8741016903c78b279fc93c3", 0x9f}, {&(0x7f0000001940)="79ba3450db31ec0a9cd1641c75d93cb817e2403bace9f2b8bc5a035f32cff85da8f2cbac1286e7042eb75bad417993e0e89dd8b41dca8ffe1b7be34f0677bfd2a8ba1526405c7e34f521493a691fefc706c3e8b83dcf75d2619980ff6fef2d57b733eafe62c95fd311a0435a7a567fc0fe648998babe0e8dc5afe4d41a6c7b87445527cc215ad9e2638f6d12fb3327e04369aebfd416b786164711c4050c5c147691f9f4013ba4827293fd66f577eb84012f1e7f0b4f452bb7d9e861f6339e60c85f86833598389b18ad72d41d6002e15161b3e6a11cc1dcfb3604f76a1bab7e55593e8ab3e940ad42722a0205d764413d366c5f2f73f97bd492", 0xfa}], 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004054}, 0x240448c8) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_EVENT={0x8, 0x2c, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x40008c0) (async) r8 = accept4$alg(r2, 0x0, 0x0, 0x800) sendmsg$alg(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="3a82188912", 0x5}, {&(0x7f00000005c0)="f422a321c2", 0x5}], 0x2, 0x0, 0x0, 0x4008080}, 0x20044081) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r9, @ANYBLOB="48002f8008000100030000000c0002"], 0x64}}, 0x10) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) (async) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x80000001, 0x6c, {{0x6, 0x4, 0x2, 0x7, 0x18, 0x66, 0x0, 0x22, 0x0, 0x0, @multicast2, @rand_addr=0x64010101, {[@ra={0x94, 0x4, 0x1}]}}}}}) 3.075341801s ago: executing program 4 (id=4905): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x5, 0x4, 0xc, 0x8, 0xe, 0xe8, 0x6, 0x4, 0x7, 0x2, 0x0, 0x3d, 0x3}, 0xe) 2.658194425s ago: executing program 4 (id=4906): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f0000001d40)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800210000000400380205000900010000000500"], 0x88}}, 0x0) 2.296632826s ago: executing program 1 (id=4907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$kcm(0x29, 0x7, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') r5 = getpid() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r6, 0x0) r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x120, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000891) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 2.224197185s ago: executing program 4 (id=4908): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x4, "14655b50"}, &(0x7f0000000180)=0x2c) 1.854731131s ago: executing program 1 (id=4909): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') write(r0, &(0x7f0000000100)="1450dcdc4d80275d76077c362083e7aa6b89480b92b701a9204306b814e517b35c52c7346e43a04ef3f39f6461df17283f76780e7b90fa095546096314cadedd6b4e3f1f4e2eefd7272242bc21fadf115f2eeace5ee264af6144c11eb91d03f8107d11dd0eb0a63b0656062baf3e0855c46165afc37b1433f087eb167806a7540c0a4f", 0x83) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2, r1}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000140)=r6, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd3180028060020010000000000000000000000000000fe8000000000000000000000000000aa4e214001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0020000907800000302fe06e2d4c3d9080a000000083bff00"/40], 0x0) 1.560169584s ago: executing program 1 (id=4910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000dc66512eb736842cb899d3159d927fd9dcb409a4249995e0ea0f750bba4a399441df1bb96a446bf243f59d626237868a2c3444f6e6fe61b89c6ccd8275c9bf6af7ce0c310f64689e2cf71bcd1b3dae165f6f6039f31912a1d138c7"], 0x48) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000dc66512eb736842cb899d3159d927fd9dcb409a4249995e0ea0f750bba4a399441df1bb96a446bf243f59d626237868a2c3444f6e6fe61b89c6ccd8275c9bf6af7ce0c310f64689e2cf71bcd1b3dae165f6f6039f31912a1d138c7"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x7, 0x0, 0x7, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "1e"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "1e"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f00000003c0)={r2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a300000000005000100060000000500050002000000050004000000000014000780080011400000000005001500040000000d000300686173683a6e6574"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="68000008158d", @ANYRES64=r0, @ANYBLOB="1a000000060000004840120008000100687372003c0002800600050008cfeb71a9cdb84c5e48e969c7a627e7619d7f4f8a5aab6230733fabbd690b188d49a49816ce26939b5dc257e6397f09c098e53d80d9bebf211a10427e1e42dd4b6b12196a123b169ba5651eaa8d7d032ae0c0ad5ac96dd5547354a96e3c2484d4328d", @ANYRES8=r1, @ANYRES16, @ANYRES64=r0, @ANYRES8=r1], 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="68000008158d", @ANYRES64=r0, @ANYBLOB="1a000000060000004840120008000100687372003c0002800600050008cfeb71a9cdb84c5e48e969c7a627e7619d7f4f8a5aab6230733fabbd690b188d49a49816ce26939b5dc257e6397f09c098e53d80d9bebf211a10427e1e42dd4b6b12196a123b169ba5651eaa8d7d032ae0c0ad5ac96dd5547354a96e3c2484d4328d", @ANYRES8=r1, @ANYRES16, @ANYRES64=r0, @ANYRES8=r1], 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 1.187286593s ago: executing program 1 (id=4911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a00", @ANYRES32=0x0, @ANYRES64=r4], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x0, 0x33}, @in6=@mcast1, {0x0, 0x0, 0x1}, {0x3, 0x40000007}, {0x9, 0x0, 0x7}, 0x0, 0x3, 0x2}}, 0xf0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dddbbd, {0x0, 0x0, 0x0, r5, {0xfff1, 0x3da48c8682330ab8}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa263}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045084}, 0x8840) 1.083411193s ago: executing program 2 (id=4912): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x0, 0x200000006c832, r3, 0xe39e2000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffff30c6f780a9a837c54500005c00000000001190780000000000000000000000000000907803000000030000ef576074000000009fa5e73369ed23d4f93875218456d5525789db9b0a66892af1af20291407b55e11c1ef0f501fd4f4fc0d232b48a86ef0222fb63647660000000000"], 0x0) sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe11}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb095873048", 0x44}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt(r9, 0x112, 0x10, &(0x7f00000000c0)="00ff0000", 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="68010000", @ANYRES16=0x0, @ANYBLOB="0100aabd700000000000b10d48a545b0883b", @ANYRES32=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 988.254825ms ago: executing program 1 (id=4913): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000800000850000001100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000840000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "1afc7c14d332bcc6", "a9ba0c85d68723364c51dc2151d9f41aaa28329c07cc2a49ad714bebc6f1ff0d", '\x00', "bff2a81527ae4190"}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r4, 0x0, 0x20000000002) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffddff00000000000008004500001c0066200024029078ac1e4001e00000011300d078000000009db83e2b852805f8425214024ea6e1b0d6f22dec2638f973ac3e1874ded1d35c6ebc7af5c273cdefdd219a8aa64e7dd3930930eb1102d88af6abf81daf5c21a910b03863313e6b543672b481dc4bfa2c1c5b598921ea44dcb5d009ef999399cf7abf34d6d3e9f71e0536d572fa0dab0a392cc68216b852c48ad8159863bd88782fb5e5d6c9659540762b"], 0x0) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 773.021958ms ago: executing program 3 (id=4914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000940)=[@in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e20, 0x5085, @dev={0xfe, 0x80, '\x00', 0x32}, 0x3}, @in={0x2, 0x4e1f, @loopback}, @in6={0xa, 0x4e20, 0x200804, @empty, 0x10002}, @in6={0xa, 0x4e20, 0x4d, @local, 0xfff}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x381, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1846}, @in6={0xa, 0x4e24, 0xfe4, @local, 0x5}], 0xd8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4c22, @empty=0xe0000000}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010101}}}], 0x20}, 0x2400c880) (async) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40050}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) (async) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000800}, 0x4000042) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000140)=0x10001, 0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x0, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP={0x0, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP_DST={0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NFTA_TUNNEL_KEY_IP_DST={0x0, 0x2, 0x1, 0x0, @private=0xa010100}, @NFTA_TUNNEL_KEY_IP_SRC={0x0, 0x1, 0x1, 0x0, @empty}, @NFTA_TUNNEL_KEY_IP_DST={0x0, 0x2, 0x1, 0x0, @empty}, @NFTA_TUNNEL_KEY_IP_DST={0x0, 0x2, 0x1, 0x0, @multicast1}, @NFTA_TUNNEL_KEY_IP_DST={0x0, 0x2, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, @NFTA_TUNNEL_KEY_IP_DST={0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NFTA_TUNNEL_KEY_IP_SRC={0x0, 0x1, 0x1, 0x0, @local}]}, @NFTA_TUNNEL_KEY_IP={0x0, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP_SRC={0x0, 0x1, 0x1, 0x0, @multicast1}]}, @NFTA_TUNNEL_KEY_ID, @NFTA_TUNNEL_KEY_OPTS={0x0, 0x9, 0x0, 0x1, @NFTA_TUNNEL_KEY_OPTS_VXLAN={0x0, 0x1, 0x0, 0x1, [@NFTA_TUNNEL_KEY_VXLAN_GBP, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x0, 0x1, 0x1, 0x0, 0x731e}]}}, @NFTA_TUNNEL_KEY_OPTS={0x0, 0x9, 0x0, 0x1, @NFTA_TUNNEL_KEY_OPTS_GENEVE={0x0, 0x3, 0x0, 0x1, [@NFTA_TUNNEL_KEY_GENEVE_CLASS={0x0, 0x1, 0x1, 0x0, 0x4}]}}, @NFTA_TUNNEL_KEY_TTL={0x0, 0x6, 0x42}, @NFTA_TUNNEL_KEY_ID={0x0, 0x1, 0x1, 0x0, 0x80000001}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7e}}, 0x0) (async) close(r8) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000005080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x400c044) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0xc8, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xa}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xc}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1d}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x20}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xd2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8f}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000) (async) epoll_create1(0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="180200000020000000000000000000008500000027000000180100002020702500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2f, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) 567.617563ms ago: executing program 4 (id=4915): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x8}}]}}, 0x0, 0x3e, 0x0, 0x1, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x174990ee68771fbc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 360.748914ms ago: executing program 3 (id=4916): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000002300)={0x0, 0x0, 0x0}, 0x4000001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000040000000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc, &(0x7f000000cf3d)=""/195}, 0x23) 232.576933ms ago: executing program 4 (id=4917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRESDEC=r1, @ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="ce", 0x1}], 0x1}], 0x62, 0x4b8fb) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/20, 0x14}, 0x8}], 0x1, 0x120, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x10}}], 0x10}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000140002007767300000000000000000e4328c6e6ec80ec16686ac4c0cec0000000087e40008803800008008000a00feffff7f080003000100000024000100dbffffffffffffffffffffffffffff5064c97fedc0c2cfffffffffffffffffff3c364be72c15f3d46a840a29417925ef7a856d78ac03b721692495a29f958c0a115d6257aff49b09d570989340f7595c68c5196a2569f0"], 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 0s ago: executing program 3 (id=4918): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r4, @ANYRES64=r2, @ANYRESOCT=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c082}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r5, 0x29, 0x16, 0x0, &(0x7f0000000400)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140008001000010000000000000000000700000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a010100000000000000000500000009000100730073797a32000000004c000000060a010400000000000000000500000008000b40000000002400048020000180070001006374000014000280080001400000000a08000240000000000900010073797a3000000000140000001100010000000000000000000300000a00"/192], 0xc0}}, 0x805) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0900c0f04ab044afc4bd7000ffdbdf2501eb05530845220000000000000000000000bff8bd80923c02ec8059f6a41815f3c192042aea0e0b005a82f6ed9152b79bbec7ebafe94e33f63791093a3d141ed6f1291755d80d234b8d33f6da2b23d57b45105fa8044a7554f3e55120a08579a932a6df6ca4457766b28cdd1291c1cfb1b9ebee999ccc7b34a5fbbc826cc5a0ae08f64364aba338ef1b29827b99cee8e9b0c7fa389140a18a307c3322632b549a8afd61c06ced06d277ea00acb04ff3efbadbb4c3604bec3aa1cb8e10e72a3f326d37"], 0x24}}, 0x240448c8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYRES32=r9, @ANYRESHEX], 0x30}, 0x1, 0x0, 0x0, 0x4814}, 0xa0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="30e93ae9e2f8901c9689a12e26be2214103cbe288bfa80f3e39357492779c201c0d2de786a304778107558adf2d9d90adcf767f10d5b86409a3adf15fa9d8554f59c5e91e17ecea032a4b0bd26cfb1e7d0d5140ad92a9758ca21f7b9ccc2f750d00c37787fdd47d1c12d540f384ee622be150c54fc42649c17c480d6ea18c60a34ad2ce1209f28abdd9dbc1c2faed4c72b54c9dc42c6b80bdc1651c868e5522e68028a19bfe7f8d340", @ANYRES32=r8, @ANYRES8=r0, @ANYRESOCT=r9, @ANYRESDEC=r7], 0x68}, 0x1, 0x0, 0x0, 0x841}, 0x40008c0) r10 = accept4$alg(r2, 0x0, 0x0, 0x800) sendmsg$alg(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="3a82188912", 0x5}, {&(0x7f00000005c0)="f422a321c2", 0x5}], 0x2, 0x0, 0x0, 0x4008080}, 0x20044081) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r11, @ANYBLOB="48002f8008000100030000000c0002"], 0x64}}, 0x10) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="20000000150000012abf7000ffdbdf250a004800d8dab95aaef1012b7e786fc7e98ce902c987b7db130b08c1a6906ce0590e4a1867fcfff771aac0923e477707af8a6e92f383bd3db949cdafc9ee2d4967005717c0bf54e4beb6f88f4b76492bd9127091dc7fe25a4efe3cc0a885a5cb3c9ffe3ce57ea8eec100000000", @ANYRES32=r8, @ANYBLOB='\b\x00\t\x00\a\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x40804}, 0x20000890) setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) r14 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mtu(r14, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000380)=0x4) socket(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): e 2 family 0 port 6081 - 0 [ 506.769177][ T8466] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.530626][ T5613] Bluetooth: hci3: command tx timeout [ 508.007966][T18091] lo speed is unknown, defaulting to 1000 [ 508.050372][T18159] netlink: 'syz.1.3287': attribute type 4 has an invalid length. [ 508.232211][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3289'. [ 508.347113][T18128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3284'. [ 508.394656][T18128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3284'. [ 508.655572][T18176] bridge2: port 1(erspan0) entered blocking state [ 508.662172][T18176] bridge2: port 1(erspan0) entered disabled state [ 508.668806][T18176] erspan0: entered allmulticast mode [ 508.769560][T18176] erspan0: entered promiscuous mode [ 508.776356][T18176] bridge2: port 1(erspan0) entered blocking state [ 508.782937][T18176] bridge2: port 1(erspan0) entered forwarding state [ 508.917929][T18179] bridge2: port 1(erspan0) entered disabled state [ 508.930655][T18179] bridge0: port 3(team0) entered disabled state [ 509.004662][T18179] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.014310][T18179] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.234567][T18190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3292'. [ 509.394341][T18192] nbd: couldn't find device at index 65536 [ 509.554784][ T5613] Bluetooth: hci3: command tx timeout [ 509.741408][T18183] syzkaller0: entered promiscuous mode [ 509.747045][T18183] syzkaller0: entered allmulticast mode [ 511.650665][ T5613] Bluetooth: hci3: command tx timeout [ 513.706339][ T5613] Bluetooth: hci3: command tx timeout [ 513.766015][T18225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3300'. [ 513.775071][T18225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3300'. [ 514.124438][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3303'. [ 514.175491][T18235] sctp: [Deprecated]: syz.1.3301 (pid 18235) Use of int in max_burst socket option. [ 514.175491][T18235] Use struct sctp_assoc_value instead [ 514.348110][T18239] vlan2: entered promiscuous mode [ 514.353247][T18239] bridge0: entered promiscuous mode [ 514.422681][T18091] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.437951][T18091] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.445231][T18091] bridge_slave_0: entered allmulticast mode [ 514.458630][T18091] bridge_slave_0: entered promiscuous mode [ 514.565545][T18091] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.572802][T18091] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.580037][T18091] bridge_slave_1: entered allmulticast mode [ 514.684452][T18091] bridge_slave_1: entered promiscuous mode [ 514.737205][T18250] lo: entered allmulticast mode [ 515.188786][T18254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3308'. [ 515.200635][T18242] lo: left allmulticast mode [ 515.300097][T18091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.433151][T10338] hsr_slave_0: left promiscuous mode [ 515.450758][T10338] hsr_slave_1: left promiscuous mode [ 515.549926][T10338] batadv0: left promiscuous mode [ 515.568608][T10338] veth1_macvtap: left promiscuous mode [ 515.595941][T10338] veth0_macvtap: left promiscuous mode [ 515.606023][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 515.613095][T10338] veth1_vlan: left promiscuous mode [ 516.734217][T18091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.750457][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3310'. [ 516.971972][T18091] team0: Port device team_slave_0 added [ 517.034564][T18091] team0: Port device team_slave_1 added [ 517.045199][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 517.128791][T18284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3316'. [ 517.143382][T18288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3314'. [ 517.279211][T18288] ip6gre1: entered promiscuous mode [ 517.326046][T18288] ip6gre1: entered allmulticast mode [ 517.388346][T18091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.417084][T18091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.526527][T18091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.628149][T18091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.656725][T18091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.764923][T18091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.792005][T18301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3321'. [ 517.994757][T14999] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.059940][T14999] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.071876][T10297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.106016][T10297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.109980][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3321'. [ 518.322613][T18091] hsr_slave_0: entered promiscuous mode [ 518.363755][T18091] hsr_slave_1: entered promiscuous mode [ 518.974536][T10297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 519.082630][T10338] IPVS: stop unused estimator thread 0... [ 519.750216][T18344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3330'. [ 519.995913][T18353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3330'. [ 520.025348][T18353] nbd: must specify at least one socket [ 520.129923][T14999] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.170273][T14999] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.199177][T14999] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 520.322094][T18348] ip6gretap0: entered promiscuous mode [ 520.621996][T14999] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.713817][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3335'. [ 520.714586][T14999] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.754979][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3335'. [ 520.802442][T14999] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 520.843452][T18368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3335'. [ 520.877880][T18368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3335'. [ 520.889190][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 520.949587][T18377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3337'. [ 521.094482][T14999] bond0: (slave netdevsim1): Releasing backup interface [ 521.176794][T14999] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.194794][T14999] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.221496][T14999] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 521.430904][T14999] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.463351][T14999] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.488968][T14999] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 521.620208][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3343'. [ 521.654112][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3343'. [ 521.712020][T18398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3343'. [ 521.734578][T18396] batadv_slave_1: entered promiscuous mode [ 521.845134][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.934280][T18392] batadv_slave_1: left promiscuous mode [ 521.949897][T18400] syzkaller0: entered promiscuous mode [ 521.976752][T18400] syzkaller0: entered allmulticast mode [ 522.639796][T14999] bond6: left allmulticast mode [ 522.694349][T14999] bond6: left promiscuous mode [ 522.733317][T14999] bridge0: port 1(bond6) entered disabled state [ 522.779340][T14999] vlan0: left promiscuous mode [ 522.800045][T14999] geneve0: left promiscuous mode [ 522.822704][T14999] geneve0: entered promiscuous mode [ 522.871064][T14999] vlan0: left allmulticast mode [ 522.898743][T14999] geneve0: left allmulticast mode [ 522.926948][T14999] bridge0: port 3(vlan0) entered disabled state [ 523.791399][T14999] team0: Port device xfrm0 removed [ 523.929257][T14999] bond8 (unregistering): (slave gre1): Releasing backup interface [ 524.106761][T14999] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 524.222925][T14999] bond0 (unregistering): Released all slaves [ 524.241385][T14999] bond1 (unregistering): Released all slaves [ 524.279242][T14999] bond2 (unregistering): Released all slaves [ 524.304223][T14999] bond3 (unregistering): Released all slaves [ 524.331155][T14999] bond4 (unregistering): Released all slaves [ 524.367369][T14999] bond5 (unregistering): (slave dummy0): Releasing active interface [ 524.399026][T14999] bond5 (unregistering): Released all slaves [ 524.423191][T14999] bond6 (unregistering): Released all slaves [ 524.447783][T14999] bond7 (unregistering): Released all slaves [ 524.473601][T14999] bond8 (unregistering): Released all slaves [ 524.517773][T14999] bond9 (unregistering): (slave veth10): Releasing active interface [ 524.532675][T14999] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 524.549858][T14999] bond9 (unregistering): Released all slaves [ 524.577462][T14999] bond10 (unregistering): Released all slaves [ 524.608656][T14999] bond11 (unregistering): Released all slaves [ 524.643794][T14999] bond12 (unregistering): Released all slaves [ 524.708171][T18428] syzkaller0: entered promiscuous mode [ 524.717588][T18428] syzkaller0: entered allmulticast mode [ 525.158587][T18442] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 525.163293][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 525.200906][T14999] ¿: left promiscuous mode [ 525.507229][T18471] netlink: 'syz.1.3356': attribute type 1 has an invalid length. [ 525.629753][T18459] __nla_validate_parse: 3 callbacks suppressed [ 525.629775][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3356'. [ 525.652096][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3356'. [ 525.672611][T18459] netlink: 'syz.1.3356': attribute type 10 has an invalid length. [ 525.692281][T14999] ovs-system: left promiscuous mode [ 525.894893][T18477] netlink: 'syz.2.3361': attribute type 1 has an invalid length. [ 525.912736][T14999] tipc: Disabling bearer [ 525.930011][T14999] tipc: Left network mode [ 526.427899][T18484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.732864][T18493] netlink: 'syz.0.3365': attribute type 39 has an invalid length. [ 527.629311][T18517] netlink: 'syz.1.3368': attribute type 1 has an invalid length. [ 527.691437][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3368'. [ 527.727985][T18521] netlink: 'syz.0.3369': attribute type 62 has an invalid length. [ 527.751806][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3368'. [ 528.014616][T18517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.111886][T18521] netlink: 'syz.0.3369': attribute type 1 has an invalid length. [ 528.212050][T18539] sctp: [Deprecated]: syz.3.3372 (pid 18539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.212050][T18539] Use struct sctp_sack_info instead [ 528.238072][T18521] netlink: 756 bytes leftover after parsing attributes in process `syz.0.3369'. [ 528.540845][T18543] 8021q: VLANs not supported on ip_vti0 [ 529.205142][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.241272][T18091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 529.295914][T18091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 529.317324][T18091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 529.368140][T18091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 529.434887][T18091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 529.522467][T18091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 529.541001][T18091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 529.559397][T18574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3380'. [ 529.577514][T18091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 529.831684][T18574] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 529.872684][T18574] bond1 (unregistering): Released all slaves [ 530.078412][T18584] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3381'. [ 530.105674][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'. [ 530.129454][T18584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3381'. [ 530.152167][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'. [ 530.703295][T18613] sch_fq: defrate 0 ignored. [ 530.979478][T18619] __nla_validate_parse: 3 callbacks suppressed [ 530.979503][T18619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3389'. [ 531.372289][T18624] netlink: 'syz.1.3388': attribute type 5 has an invalid length. [ 531.723462][T18637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3391'. [ 531.989355][T18641] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3394'. [ 532.116602][T18642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3394'. [ 532.168730][T18643] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3394'. [ 532.237156][T18642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3394'. [ 532.254690][T14999] hsr_slave_0: left promiscuous mode [ 532.269587][T14999] hsr_slave_1: left promiscuous mode [ 532.283995][T14999] veth1_macvtap: left promiscuous mode [ 532.292118][T14999] veth0_macvtap: left promiscuous mode [ 533.398594][T18091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.512459][T18091] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.531372][T14998] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.538667][T14998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.581623][T14998] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.588908][T14998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.400414][T14999] IPVS: stop unused estimator thread 0... [ 534.453990][T18665] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3400'. [ 535.479224][T18679] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3404'. [ 535.700960][T18682] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 535.746807][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 535.799042][T18685] bond0: Unable to set up delay as MII monitoring is disabled [ 535.882888][T18688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 536.024096][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3408'. [ 536.456151][T18710] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3410'. [ 536.589632][T18718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3410'. [ 536.688976][T18718] ip6tnl2: entered allmulticast mode [ 536.950761][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801fb8d400: rx timeout, send abort [ 536.962202][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801fb8d400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 537.474036][T18091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.161371][T18753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3421'. [ 538.208316][T18753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3421'. [ 538.254290][T18753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3421'. [ 538.283729][T18753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3421'. [ 539.104226][T18091] veth0_vlan: entered promiscuous mode [ 539.188308][T18091] veth1_vlan: entered promiscuous mode [ 539.334642][T18091] veth0_macvtap: entered promiscuous mode [ 539.368175][T18091] veth1_macvtap: entered promiscuous mode [ 539.438717][T18091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.498107][T18091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.579852][T18786] vxcan2: entered allmulticast mode [ 539.611490][T18742] Bluetooth: hci5: command 0x0406 tx timeout [ 539.775364][T14994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.187723][T14931] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.242147][T14931] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.286087][T14931] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.460122][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.520359][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.844531][T14999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.870415][T14999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.512550][T18826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3439'. [ 541.941776][T18829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3440'. [ 542.501117][T18845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3444'. [ 542.717935][T18845] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 542.798524][T18842] lo speed is unknown, defaulting to 1000 [ 543.041347][T18859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3447'. [ 543.203755][T18860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3446'. [ 543.246625][T18865] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 543.398109][T18862] batman_adv: batadv0: Adding interface: ip6gretap1 [ 543.451575][T18862] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.633489][T18862] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 544.094151][T18870] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3443'. [ 544.199130][T18870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.386249][T18885] openvswitch: netlink: Key type 226 is out of range max 32 [ 544.404327][T18890] netlink: 'syz.3.3453': attribute type 11 has an invalid length. [ 544.436727][T18896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3452'. [ 544.565295][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.799969][T18903] sctp: [Deprecated]: syz.3.3456 (pid 18903) Use of int in maxseg socket option. [ 544.799969][T18903] Use struct sctp_assoc_value instead [ 544.897683][T18903] sctp: [Deprecated]: syz.3.3456 (pid 18903) Use of int in maxseg socket option. [ 544.897683][T18903] Use struct sctp_assoc_value instead [ 544.983380][T18893] syzkaller0: entered promiscuous mode [ 544.993096][T18903] sctp: [Deprecated]: syz.3.3456 (pid 18903) Use of int in maxseg socket option. [ 544.993096][T18903] Use struct sctp_assoc_value instead [ 545.016706][T18893] syzkaller0: entered allmulticast mode [ 545.023318][T18903] sctp: [Deprecated]: syz.3.3456 (pid 18903) Use of int in maxseg socket option. [ 545.023318][T18903] Use struct sctp_assoc_value instead [ 545.083030][T18903] sctp: [Deprecated]: syz.3.3456 (pid 18903) Use of int in maxseg socket option. [ 545.083030][T18903] Use struct sctp_assoc_value instead [ 545.139094][T18903] sctp: [Deprecated]: syz.3.3456 (pid 18903) Use of int in maxseg socket option. [ 545.139094][T18903] Use struct sctp_assoc_value instead [ 545.237590][T18909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3458'. [ 545.288533][T18903] sctp: [Deprecated]: syz.3.3456 (pid 18903) Use of int in maxseg socket option. [ 545.288533][T18903] Use struct sctp_assoc_value instead [ 545.353632][T18903] sctp: [Deprecated]: syz.3.3456 (pid 18903) Use of int in maxseg socket option. [ 545.353632][T18903] Use struct sctp_assoc_value instead [ 545.412643][T18903] sctp: [Deprecated]: syz.3.3456 (pid 18903) Use of int in maxseg socket option. [ 545.412643][T18903] Use struct sctp_assoc_value instead [ 545.470205][T18903] sctp: [Deprecated]: syz.3.3456 (pid 18903) Use of int in maxseg socket option. [ 545.470205][T18903] Use struct sctp_assoc_value instead [ 545.739391][T18921] kthread_run failed with err -4 [ 545.897497][T18931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3461'. [ 545.945163][T18931] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 546.276045][T18940] xt_hashlimit: size too large, truncated to 1048576 [ 546.364506][T18945] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.517062][T18945] bridge_slave_0 (unregistering): left allmulticast mode [ 546.563315][T18945] bridge_slave_0 (unregistering): left promiscuous mode [ 546.590100][T18953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3468'. [ 546.612981][T18945] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.052588][T18958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3470'. [ 547.163624][T18961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3469'. [ 547.215101][T18961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3469'. [ 547.410362][T18966] netlink: 'syz.3.3471': attribute type 83 has an invalid length. [ 547.628641][T18968] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.636540][T18968] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.306645][T18968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.351061][T18968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.886139][T14995] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.942965][T14995] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.000048][T14995] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.066400][T14995] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.589151][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3481'. [ 549.734699][T19009] syzkaller0: entered allmulticast mode [ 549.781486][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3484'. [ 550.251140][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.297611][T19032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3484'. [ 550.887511][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.297300][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.548834][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'. [ 552.081396][T19094] netlink: 524 bytes leftover after parsing attributes in process `syz.4.3503'. [ 552.343731][T12747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.363371][T19104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.374624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.770003][T19119] xt_ipcomp: unknown flags 1D [ 552.850646][T19122] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3513'. [ 552.885359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.103233][T10299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.207059][T19129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3514'. [ 553.456971][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.834267][T19147] macsec1: entered promiscuous mode [ 553.874623][T19147] bridge0: entered promiscuous mode [ 553.890092][T19149] xt_TPROXY: Can be used only with -p tcp or -p udp [ 553.940684][T19148] macsec2: entered promiscuous mode [ 553.956111][T19156] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3523'. [ 554.168793][T10296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.240716][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3527'. [ 554.262143][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3529'. [ 554.293922][T19169] €Â: renamed from team_slave_1 (while UP) [ 554.465934][T19175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3530'. [ 554.570748][T19180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3532'. [ 554.586298][T19183] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3531'. [ 554.688537][T19184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3534'. [ 555.009759][T19194] veth3: entered allmulticast mode [ 555.165986][T19199] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 555.193858][T19199] bond1 (unregistering): Released all slaves [ 555.258101][T19211] netlink: 'syz.4.3540': attribute type 11 has an invalid length. [ 555.445665][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 555.538124][T15054] net_ratelimit: 1 callbacks suppressed [ 555.538143][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.167225][T10299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.336715][T19243] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 556.567582][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.797376][T19261] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 557.521745][T19267] veth1_macvtap: left promiscuous mode [ 557.535073][T19267] macsec0: entered promiscuous mode [ 557.627999][T19271] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 557.678208][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.687451][T19271] batman_adv: batadv0: Adding interface: gretap1 [ 557.722172][T19271] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.794268][T19271] batman_adv: batadv0: Interface activated: gretap1 [ 557.839774][T19274] __nla_validate_parse: 9 callbacks suppressed [ 557.839797][T19274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3558'. [ 558.159003][T19292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3561'. [ 558.728525][T15053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.764694][T19315] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3567'. [ 558.958082][T19320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3568'. [ 559.207923][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.761961][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3577'. [ 559.790617][T15053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.840976][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 560.401792][T19374] sctp: [Deprecated]: syz.1.3582 (pid 19374) Use of int in max_burst socket option. [ 560.401792][T19374] Use struct sctp_assoc_value instead [ 560.808562][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.877538][T19391] netlink: 'syz.1.3586': attribute type 361 has an invalid length. [ 560.922199][T19395] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 560.988506][T19395] netlink: 'syz.0.3587': attribute type 62 has an invalid length. [ 561.251209][T19407] syzkaller0: entered promiscuous mode [ 561.288984][T19407] syzkaller0: entered allmulticast mode [ 561.360065][T10338] IPVS: starting estimator thread 0... [ 561.477935][T19414] IPVS: using max 25 ests per chain, 60000 per kthread [ 561.576108][T19418] syzkaller0: entered promiscuous mode [ 561.602760][T19418] syzkaller0: entered allmulticast mode [ 561.850724][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.038496][T19428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3595'. [ 562.245648][T10299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.599623][T19435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 562.619887][T19435] bridge0: port 1(bond1) entered blocking state [ 562.628114][T19435] bridge0: port 1(bond1) entered disabled state [ 562.650137][T19443] netlink: 'syz.2.3598': attribute type 1 has an invalid length. [ 562.706321][T19435] bond1: entered allmulticast mode [ 562.783231][T19435] bond1: entered promiscuous mode [ 562.846971][T19435] bridge0: port 1(bond1) entered blocking state [ 562.853480][T19435] bridge0: port 1(bond1) entered forwarding state [ 562.887137][T12747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.948619][T10338] bridge0: port 1(bond1) entered disabled state [ 563.064293][T19443] bond1: entered promiscuous mode [ 563.070959][T19443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 563.094315][T19450] bond1: (slave bridge3): making interface the new active one [ 563.103107][T19450] bridge3: entered promiscuous mode [ 563.110441][T19450] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 563.132465][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.225379][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.240028][T14994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.251764][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.524667][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.574644][T19467] netlink: 'syz.4.3602': attribute type 32 has an invalid length. [ 563.769106][T10299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.796195][T19492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3608'. [ 564.906369][T19487] lo speed is unknown, defaulting to 1000 [ 565.304610][T19498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3610'. [ 566.092925][T12747] net_ratelimit: 2 callbacks suppressed [ 566.092944][T12747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.143393][T19534] syz.0.3615: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 566.165236][T19534] CPU: 0 UID: 0 PID: 19534 Comm: syz.0.3615 Not tainted syzkaller #0 PREEMPT(full) [ 566.165265][T19534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 566.165279][T19534] Call Trace: [ 566.165288][T19534] [ 566.165297][T19534] dump_stack_lvl+0xe8/0x150 [ 566.165336][T19534] warn_alloc+0x24c/0x270 [ 566.165372][T19534] ? __pfx_warn_alloc+0x10/0x10 [ 566.165404][T19534] ? xskq_create+0x56/0x220 [ 566.165437][T19534] ? xsk_setsockopt+0x52a/0x960 [ 566.165464][T19534] ? do_syscall_64+0x174/0x580 [ 566.165496][T19534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.165537][T19534] __vmalloc_node_range_noprof+0x12c/0x1730 [ 566.165597][T19534] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 566.165626][T19534] ? __kmalloc_cache_noprof+0x32d/0x660 [ 566.165653][T19534] ? __kmalloc_cache_noprof+0x150/0x660 [ 566.165679][T19534] ? xskq_create+0x56/0x220 [ 566.165713][T19534] xskq_create+0x148/0x220 [ 566.165742][T19534] ? xsk_init_queue+0x8a/0xe0 [ 566.165773][T19534] xsk_init_queue+0x8a/0xe0 [ 566.165804][T19534] xsk_setsockopt+0x52a/0x960 [ 566.165830][T19534] ? __fget_files+0x2a/0x420 [ 566.165860][T19534] ? __pfx_xsk_setsockopt+0x10/0x10 [ 566.165887][T19534] ? __pfx_aa_sk_perm+0x10/0x10 [ 566.165946][T19534] ? aa_sock_opt_perm+0xff/0x1a0 [ 566.165982][T19534] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 566.166003][T19534] ? __pfx_xsk_setsockopt+0x10/0x10 [ 566.166032][T19534] do_sock_setsockopt+0x17c/0x1b0 [ 566.166061][T19534] __x64_sys_setsockopt+0x13d/0x1b0 [ 566.166088][T19534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.166113][T19534] do_syscall_64+0x174/0x580 [ 566.166143][T19534] ? trace_irq_disable+0x3b/0x140 [ 566.166170][T19534] ? clear_bhb_loop+0x70/0xc0 [ 566.166198][T19534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.166220][T19534] RIP: 0033:0x7f07af19e0d9 [ 566.166241][T19534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.166259][T19534] RSP: 002b:00007f07b0102028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 566.166284][T19534] RAX: ffffffffffffffda RBX: 00007f07af426090 RCX: 00007f07af19e0d9 [ 566.166301][T19534] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 566.166316][T19534] RBP: 00007f07af235024 R08: 0000000000000004 R09: 0000000000000000 [ 566.166331][T19534] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.166345][T19534] R13: 00007f07af426128 R14: 00007f07af426090 R15: 00007fff51153438 [ 566.166384][T19534] [ 566.166466][T19534] Mem-Info: [ 566.436395][T19534] active_anon:5609 inactive_anon:1 isolated_anon:0 [ 566.436395][T19534] active_file:3 inactive_file:43442 isolated_file:0 [ 566.436395][T19534] unevictable:0 dirty:135 writeback:0 [ 566.436395][T19534] slab_reclaimable:12097 slab_unreclaimable:154291 [ 566.436395][T19534] mapped:32715 shmem:666 pagetables:1568 [ 566.436395][T19534] sec_pagetables:0 bounce:0 [ 566.436395][T19534] kernel_misc_reclaimable:0 [ 566.436395][T19534] free:1261720 free_pcp:10266 free_cma:0 [ 566.503007][T19527] bond1: option primary_reselect: invalid value (6) [ 566.521812][T19538] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3617'. [ 566.548489][T19533] x_tables: unsorted underflow at hook 2 [ 566.566248][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.588324][T19527] bond1 (unregistering): Released all slaves [ 566.611444][T19534] Node 0 active_anon:22636kB inactive_anon:4kB active_file:12kB inactive_file:173556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130960kB dirty:540kB writeback:0kB shmem:2864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18468kB pagetables:6136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 566.698787][T19534] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 566.780140][T19534] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 566.829649][T19540] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3617'. [ 566.913756][T19534] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 566.976318][T19534] Node 0 DMA32 free:1079600kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22336kB inactive_anon:4kB active_file:12kB inactive_file:173556kB unevictable:0kB writepending:540kB zspages:0kB present:3129332kB managed:2548632kB mlocked:0kB bounce:0kB free_pcp:41448kB local_pcp:23232kB free_cma:0kB [ 567.062720][T19534] lowmem_reserve[]: 0 0 0 0 0 [ 567.127943][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.131275][T19534] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 567.241618][T19551] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 567.278630][T19534] lowmem_reserve[]: 0 0 0 0 0 [ 567.303375][T19534] Node 1 Normal free:3951852kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 567.474176][T19559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3621'. [ 567.493740][T19534] lowmem_reserve[]: 0 0 0 0 0 [ 567.526959][T19534] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 567.564586][T19563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3622'. [ 567.574098][T19534] Node 0 DMA32: 1418*4kB (UM) 848*8kB (UM) 571*16kB (UME) 844*32kB (UME) 266*64kB (UME) 472*128kB (UM) 433*256kB (UME) 317*512kB (UM) 187*1024kB (UM) 20*2048kB (UME) 110*4096kB (UM) = 1082200kB [ 567.574334][T19534] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 567.574493][T19534] Node 1 Normal: 1*4kB (M) 1*8kB (M) 6*16kB (UM) 6*32kB (UM) 3*64kB (UM) 6*128kB (UM) 2*256kB (M) 5*512kB (UM) 1*1024kB (M) 1*2048kB (U) 963*4096kB (M) = 3951852kB [ 567.649931][T19534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 567.661426][T19534] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 567.706055][T19534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 567.780112][T19534] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 567.857920][T19534] 44108 total pagecache pages [ 567.899936][T19534] 1 pages in swap cache [ 567.929247][T19534] Free swap = 124992kB [ 567.963030][T19534] Total swap = 124996kB [ 568.003216][T19534] 2097051 pages RAM [ 568.033642][T19534] 0 pages HighMem/MovableOnly [ 568.073079][T19534] 428212 pages reserved [ 568.091360][T19534] 0 pages cma reserved [ 568.169677][T12747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.272847][T19582] netlink: 'syz.3.3628': attribute type 32 has an invalid length. [ 568.302400][T19582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3628'. [ 568.371874][T19582] netlink: 'syz.3.3628': attribute type 1 has an invalid length. [ 568.491272][T19585] gretap1: entered allmulticast mode [ 568.501034][T19585] bond1: (slave gretap1): making interface the new active one [ 568.513183][T19585] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 568.659644][T19594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3632'. [ 568.729806][T19600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3632'. [ 568.891351][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.131786][T12747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.153147][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.208386][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.223410][T19622] pimreg: tun_chr_ioctl cmd 1074025677 [ 569.247068][T19622] pimreg: linktype set to 0 [ 569.299699][T19627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3638'. [ 569.478385][T19631] syzkaller0: entered promiscuous mode [ 569.499465][T19631] syzkaller0: entered allmulticast mode [ 569.955869][T19646] batman_adv: batadv0: Adding interface: ip6gretap1 [ 569.977733][T19646] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.050651][T19646] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 570.214242][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3649'. [ 570.260310][T12747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.328370][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 570.350351][T19657] bond1 (unregistering): Released all slaves [ 570.748841][T19665] syzkaller0: entered promiscuous mode [ 570.760706][T19665] syzkaller0: entered allmulticast mode [ 570.852016][T19681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3653'. [ 571.172436][T19691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3656'. [ 571.286851][T12747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.377807][T19700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.388215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.436726][T19700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.450844][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.496711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.546684][T19708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.830765][T19722] netlink: 'syz.3.3664': attribute type 1 has an invalid length. [ 571.862104][T19722] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3664'. [ 571.902256][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3664'. [ 571.970187][T19727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.247124][T10297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.285762][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3668'. [ 572.328685][T12747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.608571][T19751] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3670'. [ 572.654500][T19751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3670'. [ 572.831583][T19758] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.845939][T19751] 8021q: adding VLAN 0 to HW filter on device bond3 [ 572.927600][T19759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3672'. [ 573.012367][T19763] xt_TCPMSS: Only works on TCP SYN packets [ 573.041283][T19763] netlink: 'syz.4.3673': attribute type 30 has an invalid length. [ 573.147148][T19759] ip6gre1: entered promiscuous mode [ 573.178746][T19759] ip6gre1: entered allmulticast mode [ 573.659648][T19782] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3676'. [ 573.922526][T19786] netlink: 'syz.3.3678': attribute type 11 has an invalid length. [ 573.988096][T19785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.005094][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 574.224660][T19799] netlink: 'syz.4.3682': attribute type 11 has an invalid length. [ 574.319019][T19799] netlink: 'syz.4.3682': attribute type 11 has an invalid length. [ 574.328842][T10338] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.371208][T10338] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.436025][T14999] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.464133][T14999] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.130553][T19851] netlink: 'syz.0.3693': attribute type 1 has an invalid length. [ 576.266647][T19861] __nla_validate_parse: 8 callbacks suppressed [ 576.266667][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3694'. [ 576.317828][T19851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.414799][T19855] bond1: (slave veth3): Enslaving as an active interface with a down link [ 576.477348][T19872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3696'. [ 576.568945][T15054] net_ratelimit: 8 callbacks suppressed [ 576.568965][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.623040][T19858] syzkaller0: entered promiscuous mode [ 576.661200][T19858] syzkaller0: entered allmulticast mode [ 576.708602][T19862] tipc: Started in network mode [ 576.771674][T19862] tipc: Node identity 4674f3a92a14, cluster identity 4711 [ 576.814056][T19862] tipc: Enabled bearer , priority 0 [ 576.893364][T19862] tipc: Resetting bearer [ 576.998031][T19890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3701'. [ 577.009575][T19889] block nbd1: Unsupported socket: should be TCP or UNIX. [ 577.034043][T19854] tipc: Resetting bearer [ 577.079582][T19894] xt_ecn: cannot match TCP bits for non-tcp packets [ 577.145989][T19894] netlink: 'syz.1.3702': attribute type 1 has an invalid length. [ 577.179492][T19854] tipc: Disabling bearer [ 577.192888][T19900] sctp: [Deprecated]: syz.2.3703 (pid 19900) Use of int in max_burst socket option deprecated. [ 577.192888][T19900] Use struct sctp_assoc_value instead [ 577.268425][T19890] 8021q: adding VLAN 0 to HW filter on device bond2 [ 577.309618][T19904] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3704'. [ 577.319985][T19904] 0·: renamed from hsr0 [ 577.341082][T19904] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 577.355239][T19904] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.411202][T19904] 0·: entered allmulticast mode [ 577.432974][T19904] hsr_slave_0: entered allmulticast mode [ 577.445924][T19904] hsr_slave_1: entered allmulticast mode [ 577.461298][T19904] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 577.609867][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.827107][T19918] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 577.851387][T19919] netlink: 'syz.0.3709': attribute type 2 has an invalid length. [ 577.875535][T19920] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 577.892044][T19919] netlink: 'syz.0.3709': attribute type 1 has an invalid length. [ 577.913334][T19919] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3709'. [ 577.948539][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3709'. [ 578.009939][T19931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3711'. [ 578.316664][T19933] netlink: 'syz.4.3712': attribute type 2 has an invalid length. [ 578.325968][T10297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.418327][T19933] : entered promiscuous mode [ 578.677045][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.799657][T19955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3717'. [ 579.518107][T19978] netlink: 'syz.2.3722': attribute type 1 has an invalid length. [ 579.564276][T19979] team0: Device vlan3 is already an upper device of the team interface [ 579.718146][T12747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.783760][T19988] netlink: 'syz.0.3725': attribute type 1 has an invalid length. [ 579.844762][T19988] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 579.862568][T19989] netlink: 'syz.4.3724': attribute type 1 has an invalid length. [ 579.892425][T19989] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3724'. [ 580.175826][T20003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3726'. [ 580.745524][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.299227][T20039] __nla_validate_parse: 4 callbacks suppressed [ 581.299255][T20039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3736'. [ 581.367663][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.612739][T20039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3736'. [ 581.696152][T20039] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.768275][T12747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.783056][T20063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3742'. [ 581.803310][T20064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3740'. [ 582.014418][T20076] x_tables: duplicate underflow at hook 2 [ 582.123541][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3742'. [ 582.318509][T14995] IPVS: starting estimator thread 0... [ 582.373617][T20086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'. [ 582.392489][T20084] sctp: [Deprecated]: syz.0.3745 (pid 20084) Use of struct sctp_assoc_value in delayed_ack socket option. [ 582.392489][T20084] Use struct sctp_sack_info instead [ 582.445675][T20085] IPVS: using max 29 ests per chain, 69600 per kthread [ 582.456535][T20082] syzkaller1: entered promiscuous mode [ 582.471835][T20082] syzkaller1: entered allmulticast mode [ 582.809050][T12747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.846649][T20097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3748'. [ 582.967043][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.027047][T20101] syz_tun: entered allmulticast mode [ 583.073403][T20105] pim6reg: entered allmulticast mode [ 583.463626][T20116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3754'. [ 583.509305][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'. [ 583.552963][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'. [ 583.616885][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.672300][T14998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.706294][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.718495][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.855140][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.478169][T10297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.893770][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.260098][T20179] netlink: 'syz.4.3773': attribute type 2 has an invalid length. [ 586.198593][T20213] ip6tnl3: entered allmulticast mode [ 586.521323][T20225] __nla_validate_parse: 7 callbacks suppressed [ 586.521345][T20225] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3786'. [ 586.589553][T20229] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 586.797742][T20239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3789'. [ 586.966991][ T5747] net_ratelimit: 3 callbacks suppressed [ 586.967011][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.526709][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.723669][ T29] audit: type=1804 audit(1786177101.263:23): pid=20288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3798" name="/newroot/171/cgroup.controllers" dev="tmpfs" ino=891 res=1 errno=0 [ 587.836300][T20292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3799'. [ 587.872383][ T29] audit: type=1800 audit(1786177101.263:24): pid=20288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3798" name="cgroup.controllers" dev="tmpfs" ino=891 res=0 errno=0 [ 587.920702][T20292] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3799'. [ 588.007480][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.022215][T20292] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3799'. [ 588.036498][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3800'. [ 588.072631][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3800'. [ 588.336642][T20279] batman_adv: batadv0: Interface activated: ip6gretap1 [ 588.423825][T20305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3802'. [ 588.449447][T20305] openvswitch: netlink: Duplicate or invalid key (type 0). [ 588.536238][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3800'. [ 588.547985][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3800'. [ 588.604104][T20307] netlink: 'syz.4.3803': attribute type 2 has an invalid length. [ 588.721937][T20307] : entered promiscuous mode [ 588.798397][T20317] xt_connbytes: Forcing CT accounting to be enabled [ 589.046265][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.306998][T20335] xt_policy: output policy not valid in PREROUTING and INPUT [ 589.368556][T14995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.381795][T10297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.407620][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.682691][T20355] bridge2: entered promiscuous mode [ 589.697955][T20359] netlink: 'syz.0.3817': attribute type 16 has an invalid length. [ 589.721277][T20355] bridge2: entered allmulticast mode [ 590.087653][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.172305][T20387] sctp: [Deprecated]: syz.3.3821 (pid 20387) Use of int in maxseg socket option. [ 590.172305][T20387] Use struct sctp_assoc_value instead [ 590.512983][T20395] xt_l2tp: invalid flags combination: 8 [ 590.558125][T20395] netlink: 'syz.2.3825': attribute type 1 has an invalid length. [ 590.648551][T10297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.680091][T20395] gre0: entered promiscuous mode [ 590.695254][T20395] gre0: entered allmulticast mode [ 591.487935][T20430] tipc: Enabling of bearer rejected, failed to enable media [ 591.589847][T20435] __nla_validate_parse: 10 callbacks suppressed [ 591.589867][T20435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3837'. [ 591.743365][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3839'. [ 591.827626][T20445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3838'. [ 591.969751][T20451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 592.092300][T20451] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3841'. [ 592.166016][T12747] net_ratelimit: 2 callbacks suppressed [ 592.166040][T12747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.317104][T20467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3845'. [ 592.598296][T20465] syzkaller0: entered promiscuous mode [ 592.657173][T20465] syzkaller0: entered allmulticast mode [ 592.681876][T20469] tipc: Started in network mode [ 592.713363][T20469] tipc: Node identity 06c0a8eb0e1f, cluster identity 4711 [ 592.776111][T20469] tipc: Enabled bearer , priority 0 [ 592.813312][T20470] tipc: Resetting bearer [ 592.897355][T20463] tipc: Resetting bearer [ 592.991489][T20463] tipc: Disabling bearer [ 593.209751][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.218858][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.239135][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.281305][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.469034][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3856'. [ 593.524484][T20515] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3857'. [ 593.554623][T20515] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3857'. [ 593.673445][T20523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3858'. [ 593.689311][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.329420][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.979843][T20571] IPVS: Unknown mcast interface: vcan0 [ 595.127361][T14999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.143781][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.154146][T10297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.459011][T20632] ip6gre1: entered promiscuous mode [ 596.491091][T20632] ip6gre1: entered allmulticast mode [ 596.579617][T20630] netdevsim0 speed is unknown, defaulting to 1000 [ 596.638492][T20630] netdevsim0 speed is unknown, defaulting to 1000 [ 596.819311][T20630] netdevsim0 speed is unknown, defaulting to 1000 [ 596.854683][T20630] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 596.897131][T20630] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 596.915780][T20630] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 596.941073][T20644] __nla_validate_parse: 7 callbacks suppressed [ 596.941093][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3885'. [ 596.959914][T20630] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 596.995821][T20639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3882'. [ 597.073228][T20644] ieee802154 phy1 wpan1: encryption failed: -22 [ 597.088230][T20649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3887'. [ 597.103984][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3885'. [ 597.338682][T20630] netdevsim0 speed is unknown, defaulting to 1000 [ 597.358178][T20656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3889'. [ 597.447624][T15054] net_ratelimit: 4 callbacks suppressed [ 597.447644][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.564624][T20630] netdevsim0 speed is unknown, defaulting to 1000 [ 597.610074][T20662] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3891'. [ 597.654055][T20630] netdevsim0 speed is unknown, defaulting to 1000 [ 597.763144][T20630] netdevsim0 speed is unknown, defaulting to 1000 [ 597.837472][T20630] netdevsim0 speed is unknown, defaulting to 1000 [ 597.894547][T20667] netlink: 'syz.4.3893': attribute type 11 has an invalid length. [ 597.964586][T20670] netlink: 'syz.4.3893': attribute type 11 has an invalid length. [ 598.036286][T20630] netdevsim0 speed is unknown, defaulting to 1000 [ 598.163299][T20677] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3895'. [ 598.203901][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3895'. [ 598.260595][T20677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3895'. [ 598.294069][T20680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3897'. [ 598.318774][T20630] netdevsim0 speed is unknown, defaulting to 1000 [ 598.327175][T14994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.357060][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.383709][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.399882][T20672] pimreg: entered allmulticast mode [ 598.453467][T10291] openvswitch: cpu_id mismatch with handler threads [ 598.614634][T20686] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 598.623773][T20630] netdevsim0 speed is unknown, defaulting to 1000 [ 598.641163][T20672] pimreg: left allmulticast mode [ 598.965966][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 599.249082][ T13] openvswitch: cpu_id mismatch with handler threads [ 599.448144][T10299] openvswitch: cpu_id mismatch with handler threads [ 599.456071][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.666205][T20735] netlink: 'syz.0.3909': attribute type 12 has an invalid length. [ 599.738943][T20735] netlink: 'syz.0.3909': attribute type 14 has an invalid length. [ 599.926286][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.022180][T20718] hsr_slave_0: left promiscuous mode [ 600.054426][T20718] hsr_slave_1: left promiscuous mode [ 600.286999][T14989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.299863][T10299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.338281][T10299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.486359][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.626811][T20764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.890604][T14989] openvswitch: cpu_id mismatch with handler threads [ 600.893682][T14989] openvswitch: cpu_id mismatch with handler threads [ 601.582461][T20796] netlink: 'syz.2.3923': attribute type 55 has an invalid length. [ 601.688637][T10299] openvswitch: cpu_id mismatch with handler threads [ 601.701262][T20802] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20003 [ 602.031603][T20816] __nla_validate_parse: 12 callbacks suppressed [ 602.031626][T20816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3928'. [ 602.319399][T20823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3929'. [ 602.359129][T20823] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3929'. [ 602.416827][T20831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3930'. [ 602.592244][T20839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3935'. [ 603.069958][T20854] netlink: 'syz.0.3939': attribute type 1 has an invalid length. [ 603.086870][T20854] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 603.184210][T20859] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3940'. [ 603.213109][T20859] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3940'. [ 603.283601][T20850] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 604.241564][T20905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3947'. [ 604.458009][T20908] Cannot find set identified by id 0 to match [ 604.966306][ C1] openvswitch: cpu_id mismatch with handler threads [ 605.419791][T20926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3953'. [ 605.642089][T20924] sch_fq: defrate 4294967293 ignored. [ 606.002433][T20938] lo speed is unknown, defaulting to 1000 [ 606.022153][T20938] netdevsim0 speed is unknown, defaulting to 1000 [ 613.685113][ C1] openvswitch: cpu_id mismatch with handler threads [ 616.347504][T20942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3959'. [ 616.516426][T20950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3961'. [ 616.573289][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3961'. [ 616.637349][T20950] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3961'. [ 616.690382][T20959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3962'. [ 616.714325][T20956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3961'. [ 616.872637][T20950] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 616.936481][T20964] pimreg: entered allmulticast mode [ 616.973707][T20967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3963'. [ 617.053961][T20968] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 617.095639][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3965'. [ 617.281936][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3965'. [ 617.388852][T20975] net_ratelimit: 8 callbacks suppressed [ 617.388872][T20975] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 617.657756][T20985] netlink: 'syz.0.3966': attribute type 5 has an invalid length. [ 618.283246][T20993] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 619.180256][T21017] tipc: Enabling of bearer rejected, failed to enable media [ 619.406973][T21024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3978'. [ 619.777469][T21028] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 620.311793][T21054] sctp: [Deprecated]: syz.0.3983 (pid 21054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 620.311793][T21054] Use struct sctp_sack_info instead [ 620.575765][T10299] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 620.583687][T21049] batman_adv: batadv0: Interface activated: ip6gretap1 [ 620.628992][T21049] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 620.875865][T10299] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 621.111393][T21050] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.484796][T21050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.574301][T21050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.326084][T10338] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.363029][T21069] __nla_validate_parse: 2 callbacks suppressed [ 622.363050][T21069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3987'. [ 622.432609][T21069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3987'. [ 622.479537][T21069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3987'. [ 622.544124][T21073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3987'. [ 622.594685][T21073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3987'. [ 622.607745][T21073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3987'. [ 622.643309][T21075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3988'. [ 623.092130][T21092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3992'. [ 623.386086][T10338] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.577301][ T58] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.644969][ T58] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.800795][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3996'. [ 624.088522][T21126] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 624.460685][T21137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4000'. [ 624.568192][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 624.587800][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.756732][T21142] pim6reg: entered allmulticast mode [ 624.782942][T21144] pim6reg: left allmulticast mode [ 625.247128][T21158] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 625.356428][T21158] bond2 (unregistering): Released all slaves [ 626.590847][T21203] macvlan0: entered promiscuous mode [ 626.671449][T18742] Bluetooth: hci4: command 0x0406 tx timeout [ 627.313626][T21221] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 627.406611][T21221] bond4 (unregistering): Released all slaves [ 627.491761][T21235] __nla_validate_parse: 113 callbacks suppressed [ 627.491958][T21235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4021'. [ 627.578376][T21230] vlan0: entered promiscuous mode [ 627.634401][T21236] tipc: Cannot configure node identity twice [ 628.936504][T21272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4034'. [ 629.059887][T21272] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4034'. [ 629.459702][T21286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4038'. [ 630.319550][T21310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4044'. [ 630.457127][T21313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4045'. [ 630.965066][ C1] openvswitch: cpu_id mismatch with handler threads [ 631.602620][T21333] netlink: 480 bytes leftover after parsing attributes in process `syz.2.4050'. [ 631.715203][T21333] batman_adv: batadv0: Adding interface: dummy0 [ 631.747074][T21333] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 631.783300][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4051'. [ 631.826754][T21333] batman_adv: batadv0: Interface activated: dummy0 [ 631.958186][T21352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4052'. [ 632.029378][T21342] ip6gre1: entered promiscuous mode [ 632.057160][T21342] ip6gre1: entered allmulticast mode [ 632.369934][T21342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4053'. [ 634.805491][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 641.934137][T21427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4066'. [ 642.030229][T14989] smbdirect: ib_dev[syz1] removed [ 642.876575][T21442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4067'. [ 643.112716][T21439] ip6erspan0: entered allmulticast mode [ 643.476956][T21448] netlink: 'syz.3.4075': attribute type 1 has an invalid length. [ 643.679990][T21459] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4073'. [ 643.763283][T21448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 643.918782][T21456] bond2: (slave geneve2): making interface the new active one [ 643.961652][T21456] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 644.035448][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.604042][T21472] netlink: 1355 bytes leftover after parsing attributes in process `syz.3.4079'. [ 644.776616][T14998] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.818615][T14998] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.881557][T14998] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.213873][T21488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4083'. [ 645.470801][T21497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4086'. [ 645.982377][T21501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.016846][T21505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 646.833118][T21517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4092'. [ 647.863254][T21551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4100'. [ 647.936125][T10297] openvswitch: cpu_id mismatch with handler threads [ 648.117451][T21555] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4101'. [ 648.145995][T21556] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4101'. [ 648.246058][T10299] openvswitch: cpu_id mismatch with handler threads [ 648.577074][T21563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4104'. [ 649.248850][T21593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4113'. [ 649.445419][T21598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4115'. [ 649.699217][T21605] syzkaller0: entered promiscuous mode [ 649.750767][T21605] syzkaller0: entered allmulticast mode [ 649.844966][T21605] netlink: 'syz.2.4118': attribute type 1 has an invalid length. [ 649.892011][T21605] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4118'. [ 650.336654][T21628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 651.096642][T14991] IPVS: starting estimator thread 0... [ 651.215643][T21649] IPVS: using max 26 ests per chain, 62400 per kthread [ 651.287229][T21643] lo speed is unknown, defaulting to 1000 [ 653.118528][T21687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4138'. [ 653.510617][T21695] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4142'. [ 653.638301][T21695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4142'. [ 653.799402][T21695] syzkaller0: entered promiscuous mode [ 653.864633][T21695] syzkaller0: entered allmulticast mode [ 654.062456][T21709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4145'. [ 654.255332][T21704] xt_CT: No such helper "netbios-ns" [ 654.292508][T21712] x_tables: duplicate underflow at hook 2 [ 654.603487][T21722] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4149'. [ 654.778744][T21725] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4150'. [ 655.171375][T21739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4154'. [ 655.263704][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4156'. [ 655.299614][T21741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4156'. [ 655.466032][T21742] ip6tnl1: entered allmulticast mode [ 655.482529][T21747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4157'. [ 655.513357][T14999] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 655.842733][T21747] team2: entered promiscuous mode [ 655.869989][T21747] team2: entered allmulticast mode [ 655.912817][T21747] 8021q: adding VLAN 0 to HW filter on device team2 [ 656.099217][T21748] team3: entered promiscuous mode [ 656.126573][T21748] team3: entered allmulticast mode [ 656.143908][T21748] 8021q: adding VLAN 0 to HW filter on device team3 [ 656.257448][T21762] bond3: option min_links: invalid value (18446744073709551612) [ 656.322744][T21762] bond3: option min_links: allowed values 0 - 2147483647 [ 656.475809][T21762] bond3 (unregistering): Released all slaves [ 658.337523][T21806] __nla_validate_parse: 6 callbacks suppressed [ 658.337544][T21806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4174'. [ 658.389861][T21808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4175'. [ 658.491719][T21806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4174'. [ 658.835963][T21814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.605056][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 659.743157][ T5613] Bluetooth: hci3: link tx timeout [ 659.765925][ T5613] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 659.780057][T21825] netlink: 'syz.2.4180': attribute type 1 has an invalid length. [ 660.327763][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4185'. [ 660.626301][T21850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4187'. [ 660.872576][T21856] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4190'. [ 661.000276][T21866] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4192'. [ 661.100048][T21863] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4192'. [ 661.494376][T21874] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 661.512725][T21876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4196'. [ 661.558656][T21873] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 661.855629][T18742] Bluetooth: hci3: command 0x0406 tx timeout [ 661.883503][T21887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4198'. [ 661.921519][T21887] netlink: 'syz.4.4198': attribute type 1 has an invalid length. [ 662.986581][T21930] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 662.993918][T21930] IPv6: NLM_F_CREATE should be set when creating new route [ 663.073046][T21934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 663.570207][T21956] __nla_validate_parse: 5 callbacks suppressed [ 663.570229][T21956] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4215'. [ 663.599842][ T29] audit: type=1800 audit(1786177177.153:25): pid=21958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4217" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1340 res=0 errno=0 [ 663.606785][ C1] openvswitch: cpu_id mismatch with handler threads [ 664.112386][T21963] x_tables: duplicate underflow at hook 1 [ 664.191845][T21975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4220'. [ 664.721936][T21991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4224'. [ 664.957600][T21994] x_tables: duplicate underflow at hook 1 [ 665.039095][T22001] netlink: 'syz.2.4227': attribute type 10 has an invalid length. [ 665.133136][T22001] batman_adv: batadv0: Interface deactivated: dummy0 [ 665.161632][T22011] netlink: 'syz.4.4229': attribute type 5 has an invalid length. [ 665.190115][T22001] batman_adv: batadv0: Removing interface: dummy0 [ 665.212115][T22012] netlink: 'syz.4.4229': attribute type 5 has an invalid length. [ 665.269668][T22001] dummy0: entered promiscuous mode [ 665.287296][T22016] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4230'. [ 665.306586][T22001] dummy0: entered allmulticast mode [ 665.340647][T22001] team0: Port device dummy0 added [ 665.654667][T22030] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4232'. [ 665.856505][T22033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4233'. [ 665.992244][T22037] openvswitch: netlink: IPv4 tunnel dst address is zero [ 666.026751][T22037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.079554][T22035] bridge0: port 3(team0) entered disabled state [ 666.441342][T22050] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4238'. [ 666.465991][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4241'. [ 666.529030][T22055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4241'. [ 666.539171][T22050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4238'. [ 666.731695][T22053] netlink: 'syz.2.4240': attribute type 3 has an invalid length. [ 667.445074][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 668.100191][T22099] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 668.567779][T22121] erspan0: left allmulticast mode [ 668.581804][T22121] erspan0: left promiscuous mode [ 668.599901][T22121] bridge2: port 1(erspan0) entered disabled state [ 668.688384][T22121] team0: left promiscuous mode [ 668.699135][T22121] team_slave_0: left promiscuous mode [ 668.706551][T22121] €Â: left promiscuous mode [ 668.711857][T22121] dummy0: left promiscuous mode [ 668.732062][T22121] bridge0: port 3(team0) entered disabled state [ 668.784208][T22121] dummy0: left allmulticast mode [ 668.822296][T22121] team0: Port device dummy0 removed [ 668.874024][T22121] bridge_slave_0: left allmulticast mode [ 668.901322][T22121] bridge_slave_0: left promiscuous mode [ 668.929344][T22121] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.996843][T22121] bridge_slave_1: left allmulticast mode [ 669.032060][T22121] bridge_slave_1: left promiscuous mode [ 669.046405][T22121] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.112260][T22121] bond0: (slave bond_slave_0): Releasing backup interface [ 669.235853][T22121] bond0: (slave bond_slave_1): Releasing backup interface [ 669.304690][T22145] __nla_validate_parse: 6 callbacks suppressed [ 669.304710][T22145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4266'. [ 669.333421][T22121] team_slave_0: left allmulticast mode [ 669.366656][T22146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4266'. [ 669.418488][T22145] netlink: 'syz.4.4266': attribute type 30 has an invalid length. [ 669.486435][T22146] netlink: 'syz.4.4266': attribute type 30 has an invalid length. [ 669.542408][T22121] team0: Port device team_slave_0 removed [ 669.596562][T22121] €Â: left allmulticast mode [ 669.691977][T22150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4267'. [ 669.709224][T22121] team0: Port device €Â removed [ 669.719258][T22121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.744339][T22121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.778049][T22121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.802944][T22121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.830402][T22121] bond0: (slave netdevsim1): Releasing backup interface [ 669.883629][T22121] team0: Port device bridge1 removed [ 669.914422][T22121] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 669.935235][T22121] batman_adv: batadv0: Removing interface: ip6gretap1 [ 669.942473][T10297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 669.975640][T22121] bond1: (slave bridge3): Releasing backup interface [ 669.988696][T22165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4270'. [ 670.000457][T10297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 670.002108][T22121] bridge3: left promiscuous mode [ 670.268321][T22156] vlan4: entered allmulticast mode [ 670.298943][T22174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4271'. [ 670.304965][T22156] bridge4: entered allmulticast mode [ 670.332231][T22157] bridge4: port 1(erspan0) entered blocking state [ 670.340572][T22157] bridge4: port 1(erspan0) entered disabled state [ 670.348752][T22157] erspan0: entered allmulticast mode [ 670.357648][T22157] erspan0: entered promiscuous mode [ 670.415538][T22178] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4273'. [ 670.463024][T22178] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4273'. [ 671.176780][T22199] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4278'. [ 671.242697][T22205] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 671.307165][T22199] netlink: 'syz.3.4278': attribute type 12 has an invalid length. [ 671.397554][T22213] netlink: 'syz.3.4278': attribute type 1 has an invalid length. [ 671.447264][T22218] netlink: 'syz.4.4282': attribute type 1 has an invalid length. [ 671.510523][T22218] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 671.752183][T22233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4284'. [ 671.794210][T22233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4284'. [ 671.810488][T14991] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.832978][T14991] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.877015][T22236] Bluetooth: MGMT ver 1.23 [ 671.883455][T14991] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.938046][T14991] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.022978][T22244] tipc: Cannot configure node identity twice [ 672.039688][T22244] tipc: New replicast peer: 127.0.0.2 [ 672.079319][T22244] tipc: Enabled bearer , priority 10 [ 672.161373][T22247] syzkaller0: entered promiscuous mode [ 672.186455][T22247] syzkaller0: entered allmulticast mode [ 672.562622][T22261] syzkaller1: entered promiscuous mode [ 672.581205][T22261] syzkaller1: entered allmulticast mode [ 673.158667][T22289] netlink: 'syz.1.4300': attribute type 4 has an invalid length. [ 673.213914][T22290] netlink: 'syz.1.4300': attribute type 4 has an invalid length. [ 673.403179][T22276] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.940380][T22276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.971930][T22276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.104365][T22301] "syz.2.4302" (22301) uses obsolete ecb(arc4) skcipher [ 674.145888][T22276] batman_adv: batadv0: Interface deactivated: gretap1 [ 674.171078][T22276] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 674.212232][T22276] ip6tnl1: left allmulticast mode [ 674.308165][T22304] __nla_validate_parse: 4 callbacks suppressed [ 674.308187][T22304] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4303'. [ 674.370093][T10299] tipc: Node number set to 2481398420 [ 674.563552][T22298] bond2 (unregistering): Released all slaves [ 674.635479][T14994] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.646313][T22300] syz.2.4302 (22300) used obsolete PPPIOCDETACH ioctl [ 674.659264][T22315] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 674.824673][T14994] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.027846][T14994] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.082335][T14994] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.144503][T14994] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.192324][T14994] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.257546][T14994] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.283872][T14994] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.421254][T22342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4310'. [ 675.508240][T22344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4310'. [ 675.570473][T22349] netlink: 'syz.2.4311': attribute type 13 has an invalid length. [ 675.762420][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4312'. [ 675.946237][T10291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 676.576674][T10291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 676.770880][T22376] x_tables: duplicate underflow at hook 3 [ 677.944145][T22399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4323'. [ 678.174507][T22330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.473513][T22407] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode [ 678.493721][T22407] mac80211_hwsim hwsim54 wlan0: entered allmulticast mode [ 678.607315][T22410] ip6gre2: entered promiscuous mode [ 678.626867][T22410] ip6gre2: entered allmulticast mode [ 678.692749][ T58] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 678.727129][T10291] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 678.738430][ T58] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 679.088797][T10291] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 679.259493][T22442] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4339'. [ 679.273962][T22440] netlink: 'syz.4.4338': attribute type 1 has an invalid length. [ 679.293524][T22440] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4338'. [ 679.450824][T10291] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 679.858948][T22461] gre0: entered allmulticast mode [ 680.032903][T22466] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20000 [ 680.069318][T22465] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20000 [ 680.366008][T22482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4349'. [ 680.864714][T22480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4350'. [ 681.003230][T22484] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4350'. [ 681.398808][T22512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4355'. [ 681.435547][T22484] bond4: entered promiscuous mode [ 681.493075][T22484] bond4: entered allmulticast mode [ 681.581637][T22484] 8021q: adding VLAN 0 to HW filter on device bond4 [ 681.854446][T22517] bond2: Removing last ns target with arp_interval on [ 681.897928][T22524] netlink: 'syz.4.4360': attribute type 1 has an invalid length. [ 682.190905][T22524] 8021q: adding VLAN 0 to HW filter on device bond4 [ 682.223472][T22539] xt_policy: output policy not valid in PREROUTING and INPUT [ 682.251368][T22540] xt_policy: output policy not valid in PREROUTING and INPUT [ 682.627076][T22555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4365'. [ 683.045144][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 683.399968][T22567] syzkaller1: entered promiscuous mode [ 683.417848][T22567] syzkaller1: entered allmulticast mode [ 684.497087][T22606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4375'. [ 685.602758][T22554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.948755][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4376'. [ 686.010095][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.090082][T22620] macsec1: entered promiscuous mode [ 686.121679][T22620] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 686.149134][T22620] macsec1: entered allmulticast mode [ 686.162792][T22620] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 686.177621][T22620] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 686.479622][T22628] 8021q: adding VLAN 0 to HW filter on device bond5 [ 686.514559][T22628] bridge0: port 3(bond5) entered blocking state [ 686.543230][T22628] bridge0: port 3(bond5) entered disabled state [ 686.555549][T22628] bond5: entered allmulticast mode [ 686.577942][T22628] bond5: entered promiscuous mode [ 686.957351][T22662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4389'. [ 687.594727][T22694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.209547][T22711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4405'. [ 688.650117][T22731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4410'. [ 689.174241][T22746] netlink: 'syz.3.4415': attribute type 1 has an invalid length. [ 689.302518][T22746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 689.333554][T22746] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4415'. [ 689.509825][T22764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4418'. [ 689.558220][T22747] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 690.067423][T22780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4420'. [ 690.082159][T22747] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 690.100505][T22747] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 690.137853][T22782] syzkaller0: entered promiscuous mode [ 690.161520][T22782] syzkaller0: entered allmulticast mode [ 690.189311][T22780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4420'. [ 690.333929][T22787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4423'. [ 690.396023][T22789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4423'. [ 690.462732][T22747] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 690.488677][T22747] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 690.692241][T22787] 8021q: adding VLAN 0 to HW filter on device bond4 [ 690.757817][T22792] bond4: entered promiscuous mode [ 690.777468][T22792] bond4: entered allmulticast mode [ 691.239197][T22747] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 691.255524][T22747] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 691.266807][T22806] __nla_validate_parse: 2 callbacks suppressed [ 691.266827][T22806] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4428'. [ 691.431543][T22747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 691.451682][T22747] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 691.512274][T22811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4429'. [ 691.565922][T22813] netlink: 'syz.2.4430': attribute type 1 has an invalid length. [ 691.741483][T22814] netlink: 'syz.2.4430': attribute type 12 has an invalid length. [ 691.765026][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 691.978271][T22813] bond3: entered promiscuous mode [ 692.001024][T22813] 8021q: adding VLAN 0 to HW filter on device bond3 [ 692.118019][T22815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 692.154121][T22815] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 692.197444][T22815] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 692.246170][T22815] bond3: (slave ip6gre2): making interface the new active one [ 692.266557][T22815] ip6gre2: entered promiscuous mode [ 692.308034][T22815] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 692.729233][T22830] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4433'. [ 692.801527][T22830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4433'. [ 692.817949][T22833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4434'. [ 692.845436][T22832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4434'. [ 692.931429][T22830] 8021q: adding VLAN 0 to HW filter on device bond5 [ 693.063664][T22846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4435'. [ 693.117446][T22836] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 693.170734][T22836] bond6 (unregistering): Released all slaves [ 693.736383][T22830] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4433'. [ 694.130910][T22876] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.4442'. [ 694.239738][T22882] netlink: 'syz.4.4442': attribute type 11 has an invalid length. [ 694.294427][T22882] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4442'. [ 695.519187][T22960] netlink: 'syz.1.4450': attribute type 1 has an invalid length. [ 695.806961][T22960] 8021q: adding VLAN 0 to HW filter on device bond5 [ 696.516091][T22972] bond5: (slave veth9): Enslaving as an active interface with a down link [ 696.607909][T22978] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 696.618964][T22978] bond5: (slave batadv1): making interface the new active one [ 696.697713][T22978] batadv1: entered promiscuous mode [ 696.721185][T22978] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 696.887654][T22984] team0: Port device team_slave_0 removed [ 697.009152][T22999] bond5 (unregistering): (slave veth9): Releasing active interface [ 697.107820][T22999] bond5 (unregistering): (slave batadv1): Releasing active interface [ 697.183601][T22999] bond5 (unregistering): Released all slaves [ 697.510726][T23045] lo speed is unknown, defaulting to 1000 [ 698.104088][T23074] netlink: 'syz.2.4459': attribute type 1 has an invalid length. [ 698.181611][T23075] __nla_validate_parse: 4 callbacks suppressed [ 698.181633][T23075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4460'. [ 698.246154][T23076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4460'. [ 698.483322][T23074] bond4: option mode: invalid value (8) [ 698.588222][T23074] bond4 (unregistering): Released all slaves [ 699.017867][T23083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.078483][T23083] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.124302][T23083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.195697][T23105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4465'. [ 699.591059][T23083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.617953][T23083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.683316][T23120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4467'. [ 699.694144][T23083] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 699.969075][T23125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.052757][ T8468] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.060010][ T8468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.114723][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.121957][ T8468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.581187][T23138] lo speed is unknown, defaulting to 1000 [ 700.894149][T23147] x_tables: ip_tables: ah match: only valid for protocol 51 [ 701.544242][T23163] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003 [ 701.582600][T23157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4475'. [ 701.658975][T23163] IPv6: addrconf: prefix option has invalid lifetime [ 701.704177][T23166] sctp: [Deprecated]: syz.4.4476 (pid 23166) Use of int in max_burst socket option deprecated. [ 701.704177][T23166] Use struct sctp_assoc_value instead [ 703.023549][T23182] syzkaller1: entered allmulticast mode [ 703.556600][T23206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4483'. [ 703.632951][T23208] netlink: 'syz.0.4484': attribute type 11 has an invalid length. [ 703.693677][T23208] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4484'. [ 704.321893][T23223] lo speed is unknown, defaulting to 1000 [ 705.192848][T23247] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 705.224270][T23247] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 705.242392][T23255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.260838][T23254] netlink: 'syz.4.4491': attribute type 21 has an invalid length. [ 705.290191][T23254] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4491'. [ 705.351422][T23255] ip6gre3: entered promiscuous mode [ 705.384294][T23255] ip6gre3: entered allmulticast mode [ 705.392300][T23254] netlink: 'syz.4.4491': attribute type 4 has an invalid length. [ 705.400817][T23254] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4491'. [ 705.478248][T23261] xt_addrtype: ipv6 does not support BROADCAST matching [ 705.824039][T23267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4494'. [ 705.866456][T23265] netlink: 'syz.1.4495': attribute type 23 has an invalid length. [ 707.136548][T23305] ipt_REJECT: TCP_RESET invalid for non-tcp [ 707.532503][T23316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4504'. [ 708.072081][T23330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4510'. [ 708.099461][T23330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4510'. [ 708.337070][T23333] syzkaller0: entered promiscuous mode [ 708.354470][T23333] syzkaller0: entered allmulticast mode [ 708.404992][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 708.627117][T23351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4515'. [ 708.697529][T23345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4513'. [ 709.024392][T23362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.099331][T23367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4519'. [ 709.164150][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4520'. [ 709.189574][T23371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4520'. [ 709.561874][T23378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4521'. [ 709.621476][T23354] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4516'. [ 713.602668][T23410] lo speed is unknown, defaulting to 1000 [ 713.901648][T23425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4528'. [ 714.214408][T23442] sctp: [Deprecated]: syz.1.4535 (pid 23442) Use of int in max_burst socket option. [ 714.214408][T23442] Use struct sctp_assoc_value instead [ 714.292604][T23444] tc_dump_action: action bad kind [ 714.654672][T23459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4541'. [ 714.685617][T23462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4539'. [ 714.710276][T23461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4540'. [ 715.234539][T23471] erspan0: left allmulticast mode [ 715.256805][T23471] erspan0: left promiscuous mode [ 715.271730][T23471] bridge4: port 1(erspan0) entered disabled state [ 715.329356][T23471] bridge_slave_0: left allmulticast mode [ 715.352929][T23471] bridge_slave_0: left promiscuous mode [ 715.380742][T23471] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.439261][T23471] bridge_slave_1: left allmulticast mode [ 715.458146][T23471] bridge_slave_1: left promiscuous mode [ 715.470547][T23471] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.514071][T23471] bond0: (slave bond_slave_0): Releasing backup interface [ 715.524484][T23483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4545'. [ 715.543022][T23471] bond0: (slave bond_slave_1): Releasing backup interface [ 715.573841][T23471] team0: Port device team_slave_1 removed [ 715.633836][T23471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.681704][T23471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.710246][T23471] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 715.776349][T23474] tipc: Enabled bearer , priority 0 [ 716.499248][T23520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4554'. [ 716.768128][T23523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4556'. [ 717.066931][T10296] tipc: Node number set to 1818293161 [ 717.676125][T23559] netlink: 'syz.0.4562': attribute type 1 has an invalid length. [ 717.695029][T23559] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4562'. [ 717.761914][T23566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4563'. [ 718.144169][T23576] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20000 [ 718.498354][T23585] netlink: 'syz.1.4571': attribute type 39 has an invalid length. [ 718.506616][T23588] syzkaller1: entered promiscuous mode [ 718.506833][T23588] syzkaller1: entered allmulticast mode [ 718.540550][T23588] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 718.552379][T23590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4570'. [ 719.187009][T23610] x_tables: duplicate underflow at hook 3 [ 719.318929][T23614] __nla_validate_parse: 4 callbacks suppressed [ 719.318952][T23614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4575'. [ 719.379463][T23614] netlink: 'syz.4.4575': attribute type 14 has an invalid length. [ 719.398661][T23612] geneve2: entered allmulticast mode [ 719.410663][T23614] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4575'. [ 719.698705][T23629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4582'. [ 720.116899][T23646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4585'. [ 720.164279][T23647] xfrm0: Caught tx_queue_len zero misconfig [ 720.411069][T23650] Bluetooth: MGMT ver 1.23 [ 721.076355][T23666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4594'. [ 721.093859][T23667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4593'. [ 721.110316][T23670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4595'. [ 721.154663][T23667] team0: Port device team_slave_0 removed [ 721.218671][T23668] xt_TCPMSS: Only works on TCP SYN packets [ 721.283750][T23672] syzkaller1: entered promiscuous mode [ 721.301900][T23672] syzkaller1: entered allmulticast mode [ 721.528557][T23681] sctp: [Deprecated]: syz.3.4597 (pid 23681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 721.528557][T23681] Use struct sctp_sack_info instead [ 721.661098][T23681] lo speed is unknown, defaulting to 1000 [ 721.744621][T23687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4598'. [ 721.832760][T23690] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4599'. [ 722.420811][T23698] veth1_to_team: Caught tx_queue_len zero misconfig [ 722.774128][T23717] netlink: 'syz.1.4605': attribute type 1 has an invalid length. [ 723.012300][T23724] gretap2: entered allmulticast mode [ 723.121958][T23724] bond5: (slave gretap2): making interface the new active one [ 723.172709][T23724] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 723.261817][T23738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4611'. [ 723.668072][T23741] 8021q: adding VLAN 0 to HW filter on device bond5 [ 723.783217][T23744] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 724.906918][T23781] __nla_validate_parse: 2 callbacks suppressed [ 724.906940][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4623'. [ 725.380626][T23799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4626'. [ 725.432908][T23799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4626'. [ 725.968556][T23811] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4632'. [ 726.182941][T23817] TCP: TCP_TX_DELAY enabled [ 726.335583][T23824] tipc: New replicast peer: 255.255.255.255 [ 726.368723][T23824] tipc: Enabled bearer , priority 10 [ 726.603822][T23842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4638'. [ 726.659900][T23845] sctp: [Deprecated]: syz.2.4639 (pid 23845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 726.659900][T23845] Use struct sctp_sack_info instead [ 726.984009][T23845] lo speed is unknown, defaulting to 1000 [ 727.356765][T23862] ip_tables: iptables: counters copy to user failed while replacing table [ 727.616441][T23867] netlink: 'syz.4.4644': attribute type 1 has an invalid length. [ 727.899545][T23867] 8021q: adding VLAN 0 to HW filter on device bond6 [ 728.329548][ T58] bridge_slave_1: left allmulticast mode [ 728.368684][ T58] bridge_slave_1: left promiscuous mode [ 728.419523][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.541941][T23892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4646'. [ 728.567457][ T58] bridge_slave_0: left allmulticast mode [ 728.598937][ T58] bridge_slave_0: left promiscuous mode [ 728.621611][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.854439][ T58] pim6reg: left allmulticast mode [ 729.126633][T23906] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 729.170848][T23911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4651'. [ 729.994657][ T58] erspan0 (unregistering): left promiscuous mode [ 730.133232][ T58] gretap0 (unregistering): left promiscuous mode [ 730.348250][T23918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4654'. [ 730.542406][ T58] bond1 (unregistering): (slave gretap1): Releasing active interface [ 730.661142][ T58] bond6 (unregistering): (slave gretap3): Releasing active interface [ 730.954147][ T58] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 730.984971][ T58] bridge2 (unregistering): left promiscuous mode [ 731.023829][ T58] team0: Port device bridge4 removed [ 731.245181][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.254283][ T58] bond_slave_0: left allmulticast mode [ 731.264123][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.279066][ T58] bond_slave_1: left allmulticast mode [ 731.287506][ T58] bond0 (unregistering): Released all slaves [ 731.304250][ T58] bond1 (unregistering): Released all slaves [ 731.332320][ T58] bond2 (unregistering): Released all slaves [ 731.392842][ T58] bond3 (unregistering): Released all slaves [ 731.421361][ T58] bond4 (unregistering): Released all slaves [ 731.452440][ T58] bond5 (unregistering): Released all slaves [ 731.487645][ T58] bond6 (unregistering): Released all slaves [ 731.510984][ T58] bond7 (unregistering): Released all slaves [ 731.867170][T23934] netlink: 'syz.4.4658': attribute type 62 has an invalid length. [ 731.916247][T23930] batadv_slave_1: entered promiscuous mode [ 731.923936][T23935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4658'. [ 732.004544][ T58] tipc: Disabling bearer [ 732.023608][ T58] tipc: Disabling bearer [ 732.037664][ T58] tipc: Left network mode [ 732.244569][T23927] batadv_slave_1: left promiscuous mode [ 732.664578][T23966] sctp: [Deprecated]: syz.3.4663 (pid 23966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 732.664578][T23966] Use struct sctp_sack_info instead [ 733.268421][T23981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4669'. [ 733.539034][T23979] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 733.561609][T23979] syzkaller1: linktype set to 271 [ 733.788929][T23997] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4673'. [ 733.812623][T23992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4671'. [ 734.744559][ T58] hsr_slave_0: left promiscuous mode [ 734.767048][ T58] hsr_slave_1: left promiscuous mode [ 734.780312][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.797738][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.824189][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.840057][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.970138][ T58] veth0_macvtap: left promiscuous mode [ 734.987761][ T58] veth1_vlan: left promiscuous mode [ 735.001348][ T58] veth0_vlan: left promiscuous mode [ 735.322636][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4683'. [ 736.226473][ T58] team_slave_1 (unregistering): left promiscuous mode [ 736.238209][ T58] team_slave_1 (unregistering): left allmulticast mode [ 736.263922][ T58] team0 (unregistering): Port device team_slave_1 removed [ 736.297499][ T58] team_slave_0 (unregistering): left promiscuous mode [ 736.314618][ T58] team_slave_0 (unregistering): left allmulticast mode [ 736.339079][ T58] team0 (unregistering): Port device team_slave_0 removed [ 736.637965][T10291] lo speed is unknown, defaulting to 1000 [ 736.656990][T10291] syz2: Port: 1 Link DOWN [ 736.734314][T14991] smbdirect: ib_dev[syz2] removed [ 737.271910][ T58] IPVS: stop unused estimator thread 0... [ 737.768289][T24089] xt_hashlimit: size too large, truncated to 1048576 [ 738.330657][T24100] xt_hashlimit: size too large, truncated to 1048576 [ 739.122153][T24131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4699'. [ 739.872626][T24157] x_tables: duplicate underflow at hook 3 [ 739.965632][T24162] netlink: 'syz.0.4709': attribute type 1 has an invalid length. [ 740.140441][T24162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4709'. [ 740.244016][T24165] bond4: (slave geneve3): making interface the new active one [ 740.311546][T24165] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 740.817716][T14991] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 740.856939][T14991] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 740.878148][T14991] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 740.901251][T24182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4712'. [ 740.936063][T24182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4712'. [ 741.029279][ T58] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 741.487100][T24201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4717'. [ 741.522237][T24203] tipc: Invalid UDP bearer configuration [ 741.523856][T24203] tipc: Enabling of bearer rejected, failed to enable media [ 741.557540][T24201] tipc: Invalid UDP bearer configuration [ 741.557595][T24201] tipc: Enabling of bearer rejected, failed to enable media [ 741.579304][T24206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4718'. [ 742.964970][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 743.098851][T24231] IPVS: Scheduler module ip_vs_sip not found [ 743.858589][T24260] netlink: 'syz.3.4729': attribute type 3 has an invalid length. [ 743.918942][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4729'. [ 743.953080][T24265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4731'. [ 744.001518][T24261] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4729'. [ 745.459313][T24294] netlink: 'syz.4.4737': attribute type 5 has an invalid length. [ 745.573921][T24291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4735'. [ 745.603239][T24294] netlink: 'syz.4.4737': attribute type 1 has an invalid length. [ 745.728005][T24300] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4737'. [ 746.440815][T24308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4740'. [ 746.490861][T24314] netlink: 'syz.3.4741': attribute type 4 has an invalid length. [ 746.674242][T24276] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4732'. [ 746.711147][T24276] netlink: 'syz.2.4732': attribute type 8 has an invalid length. [ 747.120116][T24327] xt_connbytes: Forcing CT accounting to be enabled [ 747.259135][T24326] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4744'. [ 747.454663][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.701390][T24342] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4748'. [ 749.373065][T24387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4761'. [ 749.474014][T24377] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 749.474014][T24377] Please contact the netfilter-devel mailing list or update your nftables rules. [ 749.619998][T24390] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4762'. [ 750.331997][T24408] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 750.423257][T24411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4769'. [ 750.695400][T24422] netlink: 'syz.3.4772': attribute type 33 has an invalid length. [ 750.714833][T24422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4772'. [ 750.766695][T24422] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 751.395339][T24429] tipc: Started in network mode [ 751.401747][T24429] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 751.411732][T24429] tipc: Enabling of bearer rejected, failed to enable media [ 751.878441][T24465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4784'. [ 752.380267][T24485] ip6gre1: entered promiscuous mode [ 752.394139][T24485] ip6gre1: entered allmulticast mode [ 752.425741][T14992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 752.455055][T10291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 752.463126][T14992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 752.565421][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 753.286089][T10291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 753.365880][T10291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 753.416426][T24523] netlink: 'syz.1.4797': attribute type 1 has an invalid length. [ 753.483197][T24523] bond6: entered promiscuous mode [ 753.506692][T24523] 8021q: adding VLAN 0 to HW filter on device bond6 [ 753.713733][T24523] 8021q: adding VLAN 0 to HW filter on device bond6 [ 753.737407][T24523] bond6: (slave gre2): The slave device specified does not support setting the MAC address [ 753.773932][T24523] bond6: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 753.805619][T24523] bond6: (slave gre2): making interface the new active one [ 753.825092][T24523] gre2: entered promiscuous mode [ 753.841284][T24523] bond6: (slave gre2): Enslaving as an active interface with an up link [ 753.946142][T24530] tipc: Enabled bearer , priority 0 [ 753.957046][ T29] audit: type=1107 audit(1786177267.503:26): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 753.995817][T24530] tipc: Resetting bearer [ 754.103584][T24529] tipc: Disabling bearer [ 754.827981][T24571] syzkaller0: entered promiscuous mode [ 754.844499][T24571] syzkaller0: entered allmulticast mode [ 754.908628][T24583] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 755.156161][T24588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4810'. [ 756.893414][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 759.584140][T24592] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4811'. [ 759.593427][T24592] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 759.667449][T24591] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4811'. [ 759.703905][T24591] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 760.161498][T24596] 8021q: adding VLAN 0 to HW filter on device bond6 [ 760.213556][T24596] bridge0: port 1(bond6) entered blocking state [ 760.254115][T24596] bridge0: port 1(bond6) entered disabled state [ 760.289651][T24596] bond6: entered allmulticast mode [ 760.342447][T24596] bond6: entered promiscuous mode [ 760.732715][T24626] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4819'. [ 761.016911][T24635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4821'. [ 761.631149][T24646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4824'. [ 762.806853][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 762.817823][T24680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4832'. [ 762.832345][T24680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4832'. [ 762.888036][T24685] ieee802154 phy1 wpan1: encryption failed: -22 [ 763.228648][T18742] block nbd1: Receive control failed (result -32) [ 763.492560][T24696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4837'. [ 763.585982][T24696] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4837'. [ 763.621198][T24700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4839'. [ 763.637925][T24696] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 763.691272][T24698] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 764.195854][T24719] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 764.511089][T24727] netlink: 'syz.0.4846': attribute type 1 has an invalid length. [ 764.766949][T24734] netlink: 'syz.0.4846': attribute type 10 has an invalid length. [ 764.833135][T24727] 8021q: adding VLAN 0 to HW filter on device bond5 [ 764.870184][T24734] __nla_validate_parse: 2 callbacks suppressed [ 764.870205][T24734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4846'. [ 764.982988][T24736] xt_CT: No such helper "snmp_trap" [ 765.116591][T24734] dummy0: entered promiscuous mode [ 765.336329][T24742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4848'. [ 765.425924][T24746] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.505992][T24742] xt_l2tp: invalid flags combination: 8 [ 766.005202][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 766.141174][T24754] syzkaller0: create flow: hash 1519992240 index 2 [ 766.469985][T14991] syzkaller0: tun_net_xmit 76 [ 766.487195][T14991] syzkaller0: tun_net_xmit 48 [ 766.496509][ T5747] syzkaller0: tun_net_xmit 76 [ 766.531664][T24763] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4855'. [ 766.563336][T24763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4855'. [ 766.563353][T24755] syzkaller0: delete flow: hash 1519992240 index 2 [ 766.592588][T10296] syzkaller0: tun_net_xmit 76 [ 766.602195][T24763] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4855'. [ 766.624984][T24769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4856'. [ 766.655049][T10296] syzkaller0: tun_net_xmit 76 [ 766.755770][T24764] tipc: Enabling of bearer rejected, failed to enable media [ 766.765556][T10296] syzkaller0: tun_net_xmit 76 [ 767.734220][T24790] netlink: 'syz.2.4863': attribute type 1 has an invalid length. [ 767.743782][T24790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4863'. [ 767.769481][T24790] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4863'. [ 772.791940][T24770] syzkaller1: entered promiscuous mode [ 772.800180][T24770] syzkaller1: entered allmulticast mode [ 773.219244][T24826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.550777][T24837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4870'. [ 773.594184][T24837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4870'. [ 773.911241][T24841] Bluetooth: MGMT ver 1.23 [ 773.928736][T24841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4872'. [ 774.004853][T24841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4872'. [ 774.524588][T24849] batadv_slave_0: Caught tx_queue_len zero misconfig [ 774.605439][T24849] netlink: 'syz.2.4874': attribute type 9 has an invalid length. [ 774.655270][T24849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4874'. [ 774.946177][T24864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4877'. [ 775.027591][T24868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4877'. [ 775.074172][T24867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4878'. [ 775.987190][T24885] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 776.430097][T24892] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 776.483122][T24898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4886'. [ 776.823335][T24907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4888'. [ 779.080426][T24956] gre0: left promiscuous mode [ 779.292027][T24956] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.424699][T24956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.703987][T24969] __nla_validate_parse: 4 callbacks suppressed [ 779.704011][T24969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4906'. [ 779.749966][T24956] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 779.782059][T24969] netlink: 'syz.4.4906': attribute type 10 has an invalid length. [ 779.816266][T24969] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4906'. [ 781.437324][T24989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4913'. [ 781.644235][T24995] netlink: 34 bytes leftover after parsing attributes in process `syz.3.4914'. [ 782.427875][T18742] block nbd3: Receive control failed (result -1) [ 782.441226][T18742] [ 782.443613][T18742] ====================================================== [ 782.450658][T18742] WARNING: possible circular locking dependency detected [ 782.457730][T18742] syzkaller #0 Not tainted [ 782.462178][T18742] ------------------------------------------------------ [ 782.469222][T18742] kworker/u9:0/18742 is trying to acquire lock: [ 782.475494][T18742] ffff88803bd32ae0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 782.485109][T18742] [ 782.485109][T18742] but task is already holding lock: [ 782.492530][T18742] ffff888036f08068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 782.501921][T18742] [ 782.501921][T18742] which lock already depends on the new lock. [ 782.501921][T18742] [ 782.512361][T18742] [ 782.512361][T18742] the existing dependency chain (in reverse order) is: [ 782.521408][T18742] [ 782.521408][T18742] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 782.529102][T18742] __mutex_lock+0x19d/0x1550 [ 782.534394][T18742] nbd_queue_rq+0x373/0x1150 [ 782.539556][T18742] blk_mq_dispatch_rq_list+0x499/0x1990 [ 782.545795][T18742] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 782.552739][T18742] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 782.559283][T18742] blk_mq_run_work_fn+0x16c/0x300 [ 782.564879][T18742] process_scheduled_works+0xa8e/0x14e0 [ 782.571093][T18742] worker_thread+0xa47/0xfb0 [ 782.576268][T18742] kthread+0x388/0x470 [ 782.580903][T18742] ret_from_fork+0x514/0xb70 [ 782.586133][T18742] ret_from_fork_asm+0x1a/0x30 [ 782.592099][T18742] [ 782.592099][T18742] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 782.599644][T18742] __mutex_lock+0x19d/0x1550 [ 782.604804][T18742] nbd_queue_rq+0xc1/0x1150 [ 782.609970][T18742] blk_mq_dispatch_rq_list+0x499/0x1990 [ 782.616088][T18742] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 782.623106][T18742] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 782.629658][T18742] blk_mq_run_work_fn+0x16c/0x300 [ 782.635258][T18742] process_scheduled_works+0xa8e/0x14e0 [ 782.641447][T18742] worker_thread+0xa47/0xfb0 [ 782.647063][T18742] kthread+0x388/0x470 [ 782.651700][T18742] ret_from_fork+0x514/0xb70 [ 782.656858][T18742] ret_from_fork_asm+0x1a/0x30 [ 782.662279][T18742] [ 782.662279][T18742] -> #4 (set->srcu){.+.+}-{0:0}: [ 782.669541][T18742] __synchronize_srcu+0xc9/0x2f0 [ 782.675087][T18742] elevator_switch+0x1e8/0x7b0 [ 782.680552][T18742] elevator_change+0x2fa/0x480 [ 782.685916][T18742] elevator_set_default+0x375/0x440 [ 782.691670][T18742] blk_register_queue+0x3f3/0x4e0 [ 782.697303][T18742] __add_disk+0x6cb/0xe30 [ 782.702355][T18742] add_disk_fwnode+0x100/0x3a0 [ 782.707692][T18742] nbd_dev_add+0x733/0xb60 [ 782.712666][T18742] nbd_init+0x15f/0x1e0 [ 782.717453][T18742] do_one_initcall+0x250/0x870 [ 782.722776][T18742] do_initcall_level+0x10a/0x1a0 [ 782.728321][T18742] do_initcalls+0x59/0xa0 [ 782.733207][T18742] kernel_init_freeable+0x29d/0x3e0 [ 782.738961][T18742] kernel_init+0x1d/0x1d0 [ 782.743841][T18742] ret_from_fork+0x514/0xb70 [ 782.748998][T18742] ret_from_fork_asm+0x1a/0x30 [ 782.754331][T18742] [ 782.754331][T18742] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 782.762195][T18742] __mutex_lock+0x19d/0x1550 [ 782.767380][T18742] elevator_change+0x1af/0x480 [ 782.772693][T18742] elevator_set_none+0xb5/0x140 [ 782.778091][T18742] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 782.784473][T18742] nbd_start_device+0x189/0xb30 [ 782.789895][T18742] nbd_genl_connect+0x1597/0x1c10 [ 782.795487][T18742] genl_family_rcv_msg_doit+0x233/0x340 [ 782.801703][T18742] genl_rcv_msg+0x614/0x7a0 [ 782.806765][T18742] netlink_rcv_skb+0x226/0x4a0 [ 782.812079][T18742] genl_rcv+0x28/0x40 [ 782.816609][T18742] netlink_unicast+0x7bb/0x940 [ 782.821934][T18742] netlink_sendmsg+0x813/0xb40 [ 782.827422][T18742] sock_sendmsg_nosec+0x13a/0x180 [ 782.833100][T18742] ____sys_sendmsg+0x54e/0x850 [ 782.838407][T18742] ___sys_sendmsg+0x2a5/0x360 [ 782.843807][T18742] __x64_sys_sendmsg+0x1b1/0x290 [ 782.849312][T18742] do_syscall_64+0x174/0x580 [ 782.854540][T18742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.861024][T18742] [ 782.861024][T18742] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 782.869683][T18742] blk_alloc_queue+0x544/0x690 [ 782.875008][T18742] __blk_mq_alloc_disk+0x194/0x390 [ 782.880674][T18742] nbd_dev_add+0x494/0xb60 [ 782.885652][T18742] nbd_init+0x15f/0x1e0 [ 782.890366][T18742] do_one_initcall+0x250/0x870 [ 782.895709][T18742] do_initcall_level+0x10a/0x1a0 [ 782.901212][T18742] do_initcalls+0x59/0xa0 [ 782.906100][T18742] kernel_init_freeable+0x29d/0x3e0 [ 782.911866][T18742] kernel_init+0x1d/0x1d0 [ 782.916751][T18742] ret_from_fork+0x514/0xb70 [ 782.921922][T18742] ret_from_fork_asm+0x1a/0x30 [ 782.927248][T18742] [ 782.927248][T18742] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 782.934493][T18742] fs_reclaim_acquire+0x71/0x100 [ 782.940038][T18742] __kmalloc_noprof+0xbc/0x720 [ 782.945351][T18742] tls_sw_sendmsg+0x59b/0x2b50 [ 782.950809][T18742] sock_sendmsg_nosec+0x90/0x180 [ 782.956311][T18742] sock_sendmsg+0x1ca/0x2d0 [ 782.961426][T18742] splice_to_socket+0xb5e/0x12a0 [ 782.966936][T18742] direct_splice_actor+0x101/0x160 [ 782.972610][T18742] splice_direct_to_actor+0x57b/0xcb0 [ 782.978546][T18742] do_splice_direct+0x195/0x290 [ 782.983953][T18742] do_sendfile+0x52e/0x7c0 [ 782.988958][T18742] __se_sys_sendfile64+0x144/0x1a0 [ 782.994631][T18742] do_syscall_64+0x174/0x580 [ 782.999786][T18742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.006236][T18742] [ 783.006236][T18742] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 783.014376][T18742] __lock_acquire+0x1520/0x2cf0 [ 783.019811][T18742] lock_acquire+0x106/0x350 [ 783.024867][T18742] lock_sock_nested+0x41/0x100 [ 783.030257][T18742] inet_shutdown+0x6a/0x390 [ 783.035326][T18742] nbd_mark_nsock_dead+0x2cb/0x550 [ 783.040989][T18742] recv_work+0x1cee/0x1e10 [ 783.045961][T18742] process_scheduled_works+0xa8e/0x14e0 [ 783.052062][T18742] worker_thread+0xa47/0xfb0 [ 783.057203][T18742] kthread+0x388/0x470 [ 783.061828][T18742] ret_from_fork+0x514/0xb70 [ 783.066975][T18742] ret_from_fork_asm+0x1a/0x30 [ 783.072291][T18742] [ 783.072291][T18742] other info that might help us debug this: [ 783.072291][T18742] [ 783.082538][T18742] Chain exists of: [ 783.082538][T18742] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 783.082538][T18742] [ 783.095617][T18742] Possible unsafe locking scenario: [ 783.095617][T18742] [ 783.103088][T18742] CPU0 CPU1 [ 783.108472][T18742] ---- ---- [ 783.113852][T18742] lock(&nsock->tx_lock); [ 783.118297][T18742] lock(&cmd->lock); [ 783.125004][T18742] lock(&nsock->tx_lock); [ 783.131972][T18742] lock(sk_lock-AF_INET6-NBD); [ 783.136851][T18742] [ 783.136851][T18742] *** DEADLOCK *** [ 783.136851][T18742] [ 783.145014][T18742] 3 locks held by kworker/u9:0/18742: [ 783.150622][T18742] #0: ffff888028433140 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 783.161915][T18742] #1: ffffc90004fa7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 783.173725][T18742] #2: ffff888036f08068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 783.183095][T18742] [ 783.183095][T18742] stack backtrace: [ 783.189012][T18742] CPU: 1 UID: 0 PID: 18742 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 783.189039][T18742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 783.189054][T18742] Workqueue: nbd3-recv recv_work [ 783.189089][T18742] Call Trace: [ 783.189099][T18742] [ 783.189111][T18742] dump_stack_lvl+0xe8/0x150 [ 783.189143][T18742] print_circular_bug+0x2e1/0x300 [ 783.189180][T18742] check_noncircular+0x12e/0x150 [ 783.189217][T18742] __lock_acquire+0x1520/0x2cf0 [ 783.189249][T18742] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 783.189279][T18742] ? try_to_wake_up+0x8c5/0x14d0 [ 783.189317][T18742] ? inet_shutdown+0x6a/0x390 [ 783.189342][T18742] lock_acquire+0x106/0x350 [ 783.189368][T18742] ? inet_shutdown+0x6a/0x390 [ 783.189396][T18742] ? __queue_work+0x1ea/0x10a0 [ 783.189455][T18742] lock_sock_nested+0x41/0x100 [ 783.189485][T18742] ? inet_shutdown+0x6a/0x390 [ 783.189510][T18742] inet_shutdown+0x6a/0x390 [ 783.189537][T18742] nbd_mark_nsock_dead+0x2cb/0x550 [ 783.189572][T18742] recv_work+0x1cee/0x1e10 [ 783.189615][T18742] ? lockdep_unlock+0x5d/0xd0 [ 783.189639][T18742] ? __lock_acquire+0x13e8/0x2cf0 [ 783.189672][T18742] ? __pfx_recv_work+0x10/0x10 [ 783.189709][T18742] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 783.189735][T18742] ? process_scheduled_works+0xa20/0x14e0 [ 783.189764][T18742] ? rcu_is_watching+0x15/0xb0 [ 783.189798][T18742] ? process_scheduled_works+0xa20/0x14e0 [ 783.189822][T18742] process_scheduled_works+0xa8e/0x14e0 [ 783.189862][T18742] ? __pfx_process_scheduled_works+0x10/0x10 [ 783.189890][T18742] ? assign_work+0x3cf/0x5d0 [ 783.189915][T18742] worker_thread+0xa47/0xfb0 [ 783.189948][T18742] ? __kthread_parkme+0x71/0x1f0 [ 783.189979][T18742] kthread+0x388/0x470 [ 783.190015][T18742] ? __pfx_worker_thread+0x10/0x10 [ 783.190038][T18742] ? __pfx_kthread+0x10/0x10 [ 783.190067][T18742] ret_from_fork+0x514/0xb70 [ 783.190099][T18742] ? __pfx_ret_from_fork+0x10/0x10 [ 783.190128][T18742] ? __switch_to+0xc89/0x1420 [ 783.190154][T18742] ? __pfx_kthread+0x10/0x10 [ 783.190183][T18742] ret_from_fork_asm+0x1a/0x30 [ 783.190224][T18742] [ 784.565004][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!