last executing test programs: 4.862858727s ago: executing program 2 (id=5793): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x14) 4.644185873s ago: executing program 2 (id=5797): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000e40)="0480b31d33010000000000000000", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="0100feffffff0000000001000000640007800c00018008000100", @ANYRES32=r3, @ANYBLOB="27e7c5baf5aedb28", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="c4f0310b4609d4b06bb5662730e13fb907a700ddad902faa0f6853e7ab1f5bc477d8f20726000000000000006b", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005001b193c99a8772efb0c0002000800000000000000"], 0x90}}, 0x20000040) 4.583619724s ago: executing program 2 (id=5798): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @multicast1}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x9, 0x8001, 0x4, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x7800, 0x9, 0x401}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)={0x1fc, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x58, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0x6, 0x5, "c195"}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x424e}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x85\'\\)[\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30000000}]}]}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-*\\:U\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2c0}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\xa7*\x16!\\$)\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd3b}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x6e, 0x5, "731b17421f467069fa7fea659764848106fe1dbac3f1f2a5159715f3da7a9da4eeaf11bfbcff5600f5ed31f24221b25a156e8baa562bd45fe912c616091895d7fb6d9a57a59ee789d3ec6888a1a31450e98eb8ae17b7de52b0c388320eabd0dd6d2f7da652ff550e5560"}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0xc800}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.765719507s ago: executing program 0 (id=5805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x140b, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x1) close(r1) write$cgroup_type(r1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) 1.765229593s ago: executing program 2 (id=5806): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400000010008103e800006c7800000010990000ae51981f192526e925cddbb8800cd609b7ff3c2dcd4cdda3ad656864b9b64c2adbbe0d20b4bacc6f7c50c4c66d0ddeb1feebd07f565c9495273b1d2f4a21f827f283192a4e94bf00"/103, @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400000010008103e800006c7800000010990000ae51981f192526e925cddbb8800cd609b7ff3c2dcd4cdda3ad656864b9b64c2adbbe0d20b4bacc6f7c50c4c66d0ddeb1feebd07f565c9495273b1d2f4a21f827f283192a4e94bf00"/103, @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r4, @ANYBLOB="08000200ac1414aab2c9f47d6e50a2c07a479bf12fd42027dead2f2f50ff3b7132d50bccd92a63e9416d0e2fe2081304928c1f5edd44b546691a02"], 0x20}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r4, @ANYBLOB="08000200ac1414aab2c9f47d6e50a2c07a479bf12fd42027dead2f2f50ff3b7132d50bccd92a63e9416d0e2fe2081304928c1f5edd44b546691a02"], 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000002540)=[{{&(0x7f0000000780)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000800)="4c8d8024d2c753d6aa29719ddaa2f3a3958ed3a8f98881e8d6fc28d64d85c4cd984ec20200e57fef3ef7cec487485c2a7d616f88dacfa498036435aac5b1730deb25c4dd76384c0bd43cd6e7e15e3ec1ffef60da5855db7d015443a70866509f3b826a6e7c296d7dc250bbc24be73fdcbfdac25ef8d314bd03c8dacd249fa2943676191ca409ea587380fd4c1398ca9af10d23309cc483f79738981afd504c5217b77aac071038c78f692c4046cd18c7c9e89e", 0xb3}, {&(0x7f00000008c0)="05d5776bd9d0993a345b5d386503a5b4474e97e72491c698f56730ab8cab428b1a029ece3ce328b2c906adf6af098ccac9fb4576c45e4f9ed86437b71ef3bc573479d0ccdd5efba48253c2d75ef0b31467e1a69cf0b92d213267204d14d49c2d4ace190c49494d468f6db220ed6c33830a4e57d25bbb28a62b81feff49b2c1d6a843da3faa4d9253da5236101a103383113398c3e20d38925a6b05fd2ce9f95bea7533d48cb7ff0482b76064", 0xac}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x1b8}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000b80)="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", 0xfe}, {&(0x7f0000000c80)="fab5c435ea836f158b799afab59d6baa22993632541fee8ad66aa0106bd6b9d85de96a1dce49fb36ba49b2dcfa3e78a568c77d318665ff1c6d2dcc7d918fb1be650b22475c5be16e0fdbda3f8eb3d173df104edb335595de7f311b9955aa45ddaa734f8699319be04594680db9a3d36d4e12794c405f6e788151570fcb5461794277d372777cb4a2d601e1efeb8cf561eace2886954663227a793fa425fa8f0d2c43214db26e52d38984631fc15b2e223c8c456244188d46d907df39e240da676b2acd03a9f8563399efcc5a1f7f60a0e08176849d79b39ccc962601e4", 0xdd}, {&(0x7f0000000d80)="4e83d1f964ba9776dafb2f06b1572793ba4c887ef937dedc1482d1ec04a8fd620ef6275c49a2ea291f2cc6a134765caa8e643da028cb7e7a3b50063d2a8cce793df9185818625ffa4c3fcbee8f14d434664767a3caa67e07ce15142add941d9a38376b364d2b5c6ea9ba9639f225717ee1297f1929748f4b272c740ae88d3fc74806198ab6d0d85c34d9cec0fc40c044438f838119407c738ea1f21377630791237218187994032a6fc2e721f1b7404abb5f36a7f13da7bddcd5bd4911575ec33cd303ba39ca70ce101cbda384d6f24e89589b0ab7989fd62715b834fc0f7ba22d0605ac5750724b73d5232bdacb2f9a14558b28", 0xf4}, {&(0x7f0000000e80)="97f2dd33e4d044595e6f6b00863a288661485de786cd1aab76ee08aeff7bf71fcbafba5f26eeeafca29376981aea405f988ab9c56d5504b93488fa59eba64002e434d582262cadf7e10e5bc05d67f1af071cb0a9f9c977fb7953c5e67ef1d96f2bcc2e9a8dd4b56e402e762560c15400337027a662f11e39695eb1cc5d9a436200cac050644a7d036c34a65f6a9d99891bc4c22629a8533861", 0x99}, {&(0x7f0000000f40)="6ea9a55aafc7d5ea3996b6191e2dadad52cb147636bd417eed52ef097058a1a39f7e79b070583c4079b1a276a556dda79203d2acb798b614", 0x38}, {&(0x7f0000000f80)="ca3ed38baf370fcfa8efff2cb6134ec9b39dc2d9df343b5378e46b902371d7d07dc9b5a653450cc5c9f39ccbe5ee7f3c447111e8c703a4f07f7099d3cd1f70c5a5432d97f195cd9e4a00db88020c805d28d7b90f56616dcecaa94f13da20821c0d382ed8d8dc32788738a069f3a7ad306b255e55fe02e4fc739cd4002fa1a58d4ed86284e05ed71b8d7b9d42b28d22006b49fd24be4b3889504a27fc354be5fc48288db6f51f979f3015b54214ab0bef814760850e1500846c822d916285daa72892d0724688361b14c56bca0051b676cc765b79d750d1099fa7ee93c3794e6bea7f", 0xe2}, {&(0x7f0000001380)="77f8491c454cd16c5c81708942a7c3d7f1cadae85a2aef76339f222158cfd5f7d006931ed4e3f1bf927f3baa1244ed156507e82bdcc9cdecb3530f0df72c465af874b7c707865da49ad5de61a03bcdbfcc66f639c6aacbe545655b14cc28ed6be7a34eb62181cdd6fd45c3d302e1d9924249da3d78ef8b1708298762b5345bfb6aa24c14e991f373393f70e6311c6e6de5160d88abbebb189b254205ec4f26c945465711bd", 0xa5}, {&(0x7f0000001100)="38b684ecd6a6c087ffd14790b8414cad5b45571cde76cf89e21731512a5f3d6c5b1d982b86e273acb130541a0ef90ca5f1bf0847d730fdbf3a3f3485302da5c3fa0ec395ce72ddca807aea7e3adf7e94667a08e500e6feebbd43620b1a865e7dd6d984c980a8cd775951ac233a425854ff0587222336e19edb9f25d1e05ff638bace7ab069b0c5240942b970b4560369a058b0b78f32d28836ed90cfae79e522307615c4c9c8b1f01f3b41f7c92a40356cd68920982fbcac19f68bf513ccf97c8c6cf3345e7bbadae7f3742172342ddbb31b7b53c1b0a38e55fe2f40956990aee2960a366a50119d0a917c5bbf0b6297", 0xf0}, {&(0x7f0000001200)="0783696d2e3aa5da98260debee8448054bf68ade4fba42df6c3d468b804875f6fd9d791d66dddd78d9938bed0345125aa319c1410d5d6dc76861f9072d6c88d3ac7a4f96106e8b1089566172f11082e37a1fa7adc674e1927a91f5f6995fc6f3b2150ab64edb6842ed222a5fee2d39472756c68c42195535f7d8b9d15e585edc914addd0a53069a80d91090c02a313dfa8a5404319cdb478020458e62fd924c1225d9a1bea825f41bc54b1caa03da188515d1c80", 0xb4}], 0x9, &(0x7f0000002680)=ANY=[@ANYRESOCT=r5], 0x11a0}}], 0x2, 0x4058040) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000025c0)=@delqdisc={0x8c, 0x25, 0x0, 0x70bd2d, 0x7, {0x0, 0x0, 0x0, r4, {0xe, 0xffe0}, {0x0, 0x8}, {0x8, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x6, 0x5, {0x7, 0x40}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10000}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x348}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf8, 0x1, 0x5, 0x3ff, 0x0, 0x3458, 0x400, 0x6}}, {0x10, 0x2, [0xff, 0x3, 0xff5e, 0x7fff, 0xc, 0x1000]}}]}]}, 0x8c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x11, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000200000000000000000000008500000050000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000b8a0aba9428e00bf7ed88ecda9b7050100"/45], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x72, &(0x7f00000004c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x64, 0x0, 0x0, 0x2f, 0x0, @private, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}}}}}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.636284698s ago: executing program 0 (id=5807): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x218, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x20, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) bind$inet(r3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @remote}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="48297893e42909b5bf2a313e0aa20f2a3e12b204d2a97fdc63216ce3819bc2aff831a2f0d368ed9720f13f965c6e3cc55ba730e661a354ddf5b8af60a1c60e7eb8a3d8267039b1b8d1c301fe76d9e1570d00006cb3e372814778708ac169fd39575f3f28985a9f653fbe", @ANYRES16=r8, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x45, '\x00', r7, 0xf, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1f, 0x803, 0x2009) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000a40)={{0xa, 0x4e22, 0xc000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfff}, {0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0xf}, 0xffffffffffffffff, {[0x8, 0x0, 0xd, 0x7fffffff, 0xe, 0xf9, 0x0, 0x2]}}, 0x5c) getsockname$packet(r10, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="6000301207f2ab716b08590b1af877ebfb8c7b633d09d2000000000000", @ANYRES64=r2, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088", @ANYRES32=r1, @ANYBLOB="e7f48c6786d6dc2fb099f6e3f1746d03a215258c450e7d4e0e79a79d116de009e4dc4a2987c8969cbb4f212df3311d29f11daf99b0a1ac5ef4638a9ac8e9a88712554d33093ed1cf969b8f74f065a684ef8460eaf83255ed3a03365788ed56ef5b5cb7ac42c4aa9f9801cc2207e9c600", @ANYRES32=r11, @ANYRES64=r7], 0x60}, 0x1, 0x0, 0x0, 0x404c804}, 0x8000) ioctl$EXT4_IOC_GETSTATE(r9, 0x40046629, &(0x7f0000000680)) 1.62861812s ago: executing program 2 (id=5809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40000) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x800) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000100), &(0x7f0000000140)=0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106a99039"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) write(0xffffffffffffffff, &(0x7f0000003300)="ac", 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="09000000040000000400000009000000000000007567e519448f8860dad71555b3392699f96d8d26e7077b91b4f0082f4564c6b169437eece5d9ce61c75ca6d1f1b8051ce62f2efee5a6af8c7e73db96e2f4e399d2894971fa89a2a2b1d824", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f00000005c0), &(0x7f0000000040)}, 0x20) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e1d, 0xfffffffe, @empty, 0x40}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, 0x0, 0x18, 0x48060}], 0x1, 0x200000d0) setsockopt$inet_group_source_req(r6, 0x0, 0x2c, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x100000001, 0x4) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 1.579147586s ago: executing program 3 (id=5810): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000900)={0x0, 0x2}, 0xfc1e) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd, 0x5, 0x695, 0x76ba94f1, 0x9}) 1.463492601s ago: executing program 0 (id=5811): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x109841, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd2c, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x47e2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x10001) close(r1) 1.430716974s ago: executing program 3 (id=5812): r0 = socket$inet(0x2, 0x2, 0x1) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @remote}}}], 0x20}, 0x20000810) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000900000004000000020000060400000003000000000000000500000000000000000000615f5d"], 0x0, 0x3d, 0x0, 0x1}, 0x28) 1.406183603s ago: executing program 2 (id=5813): close(0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000a00)=0x507, 0x4) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000dc0)=""/45, &(0x7f0000000e00)=0x2d) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000cc0)={{r1, &(0x7f0000000080)='lo\x00', 0x4500, &(0x7f0000000600)={@align=0x80000001, {0x8, 0x1, 0x5, 0x6}}, 0x6, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x4}, 0x6, &(0x7f0000000c00)=[{0x2, 0x8, &(0x7f0000000700)='\x00', &(0x7f0000000740)="0cbd9a3439ae96d8bd2e54d61e14a1dacecdbd4fff83b5f500e8fd67dac082928c09d4cea22c800196cf54237fc1bdf1d70d2d7d90deae7f2edea22a9b31f1b8aa1911003ace2f1adfa1bf06dfefb8536c1bf236857001c35bfa36868118947a6a4a0e407f4ec49a9a8d507fa7913da17d4d053b69118457e370332e93d5c8549f286b99b475e63b688f938e81676c38bbbdd18c14bafeac73e749c837aa51c880ab78e1", 0xa4}, {0x1, 0x1, &(0x7f0000000800)='%/*$\x00', &(0x7f0000000840)="d1a4845564a2fcd5526b6b0b7f093230254310136527e48c6e3c64f4914bcfbef0ee8931d5792cd8eb640f71f4050372f26d1f272adc93255243caf226d54baaaba5e38e0ed2dc1e76b045630f70923e994bcd0d3668f6ab61bf1e3a74667e5cbfb1f4891added7c16e693097563f5a083ca949cf0ccbc85e4ba2baffc95ab714c5179986603f0dc07156b736f012b10d84461af9065a57e7fe7aeb0fa175ad1e01a250970d4d9b944225af1409fbf370e039ae68099f08dae6ed3", 0xbb}, {0x2, 0x0, &(0x7f0000000940)='flower\x00', &(0x7f0000000980)="00b0b97b3f4883d20a22b7d3f63604f94baab768e915d9a02057e7d9ebf47016c8d8c3b91dcf9a1b75076eaa23122587903bbc06b1142cc4c85654d0f8ec3c8736adc017597d35d299494933d7eac01412fe3d61f8d8f0", 0x57, 0x28}, {0x1, 0xd, &(0x7f0000000d40)='\\K\x00v\xff\a\x00\xbe\xbf\x96\x94\b\x00)\v\xc8\x06\xd2\x9e!\xca\r23C\xf9\xb0\xda\x93\'\x84\x02z\xa2\xe0\xc06K\x00\x98\xa6c\xb5\x16\xd5\x7f\xc2\t\xcf\x87\x7fB\x88\xb2\x8f\xe8C\xa1\xa6DW\r\x12\'\xc6\x97\x99\xdc\xb2\xa1\xf1\x9d\r\xbb\r.\xc3Cc', &(0x7f0000000a40)="1c3adfbbc23bc87f44c8d6aac4fb1fb2622c688b65533df68ea6b99757", 0x1d, 0x10}, {0x3, 0x8, &(0x7f0000000a80)='\x00', &(0x7f0000000ac0)="695caac48c8cb48876bc942a92bda9c232b716c202d56e99c82deb25f4eb682e15799bc780ce4093495751483d86d7ea2009316852d7a637ce72789b5e26", 0x3e, 0x20}, {0x3, 0x8, &(0x7f0000000b00)='.{\xc3%[\x00', &(0x7f0000000b40)="5d039252973059f2de75ac23d5bb91c6472d819be1ab34ea6294d245f0e7eed6d7c4002b996fbb5631ccd6a5c7e89c47efa69d4af05734871aa85bf5553345be9f760738cdf9a72e6132003168d927db5d6fb5ca83896bf8a5a16b4dbf306e3f7a53a29366a999b395c23fb44d186918eaac03", 0x73, 0x8}]}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40000) close(r6) 1.336051358s ago: executing program 1 (id=5814): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa0001, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x90) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/110, 0x6e}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x2000e8, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000095c0)=[{0x0, 0xdd12}, {0x0, 0x10}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xb5f}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) 1.310406182s ago: executing program 3 (id=5815): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x2, 0x9, 0x4, 0x5, 0x2, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x20000c04) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x1ffffffffffffe3f, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910435000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10}, 0x94) 1.308407693s ago: executing program 4 (id=5816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000ff1b6f359714b35558adba9a4669c03c479c7e131acc7f77096bd3ecd2278c7f452761c49f17b52fb590d7ac975ab28dc5761c638e30b4ea693cc688e85c45d32318b6d7694832d1ac6147db37eed2af580986e9fd67006c2559372ddf7564ed7c0d5b6430fa17b982", @ANYRES16=r4, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f74756e000000000000000000180002801400038010000180040003000800010003000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x40010) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010d62c17e0df2f9427d21612e0bb02c61939040000000700000000000000e478470580355a6e5b6d2f", @ANYRES32=r0, @ANYBLOB="000000000000000020001280080001007369748014000280080014000f00000008000100d4", @ANYRES64=r1, @ANYRESOCT=r7], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200008d0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000000100)=0x798, 0x4) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r7, @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc040841) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "32f824bda8469134", "8b3de2aabceef22f419e59f3000000000400000000020000000000000000ff01", '\x00', '\x00\x00\x00-S\x00'}, 0x38) 1.199805065s ago: executing program 3 (id=5817): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000380)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r5, 0x0, 0x20000000002) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000140)={'sit0\x00', 0x0}) 1.074815178s ago: executing program 1 (id=5818): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x0, 0x1000, 0x8, @remote, @local, 0x40, 0x720, 0x3, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x0, 0x1000, 0x8, @remote, @local, 0x40, 0x720, 0x3, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x1, 0x7800, 0xa, 0x2, {{0x1f, 0x4, 0x3, 0x4, 0x7c, 0x67, 0x0, 0xd, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0x2d, 0x0, 0x3, [0x1, 0x10000, 0x3]}, @generic={0x86, 0xc, "fbb27a179d8390201f7f"}, @ssrr={0x89, 0x23, 0xe5, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @broadcast, @private=0xa010101, @empty, @broadcast]}, @timestamp={0x44, 0xc, 0x10, 0x0, 0x4, [0x1c0, 0x0]}, @ssrr={0x89, 0xb, 0xe4, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0xe2, [@rand_addr=0x64010100, @empty, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000380)={0x684, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x70, 0x3, "325253f1846194a6109ac42725b9bb8adfda107f12cebc54c589d67a73c9f747ebea398de64f21b91e94f4f2d6d62e6d953dc091f009fddb64b3faf989b744376d9fd2887c3131c0b145b9098b0781d5c0b21ab2948b32bd1210bc6009990a76f92831be50307158f74d4db0"}, @ETHTOOL_A_WOL_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_WOL_MODES={0x26c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xab, 0x5, "02391e909534c018354790c4b266b34c54d5c11516ef65370dfbd24ff7c4e79d6560b476cd4d8e75ddef707811b61bbc49dc6cc4d4e80c56a2c45163b5d834eb612b2175d13bb6b2e6d33ecfb5b501448f71fde5478ad1f00201dcb8023c3e602ee2fc9d4ea52d9a01ff11714cb1baf7e5887d7cff0b500b748cc3aab9f1c298641c93efcbdf5267411f39a5583672d726714e6c802a2d928cadd6c2fa296b40e4e5a856c64a05"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_MASK={0xfc, 0x5, "6e653a7863f8347b60ee2a42fb57956eec50428b0e679d607e4d36ea9913d3eedabbab77a99441d72d8d87e4eca4082797f77c5f5cb0962d94ff83d6dbb25f49655cfbe8ee6cf4c8e2eac74801cae95bb0e67a5e5423c402494ae5dd538d15ede7de1ec4894e0f67fc517f901fb16459caea395bc0914c6649c0034760d861b362ae24f45be14f7f3666bd7a78067473ffe5c6cb5fae3711ce224978fc15a2e571455c4bafcd3328c9a3318d8a4c3b93e84518249084d3e5651371f7233b3827591fb00fbf12072b771a2d931bd0d6bbb770a6d852d971af630822888d6e0710747f6f2a1df771ee70ec48db8d4b74d2cae6e04af51d6d6e"}, @ETHTOOL_A_BITSET_MASK={0xaf, 0x5, "a2cb54a08722442b5fac684bdf38e1e07c78059832765c570df0b8efdd7ba41adf6a5ad4a3a93d1eaa1dc132f68fef0eead5bdd66e258f4618d1f84c0cd3bb2872b9608cba4aa50973f3d5921b1d89fcf257eea0fe622d60cf078e71eb2554b87202309c215a8083705286ef2bef263ae5fcd8ac6dff71d549dedcd082c38fad3ee6db00162ba1bdb5f4f2d24e05c7619f3e23f88354b6f420f5ea86f096637203a966d911a58cb0fddf14"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc}]}, @ETHTOOL_A_WOL_SOPASS={0x4b, 0x3, "a47ab272a0e417681b556c714ac6c8e8c470caad05498f2820752dc3745487f26704dd2c5d7bc10a8d2b0e5c118e299859c825baf748bd3edfd2f8b67ee1ea2e22181d64d4cbc2"}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x5a, 0x3, "92f0c85b38ec3087ec915cdc2f4e19a555d583cd46836d46ac7a0e48027391814333816210193c7c626aac3020b8b258b6ddf5629a062d38b3856bb6a5d20657099c242caa13f461bc2919625b62db30f5b8b3e67de9"}, @ETHTOOL_A_WOL_MODES={0x228, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x170, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '],\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xc1#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'+,_\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\\\\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\*,]]!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '[^/+^%^$$-/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.-\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&\\\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '@-,}$*).,#([.,\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2e72}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x22}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*/--\xd9*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xafe0}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa9}]}]}, @ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "c75c115f6b440df23dae788c55cccfc4d30ea769a2a07adb6ea3fffc413f1fd8dfed7fd9a3f85de20f6a32504356ca6c0e053b83b9dbd177c41305bbcd4f48d783a6345b013c3e451b0b3bc3befbdd70aec1a80527b1550cd231a27078e0fdd6ce2943f70f19ec06f70dd87a8e1ccda2e23058bd03c32657070dcd07dde6e21980f9512431aa0afc3565fd6707513fa09e2d4492b90c297e3eb114c0ef8a922484fccd4bca55"}]}, @ETHTOOL_A_WOL_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x684}, 0x1, 0x0, 0x0, 0x40000}, 0xb7879c5099e8dd17) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000ac0)) (async) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000ac0)) socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'ip6_vti0\x00', r1, 0x2f, 0xc0, 0x5, 0x100, 0xa, @mcast2, @mcast1, 0x7, 0x40, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'ip6_vti0\x00', r1, 0x2f, 0xc0, 0x5, 0x100, 0xa, @mcast2, @mcast1, 0x7, 0x40, 0x5}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000e80)={&(0x7f0000000b80), 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x148, r9, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x148}, 0x1, 0x0, 0x0, 0xc800}, 0x8) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000e80)={&(0x7f0000000b80), 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x148, r9, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x148}, 0x1, 0x0, 0x0, 0xc800}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000ec0)={0x0, @rand_addr, @broadcast}, &(0x7f0000000f00)=0xc) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f80), r8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x7c, r11, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4800) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001100), r8) sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r12, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r12, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r13 = socket(0x3, 0x5, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r13, 0x6, 0x16, &(0x7f0000001200)=[@window={0x3, 0x2, 0x9}, @window={0x3, 0x205c, 0x1}, @timestamp, @mss={0x2, 0x3ff}, @window={0x3, 0x400, 0x1}], 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000002580)={0x0, 0x8c, &(0x7f00000024c0)=[@in6={0xa, 0x4e23, 0x7ff, @empty, 0x6}, @in6={0xa, 0x4e23, 0x7, @mcast2, 0xfffffa6c}, @in6={0xa, 0x4e24, 0x8, @loopback, 0x7}, @in6={0xa, 0x4e22, 0x1ff, @mcast1, 0x1}, @in6={0xa, 0x4e24, 0x68c1fdab, @empty, 0x718}]}, &(0x7f00000025c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000002600)={0x0, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xc0c7}}, 0xfffffffb, 0xdb3a, 0x4, 0x69, 0x4}, &(0x7f00000026c0)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000002780)={0x0, 0x48, &(0x7f0000002700)=[@in6={0xa, 0x4e23, 0xfffffffc, @loopback, 0x9}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0xf1, @rand_addr=' \x01\x00', 0xba09}]}, &(0x7f00000027c0)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r13, 0x84, 0x1, &(0x7f0000002800)={0x0, 0x5, 0x5, 0xced2, 0x4, 0x7}, &(0x7f0000002840)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0xa, &(0x7f0000002880)={0x40, 0xfffa, 0x1, 0xa84c, 0x9, 0x0, 0x7, 0xa}, &(0x7f00000028c0)=0x20) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0xa, &(0x7f0000002880)={0x40, 0xfffa, 0x1, 0xa84c, 0x9, 0x0, 0x7, 0xa, 0x0}, &(0x7f00000028c0)=0x20) sendmmsg$inet_sctp(r13, &(0x7f0000002a00)=[{&(0x7f0000001240)=@in={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000001340)=[{&(0x7f0000001280)="7dee4deff3665b1d847a62d3e0dfeb792ad6f809d66e71c5a71fdc26f5d161b5c1f590dda395c7a93039e2e80de5b7230431b69bd7253dbb298284fb2b7302eae37062d2bbf66fffb1e3f418a2d218e38ba223e707ad809af253c7aec8b42f9c2f726c7708cde36d93d5cdf4b6b44577a37e8d0a05d61aec1e67869930cca95ee2b1c573e279d6686d38b5811ace4636d281ab0c5baa1b6741", 0x99}], 0x1, 0x0, 0x0, 0x40000}, {&(0x7f0000001380)=@in={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000002480)=[{&(0x7f00000013c0)="c2bf14f8b0b45bbb8dcc6e75c6ca76", 0xf}, {&(0x7f0000001400)="aa00bf6a970ee8a28eb61889", 0xc}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="4861da160617ebff6012a18e1366bbad85bfd35ff507726595ac31e1f245", 0x1e}], 0x4, &(0x7f0000002900)=[@sndinfo={0x20, 0x84, 0x2, {0xfffc, 0x8002, 0xab, 0x0, r14}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x1, 0x1ff, 0x9, r15}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x800a, 0x1, 0x0, r16}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @init={0x18, 0x84, 0x0, {0x4, 0x5, 0x40, 0x72}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x0, 0x5, r17}}, @sndinfo={0x20, 0x84, 0x2, {0xffff, 0x4, 0x8, 0xfff, r18}}], 0xf0, 0x20004800}], 0x2, 0x24000840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002a80)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002a80)) 1.026692193s ago: executing program 4 (id=5819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0}, &(0x7f00000002c0), &(0x7f0000000b00)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x15, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0xffff9597}, {}, {}, [@jmp={0x5, 0x1, 0x4, 0xa, 0x1, 0xffffffffffffffc0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x63}, @call={0x85, 0x0, 0x0, 0xbb}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001800)={0x2, 0xf, 0x4, 0x8001}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001840)=[{0x4, 0x3, 0x7}], 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001980)={{r0}, &(0x7f00000001c0), &(0x7f0000001940)=r1}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x2, 0xa, 0x0, 0x7}, 0x20) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r3, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 940.815379ms ago: executing program 0 (id=5820): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000)='syztnl0\x00', 0x80000, &(0x7f0000000040)={@align=0x8, {0xbff, 0xd, 0x9, 0x9}}, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) unshare(0x22020400) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002fc0)={r0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000003000)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = accept(r3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003780)={0x3ec, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0x3d8, 0x13f, 0x0, 0x1, [@nested={0xd2, 0x10a, 0x0, 0x1, [@nested={0x4, 0xea}, @typed={0x4, 0x129}, @typed={0x4, 0xfb}, @typed={0x8, 0x12c, 0x0, 0x0, @fd=r4}, @typed={0x14, 0x110, 0x0, 0x0, @ipv6=@private1}, @typed={0x9, 0x89, 0x0, 0x0, @str='+\xe1{^\x00'}, @generic="43c326bbfdd25eb42c09ba16d4669f7a5a2be180ac1b99ad263b562e6e69b31b9f5f4d3813cbedc7169c52914d302a430bce8b88a654ee22e67c22b2150d4a78c3bbcf2bae768cf8734d1348eef2553684c5a334695030a35ff895c35a4626e71e1a1c666b3e89cbc92020112d9dfe1c7df8e9285732e2eddfe12cdc02decb4c473d4607bc4ad334b7c438a52fab02504c744df19c2356a080c1"]}, @nested={0x2ff, 0x49, 0x0, 0x1, [@nested={0x244, 0xd3, 0x0, 0x1, [@generic="6eba5cbb0bbd3751d9f68a9bb29803c89fd22bba270bc59d268f00fee1f2bde10dfed7987f4934e306c0eefbb1c3527664ff99770dc5b6399ec8d833f21ad3386ce238a008845965c29bae81b1788cda4e2b18689c8ed86bb1b16150e0ad3a7c39a5a3fa9ec54682f2161a43c2a7cf12e8b1f631ff4accba407327e0b1c961c975b38d32a911fcb89774", @typed={0x4, 0x79}, @typed={0xc, 0xb, 0x0, 0x0, @u64=0x9}, @generic="5cd69d92e1b3003672600affd58086454663db0aee06b0315ac0751b272df68313254e57971f8735a1d53f7b5fde0ede3d7c2d6ea713a4556592996897a9a6a14940aa0c37acbca6f3e089b76ea6e2b1a5fc0c9e0ead3056cb465a74c02b2ab41d82f0efeae99d8cad279508800c5c3be3d63c99262385434c66316fc59449b2c963bdf76044894bd2f5742e29bdcf88153ca4b5470f519157e227845ec1f5fa8a43d0892535e6d26e9a1df9cabeb98a432a8d807d60c545671e490cdf883f9232dd7d8819612cd45bd2", @typed={0xdc, 0x2b, 0x0, 0x0, @binary="3dd2c39026d63b0e65f592e32a3049aebde4c3fa60b4e735c4b10e6932c8e2dcf9d2e7c689116fb3174031f3465d95a02361765d42d31d5a51796117f5dd0c6522bd5e49ebdf464d370f81cfcfd23d8b51a65cc3b36330fac324d9bf8f3e5a631d407c848831359df628bafc28376bb7d247277f5c199f990fe0d50a03b997ed7bb706c531e824e292dce0826b086b8128ee4f8133762f55adb21ec79650165fae79f0e7b6c8b10dbd7b5f70fb1ca2c9f70d224c906c1ce85244d9bc3d9e962a5599a6689d0fd15499bd8ba5ad11d0bc8b4cf13a8d3c484d"}]}, @typed={0xc, 0x11d, 0x0, 0x0, @u64=0x2c97}, @nested={0x5c, 0x1e, 0x0, 0x1, [@nested={0x4, 0xae}, @typed={0x4, 0x13b}, @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic, @typed={0x14, 0x138, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @nested={0x4, 0xe6}, @generic="a081d9ce46c65c142389550f716bbc24", @nested={0x4, 0xd1}, @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x27, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="e7086a0771526acb2f98902eaa31e0a14b78a07ced78253ce8f962192227e546135a87d920a941a9915783a43631ece5a8ad7e36ae91bdf64311eccc599dec298a49dd9b6388df", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}]}]}, 0x3ec}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$netlink(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000130e6d233d52ff15be0482c66ef3808169528d748a75af6b1575feb3cab7612863f9106de9722cf1d8ec341759a536557a60029176d8c60004cc8085208f7afa08f891e81daa15c8d368ec94d5a21531f21dab5b97d71ed024682c2bcc191b260fa4d86117801dcb4f0e47d25c40f08a438270e89a8f02", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000008850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, 0x0, 0x0) socket(0x2b, 0x80801, 0x1) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 892.251395ms ago: executing program 1 (id=5821): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x518, 0x0, 0x360, 0x1a0, 0x1a0, 0x1a0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x40}, [0xff, 0x0, 0x0, 0xffffff00], [0x0, 0xffffffff], 'pim6reg\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@ipv6={@private1, @mcast2, [0xffffffff, 0xff, 0xff000000, 0xff000000], [0xff, 0x0, 0xff000000, 0xffffffff], 'veth0_vlan\x00', 'wlan0\x00', {}, {}, 0x11, 0x9, 0x5, 0x23}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff000000], 'pimreg1\x00', 'vlan1\x00', {0xff}, {}, 0x5e, 0x0, 0x3, 0x17}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x27, 0xe, 0x3}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xff], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x9d, 0x45, 0x7}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xc, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) 891.529161ms ago: executing program 4 (id=5822): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x14) close(r0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r0, 0x24, 0x0, 0xd8, &(0x7f0000000000), 0x40000016, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020f00000700000000000000ffdbdf2505000600"], 0x38}}, 0x0) 836.19479ms ago: executing program 0 (id=5823): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001180)=[{0x6, 0xfa, 0x0, 0xe4}, {0x0, 0x6, 0x9, 0x7ff}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0xfffd, 0xa, 0x0, 0x0, 0x5c}, {@in=@local, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, {0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}, {0x0, 0xfffffffffffffffd}, {0x0, 0xd}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004005}, 0x80) (async) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000040)="85c2", 0x2}], 0x1) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r4}, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r5, r7, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) (async) syz_emit_ethernet(0x16, &(0x7f0000000c40)={@remote, @remote, @void, {@mpls_mc={0x8848, {[], @llc={@snap={0xaa, 0x0, ';', "7ac7f8", 0x8863}}}}}}, 0x0) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8) (async) close(0x3) (async) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f00000014c0)={0x2, "a18b"}, 0x3) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000001200)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) (async) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001280)={@empty, 0x0}, &(0x7f00000012c0)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001300)={r10, @loopback, @broadcast}, 0xc) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaa", 0x90}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000840)="31fdff", 0x3}], 0x1}}], 0x2, 0x2090) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000001440)={r3, &(0x7f0000001340)='$\x00', 0x80000, &(0x7f0000001380)={@_ha_fsid={[0x7, 0x2]}, {0x7, 0x2, 0x8, 0x1ff}}, 0x85f, &(0x7f00000013c0)={@_ha_fsid}, &(0x7f0000001400)=0x1}) recvfrom$l2tp6(r11, &(0x7f0000001480)=""/28, 0x1c, 0x20000, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0xc, [@typedef={0xd, 0x0, 0x0, 0x8, 0x4}, @const={0x7, 0x0, 0x0, 0xa, 0x4}, @union={0x3, 0x7, 0x0, 0x5, 0x0, 0x100, [{0xf, 0x0, 0x6}, {0x10, 0x0, 0x13}, {0x3, 0x1, 0x8001}, {0x10, 0x4}, {0x7, 0x5, 0x2}, {0x8, 0x0, 0x67}, {0xb, 0x1, 0x3}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x2}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x2, 0x8}, @ptr={0x5, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x2e, 0x5f, 0x10, 0x30, 0x61, 0x5f, 0x5f, 0x30, 0x61, 0x2e]}}, &(0x7f0000001180), 0xc4, 0x0, 0x0, 0x401}, 0x28) 774.849418ms ago: executing program 0 (id=5824): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4d", 0x21}], 0x1}], 0x1, 0x40800) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f00000007c0)={&(0x7f0000000940)=[{&(0x7f0000000680)="3e4432fa710f098949a3081344c40a906538f524974977c365fba447d17ddb82d790f8f382a9c50188bafdc587f87cc7d6edcb78c2b066af413954fb854ed8e2df19aa064414574ca069794ed190ac0881950d3b697a047568d401adc392aab9c154b69276e63b489f64d2cc4586f004ddd939d958b2eb8f1253ad8f21ef88f76af514a820130595b4b42f907d9d0e8cc6accdd36897c0d74fd2b12c9049012a71677735c737041961", 0xa9}, {&(0x7f0000000840)="b91815f91222eaea6f760f468e365e9ee0df0419381f8c1166354a3d0c7503ba06d721a33609eabe69e581f270cf4242645c1d279c638f8a9e3ea3cd70e0eb799807fee83bc856b3dfe84d37530011637d1860ea2a91dab7e543a1f6f423527bf29245870daf1ee833346cb17f9a6b4460706aca54000000002922d74f6376082c90e4b1976481eb74d8ce222d9ab25e7024c896467a22c9d583bd6aeda54653c726d3c97fa68d2c7ab69c1569003d1a3a8388dfab537b01ee9a74c41f16297993225309f0914ccb971e8d2e54f91d2cdbcffdc05e2c8251a38bad00d7", 0xdd}], 0x2, 0x7fffffffffffffff, 0x0, 0xee2, 0x1, 0x1, 0x0, 0x6}) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x8}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xa}, 0x94) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x0, @loopback}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(r5, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="a5", 0x1}], 0x1}}], 0x1, 0x20048040) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0300000004cde900040000000a000000000000000bc33f2575686389173e2acd8a6231a22da39b39d5b598e32fbebaa5797d377d850c444f7b2ab77bcef44fcf1e77160818b905ca58c16e6de16a0d76ce9cc0f289b07b21c1fbaec3c1d37ab5d619b0e6750be5be52b5e5afe0b399c55c4bfd3938a9c892fcbfd5de3fcaf1b5c97aede9146fbac9064ccba33bf3a4947ed969c649b151ccf4b77eddea71f052b208fc864d9ded827876266869aac13f", @ANYRES32=r4, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000001740)=0x1000004, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x6706, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x28000600) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r7}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) socket$inet6_mptcp(0xa, 0x1, 0x106) 711.982215ms ago: executing program 4 (id=5825): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)=')]#[@\x00', 0x104001, &(0x7f0000000040)={@_ha_fsid={[0x3, 0xd]}, {0xfff1, 0x6, 0x5, 0x5}}, 0x1000, &(0x7f0000000080), &(0x7f00000000c0)=0x3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x8, 0x3, 0x8, 0x100, r0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x9}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_deladdr={0x3c, 0x15, 0x10, 0x70bd2d, 0x25dfdbfc, {0xa, 0x80, 0x4, 0xfe, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0x4, 0x81, 0x7}}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_FLAGS={0x8, 0x8, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x54}, 0x80) r3 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000300)={0x1}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'erspan0\x00', r2, 0x8, 0x40, 0x1, 0x0, {{0x14, 0x4, 0x3, 0x7, 0x50, 0x67, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@noop, @ssrr={0x89, 0x1f, 0x63, [@multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100]}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x5, 0xb, "b48d7af712044a0589"}]}, @generic={0x89, 0xa, "23a6931c58c6a5f1"}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xec, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x44004080}, 0x0) recvmsg$can_raw(r0, &(0x7f00000007c0)={&(0x7f0000000600)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/141, 0x8d}], 0x1, &(0x7f0000000780)=""/32, 0x20}, 0x10000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000800)=@assoc_value, &(0x7f0000000840)=0x8) sendto(r0, &(0x7f0000000880)="b51a710c26d5ade2b11a0df58b2071caf2d1eab20e4f0f4a58aef795be7bb2c0c1b7b91189a80ec2b181810bf811b98b643650edebba9028f114cb90dbe1d19856d270beca7a5af4547c564f5970c7d2dfd8ca51cf348f2a7d85eab602e9b372b03c4ddcecefc5ad59640eb1988ec9be5871d1a396c8dbe8d41e212b99ee1d7004130a3db8c4f51eda11c5ebea4de22d2cadfc93c6c079d0e170", 0x9a, 0x2400c090, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000940)=0x3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000980)={'erspan0\x00', r4, 0x10, 0x8, 0x3, 0xa64, {{0xd, 0x4, 0x2, 0x32, 0x34, 0x65, 0x0, 0xb, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010102, {[@generic={0x86, 0x5, "545bb1"}, @timestamp={0x44, 0x14, 0xb9, 0x0, 0xf, [0x0, 0x2, 0x3, 0x1]}, @ra={0x94, 0x4, 0x1}]}}}}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000bc0)={0x3, 'gre0\x00', {0x2}, 0x1}) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c00)=""/247, 0xf7}, {&(0x7f0000000d00)=""/143, 0x8f}, {&(0x7f0000000dc0)=""/85, 0x55}], 0x3, &(0x7f0000000e80)=""/17, 0x11}, 0xb1e}, {{&(0x7f0000000ec0)=@nfc_llcp, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/151, 0x97}], 0x1, &(0x7f0000001040)=""/19, 0x13}, 0x2}, {{&(0x7f0000001080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000002600)=[{&(0x7f0000001100)=""/194, 0xc2}, {&(0x7f0000001200)=""/217, 0xd9}, {&(0x7f0000001300)=""/164, 0xa4}, {&(0x7f00000013c0)=""/178, 0xb2}, {&(0x7f0000001480)=""/246, 0xf6}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)}, {&(0x7f00000025c0)=""/33, 0x21}], 0x8, &(0x7f0000002680)=""/246, 0xf6}, 0x9}], 0x3, 0x2040, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002840)={0x3f, 0x14, '\x00', [@generic={0x0, 0x8d, "dd603792c981faba8c836fae5bef7f04b84ae5e2c08586463badc75a398a83b81e63d7bb9e6eec36e1a091c0e5964fa3485588cc79e29551587caab16377fe23c1179673fe5ab5a123c43f4904a5ac1c8c51d05becde923a87ca2c1b9409408de2b0da2b432ab4559f02978b383b1d8526e68b1c1451c234ef08bd431f4cd1bb7f375cd3d75965c0643521e776"}, @hao={0xc9, 0x10, @local}]}, 0xb0) getsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000002900), &(0x7f0000002940)=0x4) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000002980)=0x439, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x74, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xae41}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffffe}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1000}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x15c}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002b80)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x40, r8, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x20000010) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002cc0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', r5, r0, 0x3, 0x4, 0x1}, 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003240)={0x18, 0x2a, &(0x7f0000002ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x276, 0x0, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7fff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x6}, @jmp={0x5, 0x1, 0xa, 0x6, 0xb, 0x80, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003040)='syzkaller\x00', 0x83c1, 0xd4, &(0x7f0000003080)=""/212, 0x40f00, 0x10, '\x00', r4, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003180)={0x4, 0x4, 0x7fffffff, 0x400}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000031c0)=[r0, r0, r0, r1, r0, r1], &(0x7f0000003200)=[{0x3, 0x3, 0x3, 0x9}, {0x4, 0x1, 0x0, 0x2}]}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003440)=@bpf_ext={0x1c, 0x17, &(0x7f0000002d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xcc}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x42a}, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x66}]}, &(0x7f0000002e00)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x0, r0, 0x8, &(0x7f0000002e40)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002e80)={0x3, 0x2, 0x4, 0x7}, 0x10, 0x15db0, r12, 0x1, &(0x7f00000033c0)=[r1, r0, r1, r1, r0, r0, 0xffffffffffffffff, r0, r0], &(0x7f0000003400)=[{0x1, 0x1, 0x1, 0x3}], 0x10, 0x7}, 0x94) 665.57431ms ago: executing program 1 (id=5826): socket$netlink(0x10, 0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = accept4$rose(0xffffffffffffffff, &(0x7f0000000200)=@full={0xb, @dev, @default, 0x0, [@netrom, @default, @netrom, @bcast, @remote, @default]}, &(0x7f00000002c0)=0x40, 0xc0800) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9, 0x0, 0xffffffffffffffff, 0x2}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0d00000003000000040000000700000001000000", @ANYRES32=r4], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r5, 0x0, 0x500}, 0x38) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000000)={@loopback, @broadcast, 0x0, "bfe8b2f0f7722394d31d5829b50c0634e74f5f86d153c3c6df45bb1c668000", 0x5, 0x1, 0x9, 0x8}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000000)={@loopback, @broadcast, 0x0, "bfe8b2f0f7722394d31d5829b50c0634e74f5f86d153c3c6df45bb1c668000", 0x5, 0x1, 0x9, 0x8}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) ioctl$XFS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000000180)) (async) ioctl$XFS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000011401002cbd7000fbdbdf2508000100"], 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000080) r9 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000280)="0b031260feffffff02005400f6a13bb1000000086086dd480300", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r11}, 0x50) (async) sendto$packet(r10, &(0x7f0000000280)="0b031260feffffff02005400f6a13bb1000000086086dd480300", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r11}, 0x50) getpeername$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) (async) getpeername$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) 499.646096ms ago: executing program 4 (id=5827): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x1}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000180)={0x1}, 0x8) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r7, &(0x7f0000000040)=[{0x0, 0xf5}, {&(0x7f0000000680)=""/180, 0xb4}], 0x2, 0x6, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400000000000000", @ANYRES32, @ANYBLOB="000037add3b20000000900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) sendmmsg$inet6(r5, &(0x7f0000001880)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="73f4", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000200)="c2", 0x1}], 0x1}}], 0x2, 0xc010) close(0x4) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={r12, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES16=r1], 0x30, 0x24000010}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000180)={r12, 0x5}, &(0x7f0000000240)=0x8) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r10, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r13, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0xa}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x10}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c8c5}, 0x10) 453.826687ms ago: executing program 3 (id=5828): pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x200000000006, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x3fffffff, 0x7}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x200000000006, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x3fffffff, 0x7}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 252.20809ms ago: executing program 1 (id=5829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000ff1b6f359714b35558adba9a4669c03c479c7e131acc7f77096bd3ecd2278c7f452761c49f17b52fb590d7ac975ab28dc5761c638e30b4ea693cc688e85c45d32318b6d7694832d1ac6147db37eed2af580986e9fd67006c2559372ddf7564ed7c0d5b6430fa17b982", @ANYRES16=r4, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f74756e000000000000000000180002801400038010000180040003000800010003000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x40010) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010d62c17e0df2f9427d21612e0bb02c61939040000000700000000000000e478470580355a6e5b6d2f", @ANYRES32=r0, @ANYBLOB="000000000000000020001280080001007369748014000280080014000f00000008000100d4", @ANYRES64=r1, @ANYRESOCT=r7], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200008d0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000000100)=0x798, 0x4) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r7, @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc040841) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "32f824bda8469134", "8b3de2aabceef22f419e59f3000000000400000000020000000000000000ff01", '\x00', '\x00\x00\x00-S\x00'}, 0x38) 204.386531ms ago: executing program 4 (id=5830): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a090400000000000000000700000308000a40000000000900020073"], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x17cb3, 0x3303}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x0) 141.726774ms ago: executing program 1 (id=5831): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) close(r4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x3, 0x0, 0x0, 0x4003, 0x3, 0x4, 0x8, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000800}, 0x24040084) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000001c0)={0x2, 0x4d, "74ef52b7b31af83f377387bd8e5742ae6cd0a5e7655b60159b61d0841d48e1b33d7ccaea7b994585d9d61a9463bb0db8acc77870a268875b38f3cc1c8d4134c80f8bc6b1552e3eb89ea86dfb9c"}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000009c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r13, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x894) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r15 = openat$cgroup_procs(r14, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r15, &(0x7f00000000c0), 0x12) 0s ago: executing program 3 (id=5832): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1404, 0x100, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'ip6gretap0\x00', {0x2}, 0xfffd}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x10000}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004840) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040850}, 0x40010) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r5 = socket(0x28, 0x5, 0xa3) getsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc9}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}]}, &(0x7f0000000540)='GPL\x00', 0x7bb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xc, 0x6}, 0x10, 0xffffffffffffffff, r4, 0x8, &(0x7f0000000600)=[0xffffffffffffffff], &(0x7f0000000640)=[{0x2, 0x1, 0x4, 0xb}, {0x4, 0x3, 0x10, 0x2}, {0x4, 0x3, 0x10, 0x9}, {0x0, 0x5, 0x8, 0x5}, {0x1, 0x1, 0xa, 0xc}, {0x5, 0x2, 0x1, 0x3}, {0x2, 0x3, 0x6, 0x7}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r6, 0x0, 0xc2, 0x84, &(0x7f0000000780)="23c3d10b8232c8cd5bff71122c882396eb317fe50ff6cb5595d5c2de36f365b5d5c72463425ca2d98087fa96d0beeec3e8244343a243b5a32ad2ba8c29b50d00aaed023508b5040bdebfc0af44a70459904b005424bcda34dd8cf05be8ba4f8ed46726233980331be57eaccf5ae68c8c2dc08e079640ae3dd0f75db87e7976521c49f4c1afdf456737b5e62ba78f8be04167b1c335fd2dc567208fa8d17476cd040a26ad2da6b78f506e7f0f874b6098bc30afc329c6cdb668733f6460ca68437ffb", &(0x7f0000000880)=""/132, 0xfffffff7, 0x0, 0xd2, 0x41, &(0x7f0000000940)="ff123108b662e3ecf1e39ff615b25bc2f9e7a1067c39a8e894730486aa6347848c9513a4d22313698b5bb4fb8a6ff747b739647c73f3363c1bdefc7a9bafb8add579f26a2f8635f350eb78ca2070fe0f3992bb93241c649af63202a1f275216569fcffc2cc339f81d99217dd9d3eabd1d3a93a5342313288fbf876e0a2c7076215861e28238cd89ed75df05ea05c5e7f017094742942d7c798fdb449f4af49a680a14fcc4883fce6ddce36f7911fc074a809c9186031201739b77692e18ecb4eb5a389e48c929bf41ff72c300635b83477d5", &(0x7f0000000a40)="702c5874170a625ea097c9999276e31c1a6490fce7f163f1927793f4b99f6c11167b1979f4705152052db44e03c665825468f35fd838da7737354c54bf31d47793", 0x7, 0x0, 0x9}, 0x50) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000b40)=0x10, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000b80)={'wg1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r5) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r7, 0x51518c154ce5e69a, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4008040) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d40)='ns/ipc\x00') r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000d80)='ns/mnt\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, 0x1407, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040054}, 0x4008004) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, 0x1409, 0x4, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000801) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000fc0)={r5, r6}) sendmsg$nl_route(r1, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)=@bridge_getlink={0xb4, 0x12, 0x100, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x2000, 0x4}, [@IFLA_PORT_SELF={0x88, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "5fc2673c8f1019c799f3ee00f59242d8"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0462f107232692ab06028a445d380bd9"}, @IFLA_PORT_VF={0x8, 0x1, 0x4c3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "dcaa09af8cd0f881535ede03576346f4"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2c97bdf61e7e650f71930cff732bad98"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "667131db8c648b9a731f31583ab58c72"}, @IFLA_PORT_PROFILE={0x6, 0x2, '@\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x80) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r11, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xa4, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000000) kernel console output (not intermixed with test programs): ss `syz.1.4145'. [ 499.254372][T21615] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4145'. [ 499.289838][T21617] netlink: 'syz.3.4146': attribute type 1 has an invalid length. [ 499.310335][T21621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4148'. [ 499.358706][T21622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4148'. [ 499.467457][T21629] netlink: 'syz.2.4152': attribute type 62 has an invalid length. [ 499.675754][T21649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4155'. [ 499.692185][T21649] nbd: must specify a size in bytes for the device [ 500.780185][T21662] netlink: 'syz.3.4159': attribute type 1 has an invalid length. [ 500.799529][T21665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4160'. [ 500.813009][T21665] netlink: 'syz.2.4160': attribute type 12 has an invalid length. [ 500.849168][T21665] netlink: 'syz.2.4160': attribute type 11 has an invalid length. [ 500.917126][T21669] netlink: 'syz.4.4158': attribute type 9 has an invalid length. [ 500.941614][T21665] netlink: 'syz.2.4160': attribute type 5 has an invalid length. [ 501.001192][T21677] netlink: 'syz.3.4162': attribute type 2 has an invalid length. [ 501.257320][T21689] nbd: must specify a size in bytes for the device [ 501.273900][T21691] netlink: 'syz.1.4168': attribute type 3 has an invalid length. [ 501.334888][T21700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.474383][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 502.143265][T21693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.155188][T21708] netlink: 'syz.4.4172': attribute type 1 has an invalid length. [ 502.357304][T21733] netlink: 'syz.4.4175': attribute type 12 has an invalid length. [ 502.473799][T21733] netlink: 'syz.4.4175': attribute type 11 has an invalid length. [ 503.548057][T16898] Bluetooth: hci5: command 0x0406 tx timeout [ 503.603133][T21765] __nla_validate_parse: 5 callbacks suppressed [ 503.603154][T21765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4182'. [ 503.619033][T21765] nbd: must specify a size in bytes for the device [ 503.757039][T21773] ip6tnl0: Caught tx_queue_len zero misconfig [ 503.770151][T21773] tunl0: Caught tx_queue_len zero misconfig [ 503.946776][T21785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4190'. [ 503.980335][T21788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4191'. [ 504.550902][T21812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4196'. [ 504.576701][T21811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4197'. [ 504.595419][T21812] nbd: must specify a size in bytes for the device [ 504.824527][T21811] bond3: entered promiscuous mode [ 504.830817][T21811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.013360][T21831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4200'. [ 505.103235][T21837] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 505.121103][T11486] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 505.131753][T21831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4200'. [ 505.137505][T11486] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 505.244956][T21831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 505.253352][T11486] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 505.271233][T11486] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 505.287827][T21848] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 505.507127][T21862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4210'. [ 505.516324][T21862] nbd: must specify a size in bytes for the device [ 505.610820][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4209'. [ 505.897432][T21877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4215'. [ 505.914635][T21877] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 506.062329][T21888] validate_nla: 3 callbacks suppressed [ 506.062348][T21888] netlink: 'syz.2.4218': attribute type 9 has an invalid length. [ 506.221153][T21894] erspan0: left allmulticast mode [ 506.230822][T21894] erspan0: left promiscuous mode [ 506.239521][T21894] bridge3: port 1(erspan0) entered disabled state [ 506.257521][T21894] team0: Port device team_slave_0 removed [ 506.266120][T21894] team0: Port device team_slave_1 removed [ 506.273938][T21894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.283787][T21894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.288478][T21896] nbd: must specify a size in bytes for the device [ 506.292078][ T29] audit: type=1804 audit(1776180972.257:7): pid=21897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4220" name="/newroot/223/memory.events" dev="tmpfs" ino=1155 res=1 errno=0 [ 506.319934][ T29] audit: type=1800 audit(1776180972.257:8): pid=21897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4220" name="memory.events" dev="tmpfs" ino=1155 res=0 errno=0 [ 506.343034][T21894] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 506.518389][T21908] IPv6: sit1: Disabled Multicast RS [ 506.644321][T21912] netlink: 'syz.4.4226': attribute type 1 has an invalid length. [ 506.685158][T21914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.796043][T21920] netlink: 'syz.4.4229': attribute type 2 has an invalid length. [ 506.825380][T21920] netlink: 'syz.4.4229': attribute type 1 has an invalid length. [ 506.848341][T21920] netlink: 'syz.4.4229': attribute type 2 has an invalid length. [ 506.888121][T21920] netlink: 'syz.4.4229': attribute type 1 has an invalid length. [ 506.893634][T21925] netlink: 'syz.2.4232': attribute type 1 has an invalid length. [ 506.907943][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 506.916006][ C0] lec:lec_tx_timeout: lec0 [ 506.930490][T21926] netlink: 'syz.3.4231': attribute type 9 has an invalid length. [ 507.085758][T21925] bond7: entered promiscuous mode [ 507.091500][T21925] 8021q: adding VLAN 0 to HW filter on device bond7 [ 507.134230][T21936] netlink: 'syz.4.4235': attribute type 20 has an invalid length. [ 507.165442][T21927] 8021q: adding VLAN 0 to HW filter on device bond7 [ 507.173106][T21927] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 507.187515][T21927] bond7: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 507.201843][T21927] bond7: (slave vcan0): making interface the new active one [ 507.209330][T21927] vcan0: entered promiscuous mode [ 507.215569][T21927] bond7: (slave vcan0): Enslaving as an active interface with an up link [ 507.389525][T21947] netlink: 'syz.3.4239': attribute type 1 has an invalid length. [ 507.691568][T21961] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 507.876458][T21961] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 508.072549][T21987] dvmrp6: entered allmulticast mode [ 508.152773][T21987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.262461][T21990] xt_connbytes: Forcing CT accounting to be enabled [ 508.748510][T22009] xt_hashlimit: size too large, truncated to 1048576 [ 509.079584][T22026] bond11: option miimon: invalid value (18446744073709551607) [ 509.087236][T22026] bond11: option miimon: allowed values 0 - 2147483647 [ 509.100221][T22026] bond11 (unregistering): Released all slaves [ 509.156290][T22029] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 509.177723][T22009] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 509.779639][T22068] __nla_validate_parse: 11 callbacks suppressed [ 509.779659][T22068] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4274'. [ 509.857524][T22073] x_tables: duplicate underflow at hook 2 [ 509.930479][T22070] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.954719][T22070] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 509.974927][T22065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4273'. [ 509.984454][T11481] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.993215][T11481] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.013384][T11481] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.031824][T11481] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.310787][T22095] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4282'. [ 510.832819][T22121] xt_hashlimit: size too large, truncated to 1048576 [ 511.402543][T22143] validate_nla: 13 callbacks suppressed [ 511.402564][T22143] netlink: 'syz.3.4296': attribute type 9 has an invalid length. [ 511.633031][T22152] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 511.636558][T22150] netlink: 'syz.4.4300': attribute type 1 has an invalid length. [ 511.732711][T22156] syzkaller0: entered promiscuous mode [ 511.738869][T22156] syzkaller0: entered allmulticast mode [ 511.751011][T22153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4301'. [ 512.085123][T22175] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4307'. [ 512.381953][T22188] netlink: 'syz.1.4313': attribute type 1 has an invalid length. [ 512.409820][T22190] IPVS: Scheduler module ip_vs_ not found [ 512.424383][T22189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.014654][T22226] netlink: 'syz.3.4325': attribute type 1 has an invalid length. [ 513.302055][T22238] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 513.702664][T22263] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4334'. [ 513.716185][T22259] syzkaller0: entered promiscuous mode [ 513.722818][T22259] syzkaller0: entered allmulticast mode [ 513.765646][T22264] netlink: 'syz.3.4337': attribute type 1 has an invalid length. [ 513.876282][T16900] Bluetooth: hci2: command tx timeout [ 513.883107][T16900] Bluetooth: hci3: command 0x0406 tx timeout [ 514.082564][T22279] netlink: 'syz.4.4342': attribute type 30 has an invalid length. [ 516.013296][T22312] netlink: 'syz.2.4349': attribute type 1 has an invalid length. [ 516.132923][T22318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.143711][T22318] IPv6: addrconf: prefix option has invalid lifetime [ 516.224116][T22324] netlink: 'syz.1.4355': attribute type 2 has an invalid length. [ 516.737583][T22356] netlink: 'syz.4.4364': attribute type 1 has an invalid length. [ 516.810993][T22363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4366'. [ 516.958690][T22372] syzkaller0: entered promiscuous mode [ 516.964234][T22372] syzkaller0: entered allmulticast mode [ 517.200436][T22380] vlan3: entered allmulticast mode [ 517.391664][T22388] syzkaller1: entered promiscuous mode [ 517.397176][T22388] syzkaller1: entered allmulticast mode [ 517.425331][T22392] netlink: 'syz.2.4376': attribute type 1 has an invalid length. [ 517.719724][T22399] syzkaller0: entered promiscuous mode [ 517.737032][T22399] syzkaller0: entered allmulticast mode [ 517.880562][T22420] netlink: 'syz.4.4386': attribute type 9 has an invalid length. [ 519.634497][T22439] netlink: 'syz.0.4392': attribute type 1 has an invalid length. [ 519.683638][T22443] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4394'. [ 519.731947][T22443] openvswitch: netlink: Multiple metadata blocks provided [ 519.752783][T22446] xt_TCPMSS: Only works on TCP SYN packets [ 519.758695][T22445] netlink: 'syz.3.4393': attribute type 9 has an invalid length. [ 519.874730][T22452] netlink: 'syz.0.4396': attribute type 13 has an invalid length. [ 520.101083][T22462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4401'. [ 520.114749][T22462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4401'. [ 520.126862][T22462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4401'. [ 520.153238][T22460] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4400'. [ 520.162707][T22460] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4400'. [ 520.175629][T22465] syzkaller0: entered promiscuous mode [ 520.181368][T22465] syzkaller0: entered allmulticast mode [ 520.387336][T22458] ip6erspan1: entered allmulticast mode [ 520.407164][T22480] netlink: 'syz.0.4406': attribute type 1 has an invalid length. [ 521.106763][T22513] netlink: 'syz.2.4414': attribute type 9 has an invalid length. [ 521.251823][T22518] netlink: 'syz.1.4415': attribute type 9 has an invalid length. [ 521.253429][T22523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4416'. [ 521.277368][T22523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4416'. [ 521.311728][T22525] netlink: 'syz.3.4417': attribute type 1 has an invalid length. [ 521.665199][T22547] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4424'. [ 522.011107][T22578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4433'. [ 522.387009][T22595] validate_nla: 2 callbacks suppressed [ 522.387031][T22595] netlink: 'syz.3.4440': attribute type 32 has an invalid length. [ 522.401812][T22595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4440'. [ 522.438565][T22595] bond9: Setting coupled_control to off (0) [ 522.688975][T22615] netlink: 'syz.3.4445': attribute type 1 has an invalid length. [ 522.696899][T22615] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.4445'. [ 522.714257][T22615] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4445'. [ 522.907705][T22623] netlink: 'syz.3.4448': attribute type 1 has an invalid length. [ 522.919902][T22623] syzkaller1: entered promiscuous mode [ 522.925496][T22623] syzkaller1: entered allmulticast mode [ 523.084814][T22631] xt_recent: Unsupported userspace flags (000000b1) [ 523.155187][T22635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4453'. [ 523.241704][T22639] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4454'. [ 523.248226][T22637] tipc: Can't bind to reserved service type 0 [ 523.281963][T22637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4455'. [ 523.409733][T22652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4459'. [ 523.449940][T22652] netlink: 'syz.2.4459': attribute type 4 has an invalid length. [ 523.468590][T22648] netlink: 'syz.2.4459': attribute type 4 has an invalid length. [ 523.518752][T22660] syzkaller0: entered promiscuous mode [ 523.524410][T22660] syzkaller0: entered allmulticast mode [ 523.636006][T22669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4463'. [ 523.651140][T22668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4465'. [ 524.028212][T16898] Bluetooth: hci4: command 0x0406 tx timeout [ 524.439231][T22687] tipc: Enabling of bearer rejected, failed to enable media [ 524.476065][T22690] ipip0: entered promiscuous mode [ 524.895503][T22715] netlink: 'syz.0.4476': attribute type 9 has an invalid length. [ 525.089583][T22735] tipc: Enabling of bearer rejected, media not registered [ 525.236377][T22748] ip6tnl0: Caught tx_queue_len zero misconfig [ 525.413186][T22762] netlink: 'syz.0.4494': attribute type 14 has an invalid length. [ 525.424666][T22762] netlink: 'syz.0.4494': attribute type 13 has an invalid length. [ 525.660649][T22775] netlink: 'syz.2.4497': attribute type 29 has an invalid length. [ 525.676146][T22778] syzkaller1: entered promiscuous mode [ 525.688031][T22778] syzkaller1: entered allmulticast mode [ 525.840121][T22780] netlink: 'syz.1.4499': attribute type 9 has an invalid length. [ 525.912638][T22783] syzkaller1: entered promiscuous mode [ 525.918796][T22783] syzkaller1: entered allmulticast mode [ 526.220860][T22792] tipc: Enabling of bearer rejected, failed to enable media [ 526.429493][ T2149] block nbd1: Possible stuck request ffff8880262e2800: control (read@0,1024B). Runtime 30 seconds [ 526.442629][ T2149] block nbd1: Possible stuck request ffff8880262e2a00: control (read@1024,1024B). Runtime 30 seconds [ 526.453801][ T2149] block nbd1: Possible stuck request ffff8880262e2c00: control (read@2048,1024B). Runtime 30 seconds [ 526.465232][ T2149] block nbd1: Possible stuck request ffff8880262e2e00: control (read@3072,1024B). Runtime 30 seconds [ 527.656017][T22842] __nla_validate_parse: 10 callbacks suppressed [ 527.656039][T22842] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.4513'. [ 527.672933][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4513'. [ 527.681954][T22842] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4513'. [ 527.694402][T22842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4513'. [ 527.780905][T22848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4516'. [ 527.781974][T22846] nbd: socks must be embedded in a SOCK_ITEM attr [ 527.924775][T22854] nbd: socks must be embedded in a SOCK_ITEM attr [ 527.933722][T22856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4519'. [ 527.994836][T22858] validate_nla: 2 callbacks suppressed [ 527.994858][T22858] netlink: 'syz.1.4520': attribute type 4 has an invalid length. [ 528.061189][T22860] tipc: Enabling of bearer rejected, failed to enable media [ 528.079336][T22866] netlink: 'syz.1.4520': attribute type 4 has an invalid length. [ 528.267155][T22879] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.4526'. [ 528.276856][T22879] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.4526'. [ 528.299929][T22872] netlink: 'syz.2.4523': attribute type 9 has an invalid length. [ 528.317296][T22881] netlink: 'syz.4.4527': attribute type 2 has an invalid length. [ 528.326685][T22881] netlink: 'syz.4.4527': attribute type 8 has an invalid length. [ 528.339179][T22881] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4527'. [ 528.415748][T22881] netlink: 'syz.4.4527': attribute type 2 has an invalid length. [ 528.424784][T22881] netlink: 'syz.4.4527': attribute type 8 has an invalid length. [ 528.435142][T22881] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4527'. [ 528.563417][T22898] sctp: [Deprecated]: syz.0.4530 (pid 22898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.563417][T22898] Use struct sctp_sack_info instead [ 528.608809][T22898] sctp: [Deprecated]: syz.0.4530 (pid 22898) Use of int in max_burst socket option. [ 528.608809][T22898] Use struct sctp_assoc_value instead [ 528.888362][T22891] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.896081][T22891] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.918270][ T8932] lec:lec_start_xmit: lec0:No lecd attached [ 529.068897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.078154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.086511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.094930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.103367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.111871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.120340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.129002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.137478][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.145972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.158272][T16900] Bluetooth: hci1: command 0x0406 tx timeout [ 529.534049][T22891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.582692][T22891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.923766][T22909] vxcan0: entered allmulticast mode [ 529.992072][T11481] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.022288][T11481] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 43568 - 0 [ 530.054561][T11481] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 530.130490][T11481] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.147928][T11481] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 43568 - 0 [ 530.162901][T11481] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 530.184608][T22959] netlink: 'syz.0.4538': attribute type 1 has an invalid length. [ 530.186440][T11481] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.205323][T22959] netlink: 'syz.0.4538': attribute type 1 has an invalid length. [ 530.216215][T11481] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 43568 - 0 [ 530.235750][T11481] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 530.277136][T11481] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.297572][T11481] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 43568 - 0 [ 530.322485][T11481] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 530.378394][T22971] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 530.513126][ T64] nci: nci_rsp_packet: unknown rsp opcode 0x629 [ 530.755812][T22991] netlink: 'syz.1.4545': attribute type 9 has an invalid length. [ 533.139544][T22998] ipvlan2: entered promiscuous mode [ 533.146604][T22998] team0: Device ipvlan2 failed to register rx_handler [ 533.440757][T22976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.928292][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 533.936378][ C0] lec:lec_tx_timeout: lec0 [ 534.154245][T23046] netlink: 'syz.3.4561': attribute type 9 has an invalid length. [ 534.163803][T23044] __nla_validate_parse: 10 callbacks suppressed [ 534.163827][T23044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4560'. [ 534.231625][T23044] net_ratelimit: 441 callbacks suppressed [ 534.231641][T23044] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 534.280601][T23052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 534.446420][T23056] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4564'. [ 534.563667][T23064] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4567'. [ 534.592146][T23066] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 534.608630][T23066] bond10: (slave lo): Enslaving as an active interface with an up link [ 534.617322][T23066] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 534.638411][T23064] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 535.037466][T23087] nbd: socks must be embedded in a SOCK_ITEM attr [ 535.107720][T23090] netlink: 'syz.4.4574': attribute type 9 has an invalid length. [ 535.468477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.477311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.485756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.494203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.502742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.511186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.568755][T23103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4577'. [ 535.631740][T23106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.646504][T23101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4577'. [ 535.651115][T23106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.702086][T23103] netlink: 'syz.0.4577': attribute type 1 has an invalid length. [ 535.713657][T23103] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 535.828738][T23113] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4581'. [ 535.849107][T23113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4581'. [ 536.002034][T23119] netlink: 'syz.0.4583': attribute type 1 has an invalid length. [ 536.422967][T23145] netlink: 'syz.3.4586': attribute type 9 has an invalid length. [ 536.779101][T23171] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4593'. [ 536.876881][T23176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4594'. [ 536.901246][T23180] netlink: 'syz.1.4595': attribute type 1 has an invalid length. [ 537.193494][T23203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4601'. [ 537.787379][T23224] netlink: 'syz.4.4607': attribute type 1 has an invalid length. [ 538.102482][T23244] netlink: 'syz.1.4613': attribute type 10 has an invalid length. [ 538.113106][T23244] team0: Port device dummy0 added [ 538.489124][T23257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.607620][T23261] netlink: 'syz.3.4618': attribute type 1 has an invalid length. [ 538.869985][T23277] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 539.153127][T23280] syzkaller0: entered promiscuous mode [ 539.159369][T23280] syzkaller0: entered allmulticast mode [ 541.788452][ C0] net_ratelimit: 10 callbacks suppressed [ 541.788474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.802839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.811346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.819728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.828090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.836579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.848796][T23270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.861640][T23301] netlink: 'syz.2.4629': attribute type 1 has an invalid length. [ 542.059757][T23317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.074542][T23317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.085769][T23317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.127583][T23317] sctp: [Deprecated]: syz.1.4632 (pid 23317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.127583][T23317] Use struct sctp_sack_info instead [ 542.428938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.586104][T23345] __nla_validate_parse: 2 callbacks suppressed [ 542.586125][T23345] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4643'. [ 542.764023][T23366] bond0: Caught tx_queue_len zero misconfig [ 542.784747][T23366] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4649'. [ 542.803419][ T29] audit: type=1107 audit(1776181008.777:9): pid=23368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 542.806712][T23369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4650'. [ 542.839415][T23366] netlink: 18 bytes leftover after parsing attributes in process `syz.0.4649'. [ 542.950455][T23371] IPVS: length: 163 != 24 [ 543.072990][T23381] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4653'. [ 543.289348][T23387] netlink: 'syz.4.4653': attribute type 11 has an invalid length. [ 543.380907][T23389] sit0: entered promiscuous mode [ 543.405679][T23389] netlink: 'syz.2.4655': attribute type 1 has an invalid length. [ 543.426908][T23389] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4655'. [ 543.452004][T23405] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4659'. [ 543.596177][T23411] bridge0: port 3(bond0) entered blocking state [ 543.619314][T23411] bridge0: port 3(bond0) entered disabled state [ 543.636208][T23411] bond0: entered allmulticast mode [ 543.658753][T23411] bond_slave_0: entered allmulticast mode [ 543.664535][T23411] bond_slave_1: entered allmulticast mode [ 543.688749][T23411] bond0: entered promiscuous mode [ 543.696169][T23411] bond_slave_0: entered promiscuous mode [ 543.703404][T23411] bond_slave_1: entered promiscuous mode [ 544.178632][T23437] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4672'. [ 544.202508][T23440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4673'. [ 544.270365][T23440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4673'. [ 546.909340][T23589] netlink: 'syz.0.4698': attribute type 3 has an invalid length. [ 546.917226][T23589] netlink: 'syz.0.4698': attribute type 3 has an invalid length. [ 546.991730][T23592] net_ratelimit: 40 callbacks suppressed [ 546.991761][T23592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.001348][T23596] xt_TCPMSS: Only works on TCP SYN packets [ 547.007037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.028213][T23592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.037100][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.073983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.095684][T23585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.105120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.163964][T23600] netlink: 'syz.4.4700': attribute type 10 has an invalid length. [ 547.308228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.334565][T23606] vlan3: entered promiscuous mode [ 547.342070][T23606] bridge0: entered promiscuous mode [ 547.444492][T23612] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 547.891236][T23630] __nla_validate_parse: 17 callbacks suppressed [ 547.891260][T23630] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4708'. [ 547.917427][T23630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4708'. [ 547.986737][T23638] ipvlan3: entered promiscuous mode [ 548.108421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.172238][T23623] bridge0: port 4(syz_tun) entered blocking state [ 548.182533][T23623] bridge0: port 4(syz_tun) entered disabled state [ 548.194813][T23623] syz_tun: entered allmulticast mode [ 548.203336][T23623] syz_tun: entered promiscuous mode [ 548.217428][T23623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4705'. [ 548.227655][T23623] syz_tun: Device is already in use. [ 548.242780][T23650] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4714'. [ 548.463318][T23658] team0: Port device dummy0 removed [ 548.475392][T23658] bridge_slave_0: left allmulticast mode [ 548.492320][T23658] bridge_slave_0: left promiscuous mode [ 548.500817][T23658] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.512768][T23660] netlink: 'syz.2.4718': attribute type 1 has an invalid length. [ 548.535053][T23658] bridge_slave_1: left allmulticast mode [ 548.541054][T23658] bridge_slave_1: left promiscuous mode [ 548.547073][T23658] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.560462][T23658] bond0: (slave bond_slave_0): Releasing backup interface [ 548.574855][T23658] bond0: (slave bond_slave_1): Releasing backup interface [ 548.606759][T23658] team0: Port device team_slave_0 removed [ 548.617203][T23658] team0: Port device team_slave_1 removed [ 548.624375][T23658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.635226][T23658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.728475][T23660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4718'. [ 548.788900][T23685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4724'. [ 548.813960][T23670] 8021q: adding VLAN 0 to HW filter on device bond9 [ 548.831553][T23670] bond8: (slave bond9): making interface the new active one [ 548.848882][T23670] bond8: (slave bond9): Enslaving as an active interface with an up link [ 548.930131][T23660] 8021q: adding VLAN 0 to HW filter on device bond8 [ 549.069766][T23702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4728'. [ 549.323968][T23728] netlink: 'syz.1.4738': attribute type 3 has an invalid length. [ 549.333404][T23728] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4738'. [ 549.380786][T23732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4739'. [ 549.440222][T23734] netlink: 'syz.3.4737': attribute type 16 has an invalid length. [ 549.463055][T23734] netlink: 'syz.3.4737': attribute type 17 has an invalid length. [ 549.681188][T23734] bridge0: port 4(syz_tun) entered blocking state [ 549.687809][T23734] bridge0: port 4(syz_tun) entered forwarding state [ 549.705552][T23734] bridge0: port 3(bond0) entered blocking state [ 549.712030][T23734] bridge0: port 3(bond0) entered forwarding state [ 549.721465][T23734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.730346][T23734] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.858064][T23754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4746'. [ 551.323537][T23819] tipc: Enabled bearer , priority 0 [ 551.410267][T23820] syzkaller0: entered promiscuous mode [ 551.417207][T23820] syzkaller0: entered allmulticast mode [ 551.425959][T23820] tipc: Resetting bearer [ 551.433806][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.494989][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.511971][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.629787][T23557] tipc: Resetting bearer [ 551.639361][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.648933][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.703000][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.715470][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.724655][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.738505][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.747234][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.772136][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.799558][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.815425][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.825005][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.836093][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.842156][T23831] netlink: 'syz.0.4764': attribute type 4 has an invalid length. [ 551.859053][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.907085][T23840] netlink: 'syz.0.4764': attribute type 4 has an invalid length. [ 551.919777][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.928980][T23819] tipc: Enabling of bearer rejected, already enabled [ 551.937740][T23819] tipc: Enabling of bearer rejected, already enabled [ 552.386608][T23831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.419224][T23831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.692391][T23819] tipc: Enabling of bearer rejected, already enabled [ 552.750831][T23818] tipc: Resetting bearer [ 552.852770][T23873] xt_hashlimit: size too large, truncated to 1048576 [ 554.348406][ C0] net_ratelimit: 20 callbacks suppressed [ 554.348463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.362526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.370819][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.379153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.387384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.006601][T23818] tipc: Disabling bearer [ 555.015017][T23561] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.024542][T23561] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 555.034213][T23561] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.043547][T23561] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 555.106632][T23903] nbd: socks must be embedded in a SOCK_ITEM attr [ 555.201850][T23561] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.224654][T23561] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 555.246557][T23561] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.256722][T23561] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 556.028185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.411547][T23944] vxcan3: entered promiscuous mode [ 556.443543][T23948] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4791'. [ 556.453427][T23949] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4791'. [ 556.510132][ T2149] block nbd1: Possible stuck request ffff8880262e2800: control (read@0,1024B). Runtime 60 seconds [ 556.521145][ T2149] block nbd1: Possible stuck request ffff8880262e2a00: control (read@1024,1024B). Runtime 60 seconds [ 556.532349][ T2149] block nbd1: Possible stuck request ffff8880262e2c00: control (read@2048,1024B). Runtime 60 seconds [ 556.543371][ T2149] block nbd1: Possible stuck request ffff8880262e2e00: control (read@3072,1024B). Runtime 60 seconds [ 556.695756][T23955] erspan0: entered promiscuous mode [ 556.701481][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a044400: rx timeout, send abort [ 556.712487][T23955] macsec1: entered promiscuous mode [ 556.727529][T23955] erspan0: left promiscuous mode [ 556.782870][T23960] x_tables: duplicate underflow at hook 1 [ 557.211289][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a044400: abort rx timeout. Force session deactivation [ 557.548333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.556745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.565151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.573545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.975668][T23986] netlink: 'syz.0.4801': attribute type 10 has an invalid length. [ 557.986796][T23986] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 558.110420][T23992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4803'. [ 558.364818][T24013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4805'. [ 558.374979][T24012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4809'. [ 558.388450][T24013] netlink: 356 bytes leftover after parsing attributes in process `syz.0.4805'. [ 558.532472][T24012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4809'. [ 558.709730][T24010] netlink: 'syz.4.4808': attribute type 10 has an invalid length. [ 558.721749][T24010] veth0_vlan: left promiscuous mode [ 558.734627][T24010] veth0_vlan: entered promiscuous mode [ 558.742967][T24010] team0: Device veth0_vlan failed to register rx_handler [ 558.767432][T24010] netlink: 'syz.4.4808': attribute type 16 has an invalid length. [ 558.775796][T24010] netlink: 'syz.4.4808': attribute type 17 has an invalid length. [ 558.901281][T24030] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4814'. [ 558.914444][T24010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4808'. [ 559.082006][T24039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4815'. [ 559.119648][T24041] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 559.317639][T24050] netlink: 'syz.0.4820': attribute type 4 has an invalid length. [ 559.409423][T24050] syzkaller1: entered promiscuous mode [ 559.414950][T24050] syzkaller1: entered allmulticast mode [ 559.698422][T24065] syzkaller0: entered promiscuous mode [ 559.714258][T24065] syzkaller0: entered allmulticast mode [ 559.960927][T24094] net_ratelimit: 3 callbacks suppressed [ 559.960949][T24094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.186186][T24100] netlink: 'syz.1.4830': attribute type 1 has an invalid length. [ 560.748363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.756767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.765105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.773421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.028502][T24073] __nla_validate_parse: 4 callbacks suppressed [ 562.028523][T24073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4822'. [ 562.062147][T24112] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 562.063821][T24116] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 562.093950][T24116] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 562.108708][T24124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.117077][T24124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.141054][T24116] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 562.178659][T24124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.218649][T24124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.255582][T24130] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 562.264085][T24124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.314826][T24145] IPv6: NLM_F_REPLACE set, but no existing node found! [ 562.353846][T24148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4833'. [ 562.638407][T24163] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4840'. [ 562.647466][T24163] tipc: Invalid UDP bearer configuration [ 562.647518][T24163] tipc: Enabling of bearer rejected, failed to enable media [ 562.916448][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 563.011219][T24189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4847'. [ 563.249601][T24200] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4849'. [ 563.855747][T24219] netlink: 'syz.3.4853': attribute type 39 has an invalid length. [ 563.865917][T24235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4855'. [ 563.875923][T24235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4855'. [ 563.894133][T24235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4855'. [ 563.956514][T24226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4854'. [ 563.992509][T24238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4856'. [ 565.016899][T24307] 8021q: adding VLAN 0 to HW filter on device bond11 [ 565.027528][T24308] netlink: 'syz.3.4870': attribute type 1 has an invalid length. [ 565.035855][T24307] netlink: 'syz.3.4870': attribute type 1 has an invalid length. [ 565.046473][T24298] syzkaller0: entered promiscuous mode [ 565.072508][T24298] syzkaller0: entered allmulticast mode [ 565.095807][T24308] vxlan0: entered promiscuous mode [ 565.107838][T24308] bond11: (slave vxlan0): Enslaving as an active interface with an up link [ 565.126270][T23570] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.158032][T23570] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.292080][T23570] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.315986][T23570] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.426620][T24332] netlink: 'syz.1.4876': attribute type 1 has an invalid length. [ 565.447049][T24332] netlink: 'syz.1.4876': attribute type 1 has an invalid length. [ 565.564079][T24337] netem: change failed [ 565.878465][T24370] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 565.898085][T24370] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 565.905806][T24369] dummy0: Caught tx_queue_len zero misconfig [ 566.410800][T24402] bond4: option miimon: invalid value (18446744073709551607) [ 566.446261][T24402] bond4: option miimon: allowed values 0 - 2147483647 [ 566.485245][T24402] bond4 (unregistering): Released all slaves [ 566.508124][ C0] net_ratelimit: 13 callbacks suppressed [ 566.508143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.522885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.533822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.564239][T24418] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 566.708931][T24426] netlink: 'syz.1.4897': attribute type 1 has an invalid length. [ 566.988357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.996699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.005219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.013642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.157116][T24448] IPVS: Scheduler module ip_vs_sip not found [ 567.171183][T24448] IPVS: length: 8 != 426181043088 [ 567.418403][T24467] __nla_validate_parse: 6 callbacks suppressed [ 567.418421][T24467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4908'. [ 567.527435][T24472] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 567.546395][T24472] bond4 (unregistering): Released all slaves [ 567.601368][T24480] netlink: 'syz.4.4912': attribute type 1 has an invalid length. [ 567.869058][T24497] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4919'. [ 567.927944][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 567.936013][ C0] lec:lec_tx_timeout: lec0 [ 567.996116][T24504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.004580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.004716][T24509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4922'. [ 568.028183][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.043846][T24510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4922'. [ 568.062019][T24508] tipc: Enabled bearer , priority 0 [ 568.128703][T24517] netlink: 'syz.1.4921': attribute type 58 has an invalid length. [ 568.220256][T24521] netlink: 'syz.0.4925': attribute type 1 has an invalid length. [ 568.324597][T24526] netlink: 'syz.4.4927': attribute type 1 has an invalid length. [ 568.335379][T24527] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4927'. [ 568.520528][T24533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4930'. [ 568.691708][T24544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4933'. [ 568.704225][T24544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4933'. [ 568.714536][T24544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4933'. [ 568.762335][T24552] bond5: option arp_missed_max: invalid value (0) [ 568.769588][T24552] bond5: option arp_missed_max: allowed values 1 - 255 [ 568.790507][T24552] bond5 (unregistering): Released all slaves [ 568.970604][T24554] geneve4: entered promiscuous mode [ 569.063491][T24557] hsr0: entered promiscuous mode [ 569.072952][T24556] hsr0: left promiscuous mode [ 569.079819][T23569] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 37234 - 0 [ 569.098161][T24570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4938'. [ 569.126747][T23561] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 37234 - 0 [ 569.140421][T23561] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 37234 - 0 [ 569.250977][T23561] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 37234 - 0 [ 569.571075][T24598] validate_nla: 1 callbacks suppressed [ 569.571094][T24598] netlink: 'syz.4.4946': attribute type 10 has an invalid length. [ 569.757822][T24611] netlink: 'syz.0.4951': attribute type 25 has an invalid length. [ 569.819534][T23569] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.828589][T23569] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.837085][T24611] netlink: 'syz.0.4951': attribute type 25 has an invalid length. [ 569.850966][T23569] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.885450][T23569] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.009652][T24623] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 570.046046][T24623] netlink: 'syz.0.4955': attribute type 1 has an invalid length. [ 570.125358][T24627] netlink: 'syz.2.4954': attribute type 1 has an invalid length. [ 570.172104][T24630] syzkaller0: entered promiscuous mode [ 570.187353][T24630] syzkaller0: entered allmulticast mode [ 570.380037][T24638] netlink: 'syz.0.4960': attribute type 2 has an invalid length. [ 570.405891][T24638] hmac(sha224): entered promiscuous mode [ 570.416309][T24638] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20002 [ 570.543581][T24632] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 570.559838][ T29] audit: type=1107 audit(1776181036.537:10): pid=24645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 570.560593][T24647] netlink: 'syz.1.4962': attribute type 1 has an invalid length. [ 570.658521][T24650] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 570.709628][T24647] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 570.858274][T24657] netlink: 'syz.1.4964': attribute type 1 has an invalid length. [ 570.901909][T24657] 8021q: adding VLAN 0 to HW filter on device bond4 [ 570.936637][T24660] netlink: 'syz.3.4965': attribute type 7 has an invalid length. [ 570.944878][T24660] netlink: 'syz.3.4965': attribute type 8 has an invalid length. [ 571.081256][T24670] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 571.686446][T24724] veth1_to_team: entered promiscuous mode [ 571.709520][T24727] FAULT_INJECTION: forcing a failure. [ 571.709520][T24727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.738550][T24727] CPU: 1 UID: 0 PID: 24727 Comm: syz.3.4983 Not tainted syzkaller #0 PREEMPT(full) [ 571.738580][T24727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 571.738591][T24727] Call Trace: [ 571.738599][T24727] [ 571.738607][T24727] dump_stack_lvl+0xe8/0x150 [ 571.738639][T24727] should_fail_ex+0x412/0x560 [ 571.738672][T24727] _copy_from_user+0x2d/0xb0 [ 571.738695][T24727] __sys_bpf+0x229/0x950 [ 571.738717][T24727] ? __pfx___sys_bpf+0x10/0x10 [ 571.738750][T24727] ? ksys_write+0x242/0x270 [ 571.738773][T24727] ? __pfx_ksys_write+0x10/0x10 [ 571.738807][T24727] __x64_sys_bpf+0x7c/0x90 [ 571.738833][T24727] do_syscall_64+0x14d/0xf80 [ 571.738854][T24727] ? trace_irq_disable+0x3b/0x150 [ 571.738870][T24727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.738888][T24727] ? clear_bhb_loop+0x40/0x90 [ 571.738912][T24727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.738930][T24727] RIP: 0033:0x7f0fb919c819 [ 571.738948][T24727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.738964][T24727] RSP: 002b:00007f0fba0ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 571.738984][T24727] RAX: ffffffffffffffda RBX: 00007f0fb9415fa0 RCX: 00007f0fb919c819 [ 571.738998][T24727] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 571.739010][T24727] RBP: 00007f0fba0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 571.739022][T24727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.739033][T24727] R13: 00007f0fb9416038 R14: 00007f0fb9415fa0 R15: 00007ffeda0ae168 [ 571.739063][T24727] [ 572.237843][T24762] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode [ 572.245411][T24762] mac80211_hwsim hwsim40 syzkaller0: left allmulticast mode [ 572.471672][T24782] net_ratelimit: 50 callbacks suppressed [ 572.471692][T24782] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 572.533251][T24780] tipc: Enabling of bearer rejected, failed to enable media [ 572.560274][T24789] FAULT_INJECTION: forcing a failure. [ 572.560274][T24789] name failslab, interval 1, probability 0, space 0, times 0 [ 572.588673][T24789] CPU: 1 UID: 0 PID: 24789 Comm: syz.4.4998 Not tainted syzkaller #0 PREEMPT(full) [ 572.588701][T24789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 572.588713][T24789] Call Trace: [ 572.588720][T24789] [ 572.588728][T24789] dump_stack_lvl+0xe8/0x150 [ 572.588760][T24789] should_fail_ex+0x412/0x560 [ 572.588793][T24789] should_failslab+0xa8/0x100 [ 572.588819][T24789] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 572.588843][T24789] ? __get_vm_area_node+0x13f/0x300 [ 572.588868][T24789] __get_vm_area_node+0x13f/0x300 [ 572.588886][T24789] ? unwind_next_frame+0xa5/0x23c0 [ 572.588917][T24789] __vmalloc_node_range_noprof+0x372/0x1730 [ 572.588939][T24789] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 572.588972][T24789] ? __lock_acquire+0x6b5/0x2cf0 [ 572.589009][T24789] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 572.589031][T24789] ? aa_file_perm+0x192/0x15e0 [ 572.589062][T24789] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 572.589080][T24789] __vmalloc_noprof+0xd2/0x120 [ 572.589104][T24789] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 572.589126][T24789] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 572.589150][T24789] bpf_prog_alloc+0x3c/0x1a0 [ 572.589171][T24789] bpf_prog_load+0x7ba/0x1ae0 [ 572.589205][T24789] ? __pfx_bpf_prog_load+0x10/0x10 [ 572.589245][T24789] ? bpf_lsm_bpf+0x9/0x20 [ 572.589267][T24789] ? security_bpf+0x7e/0x2d0 [ 572.589294][T24789] __sys_bpf+0x618/0x950 [ 572.589314][T24789] ? __pfx___sys_bpf+0x10/0x10 [ 572.589348][T24789] ? ksys_write+0x242/0x270 [ 572.589370][T24789] ? __pfx_ksys_write+0x10/0x10 [ 572.589397][T24789] __x64_sys_bpf+0x7c/0x90 [ 572.589423][T24789] do_syscall_64+0x14d/0xf80 [ 572.589443][T24789] ? trace_irq_disable+0x3b/0x150 [ 572.589460][T24789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.589479][T24789] ? clear_bhb_loop+0x40/0x90 [ 572.589501][T24789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.589520][T24789] RIP: 0033:0x7f705a99c819 [ 572.589537][T24789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.589553][T24789] RSP: 002b:00007f705b927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 572.589573][T24789] RAX: ffffffffffffffda RBX: 00007f705ac15fa0 RCX: 00007f705a99c819 [ 572.589587][T24789] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 572.589598][T24789] RBP: 00007f705b927090 R08: 0000000000000000 R09: 0000000000000000 [ 572.589610][T24789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.589628][T24789] R13: 00007f705ac16038 R14: 00007f705ac15fa0 R15: 00007ffde76c9a38 [ 572.589658][T24789] [ 572.589688][T24789] syz.4.4998: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 572.942999][T24789] CPU: 1 UID: 0 PID: 24789 Comm: syz.4.4998 Not tainted syzkaller #0 PREEMPT(full) [ 572.943027][T24789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 572.943039][T24789] Call Trace: [ 572.943047][T24789] [ 572.943054][T24789] dump_stack_lvl+0xe8/0x150 [ 572.943084][T24789] warn_alloc+0x249/0x340 [ 572.943113][T24789] ? __pfx_warn_alloc+0x10/0x10 [ 572.943136][T24789] ? __get_vm_area_node+0x13f/0x300 [ 572.943161][T24789] ? __get_vm_area_node+0x2b5/0x300 [ 572.943178][T24789] ? unwind_next_frame+0xa5/0x23c0 [ 572.943211][T24789] __vmalloc_node_range_noprof+0x397/0x1730 [ 572.943246][T24789] ? __lock_acquire+0x6b5/0x2cf0 [ 572.943283][T24789] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 572.943305][T24789] ? aa_file_perm+0x192/0x15e0 [ 572.943336][T24789] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 572.943355][T24789] __vmalloc_noprof+0xd2/0x120 [ 572.943375][T24789] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 572.943397][T24789] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 572.943420][T24789] bpf_prog_alloc+0x3c/0x1a0 [ 572.943441][T24789] bpf_prog_load+0x7ba/0x1ae0 [ 572.943475][T24789] ? __pfx_bpf_prog_load+0x10/0x10 [ 572.943516][T24789] ? bpf_lsm_bpf+0x9/0x20 [ 572.943538][T24789] ? security_bpf+0x7e/0x2d0 [ 572.943565][T24789] __sys_bpf+0x618/0x950 [ 572.943585][T24789] ? __pfx___sys_bpf+0x10/0x10 [ 572.943619][T24789] ? ksys_write+0x242/0x270 [ 572.943643][T24789] ? __pfx_ksys_write+0x10/0x10 [ 572.943678][T24789] __x64_sys_bpf+0x7c/0x90 [ 572.943704][T24789] do_syscall_64+0x14d/0xf80 [ 572.943725][T24789] ? trace_irq_disable+0x3b/0x150 [ 572.943742][T24789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.943761][T24789] ? clear_bhb_loop+0x40/0x90 [ 572.943784][T24789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.943803][T24789] RIP: 0033:0x7f705a99c819 [ 572.943821][T24789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.943838][T24789] RSP: 002b:00007f705b927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 572.943859][T24789] RAX: ffffffffffffffda RBX: 00007f705ac15fa0 RCX: 00007f705a99c819 [ 572.943873][T24789] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 572.943885][T24789] RBP: 00007f705b927090 R08: 0000000000000000 R09: 0000000000000000 [ 572.943898][T24789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.943909][T24789] R13: 00007f705ac16038 R14: 00007f705ac15fa0 R15: 00007ffde76c9a38 [ 572.943940][T24789] [ 572.943962][T24789] Mem-Info: [ 573.222701][T24789] active_anon:6387 inactive_anon:8 isolated_anon:0 [ 573.222701][T24789] active_file:3282 inactive_file:40477 isolated_file:0 [ 573.222701][T24789] unevictable:768 dirty:193 writeback:0 [ 573.222701][T24789] slab_reclaimable:13534 slab_unreclaimable:142744 [ 573.222701][T24789] mapped:30977 shmem:1375 pagetables:1501 [ 573.222701][T24789] sec_pagetables:0 bounce:0 [ 573.222701][T24789] kernel_misc_reclaimable:0 [ 573.222701][T24789] free:1259101 free_pcp:19879 free_cma:0 [ 573.298213][T24789] Node 0 active_anon:25748kB inactive_anon:32kB active_file:13128kB inactive_file:161708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123908kB dirty:772kB writeback:0kB shmem:4164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17340kB pagetables:5664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 573.308289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.338513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.346868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.355281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.363714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.372057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.380439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.388804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.396514][T24821] __nla_validate_parse: 28 callbacks suppressed [ 573.396537][T24821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5005'. [ 573.455259][T24789] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 573.538051][T24789] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 573.687503][T24789] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 573.693703][T24789] Node 0 DMA32 free:1106176kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26248kB inactive_anon:32kB active_file:13128kB inactive_file:161708kB unevictable:1536kB writepending:772kB zspages:0kB present:3129332kB managed:2552084kB mlocked:0kB bounce:0kB free_pcp:56588kB local_pcp:34324kB free_cma:0kB [ 573.737555][T24830] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 573.746999][T24789] lowmem_reserve[]: 0 0 0 0 0 [ 573.752889][T24789] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:868kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 573.788371][T24830] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 573.811020][T24825] lo speed is unknown, defaulting to 1000 [ 573.818965][T24825] lo speed is unknown, defaulting to 1000 [ 573.825338][T24829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5006'. [ 573.834724][T24789] lowmem_reserve[]: 0 0 0 0 0 [ 573.838753][T24825] lo speed is unknown, defaulting to 1000 [ 573.840511][T24789] Node 1 Normal free:3914876kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23788kB local_pcp:0kB free_cma:0kB [ 573.881177][T24789] lowmem_reserve[]: 0 0 0 0 0 [ 573.882179][T24835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.886040][T24789] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 573.910805][T24789] Node 0 DMA32: 5490*4kB (UME) 5006*8kB (UME) 3830*16kB (UME) 473*32kB (UME) 189*64kB (UME) 452*128kB (UME) 495*256kB (UME) 369*512kB (UME) 233*1024kB (UME) 109*2048kB (UM) 31*4096kB (UM) = 1112824kB [ 573.931349][T24789] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 573.945959][T24789] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 7*16kB (UM) 5*32kB (UM) 9*64kB (UM) 8*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 953*4096kB (UM) = 3915128kB [ 573.963504][T24789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 573.986742][T24789] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 574.019514][T24789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 574.062447][T24789] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 574.095194][T24789] 45132 total pagecache pages [ 574.105344][T24789] 0 pages in swap cache [ 574.115151][T24789] Free swap = 124996kB [ 574.123200][T24789] Total swap = 124996kB [ 574.135158][T24789] 2097051 pages RAM [ 574.143529][T24789] 0 pages HighMem/MovableOnly [ 574.155036][T24789] 427198 pages reserved [ 574.165135][T24789] 0 pages cma reserved [ 574.380857][T24825] infiniband syz0: set active [ 574.385659][T24825] infiniband syz0: added lo [ 574.416594][ T5898] lo speed is unknown, defaulting to 1000 [ 574.464513][T24825] RDS/IB: syz0: added [ 574.470726][T24825] smc: adding ib device syz0 with port count 1 [ 574.477032][T24825] smc: ib device syz0 port 1 has no pnetid [ 574.495334][ T5898] lo speed is unknown, defaulting to 1000 [ 574.503320][T24825] lo speed is unknown, defaulting to 1000 [ 574.584298][T24855] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5012'. [ 574.931093][T24825] lo speed is unknown, defaulting to 1000 [ 574.982686][T24857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5013'. [ 574.991956][T24857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5013'. [ 575.311613][T24825] lo speed is unknown, defaulting to 1000 [ 575.525694][T24825] lo speed is unknown, defaulting to 1000 [ 575.740974][T24825] lo speed is unknown, defaulting to 1000 [ 575.956868][T24825] lo speed is unknown, defaulting to 1000 [ 576.210529][T24825] lo speed is unknown, defaulting to 1000 [ 576.311966][T24865] bond12: option lp_interval: invalid value (0) [ 576.318550][T24865] bond12: option lp_interval: allowed values 1 - 2147483647 [ 576.327755][T24865] bond12 (unregistering): Released all slaves [ 576.511408][T24871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5018'. [ 576.514359][T24825] lo speed is unknown, defaulting to 1000 [ 576.523715][T24871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5018'. [ 576.689977][T24833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 576.837252][T24876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5019'. [ 576.862717][T11484] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 576.880608][T11484] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.917621][T11484] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 576.962481][T11484] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.998174][T11484] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 577.015162][T11484] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.033489][T24882] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5022'. [ 577.044834][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5023'. [ 577.047816][T24885] geneve0: entered promiscuous mode [ 577.060386][T24885] geneve0: entered allmulticast mode [ 577.068223][T11484] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 577.086784][T11484] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.103110][T11484] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 577.137167][T11484] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 577.161475][T11484] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 577.182443][T11484] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 577.710012][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033ff6800: rx timeout, send abort [ 578.030777][T24941] validate_nla: 5 callbacks suppressed [ 578.030800][T24941] netlink: 'syz.3.5039': attribute type 4 has an invalid length. [ 578.214462][T24958] netlink: 'syz.1.5044': attribute type 1 has an invalid length. [ 578.222364][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033ff6800: abort rx timeout. Force session deactivation [ 578.252695][T24958] bond5: entered promiscuous mode [ 578.258263][T24958] 8021q: adding VLAN 0 to HW filter on device bond5 [ 578.280741][T24965] bond5: (slave veth7): making interface the new active one [ 578.288334][T24965] veth7: entered promiscuous mode [ 578.294427][T24965] bond5: (slave veth7): Enslaving as an active interface with an up link [ 578.390174][T24970] netlink: 'syz.1.5046': attribute type 2 has an invalid length. [ 578.710851][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033ff4000: rx timeout, send abort [ 579.022069][T24956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 579.219342][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033ff4000: abort rx timeout. Force session deactivation [ 579.347392][T24985] lo speed is unknown, defaulting to 1000 [ 579.738161][T25002] lo speed is unknown, defaulting to 1000 [ 580.124368][T25015] nbd: socks must be embedded in a SOCK_ITEM attr [ 580.364109][T25021] __nla_validate_parse: 7 callbacks suppressed [ 580.364130][T25021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5060'. [ 580.488785][T25029] netlink: 'syz.3.5061': attribute type 3 has an invalid length. [ 580.535057][T25028] lo speed is unknown, defaulting to 1000 [ 580.940192][T25054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5067'. [ 580.956800][T25056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5069'. [ 581.212144][T25068] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 581.247652][T25070] netlink: 'syz.4.5072': attribute type 1 has an invalid length. [ 581.295520][T23570] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 581.372060][T25079] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5073'. [ 581.373553][T25070] 8021q: adding VLAN 0 to HW filter on device bond13 [ 581.531878][T25090] netlink: 'syz.1.5077': attribute type 10 has an invalid length. [ 581.570390][T25070] bond13: (slave ip6erspan0): making interface the new active one [ 581.591940][T25070] bond13: (slave ip6erspan0): Enslaving as an active interface with an up link [ 581.625008][T25090] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.645237][T25090] bond0: (slave team0): Enslaving as an active interface with an up link [ 581.917530][T25111] netlink: 'syz.4.5085': attribute type 39 has an invalid length. [ 582.150890][T25117] lo speed is unknown, defaulting to 1000 [ 582.159382][T25122] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 582.326555][T25132] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5092'. [ 582.336465][T25132] net_ratelimit: 18 callbacks suppressed [ 582.336486][T25132] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 582.606632][T25148] netlink: 'syz.0.5095': attribute type 2 has an invalid length. [ 582.799696][T25157] netlink: 'syz.1.5098': attribute type 1 has an invalid length. [ 582.823577][T25157] 8021q: adding VLAN 0 to HW filter on device bond6 [ 582.844648][T25156] bond6: (slave veth9): Enslaving as an active interface with a down link [ 582.910031][T25158] bond6: (slave dummy0): making interface the new active one [ 582.919044][T25158] dummy0: entered promiscuous mode [ 582.924928][T25158] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 582.935227][T25156] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5098'. [ 582.958163][T25158] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5098'. [ 582.970738][T25156] bond6: (slave dummy0): Releasing active interface [ 582.977749][T25156] dummy0 (unregistering): left promiscuous mode [ 583.086443][T25130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.297192][T25169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5101'. [ 583.803193][T25196] lo speed is unknown, defaulting to 1000 [ 583.974176][T25214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5113'. [ 584.114864][T25219] pim6reg: entered allmulticast mode [ 584.367128][T25229] netlink: 'syz.4.5117': attribute type 9 has an invalid length. [ 584.530776][T25238] syzkaller0: entered promiscuous mode [ 584.536410][T25238] syzkaller0: entered allmulticast mode [ 584.768410][T25209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 584.909590][T25244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5122'. [ 585.008638][T25250] nbd: socks must be embedded in a SOCK_ITEM attr [ 585.153203][T11484] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 585.163311][T11484] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 585.190150][T11484] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 585.221321][T11484] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 585.301580][T25259] lo speed is unknown, defaulting to 1000 [ 585.427320][T25273] bond5: entered promiscuous mode [ 585.433009][T25273] 8021q: adding VLAN 0 to HW filter on device bond5 [ 585.526157][T25278] __nla_validate_parse: 241 callbacks suppressed [ 585.526181][T25278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5135'. [ 585.547382][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5136'. [ 585.681367][T25265] lo speed is unknown, defaulting to 1000 [ 585.803779][T25291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5141'. [ 586.154418][T25306] syzkaller0: entered promiscuous mode [ 586.171563][T25306] syzkaller0: entered allmulticast mode [ 586.185480][T25309] netlink: 'syz.1.5143': attribute type 61 has an invalid length. [ 586.361120][T25316] syzkaller0: entered promiscuous mode [ 586.366668][T25316] syzkaller0: entered allmulticast mode [ 586.591393][ T2149] block nbd1: Possible stuck request ffff8880262e2800: control (read@0,1024B). Runtime 90 seconds [ 586.602404][ T2149] block nbd1: Possible stuck request ffff8880262e2a00: control (read@1024,1024B). Runtime 90 seconds [ 586.613532][ T2149] block nbd1: Possible stuck request ffff8880262e2c00: control (read@2048,1024B). Runtime 90 seconds [ 586.625126][ T2149] block nbd1: Possible stuck request ffff8880262e2e00: control (read@3072,1024B). Runtime 90 seconds [ 586.683699][T25332] netlink: 'syz.3.5152': attribute type 1 has an invalid length. [ 586.685624][T25331] netlink: 'syz.3.5152': attribute type 1 has an invalid length. [ 586.769029][T25333] netlink: 644 bytes leftover after parsing attributes in process `syz.2.5151'. [ 588.289625][ T5194] udevd[5194]: worker [17137] /devices/virtual/block/nbd1 is taking a long time [ 588.419224][T25332] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 588.420390][T25331] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 588.586638][T25342] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 588.657084][T25344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5155'. [ 588.666371][T25344] netlink: 'syz.0.5155': attribute type 1 has an invalid length. [ 588.709011][T25344] lo speed is unknown, defaulting to 1000 [ 589.009998][T25372] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5162'. [ 589.548269][T25390] x_tables: unsorted entry at hook 3 [ 589.594372][T25392] lo speed is unknown, defaulting to 1000 [ 589.606232][T25393] netlink: 276 bytes leftover after parsing attributes in process `syz.2.5167'. [ 589.621964][T25393] ipt_REJECT: TCP_RESET invalid for non-tcp [ 589.680404][T25365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.691247][T25371] netlink: 'syz.3.5162': attribute type 11 has an invalid length. [ 589.948631][T25396] lo speed is unknown, defaulting to 1000 [ 591.380976][T25444] netlink: 'syz.2.5180': attribute type 10 has an invalid length. [ 591.394112][T25444] team0: Port device dummy0 added [ 591.467425][T25445] veth0: entered promiscuous mode [ 591.678149][T25452] netlink: 'syz.0.5183': attribute type 3 has an invalid length. [ 591.868521][T25443] veth0: left promiscuous mode [ 592.641281][T25502] bridge0: port 4(syz_tun) entered disabled state [ 592.662302][T25502] syz_tun: left allmulticast mode [ 592.667764][T25502] syz_tun: left promiscuous mode [ 592.674433][T25502] bridge0: port 4(syz_tun) entered disabled state [ 592.693185][T25502] team0: Port device syz_tun added [ 592.706271][T25509] bond10: (slave lo): Releasing backup interface [ 592.722114][T25509] bond10: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 592.764156][T25509] team0: Port device syz_tun removed [ 592.780312][T25509] bond0: left allmulticast mode [ 592.785673][T25509] bond_slave_0: left allmulticast mode [ 592.791836][T25509] bond_slave_1: left allmulticast mode [ 592.797493][T25509] bond0: left promiscuous mode [ 592.804065][T25509] bond_slave_0: left promiscuous mode [ 592.814834][T25509] bond_slave_1: left promiscuous mode [ 592.821994][T25509] bridge0: port 3(bond0) entered disabled state [ 592.834116][T25509] bridge_slave_0: left allmulticast mode [ 592.840513][T25509] bridge_slave_0: left promiscuous mode [ 592.848461][T25509] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.862066][T25509] bridge_slave_1: left allmulticast mode [ 592.868421][T25509] bridge_slave_1: left promiscuous mode [ 592.874406][T25509] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.892729][T25509] bond0: (slave bond_slave_0): Releasing backup interface [ 592.905040][T25509] bond0: (slave bond_slave_1): Releasing backup interface [ 592.920749][T25509] team0: Port device team_slave_0 removed [ 592.930217][T25509] team0: Port device team_slave_1 removed [ 592.941251][T25509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.955934][T25509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.965706][T25509] bond2: (slave veth3): Releasing active interface [ 592.974251][T25509] bond3: (slave veth5): Releasing active interface [ 592.983030][T25509] bond7: (slave geneve0): Releasing active interface [ 592.992882][T25509] bond11: (slave vxlan0): Releasing backup interface [ 593.012546][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.023955][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.055855][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.065386][ T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.331427][T25494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 593.486080][ T8932] lec:lec_start_xmit: lec0:No lecd attached [ 593.502137][T25544] syzkaller0: entered promiscuous mode [ 593.507649][T25544] syzkaller0: entered allmulticast mode [ 593.576107][T25551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5210'. [ 593.724766][T25559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 593.881751][T25571] nbd: socks must be embedded in a SOCK_ITEM attr [ 594.073226][T25591] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5224'. [ 594.157748][T25596] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5223'. [ 594.167205][T25596] lo: Caught tx_queue_len zero misconfig [ 594.505250][T25606] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5227'. [ 594.706740][T25573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 594.718280][T25596] netlink: 'syz.0.5223': attribute type 1 has an invalid length. [ 594.729702][T25596] netlink: 476 bytes leftover after parsing attributes in process `syz.0.5223'. [ 594.749353][T25596] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.5223'. [ 594.863043][T25610] Unsupported ieee802154 address type: 0 [ 594.912835][T25613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5230'. [ 594.927377][T25613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5230'. [ 595.007227][T25622] netlink: 'syz.4.5233': attribute type 4 has an invalid length. [ 595.016818][T25622] netlink: 7604 bytes leftover after parsing attributes in process `syz.4.5233'. [ 595.148886][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5234'. [ 595.536979][T25651] netlink: 'syz.0.5241': attribute type 5 has an invalid length. [ 595.697525][T25669] sctp: [Deprecated]: syz.2.5245 (pid 25669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.697525][T25669] Use struct sctp_sack_info instead [ 596.072281][T25678] gretap2: entered promiscuous mode [ 596.088693][T25678] batman_adv: batadv0: Adding interface: gretap2 [ 596.095056][T25678] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.126784][T25678] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 596.139847][T25638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 596.249960][T25683] netlink: 'syz.3.5251': attribute type 1 has an invalid length. [ 596.370370][T25683] 8021q: adding VLAN 0 to HW filter on device bond12 [ 596.412699][T25682] bond12: (slave veth11): Enslaving as an active interface with a down link [ 596.498817][T25694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 596.548850][T25698] netlink: 'syz.3.5255': attribute type 5 has an invalid length. [ 596.917681][T25700] veth1_macvtap: renamed from veth0_vlan [ 597.170294][T25731] Set syz1 is full, maxelem 0 reached [ 598.049269][T25773] netlink: 'syz.4.5271': attribute type 1 has an invalid length. [ 598.169016][ T5489] veth1_macvtap: left promiscuous mode [ 598.216343][ T5489] veth1_macvtap: entered promiscuous mode [ 598.907903][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 598.915978][ C0] lec:lec_tx_timeout: lec0 [ 599.301914][T25810] __nla_validate_parse: 17 callbacks suppressed [ 599.301939][T25810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5278'. [ 599.360568][T25817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5278'. [ 599.561545][T25830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5281'. [ 599.592349][T25826] team0: Port device dummy0 removed [ 599.616430][T25832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5281'. [ 599.668438][T25823] netlink: 'syz.1.5281': attribute type 10 has an invalid length. [ 599.698739][T25823] team0: Port device vxcan1 added [ 600.369219][T25826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.473840][T25856] netlink: 'syz.2.5288': attribute type 13 has an invalid length. [ 600.646544][ T5898] lo speed is unknown, defaulting to 1000 [ 600.742424][T25872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5291'. [ 600.814754][T25872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5291'. [ 600.913589][T25885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5294'. [ 600.992840][T25889] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5296'. [ 601.005105][T25889] mac80211_hwsim hwsim40 syzkaller0: Caught tx_queue_len zero misconfig [ 601.193802][T25891] ip6tnl0: left promiscuous mode [ 601.224224][T25891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.247803][T25897] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5297'. [ 601.257560][T25891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.457123][T25904] lo speed is unknown, defaulting to 1000 [ 601.976156][T25928] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5302'. [ 602.021389][T25922] 8021q: adding VLAN 0 to HW filter on device bond14 [ 602.084360][T25918] veth1_vlan (unregistering): left allmulticast mode [ 602.235902][T25927] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 602.414109][T25946] netlink: 'syz.4.5310': attribute type 5 has an invalid length. [ 602.746919][T25969] netlink: 'syz.3.5319': attribute type 1 has an invalid length. [ 602.856731][T25973] 8021q: adding VLAN 0 to HW filter on device bond6 [ 602.907177][T25977] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 603.198830][T25999] lo speed is unknown, defaulting to 1000 [ 603.297434][T26004] macvtap0: entered promiscuous mode [ 603.346968][T26004] macvtap0 (unregistering): left promiscuous mode [ 604.140785][T26048] netlink: 'syz.3.5343': attribute type 1 has an invalid length. [ 604.228467][T26054] ip6tnl0: Caught tx_queue_len zero misconfig [ 604.319600][T26062] netlink: 'syz.1.5345': attribute type 6 has an invalid length. [ 604.327748][T26064] __nla_validate_parse: 12 callbacks suppressed [ 604.327769][T26064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5346'. [ 604.540438][T26078] netlink: 277 bytes leftover after parsing attributes in process `syz.0.5349'. [ 604.837274][T26089] bond6: (slave dummy0): Releasing backup interface [ 604.853769][T26086] syzkaller0: entered promiscuous mode [ 604.860015][T26086] syzkaller0: entered allmulticast mode [ 604.959134][T26086] lo speed is unknown, defaulting to 1000 [ 604.985010][T26103] bond0: Caught tx_queue_len zero misconfig [ 605.079388][T26108] netlink: 'syz.2.5357': attribute type 5 has an invalid length. [ 605.087527][T26103] netlink: 'syz.2.5357': attribute type 5 has an invalid length. [ 605.095975][T26103] netlink: 'syz.2.5357': attribute type 5 has an invalid length. [ 605.117821][T26108] netlink: 'syz.2.5357': attribute type 5 has an invalid length. [ 605.374303][T26127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5363'. [ 605.386854][T26127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5363'. [ 605.397699][T26126] can: request_module (can-proto-0) failed. [ 605.518571][T26136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5362'. [ 605.629138][T26089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.831448][T26141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5368'. [ 606.054663][T26151] lo speed is unknown, defaulting to 1000 [ 606.058935][T26153] netlink: 'syz.4.5371': attribute type 1 has an invalid length. [ 606.086449][T26156] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5372'. [ 606.106162][T26153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.775493][T26169] netlink: 'syz.3.5376': attribute type 9 has an invalid length. [ 607.207060][T26190] bond16 (unregistering): Released all slaves [ 607.256721][T26170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.429382][T26202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.460280][T26202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.478263][T26202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.486658][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.502614][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.516757][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.545717][T26202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.561430][T26202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.570173][T26202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.578651][T26202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.687610][T26222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5391'. [ 607.721261][T26223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5391'. [ 607.739144][T26223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5391'. [ 607.844872][T26229] netlink: 'syz.1.5394': attribute type 3 has an invalid length. [ 607.878541][T26229] netlink: 'syz.1.5394': attribute type 1 has an invalid length. [ 608.133654][T26249] dvmrp1: entered allmulticast mode [ 608.150077][T26249] dvmrp1: left allmulticast mode [ 608.155344][T26249] dvmrp6: left allmulticast mode [ 608.168175][T26249] lo: left allmulticast mode [ 608.201599][T26258] x_tables: duplicate underflow at hook 2 [ 608.345202][T26249] x_tables: duplicate underflow at hook 2 [ 608.588217][T26228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 608.867021][T26289] tipc: Failed to remove unknown binding: 66,0,0/3407880:1401763599/1401763601 [ 608.876316][T26289] tipc: Failed to remove unknown binding: 66,0,0/3407880:1401763599/1401763600 [ 609.183691][T26320] bond14: (slave dummy0): Releasing backup interface [ 609.813766][T26362] 8021q: adding VLAN 0 to HW filter on device bond7 [ 609.844539][T26362] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 609.898662][T26362] __nla_validate_parse: 6 callbacks suppressed [ 609.898683][T26362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5430'. [ 609.985646][T26320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.205639][T26389] bridge7: entered allmulticast mode [ 610.212388][T26391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5436'. [ 610.533256][T26406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5438'. [ 610.542410][T26406] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5438'. [ 610.578327][T26412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5439'. [ 610.614795][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5440'. [ 610.636134][T26413] netlink: 'syz.1.5440': attribute type 14 has an invalid length. [ 610.655789][T26413] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5440'. [ 610.683613][T26413] netlink: 'syz.1.5440': attribute type 3 has an invalid length. [ 610.692150][T26413] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5440'. [ 610.977727][T26432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 611.150802][T26439] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5451'. [ 611.289877][T26448] netlink: 'syz.2.5454': attribute type 8 has an invalid length. [ 611.444722][T26464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5458'. [ 611.609891][T26479] bond16 (unregistering): Released all slaves [ 614.090984][T26509] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 614.273456][T23561] bond9 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 614.280556][T26457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 614.283469][T23561] bond9 (unregistering): (slave ip6gretap1): Releasing backup interface [ 614.574382][T23561] bond7 (unregistering): (slave gre2): Releasing backup interface [ 614.592960][T23561] gre2 (unregistering): left promiscuous mode [ 614.649930][T23561] bond6 (unregistering): (slave geneve3): Releasing active interface [ 614.843669][T23561] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 614.852264][T23561] bridge2 (unregistering): left promiscuous mode [ 615.012697][T23561] bond0 (unregistering): Released all slaves [ 615.024187][T23561] bond1 (unregistering): Released all slaves [ 615.037747][T23561] bond2 (unregistering): Released all slaves [ 615.056350][T23561] bond3 (unregistering): (slave bond4): Releasing backup interface [ 615.065269][T23561] bond4 (unregistering): left promiscuous mode [ 615.071941][T23561] bond3 (unregistering): Released all slaves [ 615.085952][T23561] bond4 (unregistering): Released all slaves [ 615.104310][T23561] bond5 (unregistering): Released all slaves [ 615.117476][T23561] bond6 (unregistering): Released all slaves [ 615.131359][T23561] bond7 (unregistering): Released all slaves [ 615.146336][T23561] bond8 (unregistering): Released all slaves [ 615.168370][T23561] bond9 (unregistering): Released all slaves [ 615.181267][T23561] bond10 (unregistering): Released all slaves [ 615.343227][T23561] tipc: Left network mode [ 615.560939][T26555] __nla_validate_parse: 3 callbacks suppressed [ 615.560960][T26555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5481'. [ 615.806343][T26571] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5484'. [ 615.817419][T26571] net_ratelimit: 20 callbacks suppressed [ 615.817439][T26571] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 616.082774][T26583] netlink: 'syz.2.5488': attribute type 1 has an invalid length. [ 616.325281][T26605] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5492'. [ 616.670453][ T2149] block nbd1: Possible stuck request ffff8880262e2800: control (read@0,1024B). Runtime 120 seconds [ 616.683120][ T2149] block nbd1: Possible stuck request ffff8880262e2a00: control (read@1024,1024B). Runtime 120 seconds [ 616.694244][T26620] netlink: 436 bytes leftover after parsing attributes in process `syz.4.5497'. [ 616.707158][ T2149] block nbd1: Possible stuck request ffff8880262e2c00: control (read@2048,1024B). Runtime 120 seconds [ 616.718745][ T2149] block nbd1: Possible stuck request ffff8880262e2e00: control (read@3072,1024B). Runtime 120 seconds [ 616.750879][T23561] hsr_slave_0: left promiscuous mode [ 616.757470][T23561] hsr_slave_1: left promiscuous mode [ 616.954925][T26627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5500'. [ 617.105148][T26624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5499'. [ 617.149708][T26627] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 617.188611][T26632] netlink: 'syz.0.5501': attribute type 8 has an invalid length. [ 617.196695][T26632] netlink: 'syz.0.5501': attribute type 4 has an invalid length. [ 617.227426][T26632] vlan5: entered promiscuous mode [ 617.257080][T26634] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5502'. [ 617.270765][T26634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5502'. [ 617.284479][T26634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5502'. [ 617.316540][T26638] netlink: 'syz.1.5503': attribute type 1 has an invalid length. [ 617.446933][T26640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5502'. [ 617.460741][T26638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.470014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.798390][T23561] IPVS: stop unused estimator thread 0... [ 617.814862][T26657] lo speed is unknown, defaulting to 1000 [ 617.849992][T26653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.220128][T26668] gre0 speed is unknown, defaulting to 1000 [ 618.332010][T26677] sit0: left promiscuous mode [ 618.389543][T26677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.404415][T26677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.421366][T26677] veth1_to_hsr: left promiscuous mode [ 618.426882][T26677] veth1_to_hsr: left allmulticast mode [ 618.445960][T26677] macvtap0: left promiscuous mode [ 618.457720][T26677] ip6tnl1: left allmulticast mode [ 618.471828][T26677] bond3: left promiscuous mode [ 618.476715][T26677] bond3: left allmulticast mode [ 618.484847][T26677] veth7: left promiscuous mode [ 618.491767][T26677] bond4: left allmulticast mode [ 618.496675][T26677] ip6gretap1: left allmulticast mode [ 618.506533][T26677] bond7: left promiscuous mode [ 618.511916][T26677] vcan0: left promiscuous mode [ 618.520141][T26677] ip6erspan1: left allmulticast mode [ 618.525844][T26677] ipip0: left promiscuous mode [ 618.535670][T26677] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode [ 618.543269][T26677] mac80211_hwsim hwsim40 syzkaller0: left allmulticast mode [ 618.568262][ T5898] lo speed is unknown, defaulting to 1000 [ 618.572007][T26668] gre0 speed is unknown, defaulting to 1000 [ 618.579574][T23561] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.598072][ T5898] syz0: Port: 1 Link DOWN [ 618.605703][T23561] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.616440][T23561] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.616499][T26668] gre0 speed is unknown, defaulting to 1000 [ 618.626824][ T5898] lo speed is unknown, defaulting to 1000 [ 618.636776][T23561] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.761006][T26686] lo speed is unknown, defaulting to 1000 [ 619.151523][T26668] infiniband syz1: set active [ 619.162862][T26668] infiniband syz1: added gre0 [ 619.168001][ T9] gre0 speed is unknown, defaulting to 1000 [ 619.178806][T26694] lo speed is unknown, defaulting to 1000 [ 619.189328][T26668] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 619.191411][T26668] infiniband syz1: Couldn't open port 1 [ 619.269831][T26668] RDS/IB: syz1: added [ 619.279845][T26668] smc: adding ib device syz1 with port count 1 [ 619.296800][T26668] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 619.308560][ T9] gre0 speed is unknown, defaulting to 1000 [ 619.416569][T26710] sctp: [Deprecated]: syz.4.5523 (pid 26710) Use of int in max_burst socket option. [ 619.416569][T26710] Use struct sctp_assoc_value instead [ 619.589732][T26668] gre0 speed is unknown, defaulting to 1000 [ 619.649178][T26717] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 619.696355][T26717] netlink: 'syz.4.5526': attribute type 1 has an invalid length. [ 619.899619][T26668] gre0 speed is unknown, defaulting to 1000 [ 620.023585][T26694] gre0 speed is unknown, defaulting to 1000 [ 620.144776][T26668] gre0 speed is unknown, defaulting to 1000 [ 620.375196][T26728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.386878][T26728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.400403][T26728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.409239][T26728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.417802][T26728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.472775][T26668] gre0 speed is unknown, defaulting to 1000 [ 620.619953][T26733] __nla_validate_parse: 8 callbacks suppressed [ 620.619975][T26733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5531'. [ 620.764889][T26668] gre0 speed is unknown, defaulting to 1000 [ 620.835035][T26740] xt_l2tp: missing protocol rule (udp|l2tpip) [ 620.838137][ C0] net_ratelimit: 580 callbacks suppressed [ 620.838158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.894769][T26727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.020486][T26747] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 621.039880][T26750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5537'. [ 621.202160][T26759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.214986][T26668] gre0 speed is unknown, defaulting to 1000 [ 621.315842][T26766] syzkaller1: entered promiscuous mode [ 621.321665][T26766] syzkaller1: entered allmulticast mode [ 621.494167][T26668] gre0 speed is unknown, defaulting to 1000 [ 621.701244][T26668] gre0 speed is unknown, defaulting to 1000 [ 621.739035][T26784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5548'. [ 622.367029][T26805] netlink: 51 bytes leftover after parsing attributes in process `syz.1.5554'. [ 622.426429][T26811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5556'. [ 622.450542][T26805] 8021q: adding VLAN 0 to HW filter on device bond8 [ 622.466535][T26812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5554'. [ 622.492672][T26811] ip6tnl4: entered allmulticast mode [ 622.539311][T26817] Bluetooth: MGMT ver 1.23 [ 622.551964][T26805] pim6reg: entered allmulticast mode [ 622.581574][T26817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.648916][T26805] tun0: tun_chr_ioctl cmd 1074812117 [ 622.658372][T26805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5554'. [ 622.714771][T26820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.747318][T26824] netlink: 'syz.0.5560': attribute type 61 has an invalid length. [ 622.755758][T26824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5560'. [ 622.775174][T26824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5560'. [ 622.802969][T26804] pim6reg: left allmulticast mode [ 623.037695][T26835] netlink: 'syz.1.5564': attribute type 9 has an invalid length. [ 623.082512][T26835] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.5564'. [ 623.126840][T26820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.186621][T26820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.454749][T26855] pim6reg1: entered promiscuous mode [ 623.471410][T26855] pim6reg1: entered allmulticast mode [ 623.622730][T26865] lo speed is unknown, defaulting to 1000 [ 623.756058][T26880] IPv6: NLM_F_CREATE should be specified when creating new route [ 623.838624][T23561] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 624.018515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.027279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.149193][T26865] gre0 speed is unknown, defaulting to 1000 [ 624.173213][T26902] lo speed is unknown, defaulting to 1000 [ 624.198917][T26901] netlink: 'syz.4.5583': attribute type 1 has an invalid length. [ 624.363151][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 624.607536][T26902] gre0 speed is unknown, defaulting to 1000 [ 625.460665][T26938] FAULT_INJECTION: forcing a failure. [ 625.460665][T26938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.479210][T26938] CPU: 0 UID: 0 PID: 26938 Comm: syz.4.5597 Not tainted syzkaller #0 PREEMPT(full) [ 625.479258][T26938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 625.479278][T26938] Call Trace: [ 625.479290][T26938] [ 625.479299][T26938] dump_stack_lvl+0xe8/0x150 [ 625.479328][T26938] should_fail_ex+0x412/0x560 [ 625.479359][T26938] _copy_from_user+0x2d/0xb0 [ 625.479382][T26938] ___sys_recvmsg+0x175/0x590 [ 625.479421][T26938] ? __pfx____sys_recvmsg+0x10/0x10 [ 625.479466][T26938] ? __fget_files+0x3a0/0x420 [ 625.479495][T26938] do_recvmmsg+0x334/0x800 [ 625.479521][T26938] ? __pfx_do_recvmmsg+0x10/0x10 [ 625.479548][T26938] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 625.479587][T26938] __x64_sys_recvmmsg+0x198/0x250 [ 625.479609][T26938] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 625.479640][T26938] do_syscall_64+0x14d/0xf80 [ 625.479660][T26938] ? trace_irq_disable+0x3b/0x150 [ 625.479678][T26938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.479698][T26938] ? clear_bhb_loop+0x40/0x90 [ 625.479728][T26938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.479747][T26938] RIP: 0033:0x7f705a99c819 [ 625.479766][T26938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.479782][T26938] RSP: 002b:00007f705b927028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 625.479804][T26938] RAX: ffffffffffffffda RBX: 00007f705ac15fa0 RCX: 00007f705a99c819 [ 625.479818][T26938] RDX: 0000000000000001 RSI: 0000200000003880 RDI: 0000000000000003 [ 625.479831][T26938] RBP: 00007f705b927090 R08: 0000000000000000 R09: 0000000000000000 [ 625.479843][T26938] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 625.479855][T26938] R13: 00007f705ac16038 R14: 00007f705ac15fa0 R15: 00007ffde76c9a38 [ 625.479885][T26938] [ 625.811228][T16900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 625.831686][T16900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 625.855524][T16900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 625.869329][T16900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 625.893764][T16900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 626.024426][T26940] lo speed is unknown, defaulting to 1000 [ 626.262346][T26955] macvtap0: entered promiscuous mode [ 626.354414][T26956] macvtap0: left promiscuous mode [ 626.397044][T26956] bond3: left promiscuous mode [ 626.446566][T26956] geneve4: left promiscuous mode [ 626.511556][T26956] bond5: left promiscuous mode [ 626.536385][T26956] gretap2: left promiscuous mode [ 626.615838][T23561] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.659423][T23561] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 37234 - 0 [ 626.671985][T23561] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.699168][T23561] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 37234 - 0 [ 626.731421][T11484] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.754948][T11484] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 37234 - 0 [ 626.779910][T26940] gre0 speed is unknown, defaulting to 1000 [ 626.800240][T11484] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.817997][T11484] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 37234 - 0 [ 626.872266][T26976] __nla_validate_parse: 1 callbacks suppressed [ 626.872287][T26976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5609'. [ 627.271061][T26940] chnl_net:caif_netlink_parms(): no params data found [ 627.345218][T26940] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.352477][T26940] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.359942][T26940] bridge_slave_0: entered allmulticast mode [ 627.367063][T26940] bridge_slave_0: entered promiscuous mode [ 627.375435][T26940] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.382700][T26940] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.392647][T26940] bridge_slave_1: entered allmulticast mode [ 627.401337][T26940] bridge_slave_1: entered promiscuous mode [ 627.449733][T26940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.462173][T26940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.521209][T26940] team0: Port device team_slave_0 added [ 627.549467][T26940] team0: Port device team_slave_1 added [ 627.602348][T26940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.609839][T26940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.656559][T26940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.672056][T26940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.699018][T26940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.749671][T26940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.915635][T26940] hsr_slave_0: entered promiscuous mode [ 627.929064][T26940] hsr_slave_1: entered promiscuous mode [ 627.935688][T26940] debugfs: 'hsr0' already exists in 'hsr' [ 627.942492][T26940] Cannot create hsr debugfs directory [ 627.950388][T16898] Bluetooth: hci0: command tx timeout [ 627.950967][T27012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5618'. [ 628.104652][T27027] netlink: 'syz.4.5622': attribute type 1 has an invalid length. [ 628.198623][T27041] netlink: 'syz.0.5624': attribute type 4 has an invalid length. [ 628.200256][T27033] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 628.229766][T27041] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5624'. [ 628.420271][T27053] netlink: 'syz.0.5628': attribute type 1 has an invalid length. [ 628.432601][T27056] netlink: 'syz.1.5630': attribute type 1 has an invalid length. [ 628.461300][T27056] bond9: entered promiscuous mode [ 628.466958][T27056] 8021q: adding VLAN 0 to HW filter on device bond9 [ 628.530138][T27056] 8021q: adding VLAN 0 to HW filter on device bond9 [ 628.547481][T27056] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 628.564318][T27056] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 628.579719][T27056] bond9: (slave ip6gre2): making interface the new active one [ 628.587357][T27056] ip6gre2: entered promiscuous mode [ 628.594720][T27056] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 628.623105][T27064] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5631'. [ 628.841316][T26940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 628.872037][T26940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 628.884223][T27072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5634'. [ 628.884269][T26940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 628.906716][T26940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 628.980630][T27070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.990512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.035319][T27070] netlink: 'syz.1.5633': attribute type 14 has an invalid length. [ 629.058958][T27070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5633'. [ 629.074143][T27070] netlink: 'syz.1.5633': attribute type 14 has an invalid length. [ 629.083093][T27070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5633'. [ 629.085904][T26940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.134756][T26940] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.159654][T11484] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.166827][T11484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.206562][T27084] netlink: 'syz.0.5635': attribute type 1 has an invalid length. [ 629.241948][T23557] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.249172][T23557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.486020][T27093] lo speed is unknown, defaulting to 1000 [ 629.843600][T26940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.867969][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 629.876189][ C0] lec:lec_tx_timeout: lec0 [ 629.970946][T26940] veth0_vlan: entered promiscuous mode [ 630.001936][T26940] veth1_vlan: entered promiscuous mode [ 630.029244][T16898] Bluetooth: hci0: command tx timeout [ 630.055099][T26940] veth0_macvtap: entered promiscuous mode [ 630.085518][T26940] veth1_macvtap: entered promiscuous mode [ 630.099586][T27093] gre0 speed is unknown, defaulting to 1000 [ 630.143933][T26940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.149803][T27130] netlink: 'syz.1.5647': attribute type 1 has an invalid length. [ 630.162950][T26940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.192958][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.224078][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.243284][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.258121][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.370954][T27138] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5649'. [ 630.475088][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.485163][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.586231][T23557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.595533][T23557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.926861][T27151] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 631.019936][T27158] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 631.042732][T27158] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 631.075095][T27160] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5655'. [ 631.149857][T23561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.172755][T27164] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5656'. [ 631.235522][T23854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.329931][T27170] netlink: 'syz.1.5659': attribute type 1 has an invalid length. [ 631.393629][T23854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.789736][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.829094][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.970544][T27208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.000771][T27208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.020114][T27208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.034360][T27209] netlink: 'syz.2.5670': attribute type 9 has an invalid length. [ 632.113535][T27210] __nla_validate_parse: 2 callbacks suppressed [ 632.113557][T27210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5669'. [ 632.149886][T16898] Bluetooth: hci0: command tx timeout [ 632.655510][T27206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5669'. [ 632.732173][T27219] ip6gre1: entered promiscuous mode [ 632.769793][T27219] 8021q: adding VLAN 0 to HW filter on device bond8 [ 632.779219][T27219] team0: Port device bond8 added [ 633.307316][T27254] validate_nla: 1 callbacks suppressed [ 633.307340][T27254] netlink: 'syz.1.5685': attribute type 9 has an invalid length. [ 633.349709][T27256] syzkaller0: entered promiscuous mode [ 633.355235][T27256] syzkaller0: entered allmulticast mode [ 633.389564][T27264] netlink: 'syz.2.5689': attribute type 1 has an invalid length. [ 633.575932][T27277] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5691'. [ 634.190071][T16898] Bluetooth: hci0: command tx timeout [ 634.205771][ T9] net_ratelimit: 516 callbacks suppressed [ 634.205794][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.222146][T22946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.509550][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.512345][T27280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.542172][T27286] netlink: 'syz.3.5694': attribute type 1 has an invalid length. [ 635.564594][T23854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.689514][T27286] 8021q: adding VLAN 0 to HW filter on device bond13 [ 635.708321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.709517][T27286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5694'. [ 635.751942][T27291] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 636.035120][T27322] bond13: (slave dummy0): Releasing backup interface [ 636.070517][T27322] Set syz1 is full, maxelem 0 reached [ 636.305199][T27339] netlink: 'syz.4.5706': attribute type 9 has an invalid length. [ 636.590761][ T7281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.717701][T27314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 637.107610][T27367] netlink: 'syz.4.5715': attribute type 16 has an invalid length. [ 637.127696][T27367] netlink: 'syz.4.5715': attribute type 17 has an invalid length. [ 637.187658][T27367] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.197732][T27367] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 637.228632][T22946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.238917][T27378] netlink: 'syz.0.5717': attribute type 9 has an invalid length. [ 637.400253][T27390] gretap3: entered allmulticast mode [ 637.411307][T27392] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5721'. [ 637.639894][ T7281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.835080][T27362] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 637.910089][T27429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5731'. [ 638.109460][T27441] netlink: 'syz.0.5735': attribute type 9 has an invalid length. [ 638.256359][T27465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5740'. [ 638.291651][T27465] sch_tbf: burst 88 is lower than device veth17 mtu (1514) ! [ 638.507764][T27485] tunl0: Caught tx_queue_len zero misconfig [ 638.770695][T27495] syzkaller0: entered promiscuous mode [ 638.776663][T27495] syzkaller0: entered allmulticast mode [ 638.917563][T27499] macvtap1: entered promiscuous mode [ 638.924177][T27499] syz_tun: entered promiscuous mode [ 638.929781][T27499] macvtap1: entered allmulticast mode [ 638.935531][T27499] syz_tun: entered allmulticast mode [ 638.943699][T27499] syz_tun: left allmulticast mode [ 638.949268][T27499] syz_tun: left promiscuous mode [ 639.033629][T27502] Cannot find add_set index 0 as target [ 639.071233][T16898] Bluetooth: hci4: command 0x0406 tx timeout [ 639.158660][T27506] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.256198][T27506] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.284578][T27514] netlink: 'syz.3.5753': attribute type 9 has an invalid length. [ 639.365117][T27506] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.443976][T27506] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.571901][T27522] bond7: (slave dummy0): Releasing backup interface [ 639.588452][T27522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5756'. [ 639.602696][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.687126][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.708362][ T7281] net_ratelimit: 3 callbacks suppressed [ 639.708382][ T7281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.736556][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.747673][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.767678][T27529] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5760'. [ 640.214518][T27552] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5767'. [ 640.268859][T22946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.312784][T27556] netlink: 'syz.0.5769': attribute type 9 has an invalid length. [ 640.379710][T27562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5770'. [ 640.489381][T27568] netlink: 'syz.3.5772': attribute type 1 has an invalid length. [ 640.572853][T27574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.707722][T27578] IPv6: sit1: Disabled Multicast RS [ 640.748629][ T7281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.818752][T27582] debugfs: 'netdev:syzkaller0' already exists in 'phy46' [ 640.988817][ T7281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.058324][T27589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.534716][T27598] netlink: 'syz.1.5779': attribute type 1 has an invalid length. [ 641.628645][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.638578][T22946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.712425][T27604] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5781'. [ 641.740428][T27605] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5781'. [ 641.753089][T27604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5781'. [ 641.789417][ T7281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.962805][T27618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.019214][T27620] netlink: 'syz.3.5784': attribute type 9 has an invalid length. [ 642.090081][T27622] bond16: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 642.163379][T27622] bond16 (unregistering): Released all slaves [ 642.395622][T27642] netlink: 'syz.4.5791': attribute type 1 has an invalid length. [ 642.810113][T27666] __nla_validate_parse: 2 callbacks suppressed [ 642.810137][T27666] netlink: 63110 bytes leftover after parsing attributes in process `syz.2.5798'. [ 642.838052][T27667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5795'. [ 642.849481][T27667] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5795'. [ 642.866952][T27667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5795'. [ 642.888460][T27667] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5795'. [ 644.909091][T23854] net_ratelimit: 5 callbacks suppressed [ 644.909107][T23854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.308385][T22946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.450285][T27644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.590421][T27686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5806'. [ 645.600657][T27687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5806'. [ 645.612664][T27688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5803'. [ 645.721154][T27682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5803'. [ 645.771445][T27701] x_tables: unsorted entry at hook 1 [ 645.781923][T27682] bond16 (unregistering): Released all slaves [ 645.839099][T27701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.848261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.938200][T27710] netlink: 'syz.3.5812': attribute type 1 has an invalid length. [ 645.950081][T23854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.964449][T27710] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 645.986522][T27717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5811'. [ 646.090784][T27728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.100017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.134467][T27716] lo speed is unknown, defaulting to 1000 [ 646.153434][T27728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.179518][T27728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.189042][T23854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.211588][T16898] block nbd3: Receive control failed (result -1) [ 646.748254][ T2149] block nbd1: Possible stuck request ffff8880262e2800: control (read@0,1024B). Runtime 150 seconds [ 646.752871][T27716] gre0 speed is unknown, defaulting to 1000 [ 646.760136][ T2149] block nbd1: Possible stuck request ffff8880262e2a00: control (read@1024,1024B). Runtime 150 seconds [ 646.776196][ T2149] block nbd1: Possible stuck request ffff8880262e2c00: control (read@2048,1024B). Runtime 150 seconds [ 646.787362][ T2149] block nbd1: Possible stuck request ffff8880262e2e00: control (read@3072,1024B). Runtime 150 seconds [ 647.202748][T27778] netlink: 'syz.4.5830': attribute type 29 has an invalid length. [ 647.221319][T27778] netlink: 'syz.4.5830': attribute type 29 has an invalid length. [ 647.232050][T11476] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.242266][T27778] netlink: 'syz.4.5830': attribute type 32 has an invalid length. [ 647.299341][T11476] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.321195][T11476] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.331907][T27790] [ 647.334267][T27790] ====================================================== [ 647.341287][T27790] WARNING: possible circular locking dependency detected [ 647.348316][T27790] syzkaller #0 Not tainted [ 647.352764][T27790] ------------------------------------------------------ [ 647.359788][T27790] syz.3.5832/27790 is trying to acquire lock: [ 647.365848][T27790] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 647.374999][T27790] [ 647.374999][T27790] but task is already holding lock: [ 647.382476][T27790] ffff888080c0c080 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 647.391971][T27790] [ 647.391971][T27790] which lock already depends on the new lock. [ 647.391971][T27790] [ 647.402909][T27790] [ 647.402909][T27790] the existing dependency chain (in reverse order) is: [ 647.412003][T27790] [ 647.412003][T27790] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 647.419552][T27790] __might_fault+0xcb/0x130 [ 647.424588][T27790] _copy_from_user+0x28/0xb0 [ 647.429689][T27790] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 647.436189][T27790] ip_generic_getfrag+0x149/0x2d0 [ 647.441733][T27790] __ip6_append_data+0x39e4/0x3f70 [ 647.447357][T27790] ip6_append_data+0x10f/0x280 [ 647.452630][T27790] rawv6_sendmsg+0x12d3/0x18e0 [ 647.457907][T27790] ____sys_sendmsg+0x80a/0x9f0 [ 647.463188][T27790] ___sys_sendmsg+0x2a5/0x360 [ 647.468382][T27790] __x64_sys_sendmsg+0x1bd/0x2a0 [ 647.473836][T27790] do_syscall_64+0x14d/0xf80 [ 647.478946][T27790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.485351][T27790] [ 647.485351][T27790] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 647.493159][T27790] lock_sock_nested+0x41/0x100 [ 647.498460][T27790] inet_shutdown+0x6a/0x390 [ 647.503494][T27790] nbd_mark_nsock_dead+0x2e9/0x560 [ 647.509164][T27790] recv_work+0x1c7f/0x1d90 [ 647.514105][T27790] process_scheduled_works+0xb6e/0x18c0 [ 647.520168][T27790] worker_thread+0xa53/0xfc0 [ 647.525274][T27790] kthread+0x388/0x470 [ 647.529849][T27790] ret_from_fork+0x51e/0xb90 [ 647.534956][T27790] ret_from_fork_asm+0x1a/0x30 [ 647.540239][T27790] [ 647.540239][T27790] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 647.547879][T27790] __mutex_lock+0x19f/0x1300 [ 647.552984][T27790] nbd_queue_rq+0x37b/0x1100 [ 647.558085][T27790] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 647.564144][T27790] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 647.570992][T27790] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 647.577487][T27790] blk_mq_run_hw_queue+0x348/0x4f0 [ 647.583109][T27790] blk_mq_dispatch_list+0xd16/0xe10 [ 647.588818][T27790] blk_mq_flush_plug_list+0x48d/0x570 [ 647.594717][T27790] __blk_flush_plug+0x3ed/0x4d0 [ 647.600081][T27790] __submit_bio+0x28d/0x580 [ 647.605096][T27790] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 647.611413][T27790] block_read_full_folio+0x599/0x830 [ 647.617210][T27790] filemap_read_folio+0x137/0x3b0 [ 647.622745][T27790] do_read_cache_folio+0x358/0x590 [ 647.628370][T27790] read_part_sector+0xb6/0x2b0 [ 647.633647][T27790] adfspart_check_ICS+0xa5/0xa40 [ 647.639093][T27790] bdev_disk_changed+0x7ba/0x1550 [ 647.644628][T27790] blkdev_get_whole+0x380/0x510 [ 647.650022][T27790] bdev_open+0x31e/0xd30 [ 647.654842][T27790] blkdev_open+0x470/0x610 [ 647.659793][T27790] do_dentry_open+0x785/0x14e0 [ 647.665087][T27790] vfs_open+0x3b/0x340 [ 647.669767][T27790] path_openat+0x2e08/0x3860 [ 647.674894][T27790] do_file_open+0x23e/0x4a0 [ 647.679907][T27790] do_sys_openat2+0x113/0x200 [ 647.685190][T27790] __x64_sys_openat+0x138/0x170 [ 647.690557][T27790] do_syscall_64+0x14d/0xf80 [ 647.695659][T27790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.702064][T27790] [ 647.702064][T27790] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 647.709272][T27790] __mutex_lock+0x19f/0x1300 [ 647.714392][T27790] nbd_queue_rq+0xc6/0x1100 [ 647.719413][T27790] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 647.725479][T27790] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 647.732321][T27790] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 647.738812][T27790] blk_mq_run_hw_queue+0x348/0x4f0 [ 647.744438][T27790] blk_mq_dispatch_list+0xd16/0xe10 [ 647.750150][T27790] blk_mq_flush_plug_list+0x48d/0x570 [ 647.756030][T27790] __blk_flush_plug+0x3ed/0x4d0 [ 647.761392][T27790] __submit_bio+0x28d/0x580 [ 647.766404][T27790] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 647.772547][T27790] block_read_full_folio+0x599/0x830 [ 647.778346][T27790] filemap_read_folio+0x137/0x3b0 [ 647.783885][T27790] do_read_cache_folio+0x358/0x590 [ 647.789515][T27790] read_part_sector+0xb6/0x2b0 [ 647.794801][T27790] adfspart_check_ICS+0xa5/0xa40 [ 647.800259][T27790] bdev_disk_changed+0x7ba/0x1550 [ 647.805922][T27790] blkdev_get_whole+0x380/0x510 [ 647.811310][T27790] bdev_open+0x31e/0xd30 [ 647.816092][T27790] blkdev_open+0x470/0x610 [ 647.821045][T27790] do_dentry_open+0x785/0x14e0 [ 647.826330][T27790] vfs_open+0x3b/0x340 [ 647.830913][T27790] path_openat+0x2e08/0x3860 [ 647.836452][T27790] do_file_open+0x23e/0x4a0 [ 647.841500][T27790] do_sys_openat2+0x113/0x200 [ 647.846703][T27790] __x64_sys_openat+0x138/0x170 [ 647.852087][T27790] do_syscall_64+0x14d/0xf80 [ 647.857186][T27790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.863585][T27790] [ 647.863585][T27790] -> #3 (set->srcu){.+.+}-{0:0}: [ 647.870699][T27790] __synchronize_srcu+0xca/0x300 [ 647.876154][T27790] elevator_switch+0x1e8/0x7a0 [ 647.881433][T27790] elevator_change+0x2cc/0x450 [ 647.886710][T27790] elevator_set_default+0x36c/0x430 [ 647.892446][T27790] blk_register_queue+0x366/0x430 [ 647.897998][T27790] __add_disk+0x677/0xd50 [ 647.902843][T27790] add_disk_fwnode+0xfb/0x480 [ 647.908033][T27790] nbd_dev_add+0x72c/0xb50 [ 647.913048][T27790] nbd_init+0x168/0x1f0 [ 647.917732][T27790] do_one_initcall+0x250/0x8d0 [ 647.923013][T27790] do_initcall_level+0x104/0x190 [ 647.928462][T27790] do_initcalls+0x59/0xa0 [ 647.933301][T27790] kernel_init_freeable+0x2a6/0x3e0 [ 647.939020][T27790] kernel_init+0x1d/0x1d0 [ 647.943870][T27790] ret_from_fork+0x51e/0xb90 [ 647.948975][T27790] ret_from_fork_asm+0x1a/0x30 [ 647.954257][T27790] [ 647.954257][T27790] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 647.962065][T27790] __mutex_lock+0x19f/0x1300 [ 647.967167][T27790] elevator_change+0x1b3/0x450 [ 647.972442][T27790] elevator_set_none+0xb5/0x140 [ 647.977803][T27790] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 647.984127][T27790] nbd_start_device+0x17f/0xb10 [ 647.989514][T27790] nbd_genl_connect+0x165b/0x1cf0 [ 647.995050][T27790] genl_family_rcv_msg_doit+0x22a/0x330 [ 648.001106][T27790] genl_rcv_msg+0x61c/0x7a0 [ 648.006118][T27790] netlink_rcv_skb+0x232/0x4b0 [ 648.011395][T27790] genl_rcv+0x28/0x40 [ 648.015882][T27790] netlink_unicast+0x75c/0x8e0 [ 648.021190][T27790] netlink_sendmsg+0x813/0xb40 [ 648.026490][T27790] ____sys_sendmsg+0x972/0x9f0 [ 648.031808][T27790] ___sys_sendmsg+0x2a5/0x360 [ 648.037005][T27790] __x64_sys_sendmsg+0x1bd/0x2a0 [ 648.042470][T27790] do_syscall_64+0x14d/0xf80 [ 648.047581][T27790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.053988][T27790] [ 648.053988][T27790] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 648.062588][T27790] blk_alloc_queue+0x546/0x680 [ 648.067866][T27790] __blk_mq_alloc_disk+0x197/0x390 [ 648.073494][T27790] nbd_dev_add+0x499/0xb50 [ 648.078421][T27790] nbd_init+0x168/0x1f0 [ 648.083092][T27790] do_one_initcall+0x250/0x8d0 [ 648.088369][T27790] do_initcall_level+0x104/0x190 [ 648.093840][T27790] do_initcalls+0x59/0xa0 [ 648.098682][T27790] kernel_init_freeable+0x2a6/0x3e0 [ 648.104391][T27790] kernel_init+0x1d/0x1d0 [ 648.109230][T27790] ret_from_fork+0x51e/0xb90 [ 648.114331][T27790] ret_from_fork_asm+0x1a/0x30 [ 648.119612][T27790] [ 648.119612][T27790] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 648.126820][T27790] __lock_acquire+0x15a5/0x2cf0 [ 648.132185][T27790] lock_acquire+0xf0/0x2e0 [ 648.137201][T27790] fs_reclaim_acquire+0x71/0x100 [ 648.142680][T27790] prepare_alloc_pages+0x152/0x650 [ 648.148329][T27790] __alloc_frozen_pages_noprof+0x12f/0x380 [ 648.154657][T27790] alloc_pages_mpol+0x232/0x4a0 [ 648.160024][T27790] alloc_pages_noprof+0xa8/0x1a0 [ 648.165487][T27790] __pud_alloc+0x3a/0x460 [ 648.170325][T27790] handle_mm_fault+0x2040/0x3310 [ 648.175768][T27790] do_user_addr_fault+0x75b/0x1340 [ 648.181394][T27790] exc_page_fault+0x6a/0xc0 [ 648.186407][T27790] asm_exc_page_fault+0x26/0x30 [ 648.191786][T27790] rep_movs_alternative+0x30/0x90 [ 648.197417][T27790] _copy_from_user+0x7a/0xb0 [ 648.202522][T27790] vlan_ioctl_handler+0xbd/0x630 [ 648.207975][T27790] sock_ioctl+0x668/0x7f0 [ 648.212810][T27790] __se_sys_ioctl+0xfc/0x170 [ 648.217911][T27790] do_syscall_64+0x14d/0xf80 [ 648.223015][T27790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.229412][T27790] [ 648.229412][T27790] other info that might help us debug this: [ 648.229412][T27790] [ 648.239656][T27790] Chain exists of: [ 648.239656][T27790] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 648.239656][T27790] [ 648.252264][T27790] Possible unsafe locking scenario: [ 648.252264][T27790] [ 648.259717][T27790] CPU0 CPU1 [ 648.265152][T27790] ---- ---- [ 648.270499][T27790] rlock(&mm->mmap_lock); [ 648.274910][T27790] lock(sk_lock-AF_INET6); [ 648.281928][T27790] lock(&mm->mmap_lock); [ 648.288770][T27790] lock(fs_reclaim); [ 648.292747][T27790] [ 648.292747][T27790] *** DEADLOCK *** [ 648.292747][T27790] [ 648.300891][T27790] 2 locks held by syz.3.5832/27790: [ 648.306089][T27790] #0: ffffffff8fbacb28 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x641/0x7f0 [ 648.315395][T27790] #1: ffff888080c0c080 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 648.325308][T27790] [ 648.325308][T27790] stack backtrace: [ 648.331198][T27790] CPU: 0 UID: 0 PID: 27790 Comm: syz.3.5832 Not tainted syzkaller #0 PREEMPT(full) [ 648.331224][T27790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 648.331235][T27790] Call Trace: [ 648.331245][T27790] [ 648.331254][T27790] dump_stack_lvl+0xe8/0x150 [ 648.331281][T27790] print_circular_bug+0x2e1/0x300 [ 648.331309][T27790] check_noncircular+0x12e/0x150 [ 648.331334][T27790] __lock_acquire+0x15a5/0x2cf0 [ 648.331357][T27790] ? __lock_acquire+0x6b5/0x2cf0 [ 648.331379][T27790] ? __lock_acquire+0x6b5/0x2cf0 [ 648.331401][T27790] lock_acquire+0xf0/0x2e0 [ 648.331420][T27790] ? prepare_alloc_pages+0x152/0x650 [ 648.331443][T27790] fs_reclaim_acquire+0x71/0x100 [ 648.331462][T27790] ? prepare_alloc_pages+0x152/0x650 [ 648.331481][T27790] prepare_alloc_pages+0x152/0x650 [ 648.331503][T27790] __alloc_frozen_pages_noprof+0x12f/0x380 [ 648.331525][T27790] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 648.331547][T27790] ? __pfx_policy_nodemask+0x10/0x10 [ 648.331567][T27790] ? is_bpf_text_address+0x26/0x2b0 [ 648.331590][T27790] ? kernel_text_address+0xa5/0xe0 [ 648.331610][T27790] alloc_pages_mpol+0x232/0x4a0 [ 648.331632][T27790] alloc_pages_noprof+0xa8/0x1a0 [ 648.331654][T27790] __pud_alloc+0x3a/0x460 [ 648.331672][T27790] handle_mm_fault+0x2040/0x3310 [ 648.331690][T27790] ? mt_find+0x186/0x630 [ 648.331710][T27790] ? __pfx_mt_find+0x10/0x10 [ 648.331729][T27790] ? handle_mm_fault+0xee/0x3310 [ 648.331747][T27790] ? __pfx_handle_mm_fault+0x10/0x10 [ 648.331769][T27790] ? lock_mm_and_find_vma+0xa7/0x340 [ 648.331789][T27790] do_user_addr_fault+0x75b/0x1340 [ 648.331819][T27790] exc_page_fault+0x6a/0xc0 [ 648.331840][T27790] asm_exc_page_fault+0x26/0x30 [ 648.331857][T27790] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 648.331882][T27790] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 648.331897][T27790] RSP: 0018:ffffc9000cd0fc98 EFLAGS: 00050206 [ 648.331922][T27790] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 648.331935][T27790] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc9000cd0fd00 [ 648.331947][T27790] RBP: ffffc9000cd0fdb0 R08: ffffc9000cd0fd37 R09: 1ffff920019a1fa6 [ 648.331959][T27790] R10: dffffc0000000000 R11: fffff520019a1fa7 R12: dffffc0000000000 [ 648.331972][T27790] R13: ffff8880524b0000 R14: ffffc9000cd0fd00 R15: 0000200000000040 [ 648.331991][T27790] _copy_from_user+0x7a/0xb0 [ 648.332012][T27790] vlan_ioctl_handler+0xbd/0x630 [ 648.332034][T27790] ? __pfx___mutex_lock+0x10/0x10 [ 648.332055][T27790] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 648.332073][T27790] ? do_futex+0x395/0x420 [ 648.332098][T27790] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 648.332118][T27790] sock_ioctl+0x668/0x7f0 [ 648.332136][T27790] ? __pfx_sock_ioctl+0x10/0x10 [ 648.332153][T27790] ? __fget_files+0x2a/0x420 [ 648.332168][T27790] ? __fget_files+0x3a0/0x420 [ 648.332182][T27790] ? __fget_files+0x2a/0x420 [ 648.332198][T27790] ? bpf_lsm_file_ioctl+0x9/0x20 [ 648.332220][T27790] ? __pfx_sock_ioctl+0x10/0x10 [ 648.332237][T27790] __se_sys_ioctl+0xfc/0x170 [ 648.332257][T27790] do_syscall_64+0x14d/0xf80 [ 648.332276][T27790] ? trace_irq_disable+0x3b/0x150 [ 648.332292][T27790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.332309][T27790] ? clear_bhb_loop+0x40/0x90 [ 648.332326][T27790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.332342][T27790] RIP: 0033:0x7f0fb919c819 [ 648.332358][T27790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.332373][T27790] RSP: 002b:00007f0fba0ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.332390][T27790] RAX: ffffffffffffffda RBX: 00007f0fb9415fa0 RCX: 00007f0fb919c819 [ 648.332403][T27790] RDX: 0000200000000040 RSI: 0000000000008982 RDI: 0000000000000003 [ 648.332414][T27790] RBP: 00007f0fb9232c91 R08: 0000000000000000 R09: 0000000000000000 [ 648.332425][T27790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.332436][T27790] R13: 00007f0fb9416038 R14: 00007f0fb9415fa0 R15: 00007ffeda0ae168 [ 648.332454][T27790] [ 648.338027][T11476] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.829398][ T6931] net_ratelimit: 8 callbacks suppressed [ 650.829414][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.228502][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.470512][T22946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.869260][T23854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.877638][T22946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.510007][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.909296][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.949519][ T7281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.989308][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.548159][T22946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.029157][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.348456][T22946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.888733][ T8932] lec:lec_start_xmit: lec0:No lecd attached [ 656.998839][T22946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.069413][ T7281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog